StartTime Dur Proto SrcAddr Sport Dir DstAddr Dport State sTos dTos TotPkts TotBytes Label 1970/01/01 01:00:00.000000 0.000000 llc 00:00:00:00:00:00 0 -> 00:00:00:00:00:00 0 INT 1 60 flow=Background 1970/01/01 01:00:09.009077 3.004265 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:00:09.266261 3.011870 arp 10.0.2.104 who 10.0.2.2 CON 6 252 flow=Background-ARP 1970/01/01 01:00:09.279222 1.993471 arp 0.0.0.0 who 10.0.2.104 INT 3 126 flow=Background-ARP 1970/01/01 01:00:09.279307 0.000000 ipv6-icmp :: 135 -> ff02::1:ffb8:a750 0 NNS 0 1 78 flow=Background 1970/01/01 01:00:09.279346 3.996059 ipv6-icmp fe80::c06e:84b6:bcb8:a750 133 -> ff02::2 0 NRS 0 2 140 flow=Background 1970/01/01 01:00:09.279397 0.500777 ipv6-icmp fe80::c06e:84b6:bcb8:a750 143 -> ff02::16 0 UNK 0 2 180 flow=Background 1970/01/01 01:00:11.937161 0.000000 udp 10.0.2.104 64324 -> 8.8.8.8 53 INT 0 1 76 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:00:11.946828 0.000122 arp 10.0.2.2 who 10.0.2.104 CON 2 84 flow=Background-ARP 1970/01/01 01:00:12.935170 0.009531 udp 10.0.2.104 64324 <-> 8.8.4.4 53 CON 0 0 2 168 flow=From-Botnet-V2-DNS 1970/01/01 01:00:12.945161 0.009603 udp 10.0.2.104 54512 <-> 8.8.4.4 53 CON 0 0 2 180 flow=From-Botnet-V2-DNS 1970/01/01 01:00:16.019429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:00:17.280926 0.000000 ipv6-icmp fe80::c06e:84b6:bcb8:a750 133 -> ff02::2 0 NRS 0 1 70 flow=Background 1970/01/01 01:00:24.080648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:00:40.084315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:01:12.342414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:02:29.755016 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:02:29.755206 0.009654 udp 10.0.2.104 54513 <-> 8.8.8.8 53 CON 0 0 2 162 flow=From-Botnet-V2-DNS 1970/01/01 01:02:29.765130 0.218191 tcp 10.0.2.104 49158 -> 108.168.255.244 80 FSPA* 0 0 10 1330 flow=From-Botnet-V2-TCP-Established 1970/01/01 01:02:29.983712 0.000000 udp 10.0.2.104 54514 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:29.983912 0.000000 udp 10.0.2.104 54514 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:29.984221 0.000000 udp 10.0.2.104 54515 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:29.984370 0.000000 udp 10.0.2.104 54515 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:30.188607 0.000000 udp 10.0.2.104 54516 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:30.188715 0.000000 udp 10.0.2.104 54516 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:30.190452 0.000000 udp 10.0.2.104 54517 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:30.190547 0.000000 udp 10.0.2.104 54517 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:30.190782 0.000000 udp 10.0.2.104 54518 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:30.190876 0.000000 udp 10.0.2.104 54518 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:30.191235 0.000000 udp 10.0.2.104 54519 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:30.191331 0.000000 udp 10.0.2.104 54519 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:31.138855 0.000000 udp 10.0.2.104 54520 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:31.138972 0.000000 udp 10.0.2.104 54520 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:31.200978 0.000000 udp 10.0.2.104 54521 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:31.201097 0.000000 udp 10.0.2.104 54521 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:31.201510 0.000000 udp 10.0.2.104 54522 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:31.201615 0.000000 udp 10.0.2.104 54522 -> 66.85.130.234 53 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:31.778833 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:32.775786 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:33.777165 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:34.778929 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:35.780393 0.000000 udp 10.0.2.104 54523 -> 135.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:36.781272 0.000000 udp 10.0.2.104 54523 -> 134.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:37.783356 0.000000 udp 10.0.2.104 54523 -> 117.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:38.774584 0.000000 udp 10.0.2.104 54523 -> 115.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:39.775735 0.000000 udp 10.0.2.104 54523 -> 92.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:40.777021 0.000000 udp 10.0.2.104 54523 -> 88.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:41.778879 0.000000 udp 10.0.2.104 54523 -> 87.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:42.780575 0.000000 udp 10.0.2.104 54523 -> 71.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:46.776158 0.000000 udp 10.0.2.104 54523 -> 89.230.229.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:47.777635 0.000000 udp 10.0.2.104 54523 -> 72.23.217.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:48.778729 0.000000 udp 10.0.2.104 54523 -> 76.184.203.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:49.780207 0.000000 udp 10.0.2.104 54523 -> 67.186.148.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:50.782051 0.000000 udp 10.0.2.104 54523 -> 117.198.87.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:51.783169 0.000000 udp 10.0.2.104 54523 -> 46.196.238.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:52.774392 0.000000 udp 10.0.2.104 54523 -> 117.212.154.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:53.776258 0.000000 udp 10.0.2.104 54523 -> 183.82.143.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:54.777253 0.000000 udp 10.0.2.104 54523 -> 67.87.148.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:55.779228 0.000000 udp 10.0.2.104 54523 -> 94.244.184.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:56.780715 0.000000 udp 10.0.2.104 54523 -> 125.231.157.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:57.781796 0.000000 udp 10.0.2.104 54523 -> 85.86.238.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:58.783647 0.000000 udp 10.0.2.104 54523 -> 5.15.164.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:02:59.775039 0.000000 udp 10.0.2.104 54523 -> 79.132.16.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:00.776128 0.000000 udp 10.0.2.104 54523 -> 180.26.69.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:01.777236 0.000000 udp 10.0.2.104 54523 -> 117.235.254.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:02.779208 0.000000 udp 10.0.2.104 54523 -> 98.214.29.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:03.780741 0.000000 udp 10.0.2.104 54523 -> 107.16.232.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:04.782244 0.000000 udp 10.0.2.104 54523 -> 218.166.36.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:05.782984 0.000000 udp 10.0.2.104 54523 -> 178.117.82.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:06.774821 0.000000 udp 10.0.2.104 54523 -> 178.216.97.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:07.776443 0.000000 udp 10.0.2.104 54523 -> 115.241.104.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:08.777312 0.000000 udp 10.0.2.104 54523 -> 79.184.135.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:09.778761 0.000000 udp 10.0.2.104 54523 -> 95.104.15.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:10.780320 0.000000 udp 10.0.2.104 54523 -> 64.136.198.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:11.781909 0.000000 udp 10.0.2.104 54523 -> 78.225.129.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:12.783827 0.000000 udp 10.0.2.104 54523 -> 117.194.125.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:13.778681 0.000000 udp 10.0.2.104 54523 -> 98.165.2.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:14.776481 0.000000 udp 10.0.2.104 54523 -> 50.90.152.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:15.777544 0.000000 udp 10.0.2.104 54523 -> 5.28.122.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:16.438572 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:03:16.779217 0.000000 udp 10.0.2.104 54523 -> 46.223.85.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:17.780587 0.000000 udp 10.0.2.104 54523 -> 78.204.100.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:18.782091 0.000000 udp 10.0.2.104 54523 -> 79.113.43.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:19.783133 0.000000 udp 10.0.2.104 54523 -> 68.225.165.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:20.775011 0.000000 udp 10.0.2.104 54523 -> 192.168.0.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:21.776225 0.000000 udp 10.0.2.104 54523 -> 184.170.168.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:22.777808 0.000000 udp 10.0.2.104 54523 -> 65.33.176.217 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:23.779008 0.000000 udp 10.0.2.104 54523 -> 178.156.98.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:24.780742 0.000000 udp 10.0.2.104 54523 -> 78.230.128.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:25.782109 0.000000 udp 10.0.2.104 54523 -> 75.66.197.214 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:26.783187 0.000000 udp 10.0.2.104 54523 -> 75.15.65.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:27.775157 0.000000 udp 10.0.2.104 54523 -> 61.70.109.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:28.776037 0.000000 udp 10.0.2.104 54523 -> 216.26.114.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:29.777587 0.000000 udp 10.0.2.104 54523 -> 79.51.251.211 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:30.779125 0.000000 udp 10.0.2.104 54523 -> 115.136.219.211 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:31.780568 0.000000 udp 10.0.2.104 54523 -> 50.21.205.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:32.782343 0.000000 udp 10.0.2.104 54523 -> 116.203.81.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:33.783651 0.000000 udp 10.0.2.104 54523 -> 213.141.39.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:34.774898 0.000000 udp 10.0.2.104 54523 -> 190.75.90.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:35.776744 0.000000 udp 10.0.2.104 54523 -> 111.91.117.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:36.777627 0.000000 udp 10.0.2.104 54523 -> 24.236.193.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:37.779288 0.000000 udp 10.0.2.104 54523 -> 5.14.168.208 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:38.781029 0.000000 udp 10.0.2.104 54523 -> 113.193.42.208 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:39.781965 0.000000 udp 10.0.2.104 54523 -> 46.119.197.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:40.783457 0.000000 udp 10.0.2.104 54523 -> 88.161.232.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:41.775130 0.000000 udp 10.0.2.104 54523 -> 117.198.228.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:42.776546 0.000000 udp 10.0.2.104 54523 -> 66.229.174.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:43.778058 0.000000 udp 10.0.2.104 54523 -> 84.237.179.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:44.779196 0.000000 udp 10.0.2.104 54523 -> 1.174.125.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:45.780508 0.000000 udp 10.0.2.104 54523 -> 68.82.146.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:46.782232 0.000000 udp 10.0.2.104 54523 -> 24.187.144.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:47.783608 0.000000 udp 10.0.2.104 54523 -> 112.104.140.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:48.775256 0.000000 udp 10.0.2.104 54523 -> 68.45.107.202 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:49.776482 0.000000 udp 10.0.2.104 54523 -> 173.174.74.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:50.777801 0.000000 udp 10.0.2.104 54523 -> 97.85.166.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:51.779701 0.000000 udp 10.0.2.104 54523 -> 91.146.228.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:52.781176 0.000000 udp 10.0.2.104 54523 -> 108.178.127.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:53.782436 0.000000 udp 10.0.2.104 54523 -> 86.56.183.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:54.784275 0.000000 udp 10.0.2.104 54523 -> 83.213.44.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:55.775023 0.000000 udp 10.0.2.104 54523 -> 106.186.61.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:56.776479 0.000000 udp 10.0.2.104 54523 -> 92.87.69.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:57.778024 0.000000 udp 10.0.2.104 54523 -> 81.183.121.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:58.779859 0.000000 udp 10.0.2.104 54523 -> 206.174.112.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:03:59.780691 0.000000 udp 10.0.2.104 54523 -> 60.42.169.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:00.782212 0.571376 udp 10.0.2.104 54523 -> 117.204.148.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:01.353588 0.000000 icmp 117.204.148.50 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:04:01.784158 0.000000 udp 10.0.2.104 54523 -> 118.233.166.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:02.775014 0.000000 udp 10.0.2.104 54523 -> 128.163.208.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:03.436608 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:04:03.777018 0.000000 udp 10.0.2.104 54523 -> 149.169.235.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:04.778468 0.000000 udp 10.0.2.104 54523 -> 70.117.20.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:05.779961 0.000000 udp 10.0.2.104 54523 -> 86.107.19.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:06.781260 0.000000 udp 10.0.2.104 54523 -> 24.209.204.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:07.782702 0.000000 udp 10.0.2.104 54523 -> 180.215.27.193 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:08.783890 0.000000 udp 10.0.2.104 54523 -> 77.230.55.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:09.775323 0.000000 udp 10.0.2.104 54523 -> 210.6.70.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:10.776712 0.000000 udp 10.0.2.104 54523 -> 203.192.221.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:11.778490 0.000000 udp 10.0.2.104 54523 -> 86.122.232.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:12.779935 0.000000 udp 10.0.2.104 54523 -> 70.114.13.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:13.781450 0.000000 udp 10.0.2.104 54523 -> 183.82.141.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:14.782199 0.000000 udp 10.0.2.104 54523 -> 97.94.166.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:15.784318 0.000000 udp 10.0.2.104 54523 -> 66.108.231.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:16.775457 0.000000 udp 10.0.2.104 54523 -> 75.210.121.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:17.777213 0.000000 udp 10.0.2.104 54523 -> 68.191.101.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:18.778410 0.000000 udp 10.0.2.104 54523 -> 190.206.50.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:19.780219 0.000000 udp 10.0.2.104 54523 -> 46.47.85.183 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:20.781417 0.000000 udp 10.0.2.104 54523 -> 92.225.22.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:21.782468 0.000000 udp 10.0.2.104 54523 -> 180.160.94.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:22.784114 0.000000 udp 10.0.2.104 54523 -> 5.15.7.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:23.775124 0.000000 udp 10.0.2.104 54523 -> 111.95.17.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:24.776669 0.000000 udp 10.0.2.104 54523 -> 96.35.247.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:25.778543 0.000000 udp 10.0.2.104 54523 -> 66.25.71.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:26.779870 0.000000 udp 10.0.2.104 54523 -> 190.77.134.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:27.781273 0.000000 udp 10.0.2.104 54523 -> 117.201.73.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:28.782492 0.000000 udp 10.0.2.104 54523 -> 195.67.21.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:29.783872 0.000000 udp 10.0.2.104 54523 -> 187.84.75.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:30.775315 0.000000 udp 10.0.2.104 54523 -> 186.222.144.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:31.777013 0.000000 udp 10.0.2.104 54523 -> 24.89.46.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:32.778759 0.000000 udp 10.0.2.104 54523 -> 85.231.172.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:33.779547 0.000000 udp 10.0.2.104 54523 -> 95.223.179.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:34.781567 0.000000 udp 10.0.2.104 54523 -> 109.228.67.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:35.782934 0.000000 udp 10.0.2.104 54523 -> 108.204.198.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:36.784181 0.000000 udp 10.0.2.104 54523 -> 46.175.144.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:37.775537 0.000000 udp 10.0.2.104 54523 -> 86.125.62.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:38.777267 0.000000 udp 10.0.2.104 54523 -> 24.151.17.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:39.778234 0.000000 udp 10.0.2.104 54523 -> 68.56.215.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:40.780375 0.000000 udp 10.0.2.104 54523 -> 69.251.222.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:41.781382 0.000000 udp 10.0.2.104 54523 -> 184.20.157.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:42.792929 0.000000 udp 10.0.2.104 54523 -> 67.172.117.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:43.793923 0.000000 udp 10.0.2.104 54523 -> 78.90.169.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:44.785535 0.000000 udp 10.0.2.104 54523 -> 67.174.109.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:45.786822 0.239665 udp 10.0.2.104 54523 -> 117.223.39.146 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:46.026487 0.000000 icmp 218.248.255.101 0x000b -> 10.0.2.104 0x0000 TXD 192 1 70 flow=Background 1970/01/01 01:04:46.788588 0.000000 udp 10.0.2.104 54523 -> 75.146.12.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:47.789838 0.000000 udp 10.0.2.104 54523 -> 84.3.182.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:48.791274 0.000000 udp 10.0.2.104 54523 -> 76.202.163.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:49.792748 0.000000 udp 10.0.2.104 54523 -> 72.47.154.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:50.443806 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:04:50.794436 0.000000 udp 10.0.2.104 54523 -> 95.220.247.142 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:51.785760 0.000000 udp 10.0.2.104 54523 -> 189.55.157.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:52.787354 0.000000 udp 10.0.2.104 54523 -> 187.63.0.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:53.788418 0.000000 udp 10.0.2.104 54523 -> 75.105.197.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:54.790270 0.000000 udp 10.0.2.104 54523 -> 67.222.238.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:55.791809 0.000000 udp 10.0.2.104 54523 -> 190.72.29.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:56.793252 0.000000 udp 10.0.2.104 54523 -> 75.185.214.135 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:57.794216 0.000000 udp 10.0.2.104 54523 -> 68.188.142.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:58.785647 0.000000 udp 10.0.2.104 54523 -> 182.171.123.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:04:59.787173 0.000000 udp 10.0.2.104 54523 -> 70.190.5.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:00.788445 0.000000 udp 10.0.2.104 54523 -> 188.2.235.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:01.790190 0.000000 udp 10.0.2.104 54523 -> 122.218.195.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:02.791444 0.000000 udp 10.0.2.104 54523 -> 123.195.122.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:03.793240 0.000000 udp 10.0.2.104 54523 -> 98.244.222.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:04.784466 0.000000 udp 10.0.2.104 54523 -> 66.205.100.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:05.785774 0.000000 udp 10.0.2.104 54523 -> 95.43.110.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:06.787266 0.000000 udp 10.0.2.104 54523 -> 79.116.61.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:07.788693 0.000000 udp 10.0.2.104 54523 -> 188.67.198.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:08.790524 0.000000 udp 10.0.2.104 54523 -> 200.189.89.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:09.791337 0.000000 udp 10.0.2.104 54523 -> 70.81.143.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:10.792749 0.000000 udp 10.0.2.104 54523 -> 123.110.96.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:11.784841 0.000000 udp 10.0.2.104 54523 -> 120.88.36.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:12.785740 0.000000 udp 10.0.2.104 54523 -> 76.107.45.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:13.787726 0.000000 udp 10.0.2.104 54523 -> 71.7.230.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:14.789163 0.000000 udp 10.0.2.104 54523 -> 62.43.140.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:15.790586 0.000000 udp 10.0.2.104 54523 -> 187.105.42.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:16.792192 0.000000 udp 10.0.2.104 54523 -> 62.16.241.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:17.793053 0.000000 udp 10.0.2.104 54523 -> 27.5.185.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:18.784317 0.000000 udp 10.0.2.104 54523 -> 181.51.195.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:19.785809 0.000000 udp 10.0.2.104 54523 -> 62.141.210.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:20.787226 0.000000 udp 10.0.2.104 54523 -> 97.71.44.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:21.788966 0.000000 udp 10.0.2.104 54523 -> 208.124.14.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:22.790392 0.000000 udp 10.0.2.104 54523 -> 75.86.252.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:23.791425 0.000000 udp 10.0.2.104 54523 -> 24.58.235.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:24.793290 0.000000 udp 10.0.2.104 54523 -> 82.151.90.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:25.784904 0.000000 udp 10.0.2.104 54523 -> 116.202.108.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:26.786419 0.000000 udp 10.0.2.104 54523 -> 50.72.220.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:27.787203 0.000000 udp 10.0.2.104 54523 -> 76.30.232.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:28.788692 0.000000 udp 10.0.2.104 54523 -> 24.176.253.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:29.790634 0.000000 udp 10.0.2.104 54523 -> 70.112.198.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:30.791478 0.000000 udp 10.0.2.104 54523 -> 95.57.160.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:31.793539 0.000000 udp 10.0.2.104 54523 -> 177.172.195.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:32.784350 0.000000 udp 10.0.2.104 54523 -> 186.11.55.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:33.786212 0.000000 udp 10.0.2.104 54523 -> 79.117.235.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:34.787571 0.000000 udp 10.0.2.104 54523 -> 178.149.163.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:35.788896 0.000000 udp 10.0.2.104 54523 -> 212.106.235.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:36.790713 0.000000 udp 10.0.2.104 54523 -> 68.34.123.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:37.451468 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:05:37.792132 0.000000 udp 10.0.2.104 54523 -> 79.113.53.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:38.792972 0.000000 udp 10.0.2.104 54523 -> 14.96.130.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:39.784528 0.000000 udp 10.0.2.104 54523 -> 116.73.56.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:40.785959 0.000000 udp 10.0.2.104 54523 -> 74.142.195.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:41.787737 0.000000 udp 10.0.2.104 54523 -> 159.205.163.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:42.789040 0.000000 udp 10.0.2.104 54523 -> 77.175.75.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:43.790757 0.091343 udp 10.0.2.104 54523 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:05:43.882614 0.000000 tcp 10.0.2.104 49168 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:43.882852 0.000000 tcp 10.0.2.104 49169 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:43.883098 0.000000 tcp 10.0.2.104 49170 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:43.944400 0.000000 tcp 10.0.2.104 49171 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:43.944694 0.000000 tcp 10.0.2.104 49172 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:44.792279 0.000000 udp 10.0.2.104 54523 -> 24.176.253.96 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:45.793775 0.000000 udp 10.0.2.104 54523 -> 70.112.198.100 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:46.785152 0.000000 udp 10.0.2.104 54523 -> 95.57.160.98 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:47.786162 0.000000 udp 10.0.2.104 54523 -> 177.172.195.97 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:48.787664 0.000000 udp 10.0.2.104 54523 -> 186.11.55.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:49.788918 0.000000 udp 10.0.2.104 54523 -> 79.117.235.96 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:50.790755 0.000000 udp 10.0.2.104 54523 -> 178.149.163.95 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:51.792298 0.000000 udp 10.0.2.104 54523 -> 212.106.235.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:52.793575 0.000000 udp 10.0.2.104 54523 -> 68.34.123.101 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:53.785159 0.000000 udp 10.0.2.104 54523 -> 79.113.53.102 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:54.786535 0.000000 udp 10.0.2.104 54523 -> 14.96.130.93 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:55.787667 0.000000 udp 10.0.2.104 54523 -> 116.73.56.102 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:56.789098 0.000000 udp 10.0.2.104 54523 -> 74.142.195.92 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:57.791004 0.000000 udp 10.0.2.104 54523 -> 159.205.163.91 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:58.792300 0.000000 udp 10.0.2.104 54523 -> 77.175.75.91 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:05:59.793541 0.090789 udp 10.0.2.104 54523 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:05:59.884860 0.000000 tcp 10.0.2.104 49173 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:59.885178 0.000000 tcp 10.0.2.104 49174 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:59.885490 0.000000 tcp 10.0.2.104 49175 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:59.885797 0.000000 tcp 10.0.2.104 49176 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:05:59.886115 0.000000 tcp 10.0.2.104 49177 -> 87.224.241.90 16464 S_ 0 1 66 flow=From-Botnet-V2-TCP-Attempt 1970/01/01 01:06:00.785177 0.000000 udp 10.0.2.104 54523 -> 24.176.253.96 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:01.786179 0.000000 udp 10.0.2.104 54523 -> 70.112.198.100 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:02.787862 0.000000 udp 10.0.2.104 54523 -> 95.57.160.98 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:03.788960 0.000000 udp 10.0.2.104 54523 -> 177.172.195.97 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:04.790979 0.000000 udp 10.0.2.104 54523 -> 186.11.55.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:05.792478 0.000000 udp 10.0.2.104 54523 -> 79.117.235.96 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:06.793368 0.000000 udp 10.0.2.104 54523 -> 178.149.163.95 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:07.784969 0.000000 udp 10.0.2.104 54523 -> 212.106.235.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:08.786337 0.000000 udp 10.0.2.104 54523 -> 68.34.123.101 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:09.787545 0.000000 udp 10.0.2.104 54523 -> 79.113.53.102 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:10.789212 0.000000 udp 10.0.2.104 54523 -> 14.96.130.93 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:11.790772 0.000000 udp 10.0.2.104 54523 -> 116.73.56.102 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:12.792019 0.000000 udp 10.0.2.104 54523 -> 74.142.195.92 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:13.793801 0.000000 udp 10.0.2.104 54523 -> 159.205.163.91 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:14.785294 0.000000 udp 10.0.2.104 54523 -> 77.175.75.91 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:15.786475 0.000000 udp 10.0.2.104 54523 -> 89.165.189.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:16.787735 0.000000 udp 10.0.2.104 54523 -> 116.202.166.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:17.789681 0.000000 udp 10.0.2.104 54523 -> 70.177.74.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:18.790980 0.000000 udp 10.0.2.104 54523 -> 92.37.84.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:19.792418 0.000000 udp 10.0.2.104 54523 -> 200.232.171.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:20.793557 0.000000 udp 10.0.2.104 54523 -> 58.88.232.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:21.785613 0.000000 udp 10.0.2.104 54523 -> 173.21.184.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:22.786839 0.000000 udp 10.0.2.104 54523 -> 24.19.57.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:23.788357 0.000000 udp 10.0.2.104 54523 -> 184.162.72.183 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:24.449103 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:06:24.789541 0.000000 udp 10.0.2.104 54523 -> 109.98.99.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:25.791281 0.000000 udp 10.0.2.104 54523 -> 5.14.238.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:26.792144 0.000000 udp 10.0.2.104 54523 -> 173.80.41.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:27.794050 0.000000 udp 10.0.2.104 54523 -> 190.45.108.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:28.784991 0.000000 udp 10.0.2.104 54523 -> 109.60.21.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:29.786718 0.000000 udp 10.0.2.104 54523 -> 187.22.46.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:30.788130 0.000000 udp 10.0.2.104 54523 -> 114.25.114.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:31.789926 0.000000 udp 10.0.2.104 54523 -> 114.25.164.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:32.791379 0.000000 udp 10.0.2.104 54523 -> 114.24.216.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:33.792462 0.000000 udp 10.0.2.104 54523 -> 194.215.125.193 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:34.793672 0.000000 udp 10.0.2.104 54523 -> 95.238.138.193 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:35.785168 0.000000 udp 10.0.2.104 54523 -> 59.124.65.196 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:36.786711 0.000000 udp 10.0.2.104 54523 -> 69.246.193.196 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:37.788512 0.000000 udp 10.0.2.104 54523 -> 27.121.103.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:38.789650 0.000000 udp 10.0.2.104 54523 -> 50.131.109.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:39.790806 0.000000 udp 10.0.2.104 54523 -> 71.238.168.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:40.792279 0.000000 udp 10.0.2.104 54523 -> 187.2.213.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:41.793789 0.000000 udp 10.0.2.104 54523 -> 31.176.224.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:42.785714 0.000000 udp 10.0.2.104 54523 -> 78.61.245.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:43.786690 0.000000 udp 10.0.2.104 54523 -> 69.168.34.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:44.788106 0.000000 udp 10.0.2.104 54523 -> 119.244.92.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:45.789894 0.000000 udp 10.0.2.104 54523 -> 24.251.141.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:46.791436 0.372864 udp 10.0.2.104 54523 <-> 115.242.226.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:06:47.164806 0.609547 tcp 10.0.2.104 49178 -> 115.242.226.27 16464 FSPA* 0 0 10 1480 flow=From-Botnet-V2-TCP-Established 1970/01/01 01:06:47.165108 0.736915 tcp 10.0.2.104 49179 -> 115.242.226.27 16464 FSPA* 0 0 10 1272 flow=From-Botnet-V2-TCP-Established 1970/01/01 01:06:47.165410 1.333454 tcp 10.0.2.104 49180 -> 115.242.226.27 16464 FSPA* 0 0 34 13640 flow=From-Botnet-V2-TCP-Established 1970/01/01 01:06:47.165718 1.843202 tcp 10.0.2.104 49181 -> 115.242.226.27 16464 FSPA* 0 0 35 15742 flow=From-Botnet-V2-TCP-Established 1970/01/01 01:06:47.166023 2.136699 tcp 10.0.2.104 49182 -> 115.242.226.27 16464 FSPA* 0 0 61 28410 flow=From-Botnet-V2-TCP-Established 1970/01/01 01:06:47.792475 0.391690 udp 10.0.2.104 54523 <-> 36.230.26.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:06:48.501268 0.010417 udp 10.0.2.104 54524 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 01:06:48.511989 0.000000 udp 10.0.2.104 54525 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:48.793934 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:49.785155 0.092941 udp 10.0.2.104 54523 <-> 79.3.85.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:06:50.786693 0.000000 udp 10.0.2.104 54523 -> 111.252.181.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:51.788258 0.275022 udp 10.0.2.104 54523 <-> 116.203.137.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:06:52.790066 1.017604 udp 10.0.2.104 54523 <-> 187.67.53.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:06:53.790972 0.000000 udp 10.0.2.104 54523 -> 78.162.123.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:54.792696 0.135571 udp 10.0.2.104 54523 <-> 74.89.59.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:06:55.794371 0.000000 udp 10.0.2.104 54523 -> 31.44.194.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:56.785442 0.144883 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:06:57.787052 0.149861 udp 10.0.2.104 54523 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:06:58.788017 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:06:59.789625 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:00.791016 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:01.792609 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:02.794434 0.000000 udp 10.0.2.104 54523 -> 213.87.121.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:03.785370 0.138706 udp 10.0.2.104 54523 <-> 68.192.112.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:04.787205 0.424856 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:05.788450 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:06.789733 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:07.791608 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:08.792376 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:09.794034 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:10.785502 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:11.787121 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:12.788576 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:13.789833 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:14.791728 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:15.792910 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:16.794198 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:17.785849 0.000000 udp 10.0.2.104 54523 -> 213.87.121.1 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:18.787266 0.086776 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:19.788310 0.040115 udp 10.0.2.104 54523 <-> 5.15.242.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:19.887397 2.995833 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:07:20.789858 0.000000 udp 10.0.2.104 54523 -> 123.201.23.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:21.791086 0.327120 udp 10.0.2.104 54523 <-> 190.173.2.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:22.793033 0.000000 udp 10.0.2.104 54523 -> 146.115.87.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:23.794128 0.000000 udp 10.0.2.104 54523 -> 84.126.6.201 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:24.785578 2.002989 udp 10.0.2.104 54523 -> 31.176.178.215 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:25.787205 0.148981 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:26.928492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:07:27.790089 0.000000 udp 10.0.2.104 54523 -> 209.137.215.138 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:28.791141 0.000000 udp 10.0.2.104 54523 -> 213.182.120.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:29.792785 0.000000 udp 10.0.2.104 54523 -> 92.229.124.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:30.794391 0.153364 udp 10.0.2.104 54523 <-> 65.188.38.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:31.785460 0.139634 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:32.786989 0.155611 udp 10.0.2.104 54523 <-> 70.30.90.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:33.788572 0.000000 udp 10.0.2.104 54523 -> 84.126.6.201 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:34.790427 3.995289 udp 10.0.2.104 54523 -> 213.182.120.209 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:34.930324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:07:35.450758 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:07:35.791211 0.159011 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:36.792790 0.069754 udp 10.0.2.104 54523 <-> 212.92.251.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:37.784569 0.194373 udp 10.0.2.104 54523 <-> 50.55.237.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:39.787020 0.148032 udp 10.0.2.104 54523 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:40.789017 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:41.790568 1.064145 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:42.791265 0.000000 udp 10.0.2.104 54523 -> 50.55.237.122 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:43.792868 0.000000 udp 10.0.2.104 54523 -> 61.62.169.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:44.784804 0.341998 udp 10.0.2.104 54523 <-> 58.11.136.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:45.785871 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:46.787109 0.000000 udp 10.0.2.104 54523 -> 114.40.170.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:47.789239 0.000000 udp 10.0.2.104 54523 -> 14.96.84.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:48.789882 2.994984 udp 10.0.2.104 54523 -> 114.26.109.44 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:49.792119 0.156802 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:50.793353 0.335512 udp 10.0.2.104 54523 <-> 61.62.169.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:50.933053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:07:52.785889 0.157478 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:53.787968 0.038090 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:07:54.788784 0.000000 udp 10.0.2.104 54523 -> 58.11.136.43 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:55.790328 0.000000 udp 10.0.2.104 54523 -> 85.130.45.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:56.791820 0.000000 udp 10.0.2.104 54523 -> 114.40.170.48 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:57.793313 4.997264 udp 10.0.2.104 54523 -> 14.99.246.35 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:58.784257 0.000000 udp 10.0.2.104 54523 -> 14.96.84.1 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:07:59.785958 0.000000 udp 10.0.2.104 54523 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:00.787326 0.355606 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:01.789003 4.997156 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:03.791557 0.164364 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:04.793166 0.042529 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:05.784601 0.000000 udp 10.0.2.104 54523 -> 115.241.1.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:06.428018 0.000000 udp 10.0.2.104 54523 <- 14.99.246.35 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:06.933462 0.000000 udp 10.0.2.104 54523 <- 69.249.42.35 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:07.787456 0.173462 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:08.789038 0.368892 udp 10.0.2.104 54523 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:09.790242 0.322409 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:10.791983 0.000000 udp 10.0.2.104 54523 -> 195.38.112.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:11.793003 0.142047 udp 10.0.2.104 54523 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:12.784528 4.164979 udp 10.0.2.104 54523 <-> 109.105.252.206 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:13.786293 0.814297 udp 10.0.2.104 54523 <-> 202.92.172.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:14.787755 0.000000 udp 10.0.2.104 54523 -> 87.198.116.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:15.789333 0.032502 udp 10.0.2.104 54523 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:17.791615 2.995018 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:18.793584 0.052496 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:19.784546 0.175106 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:21.787384 4.887180 udp 10.0.2.104 54523 <-> 112.200.109.238 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:22.448588 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:08:22.789331 0.043038 udp 10.0.2.104 54523 <-> 37.201.121.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:22.939084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:08:23.790592 1.033471 udp 10.0.2.104 54523 <-> 89.41.36.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:26.785217 0.124900 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:27.786563 0.013879 udp 10.0.2.104 54523 <-> 109.231.148.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:28.787565 0.358531 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:29.788984 0.000000 udp 10.0.2.104 54523 -> 151.250.76.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:30.790614 0.214818 udp 10.0.2.104 54523 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:31.791884 0.000000 udp 10.0.2.104 54523 -> 85.86.194.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:32.793184 0.000000 udp 10.0.2.104 54523 -> 109.91.102.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:33.785143 0.000000 udp 10.0.2.104 54523 -> 61.11.23.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:34.786454 0.155648 udp 10.0.2.104 54523 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:35.787696 0.279704 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:36.789492 0.075151 udp 10.0.2.104 54523 <-> 77.27.54.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:37.790410 0.316363 udp 10.0.2.104 54523 <-> 114.174.40.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:38.791907 0.125389 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:39.793792 0.342174 udp 10.0.2.104 54523 <-> 60.238.117.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:40.785388 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:41.786387 0.090762 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:42.787608 0.155617 udp 10.0.2.104 54523 <-> 173.27.248.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:43.789227 0.034253 udp 10.0.2.104 54523 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:44.790544 2.003018 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:47.785180 0.154206 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:48.786892 0.094188 udp 10.0.2.104 54523 <-> 37.215.216.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:49.788114 0.000000 udp 10.0.2.104 54523 -> 188.173.130.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:50.789289 0.119615 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:51.790685 0.377641 udp 10.0.2.104 54523 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:52.792262 0.000000 udp 10.0.2.104 54523 -> 212.98.191.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:53.793605 0.000000 udp 10.0.2.104 54523 -> 5.15.146.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:54.784858 0.216344 udp 10.0.2.104 54523 <-> 202.185.93.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:55.786423 0.034682 udp 10.0.2.104 54523 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:56.787814 0.000000 udp 10.0.2.104 54523 -> 118.137.80.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:08:57.789437 0.153419 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:58.791036 0.026185 udp 10.0.2.104 54523 <-> 80.98.83.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:08:59.792513 0.349674 udp 10.0.2.104 54523 <-> 123.192.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:00.793543 0.149765 udp 10.0.2.104 54523 <-> 173.20.220.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:01.785567 0.353758 udp 10.0.2.104 54523 <-> 190.172.83.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:02.786788 0.000000 udp 10.0.2.104 54523 -> 49.204.136.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:03.978526 0.171653 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:04.980074 0.072052 udp 10.0.2.104 54523 <-> 151.70.20.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:05.981447 0.072537 udp 10.0.2.104 54523 <-> 89.40.194.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:06.982800 0.000000 udp 10.0.2.104 54523 -> 188.25.111.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:07.987924 0.301242 udp 10.0.2.104 54523 <-> 189.111.16.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:08.975542 0.000000 udp 10.0.2.104 54523 -> 5.12.178.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:09.636414 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:09:09.977317 0.301282 udp 10.0.2.104 54523 <-> 175.111.126.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:10.978808 0.058714 udp 10.0.2.104 54523 <-> 88.156.154.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:11.980046 0.163110 udp 10.0.2.104 54523 <-> 69.137.7.210 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:12.981473 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:13.982675 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:14.984357 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:15.975811 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:16.977225 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:17.978915 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:18.980009 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:19.981130 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:20.982660 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:21.984566 0.118519 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:22.996198 0.122769 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:23.997051 0.118451 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:24.998229 0.123816 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:26.000183 0.022616 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:27.001447 0.051474 udp 10.0.2.104 54523 <-> 89.34.99.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:28.002773 0.290305 udp 10.0.2.104 54523 <-> 187.39.52.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:29.004601 0.159015 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:29.995393 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:30.996927 1.235162 udp 10.0.2.104 54523 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:31.998488 0.319212 udp 10.0.2.104 54523 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:32.999726 0.361097 udp 10.0.2.104 54523 <-> 112.118.56.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:34.001596 0.307242 udp 10.0.2.104 54523 <-> 119.193.20.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:35.003158 0.123484 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:36.004238 0.336830 udp 10.0.2.104 54523 <-> 153.183.109.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:36.995768 0.024888 udp 10.0.2.104 54523 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:37.997010 0.000000 udp 10.0.2.104 54523 -> 213.91.147.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:38.998341 0.322272 udp 10.0.2.104 54523 <-> 180.19.146.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:40.000377 0.051070 udp 10.0.2.104 54523 <-> 79.116.104.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:41.001466 0.048093 udp 10.0.2.104 54523 <-> 178.250.32.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:42.002675 0.147834 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:43.004710 0.000000 udp 10.0.2.104 54523 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:43.995853 0.000000 udp 10.0.2.104 54523 -> 78.186.167.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:44.997007 0.000000 udp 10.0.2.104 54523 -> 221.216.163.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:45.998626 0.000000 udp 10.0.2.104 54523 -> 89.77.192.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:47.000073 0.398469 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:48.001288 0.310453 udp 10.0.2.104 54523 <-> 201.223.227.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:49.003175 2.344933 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:50.004572 0.052524 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:50.205511 0.009729 udp 10.0.2.104 54526 <-> 8.8.8.8 53 CON 0 0 2 162 flow=From-Botnet-V2-DNS 1970/01/01 01:09:50.215462 0.217156 tcp 10.0.2.104 49183 -> 108.168.255.244 80 FSPA* 0 0 10 1330 flow=From-Botnet-V2-TCP-Established 1970/01/01 01:09:51.997032 0.000000 udp 10.0.2.104 54523 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:52.998683 1.983500 udp 10.0.2.104 54523 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:54.000316 0.161944 udp 10.0.2.104 54523 <-> 50.143.57.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:55.001344 0.160631 udp 10.0.2.104 54523 <-> 108.170.53.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:56.002917 0.339606 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:57.004940 0.000000 udp 10.0.2.104 54523 -> 176.201.196.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:09:57.996224 0.128892 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:58.997592 0.135294 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:09:59.999000 0.033865 udp 10.0.2.104 54523 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:01.000174 0.036032 udp 10.0.2.104 54523 <-> 94.253.202.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:02.001886 0.357503 udp 10.0.2.104 54523 <-> 58.172.44.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:03.003072 0.102421 udp 10.0.2.104 54523 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:04.004306 0.328865 udp 10.0.2.104 54523 <-> 108.73.124.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:04.996468 0.080986 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:05.997271 0.217851 udp 10.0.2.104 54523 <-> 76.113.45.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:06.999240 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:08.000568 0.048110 udp 10.0.2.104 54523 <-> 93.105.185.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:09.001531 0.458235 udp 10.0.2.104 54523 <-> 115.241.229.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:10.003493 0.000000 udp 10.0.2.104 54523 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:10.994952 0.615279 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:11.996004 0.049752 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:12.997825 0.319614 udp 10.0.2.104 54523 <-> 182.53.36.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:13.998954 0.000000 udp 10.0.2.104 54523 -> 80.21.151.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:15.000130 0.153479 udp 10.0.2.104 54523 <-> 71.90.72.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:16.001930 0.050268 udp 10.0.2.104 54523 <-> 176.103.18.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:17.003353 0.000000 udp 10.0.2.104 54523 -> 111.251.8.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:17.995003 0.148030 udp 10.0.2.104 54523 <-> 67.21.98.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:18.995862 0.000000 udp 10.0.2.104 54523 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:19.997559 0.257052 udp 10.0.2.104 54523 <-> 115.187.61.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:20.999104 0.322874 udp 10.0.2.104 54523 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:22.000932 0.161530 udp 10.0.2.104 54523 <-> 208.107.49.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:23.001830 0.353805 udp 10.0.2.104 54523 <-> 122.100.81.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:24.003372 2.994459 udp 10.0.2.104 54523 -> 109.52.154.163 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:24.994499 0.196284 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:25.995962 0.000000 udp 10.0.2.104 54523 -> 88.25.98.0 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:27.998980 0.000000 udp 10.0.2.104 54523 -> 14.97.207.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:29.000299 0.272966 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:30.002178 0.000000 udp 10.0.2.104 54523 -> 24.193.20.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:31.003283 0.000000 udp 10.0.2.104 54523 -> 14.96.188.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:31.994838 0.354306 udp 10.0.2.104 54523 <-> 122.100.81.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:32.996297 0.158037 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:33.998095 0.000000 udp 10.0.2.104 54523 -> 207.210.56.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:34.999179 0.130877 udp 10.0.2.104 54523 <-> 68.42.123.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:36.000473 0.181756 udp 10.0.2.104 54523 <-> 68.6.65.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:36.661328 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:10:37.002306 0.147984 udp 10.0.2.104 54523 <-> 178.123.55.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:38.003228 0.124538 udp 10.0.2.104 54523 <-> 74.72.169.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:38.994743 0.151669 udp 10.0.2.104 54523 <-> 24.144.240.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:39.996477 0.000000 udp 10.0.2.104 54523 -> 74.182.120.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:40.997662 0.165532 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:41.999288 0.302122 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:43.000684 0.009842 udp 10.0.2.104 54523 <-> 93.99.103.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:44.002053 0.017055 udp 10.0.2.104 54523 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:45.003674 0.000000 udp 10.0.2.104 54523 -> 115.242.112.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:45.995003 0.046428 udp 10.0.2.104 54523 <-> 88.196.202.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:46.996914 0.135423 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:47.997670 0.000000 udp 10.0.2.104 54523 -> 118.161.150.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:48.999278 0.000000 udp 10.0.2.104 54523 -> 67.191.122.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:50.000758 0.368682 udp 10.0.2.104 54523 <-> 62.5.202.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:51.002175 0.136769 udp 10.0.2.104 54523 <-> 71.7.196.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:52.003851 0.164037 udp 10.0.2.104 54523 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:52.995460 2.369851 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:55.999079 0.152925 udp 10.0.2.104 54523 <-> 74.79.65.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:57.001024 0.145404 udp 10.0.2.104 54523 <-> 174.63.38.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:58.002435 0.133683 udp 10.0.2.104 54523 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:10:59.003396 0.000000 udp 10.0.2.104 54523 -> 130.83.54.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:10:59.995255 0.037730 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:00.996556 0.000000 udp 10.0.2.104 54523 -> 87.22.101.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:01.997880 1.304784 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:02.073100 0.000000 udp 10.0.2.104 54523 <- 67.191.122.185 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:02.999519 0.021335 udp 10.0.2.104 54523 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:04.000550 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:05.002178 0.000089 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:05.002267 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:11:06.003742 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:06.995324 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:07.996947 3.004111 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:08.998100 0.231990 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:09.999374 0.085657 udp 10.0.2.104 54523 <-> 178.126.225.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:12.002821 0.000000 udp 10.0.2.104 54523 -> 201.19.246.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:13.003646 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:13.995780 0.355520 udp 10.0.2.104 54523 <-> 111.242.155.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:14.996633 0.000000 udp 10.0.2.104 54523 -> 192.168.2.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:15.998485 1.212401 udp 10.0.2.104 54523 <-> 180.215.118.1 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:16.999289 3.004460 udp 10.0.2.104 54523 -> 2.238.184.10 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:18.001352 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:19.002574 0.000000 udp 10.0.2.104 54523 -> 109.231.148.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:20.995382 0.000000 udp 10.0.2.104 54523 -> 192.168.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:21.996464 0.000000 udp 10.0.2.104 54523 -> 107.205.34.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:22.997983 0.000000 udp 10.0.2.104 54523 -> 173.87.184.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:23.659172 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:11:23.999553 0.049810 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:25.001002 0.166077 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:26.002697 0.147109 udp 10.0.2.104 54523 <-> 76.217.58.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:27.995214 2.313975 udp 10.0.2.104 54523 <-> 218.47.116.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:28.997089 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:31.000261 0.134997 udp 10.0.2.104 54523 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:32.001452 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:33.002740 0.049141 udp 10.0.2.104 54523 <-> 84.192.201.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:34.003699 0.350849 udp 10.0.2.104 54523 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:34.995405 0.292808 udp 10.0.2.104 54523 <-> 61.46.123.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:35.997099 0.177501 udp 10.0.2.104 54523 <-> 24.155.247.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:36.998302 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:37.999765 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:39.001120 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:40.002353 0.042035 udp 10.0.2.104 54523 <-> 79.133.245.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:41.004036 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:41.995176 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:42.997387 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:43.998137 0.027815 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:44.025952 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:11:44.999965 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:46.001580 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:47.002747 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:48.004106 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:48.995440 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:49.997174 0.000000 udp 10.0.2.104 54523 -> 208.34.24.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:50.998794 0.000000 udp 10.0.2.104 54523 -> 105.152.153.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:51.999796 0.000000 udp 10.0.2.104 54523 -> 68.60.48.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:53.001268 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:54.003161 3.995017 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:55.995465 0.042174 udp 10.0.2.104 54523 <-> 79.133.245.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:11:56.997179 0.000000 udp 10.0.2.104 54523 -> 208.34.24.34 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:11:58.999778 0.297088 udp 10.0.2.104 54523 <-> 118.20.34.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:00.001447 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:01.002877 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:02.003972 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:02.004065 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:12:02.995462 0.000000 udp 10.0.2.104 54523 -> 95.91.31.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:03.997256 0.042321 udp 10.0.2.104 54523 <-> 79.133.245.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:04.998779 0.179465 udp 10.0.2.104 54523 <-> 24.155.247.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:05.999914 1.280532 udp 10.0.2.104 54523 <-> 72.242.83.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:07.001586 0.160573 udp 10.0.2.104 54523 <-> 50.129.144.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:08.002946 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:09.004277 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:09.995950 0.076105 udp 10.0.2.104 54523 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:10.656347 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:12:10.997419 0.044422 udp 10.0.2.104 54523 <-> 84.192.201.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:11.998344 0.358385 udp 10.0.2.104 54523 <-> 190.201.123.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:13.000288 0.229131 udp 10.0.2.104 54523 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:14.001216 0.114952 udp 10.0.2.104 54523 <-> 24.36.173.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:15.003041 0.279150 udp 10.0.2.104 54523 <-> 181.164.145.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:16.004421 0.151664 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:16.996311 0.136657 udp 10.0.2.104 54523 <-> 74.195.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:17.997242 0.269323 udp 10.0.2.104 54523 <-> 90.232.194.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:18.998790 0.161785 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:20.000125 0.308552 udp 10.0.2.104 54523 <-> 151.239.3.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:21.001486 0.049485 udp 10.0.2.104 54523 <-> 77.249.34.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:22.003072 0.316253 udp 10.0.2.104 54523 <-> 223.29.198.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:23.004157 0.030524 udp 10.0.2.104 54523 <-> 95.88.105.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:23.995753 0.137109 udp 10.0.2.104 54523 <-> 68.188.238.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:24.997429 0.193459 udp 10.0.2.104 54523 <-> 106.51.24.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:25.999017 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:27.000419 0.220855 udp 10.0.2.104 54523 <-> 81.147.68.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:28.001463 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:29.003455 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:30.004710 0.339791 udp 10.0.2.104 54523 <-> 61.63.107.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:30.995723 0.328435 udp 10.0.2.104 54523 <-> 115.86.61.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:31.997420 0.192986 udp 10.0.2.104 54523 <-> 50.26.141.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:32.999074 0.044825 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:34.000135 1.662213 udp 10.0.2.104 54523 <-> 90.129.90.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:35.001472 0.251180 udp 10.0.2.104 54523 <-> 2.187.232.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:36.003113 0.145756 udp 10.0.2.104 54523 <-> 178.90.121.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:37.004742 3.011970 udp 10.0.2.104 54523 <-> 212.39.22.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:37.995843 0.360535 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:38.997642 0.139405 udp 10.0.2.104 54523 <-> 192.226.151.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:39.999352 0.152146 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:41.000632 0.156155 udp 10.0.2.104 54523 <-> 75.115.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:42.002040 0.000000 udp 10.0.2.104 54523 -> 115.245.44.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:43.003003 0.438453 udp 10.0.2.104 54523 <-> 41.174.24.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:43.994975 0.025727 udp 10.0.2.104 54523 <-> 213.222.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:44.996093 3.349552 udp 10.0.2.104 54523 <-> 202.235.233.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:45.997504 0.391459 udp 10.0.2.104 54523 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:46.998894 0.145862 udp 10.0.2.104 54523 <-> 101.0.32.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:48.000790 0.120323 udp 10.0.2.104 54523 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:49.001843 0.137228 udp 10.0.2.104 54523 <-> 173.86.134.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:50.003058 0.000000 udp 10.0.2.104 54523 -> 95.133.169.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:50.994513 0.000000 udp 10.0.2.104 54523 -> 58.141.102.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:51.996306 0.346125 udp 10.0.2.104 54523 <-> 111.249.244.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:52.997323 0.093255 udp 10.0.2.104 54523 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:53.999113 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:55.000569 2.003115 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:12:56.002043 0.049799 udp 10.0.2.104 54523 <-> 79.98.3.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:57.654028 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:12:57.994760 0.049519 udp 10.0.2.104 54523 <-> 88.177.244.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:58.996334 0.074054 udp 10.0.2.104 54523 <-> 85.84.83.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:12:59.997338 0.024691 udp 10.0.2.104 54523 <-> 158.58.228.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:00.998881 0.000000 udp 10.0.2.104 54523 -> 117.205.146.193 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:02.000672 0.365607 udp 10.0.2.104 54523 <-> 124.12.35.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:03.002122 0.057587 udp 10.0.2.104 54523 <-> 85.224.101.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:04.003221 0.162796 udp 10.0.2.104 54523 <-> 24.220.201.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:04.994736 0.099057 udp 10.0.2.104 54523 <-> 90.129.86.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:05.996130 0.000000 udp 10.0.2.104 54523 -> 89.41.121.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:06.998015 0.097958 udp 10.0.2.104 54523 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:07.999294 0.058261 udp 10.0.2.104 54523 <-> 84.245.216.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:09.000513 0.000000 udp 10.0.2.104 54523 -> 95.59.36.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:10.002359 0.169913 udp 10.0.2.104 54523 <-> 123.236.4.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:11.003807 0.158509 udp 10.0.2.104 54523 <-> 182.48.203.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:11.995282 0.447739 udp 10.0.2.104 54523 <-> 218.43.177.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:12.996529 2.770231 udp 10.0.2.104 54523 <-> 14.98.232.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:13.997899 0.333292 udp 10.0.2.104 54523 <-> 115.241.56.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:14.999038 0.058139 udp 10.0.2.104 54523 <-> 158.49.161.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:16.000932 0.276095 udp 10.0.2.104 54523 <-> 118.237.85.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:17.001844 0.000000 udp 10.0.2.104 54523 -> 49.204.136.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:18.003700 0.339410 udp 10.0.2.104 54523 <-> 118.167.3.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:18.994962 0.330096 udp 10.0.2.104 54523 <-> 1.164.48.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:19.996507 0.272587 udp 10.0.2.104 54523 <-> 117.200.137.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:20.997885 0.719135 udp 10.0.2.104 54523 <-> 175.38.69.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:21.999237 0.146503 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:23.000574 0.375752 udp 10.0.2.104 54523 <-> 117.203.81.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:24.002308 0.181635 udp 10.0.2.104 54523 <-> 98.177.241.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:25.003409 0.140327 udp 10.0.2.104 54523 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:25.995054 0.034753 udp 10.0.2.104 54523 <-> 151.100.62.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:26.996784 0.151639 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:27.997993 0.064660 udp 10.0.2.104 54523 <-> 217.175.12.204 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:28.999333 0.149480 udp 10.0.2.104 54523 <-> 24.123.44.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:30.000797 0.168147 udp 10.0.2.104 54523 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:31.002251 0.139381 udp 10.0.2.104 54523 <-> 95.49.101.133 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:32.003355 0.045499 udp 10.0.2.104 54523 <-> 178.150.200.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:32.995683 0.142502 udp 10.0.2.104 54523 <-> 75.133.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:33.996845 0.106245 udp 10.0.2.104 54523 <-> 95.236.42.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:34.998337 0.300886 udp 10.0.2.104 54523 <-> 124.47.100.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:35.999266 0.049313 udp 10.0.2.104 54523 <-> 92.109.240.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:37.000719 0.393901 udp 10.0.2.104 54523 <-> 220.142.164.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:38.002636 0.034203 udp 10.0.2.104 54523 <-> 80.219.71.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:39.004215 0.165718 udp 10.0.2.104 54523 <-> 66.69.203.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:39.995522 0.000000 udp 10.0.2.104 54523 -> 67.21.98.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:40.996428 0.191314 udp 10.0.2.104 54523 <-> 123.238.140.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:41.998274 0.000000 udp 10.0.2.104 54523 -> 24.59.225.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:42.999345 1.401917 udp 10.0.2.104 54523 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:44.000757 2.054910 udp 10.0.2.104 54523 <-> 175.100.158.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:44.662006 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:13:45.002492 0.000000 udp 10.0.2.104 54523 -> 151.245.23.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:46.003717 0.000000 udp 10.0.2.104 54523 -> 103.7.150.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:46.995686 0.220934 udp 10.0.2.104 54523 <-> 183.83.74.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:47.996780 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:48.998224 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:49.999312 3.004237 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:51.001169 3.995431 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:52.002448 0.152121 udp 10.0.2.104 54523 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:53.994976 0.000000 udp 10.0.2.104 54523 -> 112.104.19.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:55.997931 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:13:56.999788 0.288455 udp 10.0.2.104 54523 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:58.001198 0.940491 udp 10.0.2.104 54523 <-> 115.250.130.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:13:59.002227 0.000000 udp 10.0.2.104 54523 -> 212.39.22.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:00.004142 0.018117 udp 10.0.2.104 54523 <-> 37.24.184.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:00.995385 0.041314 udp 10.0.2.104 54523 <-> 31.131.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:01.996661 0.162285 udp 10.0.2.104 54523 <-> 72.179.177.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:02.998627 0.150415 udp 10.0.2.104 54523 <-> 98.193.225.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:03.999838 0.231254 udp 10.0.2.104 54523 <-> 123.201.24.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:05.001395 0.132252 udp 10.0.2.104 54523 <-> 67.242.84.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:06.002868 0.348729 udp 10.0.2.104 54523 <-> 1.168.90.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:07.003942 0.327354 udp 10.0.2.104 54523 <-> 121.80.41.145 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:07.995419 0.154693 udp 10.0.2.104 54523 <-> 173.197.148.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:08.997196 0.241894 udp 10.0.2.104 54523 <-> 118.95.64.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:09.998216 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:10.999852 0.425764 udp 10.0.2.104 54523 <-> 117.194.3.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:12.001238 0.301612 udp 10.0.2.104 54523 <-> 105.227.32.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:13.002844 0.124072 udp 10.0.2.104 54523 <-> 24.122.107.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:14.004431 0.169723 udp 10.0.2.104 54523 <-> 24.113.136.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:14.358871 0.000000 udp 10.0.2.104 54523 <- 212.39.22.247 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:14.995962 0.142648 udp 10.0.2.104 54523 <-> 70.80.64.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:15.997140 0.040303 udp 10.0.2.104 54523 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:16.998668 0.559523 udp 10.0.2.104 54523 <-> 117.204.181.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:18.000007 0.141868 udp 10.0.2.104 54523 <-> 75.134.178.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:19.001314 0.151959 udp 10.0.2.104 54523 <-> 74.79.65.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:20.002705 0.341680 udp 10.0.2.104 54523 <-> 121.156.206.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:21.004589 3.137211 udp 10.0.2.104 54523 <-> 75.133.28.235 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:21.995825 0.442549 udp 10.0.2.104 54523 <-> 86.38.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:22.997347 0.142055 udp 10.0.2.104 54523 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:24.999883 0.130622 udp 10.0.2.104 54523 <-> 207.181.241.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:26.001439 0.146685 udp 10.0.2.104 54523 <-> 68.51.124.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:27.002519 0.083515 udp 10.0.2.104 54523 <-> 78.58.198.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:27.155525 3.001418 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:14:28.004377 0.143386 udp 10.0.2.104 54523 <-> 69.126.154.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:28.995758 0.177566 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:29.996926 0.092298 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:30.998670 0.067628 udp 10.0.2.104 54523 <-> 85.84.242.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:31.659212 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:14:32.000292 0.070918 udp 10.0.2.104 54523 <-> 92.231.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:33.001232 0.000000 udp 10.0.2.104 54523 -> 180.94.81.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:34.002853 0.000000 udp 10.0.2.104 54523 -> 115.78.132.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:34.163380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:14:35.004303 0.064409 udp 10.0.2.104 54523 <-> 78.204.48.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:35.995486 0.141915 udp 10.0.2.104 54523 <-> 70.80.64.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:36.997387 0.422551 udp 10.0.2.104 54523 <-> 204.116.75.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:37.998851 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:38.999686 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:40.001183 0.304528 udp 10.0.2.104 54523 <-> 200.109.155.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:41.002574 0.358586 udp 10.0.2.104 54523 <-> 39.119.96.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:42.004284 0.353099 udp 10.0.2.104 54523 <-> 75.246.135.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:42.164781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:14:42.995425 0.277325 udp 10.0.2.104 54523 <-> 115.242.203.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:43.997419 0.319140 udp 10.0.2.104 54523 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:44.998842 0.169628 udp 10.0.2.104 54523 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:46.000088 0.029320 udp 10.0.2.104 54523 <-> 78.42.36.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:47.001469 0.459216 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:48.003333 0.231177 udp 10.0.2.104 54523 <-> 81.90.158.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:49.004110 0.145580 udp 10.0.2.104 54523 <-> 65.188.252.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:49.996247 0.048426 udp 10.0.2.104 54523 <-> 79.98.3.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:50.997033 0.304653 udp 10.0.2.104 54523 <-> 112.169.196.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:51.999092 0.000000 udp 10.0.2.104 54523 -> 76.117.231.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:53.000520 0.368950 udp 10.0.2.104 54523 <-> 206.253.49.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:54.001257 0.156276 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:55.002842 0.419249 udp 10.0.2.104 54523 <-> 98.222.5.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:56.004636 0.000000 udp 10.0.2.104 54523 -> 172.162.51.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:56.996082 0.000000 udp 10.0.2.104 54523 -> 113.193.164.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:14:57.997013 0.177352 udp 10.0.2.104 54523 <-> 76.92.155.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:14:58.167385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:14:58.998894 0.158639 udp 10.0.2.104 54523 <-> 66.130.254.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:00.000519 0.048551 udp 10.0.2.104 54523 <-> 178.250.32.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:01.001405 0.329123 udp 10.0.2.104 54523 <-> 114.181.13.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:02.003140 0.295188 udp 10.0.2.104 54523 <-> 14.97.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:03.004878 0.141512 udp 10.0.2.104 54523 <-> 67.103.179.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:03.995892 0.305608 udp 10.0.2.104 54523 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:04.997320 0.515326 udp 10.0.2.104 54523 <-> 84.121.53.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:05.998931 2.139148 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:06.999949 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:09.003083 0.000000 udp 10.0.2.104 54523 -> 84.240.238.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:10.004769 0.051129 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:10.996009 0.132643 udp 10.0.2.104 54523 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:11.575755 0.000000 udp 10.0.2.104 54523 <- 76.117.231.81 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:11.997239 0.039892 udp 10.0.2.104 54523 <-> 178.24.169.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:12.998840 0.540992 udp 10.0.2.104 54523 <-> 76.170.200.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:14.000341 0.000000 udp 10.0.2.104 54523 -> 183.82.191.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:15.001853 0.146757 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:16.003401 0.054165 udp 10.0.2.104 54523 <-> 89.253.170.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:16.994559 0.000000 udp 10.0.2.104 54523 -> 113.193.89.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:17.996357 0.160637 udp 10.0.2.104 54523 <-> 76.107.155.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:18.657114 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:15:18.997739 0.000000 udp 10.0.2.104 54523 -> 118.165.157.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:19.998793 0.193199 udp 10.0.2.104 54523 <-> 98.238.204.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:21.000505 0.000087 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:21.000592 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:15:22.002046 0.165776 udp 10.0.2.104 54523 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:23.002930 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:23.994583 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:24.996331 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:25.997356 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:26.999124 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:28.000290 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:29.001868 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:30.003698 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:30.173764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:15:30.994569 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:31.996378 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:32.997326 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:33.999076 3.003996 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:35.000835 0.127480 udp 10.0.2.104 54523 <-> 2.199.26.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:36.002177 0.169206 udp 10.0.2.104 54523 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:37.994667 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:38.996018 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:39.997759 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:40.998869 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:42.000754 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:43.002405 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:44.003637 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:45.996197 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:46.997636 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:47.999316 4.997338 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:49.000352 2.994755 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:49.000434 2.994673 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 01:15:50.002056 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:51.004016 0.149695 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:15:53.997768 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:54.999262 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:56.000788 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:57.002245 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:58.003833 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:58.995233 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:15:59.996680 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:00.997563 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:03.001088 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:04.002590 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:05.004017 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:05.654652 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:16:05.994851 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:06.996632 0.188595 udp 10.0.2.104 54523 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:07.997893 0.050518 udp 10.0.2.104 54523 <-> 79.113.249.92 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:08.999310 0.146738 udp 10.0.2.104 54523 <-> 71.197.28.72 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:10.001234 2.263452 udp 10.0.2.104 54523 <-> 37.201.121.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:11.001977 0.000000 udp 10.0.2.104 54523 -> 72.24.102.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:12.994979 0.317704 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:13.996645 4.006016 udp 10.0.2.104 54523 <-> 158.49.198.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:14.997720 0.243061 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:16.000032 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:17.001139 0.000000 udp 10.0.2.104 54523 -> 125.4.21.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:19.003933 4.312171 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:19.995384 0.149472 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:20.996563 0.000000 udp 10.0.2.104 54523 -> 192.168.1.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:21.997775 0.353089 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:24.000866 0.165337 udp 10.0.2.104 54523 <-> 116.73.212.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:25.002312 0.124531 udp 10.0.2.104 54523 <-> 188.131.102.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:26.004180 0.129160 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:26.995083 0.118289 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:27.996863 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:28.997999 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:29.999768 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:31.000885 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:31.000966 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:16:32.002463 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:33.004212 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:33.995039 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:34.997063 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:35.997973 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:37.000216 0.492814 udp 10.0.2.104 54523 <-> 115.135.204.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:38.000894 3.043919 udp 10.0.2.104 54523 <-> 188.190.84.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:39.002374 0.077357 udp 10.0.2.104 54523 <-> 93.100.170.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:40.003735 0.038414 udp 10.0.2.104 54523 <-> 92.247.198.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:41.996582 0.000000 udp 10.0.2.104 54523 -> 1.161.164.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:42.998217 0.050777 udp 10.0.2.104 54523 <-> 79.114.8.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:43.999966 0.181151 udp 10.0.2.104 54523 <-> 68.7.210.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:45.000919 0.054529 udp 10.0.2.104 54523 <-> 46.108.227.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:46.002560 0.312367 udp 10.0.2.104 54523 <-> 180.19.146.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:47.004156 0.000000 udp 10.0.2.104 54523 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:47.995504 0.196589 udp 10.0.2.104 54523 <-> 194.123.75.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:48.997029 0.031689 udp 10.0.2.104 54523 <-> 80.99.142.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:49.998375 4.006004 udp 10.0.2.104 54523 <-> 190.203.224.20 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:50.999870 0.000000 udp 10.0.2.104 54523 -> 72.224.252.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:52.001065 4.909332 udp 10.0.2.104 54523 <-> 201.241.29.30 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:52.661886 0.000178 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:16:53.002464 0.000000 udp 10.0.2.104 54523 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:54.995944 0.024153 udp 10.0.2.104 54523 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:55.055412 0.000000 udp 10.0.2.104 54523 <- 190.203.224.20 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:16:56.998525 0.160636 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:57.999940 0.124949 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:16:59.001381 0.421073 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:00.003174 1.161224 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:01.003955 0.339421 udp 10.0.2.104 54523 <-> 115.241.115.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:01.995365 0.204719 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:02.997284 0.344949 udp 10.0.2.104 54523 <-> 124.244.60.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:03.998201 0.406618 udp 10.0.2.104 54523 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:04.999678 2.112634 udp 10.0.2.104 54523 <-> 37.45.150.62 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:06.001787 0.293209 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:08.003982 0.198584 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:08.995352 0.035549 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:09.997407 0.604252 udp 10.0.2.104 54523 <-> 201.211.102.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:10.998594 0.028747 udp 10.0.2.104 54523 <-> 85.130.74.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:13.001316 0.864616 udp 10.0.2.104 54523 <-> 151.70.94.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:14.002589 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:15.004611 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:15.995897 0.367737 udp 10.0.2.104 54523 <-> 36.230.61.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:16.997146 0.125828 udp 10.0.2.104 54523 <-> 83.230.237.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:17.998955 0.316889 udp 10.0.2.104 54523 <-> 121.84.48.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:19.000063 0.161580 udp 10.0.2.104 54523 <-> 111.119.254.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:20.001621 0.022266 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:21.003187 0.000000 udp 10.0.2.104 54523 -> 24.193.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:22.004083 0.164560 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:22.995887 0.355907 udp 10.0.2.104 54523 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:23.996968 0.214350 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:24.998626 0.000000 udp 10.0.2.104 54523 -> 75.158.248.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:26.000508 3.153441 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:27.001828 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:29.004734 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:29.995602 0.218590 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:30.997016 0.000000 udp 10.0.2.104 54523 -> 75.158.248.133 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:31.998591 0.448515 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:33.000287 0.157777 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:34.001694 1.988570 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:36.004725 0.356454 udp 10.0.2.104 54523 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:36.995956 0.329301 udp 10.0.2.104 54523 <-> 58.115.17.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:37.997067 0.308126 udp 10.0.2.104 54523 <-> 125.4.21.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:38.998660 0.293750 udp 10.0.2.104 54523 <-> 2.185.117.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:39.659841 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:17:40.000323 0.000000 udp 10.0.2.104 54523 -> 142.217.56.0 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:41.001921 0.000000 udp 10.0.2.104 54523 -> 182.237.168.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:42.002783 0.318820 udp 10.0.2.104 54523 <-> 58.115.17.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:43.004536 1.314072 udp 10.0.2.104 54523 <-> 61.114.37.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:43.996323 0.160437 udp 10.0.2.104 54523 <-> 111.119.240.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:44.997290 0.326462 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:45.998863 1.030367 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:48.001823 0.000000 udp 10.0.2.104 54523 -> 79.118.137.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:49.003285 0.037359 udp 10.0.2.104 54523 <-> 80.98.172.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:49.994949 0.027663 udp 10.0.2.104 54523 <-> 89.135.143.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:50.995944 0.303203 udp 10.0.2.104 54523 <-> 112.169.223.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:51.997487 0.000000 udp 10.0.2.104 54523 -> 5.14.38.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:52.999360 0.082150 udp 10.0.2.104 54523 <-> 178.137.35.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:54.000473 0.000000 udp 10.0.2.104 54523 -> 82.244.99.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:55.001718 0.037415 udp 10.0.2.104 54523 <-> 188.24.75.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:56.003138 0.000000 udp 10.0.2.104 54523 -> 85.130.45.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:17:56.995093 0.156650 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:57.996373 0.648031 udp 10.0.2.104 54523 <-> 189.6.137.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:58.997546 0.147262 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:17:59.998947 0.144491 udp 10.0.2.104 54523 <-> 65.185.50.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:01.000710 0.160015 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:02.002006 0.797774 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:03.003129 0.248183 udp 10.0.2.104 54523 <-> 103.251.224.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:03.994514 0.887179 udp 10.0.2.104 54523 <-> 24.135.219.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:04.996304 1.207495 udp 10.0.2.104 54523 <-> 190.73.76.222 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:06.998722 0.333664 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:08.000372 0.000000 udp 10.0.2.104 54523 -> 84.123.7.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:18:09.002175 0.318786 udp 10.0.2.104 54523 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:10.003708 0.326199 udp 10.0.2.104 54523 <-> 175.182.2.62 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:10.995108 0.338373 udp 10.0.2.104 54523 <-> 1.175.92.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:11.996654 0.402045 udp 10.0.2.104 54523 <-> 117.194.7.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:12.997779 0.159466 udp 10.0.2.104 54523 <-> 173.177.41.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:13.999461 0.109170 udp 10.0.2.104 54523 <-> 95.236.42.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:15.000785 0.149337 udp 10.0.2.104 54523 <-> 107.15.192.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:16.002121 0.119707 udp 10.0.2.104 54523 <-> 24.138.143.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:17.003415 0.321958 udp 10.0.2.104 54523 <-> 61.124.224.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:17.995207 0.805904 udp 10.0.2.104 54523 <-> 70.237.37.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:18.996701 0.070447 udp 10.0.2.104 54523 <-> 78.186.207.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:19.997592 4.997721 udp 10.0.2.104 54523 -> 186.91.202.114 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:18:20.999032 0.183919 udp 10.0.2.104 54523 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:22.000564 0.211967 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:23.001782 0.318733 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:24.003241 0.306942 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:25.223167 0.000000 udp 10.0.2.104 54523 <- 186.91.202.114 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:18:25.996311 0.119305 udp 10.0.2.104 54523 <-> 107.16.87.105 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:26.657048 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:18:26.997530 0.195724 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:27.998990 0.411260 udp 10.0.2.104 54523 <-> 221.40.85.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:29.001058 0.326401 udp 10.0.2.104 54523 <-> 175.182.2.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:30.002255 0.380274 udp 10.0.2.104 54523 <-> 115.242.247.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:31.003611 0.125319 udp 10.0.2.104 54523 <-> 95.75.103.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:31.994649 0.101751 udp 10.0.2.104 54523 <-> 95.236.42.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:32.996637 0.051227 udp 10.0.2.104 54523 <-> 150.214.63.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:33.997996 0.050330 udp 10.0.2.104 54523 <-> 5.14.33.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:34.999217 0.000000 udp 10.0.2.104 54523 -> 59.94.20.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:18:36.000698 0.071733 udp 10.0.2.104 54523 <-> 84.120.186.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:37.002248 0.024161 udp 10.0.2.104 54523 <-> 78.42.4.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:38.003350 0.039557 udp 10.0.2.104 54523 <-> 91.67.53.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:38.995000 0.069405 udp 10.0.2.104 54523 <-> 85.152.0.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:39.996644 0.140904 udp 10.0.2.104 54523 <-> 71.82.74.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:40.998344 0.000000 udp 10.0.2.104 54523 -> 109.67.249.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:18:41.999571 0.415196 udp 10.0.2.104 54523 <-> 103.250.17.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:43.001195 0.194549 udp 10.0.2.104 54523 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:44.002442 1.334442 udp 10.0.2.104 54523 <-> 113.193.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:45.003715 0.135731 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:45.995359 0.060948 udp 10.0.2.104 54523 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:46.996952 0.041780 udp 10.0.2.104 54523 <-> 147.156.82.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:47.998250 0.000000 udp 10.0.2.104 54523 -> 89.215.95.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:18:48.999472 0.339158 udp 10.0.2.104 54523 <-> 114.27.79.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:50.000702 0.000000 udp 10.0.2.104 54523 -> 203.172.237.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:18:51.002049 0.135794 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:52.003882 1.218438 udp 10.0.2.104 54523 <-> 190.195.127.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:52.995347 0.052061 udp 10.0.2.104 54523 <-> 83.166.30.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:53.996675 0.214015 udp 10.0.2.104 54523 <-> 49.205.17.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:54.998028 0.066433 udp 10.0.2.104 54523 <-> 87.121.154.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:55.999453 0.137645 udp 10.0.2.104 54523 <-> 71.71.46.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:57.001238 0.130632 udp 10.0.2.104 54523 <-> 98.124.92.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:58.002328 0.083867 udp 10.0.2.104 54523 <-> 95.51.31.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:59.004003 0.297098 udp 10.0.2.104 54523 <-> 59.149.41.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:18:59.995343 0.325793 udp 10.0.2.104 54523 <-> 175.182.2.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:00.996744 0.397120 udp 10.0.2.104 54523 <-> 115.242.247.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:01.998440 2.157587 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:02.999467 0.082693 udp 10.0.2.104 54523 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:05.002570 0.000000 udp 10.0.2.104 54523 -> 83.20.163.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:06.003797 2.994459 udp 10.0.2.104 54523 -> 197.6.53.20 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:06.994992 0.000000 udp 10.0.2.104 54523 -> 75.173.247.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:07.996698 0.355834 udp 10.0.2.104 54523 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:09.999726 0.075338 udp 10.0.2.104 54523 <-> 176.200.179.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:11.001432 0.145485 udp 10.0.2.104 54523 <-> 68.194.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:12.003480 0.000000 udp 10.0.2.104 54523 -> 151.238.216.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:13.004124 0.065564 udp 10.0.2.104 54523 <-> 82.235.20.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:13.655210 0.000136 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:19:13.995369 0.043803 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:14.996632 3.004687 udp 10.0.2.104 54523 -> 87.205.135.252 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:15.997941 0.354643 udp 10.0.2.104 54523 <-> 146.83.193.130 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:16.999399 0.165268 udp 10.0.2.104 54523 <-> 103.26.52.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:19.002275 0.062050 udp 10.0.2.104 54523 <-> 46.49.86.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:20.003741 0.000000 udp 10.0.2.104 54523 -> 111.249.120.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:20.995567 0.340547 udp 10.0.2.104 54523 <-> 219.124.195.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:21.996899 0.178199 udp 10.0.2.104 54523 <-> 97.66.100.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:22.998591 0.214881 udp 10.0.2.104 54523 <-> 124.123.160.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:23.999508 0.091242 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:25.001359 0.000000 udp 10.0.2.104 54523 -> 216.45.40.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:26.002915 4.376976 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:27.004203 0.100997 udp 10.0.2.104 54523 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:27.995206 0.000000 udp 10.0.2.104 54523 -> 61.70.234.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:28.997148 0.000000 udp 10.0.2.104 54523 -> 77.184.160.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:31.000254 0.086447 udp 10.0.2.104 54523 <-> 77.242.54.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:32.001266 0.000000 udp 10.0.2.104 54523 -> 14.98.86.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:33.002780 0.144145 udp 10.0.2.104 54523 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:34.003900 0.000000 udp 10.0.2.104 54523 -> 115.241.70.201 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:34.995944 0.176012 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:35.997032 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:36.998652 0.060814 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:38.000324 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:39.001603 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:40.002468 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:41.004337 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:41.995439 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:42.997156 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:43.998246 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:45.000246 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:46.001340 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:47.002713 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:48.004812 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:48.995945 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:49.997115 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:50.998858 0.179575 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:52.000068 0.051815 udp 10.0.2.104 54523 <-> 109.60.87.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:19:53.001532 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:54.002993 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:55.004295 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:55.995963 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:56.997568 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:57.998755 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:19:58.999785 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:00.001254 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:00.662666 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:20:02.004801 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:02.996210 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:03.997038 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:04.998732 0.000103 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:04.998835 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:20:05.999875 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:07.001824 0.367342 udp 10.0.2.104 54523 <-> 201.223.227.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:08.002808 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:09.004748 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:09.996318 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:10.997456 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:11.998468 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:12.999906 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:14.001475 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:15.003161 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:16.004519 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:16.996254 0.182724 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:17.997480 0.060778 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:18.998970 4.997447 udp 10.0.2.104 54523 <-> 201.223.227.25 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:20.000107 0.082992 udp 10.0.2.104 54523 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:21.002079 1.992862 udp 10.0.2.104 54523 -> 14.99.37.11 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:22.002977 4.997588 udp 10.0.2.104 54523 <-> 180.19.146.62 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:24.451954 1.860021 udp 10.0.2.104 54523 <-> 201.223.227.25 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:24.997405 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:27.312510 2.003164 udp 10.0.2.104 54523 <-> 180.19.146.62 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:28.002221 0.205017 udp 10.0.2.104 54523 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:29.994825 0.071512 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:30.996290 0.000000 udp 10.0.2.104 54523 -> 95.241.227.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:31.997435 0.085382 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:32.999112 0.123032 udp 10.0.2.104 54523 <-> 109.105.252.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:34.000284 3.996009 udp 10.0.2.104 54523 -> 92.240.41.5 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:35.001863 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:36.003357 0.019808 udp 10.0.2.104 54523 <-> 84.118.6.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:36.995168 0.020023 udp 10.0.2.104 54523 <-> 109.90.62.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:38.997890 1.153703 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:41.000217 0.000000 udp 10.0.2.104 54523 -> 92.240.41.5 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:42.001575 0.000000 udp 10.0.2.104 54523 -> 95.241.227.194 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:43.003676 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:43.994827 4.057949 udp 10.0.2.104 54523 <-> 89.137.77.135 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:44.996194 0.063525 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:45.997423 0.144652 udp 10.0.2.104 54523 <-> 67.240.151.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:46.999153 0.081309 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:47.659679 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:20:49.001968 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:50.003278 0.136043 udp 10.0.2.104 54523 <-> 64.53.138.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:50.994958 0.029925 udp 10.0.2.104 54523 <-> 91.66.213.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:51.996351 0.000000 udp 10.0.2.104 54523 -> 180.215.118.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:52.997563 0.000000 udp 10.0.2.104 54523 -> 199.193.80.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:20:53.999118 0.206514 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:55.000795 0.050992 udp 10.0.2.104 54523 <-> 89.34.99.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:56.002202 0.184167 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:57.004187 0.359131 udp 10.0.2.104 54523 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:58.005937 0.159962 udp 10.0.2.104 54523 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:20:59.016236 0.000000 udp 10.0.2.104 54523 -> 94.153.59.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:00.018001 0.000000 udp 10.0.2.104 54523 -> 199.193.80.42 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:01.019050 0.000000 udp 10.0.2.104 54523 -> 86.43.89.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:02.020466 0.170668 udp 10.0.2.104 54523 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:03.022512 0.045411 udp 10.0.2.104 54523 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:04.023320 0.000000 udp 10.0.2.104 54523 -> 185.5.225.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:05.014764 1.902220 udp 10.0.2.104 54523 <-> 181.166.121.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:06.027100 0.042621 udp 10.0.2.104 54523 <-> 188.24.50.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:07.027675 2.395117 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:08.049286 3.020574 udp 10.0.2.104 54523 <-> 84.118.6.105 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:10.052320 4.131768 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:12.045263 0.036129 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:13.046696 0.360104 udp 10.0.2.104 54523 <-> 112.119.99.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:15.049160 0.149882 udp 10.0.2.104 54523 <-> 24.179.39.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:16.050645 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:17.052354 0.405143 udp 10.0.2.104 54523 <-> 14.97.58.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:18.054132 0.151255 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:19.045272 0.037078 udp 10.0.2.104 54523 <-> 213.119.25.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:20.046334 0.018925 udp 10.0.2.104 54523 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:21.047873 0.151006 udp 10.0.2.104 54523 <-> 142.217.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:22.049591 3.995830 udp 10.0.2.104 54523 -> 106.205.118.237 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:23.050742 2.003465 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:24.052697 0.135735 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:27.046473 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:28.048105 1.502194 udp 10.0.2.104 54523 <-> 24.232.160.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:29.049375 0.039392 udp 10.0.2.104 54523 <-> 5.15.28.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:30.051244 0.000000 udp 10.0.2.104 54523 -> 69.127.65.244 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:31.052653 0.049190 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:32.054329 0.058956 udp 10.0.2.104 54523 <-> 79.118.210.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:33.045037 0.326856 udp 10.0.2.104 54523 <-> 14.97.58.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:34.046851 0.155723 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:34.229810 3.001272 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:21:34.707444 0.000168 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:21:35.047863 0.053872 udp 10.0.2.104 54523 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:36.049522 0.000000 udp 10.0.2.104 54523 -> 98.243.238.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:37.050771 0.564004 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:38.052628 0.121811 udp 10.0.2.104 54523 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:39.053890 0.050317 udp 10.0.2.104 54523 <-> 89.34.99.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:40.045245 0.265498 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:41.046647 0.047618 udp 10.0.2.104 54523 <-> 213.159.45.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:41.237363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:21:42.048634 0.000000 udp 10.0.2.104 54523 -> 89.25.112.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:43.050028 0.397193 udp 10.0.2.104 54523 <-> 119.75.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:44.050790 0.358156 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:45.052805 0.000000 udp 10.0.2.104 54523 -> 24.193.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:46.053872 0.000000 udp 10.0.2.104 54523 -> 217.18.251.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:47.045557 0.176390 udp 10.0.2.104 54523 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:48.047138 0.308552 udp 10.0.2.104 54523 <-> 125.4.21.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:48.758277 0.021872 udp 10.0.2.104 54527 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 01:21:48.780448 0.000000 udp 10.0.2.104 54528 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:49.048647 0.134855 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:49.238707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:21:50.049453 2.003204 udp 10.0.2.104 54523 -> 176.250.232.11 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:51.050861 0.163938 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:53.054029 0.114198 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:54.045646 0.111227 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:55.046941 3.665790 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:56.048071 0.000000 udp 10.0.2.104 54523 -> 125.16.25.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:21:57.049513 0.059628 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:21:59.052994 0.060887 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:00.054281 0.087168 udp 10.0.2.104 54523 <-> 78.186.207.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:01.045278 0.027198 udp 10.0.2.104 54523 <-> 82.75.28.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:02.047008 0.136199 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:03.048432 1.340177 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:04.050289 4.997086 udp 10.0.2.104 54523 <-> 121.185.98.47 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:05.051607 0.000000 udp 10.0.2.104 54523 -> 183.83.74.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:05.241338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:22:07.053986 0.000000 udp 10.0.2.104 54523 -> 188.27.196.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:08.045427 0.151403 udp 10.0.2.104 54523 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:09.346242 0.000000 udp 10.0.2.104 54523 <- 121.185.98.47 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:10.048463 0.135535 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:11.050396 0.000000 udp 10.0.2.104 54523 -> 71.63.13.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:12.051271 0.186581 udp 10.0.2.104 54523 <-> 111.125.230.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:13.052959 0.142685 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:14.053948 0.317487 udp 10.0.2.104 54523 <-> 59.0.192.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:15.045978 0.042889 udp 10.0.2.104 54523 <-> 93.183.153.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:16.046966 0.000000 udp 10.0.2.104 54523 -> 90.23.92.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:17.048685 0.047861 udp 10.0.2.104 54523 <-> 150.214.195.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:18.050225 0.153032 udp 10.0.2.104 54523 <-> 75.109.199.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:19.051393 0.000000 udp 10.0.2.104 54523 -> 46.237.76.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:20.052833 0.000000 udp 10.0.2.104 54523 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:21.054226 0.349127 udp 10.0.2.104 54523 <-> 114.41.85.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:21.705047 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:22:22.046177 0.145504 udp 10.0.2.104 54523 <-> 50.83.33.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:23.047170 0.141543 udp 10.0.2.104 54523 <-> 74.203.121.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:24.049020 0.386870 udp 10.0.2.104 54523 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:25.050336 0.087262 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:26.051417 0.197706 udp 10.0.2.104 54523 <-> 106.51.31.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:27.052724 0.153466 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:28.054716 0.586906 udp 10.0.2.104 54523 <-> 117.242.112.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:29.045787 0.335160 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:30.046963 0.050991 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:31.048644 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:32.050341 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:33.051414 0.445558 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:34.052692 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:35.054140 0.171263 udp 10.0.2.104 54523 <-> 184.48.243.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:36.045630 0.069652 udp 10.0.2.104 54523 <-> 85.85.45.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:37.047447 0.000000 udp 10.0.2.104 54523 -> 2.191.94.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:37.247607 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:22:38.048863 0.000000 udp 10.0.2.104 54523 -> 203.172.237.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:39.050601 0.396158 udp 10.0.2.104 54523 <-> 219.115.86.160 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:40.051763 0.055051 udp 10.0.2.104 54523 <-> 77.85.204.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:41.053485 0.248595 udp 10.0.2.104 54523 <-> 98.155.248.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:42.054346 0.298056 udp 10.0.2.104 54523 <-> 202.161.201.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:43.046088 0.066479 udp 10.0.2.104 54523 <-> 82.235.20.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:44.047262 0.039433 udp 10.0.2.104 54523 <-> 79.171.124.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:45.048915 0.068373 udp 10.0.2.104 54523 <-> 88.172.55.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:46.050616 0.000000 udp 10.0.2.104 54523 -> 188.27.205.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:47.052048 0.034736 udp 10.0.2.104 54523 <-> 89.253.101.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:48.052848 0.334814 udp 10.0.2.104 54523 <-> 2.184.57.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:49.054549 3.121829 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:50.046180 0.000000 udp 10.0.2.104 54523 -> 124.121.94.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:22:51.047150 0.147229 udp 10.0.2.104 54523 <-> 96.21.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:53.049998 0.111712 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:54.052053 0.132501 udp 10.0.2.104 54523 <-> 67.189.167.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:55.053301 0.168986 udp 10.0.2.104 54523 <-> 120.138.105.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:56.044643 0.056648 udp 10.0.2.104 54523 <-> 109.87.247.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:57.046089 0.130650 udp 10.0.2.104 54523 <-> 85.130.182.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:58.047780 0.389566 udp 10.0.2.104 54523 <-> 68.145.102.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:22:59.048838 0.042154 udp 10.0.2.104 54523 <-> 62.20.193.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:00.050074 0.347251 udp 10.0.2.104 54523 <-> 115.135.204.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:01.051553 0.000000 udp 10.0.2.104 54523 -> 31.185.126.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:02.053043 0.365283 udp 10.0.2.104 54523 <-> 68.56.21.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:03.044377 0.336990 udp 10.0.2.104 54523 <-> 112.214.164.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:04.046079 0.000000 udp 10.0.2.104 54523 -> 93.155.151.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:05.047889 0.000000 udp 10.0.2.104 54523 -> 68.144.6.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:06.048694 0.054722 udp 10.0.2.104 54523 <-> 78.239.65.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:07.050731 0.000000 udp 10.0.2.104 54523 -> 70.76.138.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:08.052248 0.028617 udp 10.0.2.104 54523 <-> 82.212.10.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:08.713175 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:23:09.053410 0.971039 udp 10.0.2.104 54523 <-> 27.4.178.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:10.045117 0.157750 udp 10.0.2.104 54523 <-> 98.161.45.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:11.046604 0.028083 udp 10.0.2.104 54523 <-> 149.172.63.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:12.047431 0.304626 udp 10.0.2.104 54523 <-> 119.201.78.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:13.049395 0.000000 udp 10.0.2.104 54523 -> 124.123.87.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:14.050955 0.145111 udp 10.0.2.104 54523 <-> 71.71.254.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:15.052242 0.309047 udp 10.0.2.104 54523 <-> 85.84.7.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:16.053166 0.000000 udp 10.0.2.104 54523 -> 178.36.161.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:17.044764 0.927051 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:18.046272 0.000000 udp 10.0.2.104 54523 -> 83.43.108.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:19.047711 0.000000 udp 10.0.2.104 54523 -> 141.136.14.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:20.049527 0.000000 udp 10.0.2.104 54523 -> 188.131.26.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:21.051026 0.074567 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:22.052218 0.063431 udp 10.0.2.104 54523 <-> 212.231.224.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:23.053872 0.429085 udp 10.0.2.104 54523 <-> 118.165.165.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:24.045142 0.170238 udp 10.0.2.104 54523 <-> 75.129.198.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:25.046087 0.311016 udp 10.0.2.104 54523 <-> 121.184.128.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:26.047661 0.029024 udp 10.0.2.104 54523 <-> 85.130.74.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:27.049113 0.164381 udp 10.0.2.104 54523 <-> 174.102.72.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:28.050600 0.130863 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:29.052480 0.300956 udp 10.0.2.104 54523 <-> 119.26.112.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:30.053922 0.353543 udp 10.0.2.104 54523 <-> 211.178.239.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:31.045094 0.000146 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:31.045240 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:23:32.046377 1.547271 udp 10.0.2.104 54523 <-> 31.185.115.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:33.047556 0.317349 udp 10.0.2.104 54523 <-> 61.58.184.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:34.049273 0.000000 udp 10.0.2.104 54523 -> 190.75.56.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:35.050987 0.142613 udp 10.0.2.104 54523 <-> 75.185.186.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:36.052189 0.216069 udp 10.0.2.104 54523 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:37.053672 0.031308 udp 10.0.2.104 54523 <-> 83.84.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:38.045138 0.049384 udp 10.0.2.104 54523 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:39.046632 0.410469 udp 10.0.2.104 54523 <-> 218.227.129.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:40.048121 0.293946 udp 10.0.2.104 54523 <-> 14.54.173.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:41.049089 0.120637 udp 10.0.2.104 54523 <-> 24.36.173.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:42.050600 0.000000 udp 10.0.2.104 54523 -> 94.123.184.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:43.051903 0.293488 udp 10.0.2.104 54523 <-> 2.180.150.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:44.053863 0.000000 udp 10.0.2.104 54523 -> 74.132.164.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:45.045023 0.000000 udp 10.0.2.104 54523 -> 190.0.76.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:46.046632 0.000000 udp 10.0.2.104 54523 -> 24.10.7.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:47.047933 0.413623 udp 10.0.2.104 54523 <-> 76.244.152.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:48.049115 0.196616 udp 10.0.2.104 54523 <-> 123.201.207.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:49.050858 0.150066 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:50.052036 0.167164 udp 10.0.2.104 54523 <-> 75.129.198.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:51.054152 0.188401 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:52.045329 0.156236 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:53.046911 0.000000 udp 10.0.2.104 54523 -> 188.24.5.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:54.047737 0.044985 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:55.049489 0.363099 udp 10.0.2.104 54523 <-> 27.3.107.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:23:55.710058 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:23:56.050654 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:57.052339 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:58.053497 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:23:59.045384 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:00.046493 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:01.048468 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:02.049460 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:03.051364 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:04.052876 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:05.053756 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:06.045462 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:07.046462 0.043831 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:08.047979 0.162731 udp 10.0.2.104 54523 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:09.049305 1.063841 udp 10.0.2.104 54523 <-> 112.200.109.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:10.050847 0.000000 udp 10.0.2.104 54523 -> 5.15.28.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:11.052805 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:12.054267 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:13.045378 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:14.046975 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:15.048604 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:16.060264 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:17.060796 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:18.062232 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:20.055659 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:21.056834 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:22.058112 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:23.059441 0.178399 udp 10.0.2.104 54523 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:24.091002 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:25.092889 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:26.095652 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:27.085293 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:28.087287 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:29.088488 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:30.089740 0.000163 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:30.089903 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:24:31.090961 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:32.092790 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:33.093968 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:35.086708 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:36.088610 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:37.089627 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:38.091341 4.006037 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:39.092903 0.000000 udp 10.0.2.104 54523 -> 24.60.5.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:40.094564 0.062826 udp 10.0.2.104 54523 <-> 188.24.5.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:41.095637 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:42.758401 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:24:43.098656 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:44.100137 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:45.101537 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:46.103363 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:47.104801 0.043860 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:48.095577 0.000000 udp 10.0.2.104 54523 -> 188.24.5.233 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:49.097070 0.354231 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:50.098316 0.000000 udp 10.0.2.104 54523 -> 79.117.217.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:51.111799 2.574066 udp 10.0.2.104 54523 <-> 69.151.57.84 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:52.111429 0.000000 udp 10.0.2.104 54523 -> 182.189.96.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:54.114269 0.000000 udp 10.0.2.104 54523 -> 136.169.242.142 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:55.106084 0.309704 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:56.107701 0.360942 udp 10.0.2.104 54523 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:57.108620 0.024600 udp 10.0.2.104 54523 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:24:58.110455 0.000000 udp 10.0.2.104 54523 -> 70.123.113.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:24:59.111507 0.050975 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:00.113165 0.216830 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:01.114797 0.140658 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:02.105830 0.000000 udp 10.0.2.104 54523 -> 124.96.225.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:03.107242 0.393632 udp 10.0.2.104 54523 <-> 114.37.15.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:04.108464 0.000000 udp 10.0.2.104 54523 -> 14.99.37.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:05.109880 0.363681 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:06.111752 0.369020 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:07.113024 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:08.114750 0.000000 udp 10.0.2.104 54523 -> 14.194.54.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:09.105632 0.303949 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:10.109430 0.137568 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:11.108954 0.354081 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:12.110124 0.143305 udp 10.0.2.104 54523 <-> 47.17.199.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:13.111603 0.137234 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:14.112887 0.213677 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:15.114828 0.368504 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:16.105700 0.304599 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:17.107338 0.049342 udp 10.0.2.104 54523 <-> 188.24.50.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:18.112111 0.000000 udp 10.0.2.104 54523 -> 70.123.113.8 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:19.111071 0.050943 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:20.111904 0.301818 udp 10.0.2.104 54523 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:21.113022 2.342426 udp 10.0.2.104 54523 <-> 112.119.100.107 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:22.114569 0.225269 udp 10.0.2.104 54523 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:24.107313 0.146318 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:25.108792 0.077998 udp 10.0.2.104 54523 -> 85.105.213.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:25.186790 0.000000 icmp 85.105.213.73 0x0303 -> 10.0.2.104 0x5040 URP 192 1 70 flow=Background 1970/01/01 01:25:26.110152 0.165590 udp 10.0.2.104 54523 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:27.112397 0.022600 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:28.162544 0.834333 udp 10.0.2.104 54523 -> 120.141.176.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:28.996877 0.000000 icmp 120.141.176.199 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:25:29.174534 0.000000 udp 10.0.2.104 54523 -> 178.126.39.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:29.845642 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:25:30.186020 0.042432 udp 10.0.2.104 54523 <-> 188.230.65.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:31.187379 0.000000 udp 10.0.2.104 54523 -> 157.14.178.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:32.189340 0.000000 udp 10.0.2.104 54523 -> 71.197.28.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:33.190449 0.438535 udp 10.0.2.104 54523 <-> 115.187.62.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:34.192031 0.000000 udp 10.0.2.104 54523 -> 115.241.210.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:35.193888 0.000000 udp 10.0.2.104 54523 -> 14.96.187.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:36.184933 0.000000 udp 10.0.2.104 54523 -> 85.105.213.73 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:37.186482 1.670016 udp 10.0.2.104 54523 <-> 114.134.251.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:38.187979 0.200466 udp 10.0.2.104 54523 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:39.189252 0.295718 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:40.190955 2.174266 udp 10.0.2.104 54523 <-> 75.111.219.107 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:41.191895 0.000000 udp 10.0.2.104 54523 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:43.184850 0.127292 udp 10.0.2.104 54523 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:44.186784 2.253383 udp 10.0.2.104 54523 <-> 49.0.192.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:45.187608 0.141284 udp 10.0.2.104 54523 <-> 72.23.159.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:47.190823 2.589793 udp 10.0.2.104 54523 <-> 77.26.208.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:48.192336 0.242563 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:49.193767 0.345389 udp 10.0.2.104 54523 <-> 114.36.213.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:50.185169 0.544939 udp 10.0.2.104 54523 <-> 101.63.8.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:51.186245 0.456047 udp 10.0.2.104 54523 <-> 59.93.194.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:52.187796 0.000000 udp 10.0.2.104 54523 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:53.189455 0.120703 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:54.190675 0.000000 udp 10.0.2.104 54523 -> 68.226.220.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:25:55.192484 3.039013 udp 10.0.2.104 54523 <-> 80.80.41.121 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:56.193715 0.991694 udp 10.0.2.104 54523 <-> 216.49.23.199 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:25:59.188357 0.094871 udp 10.0.2.104 54523 <-> 85.210.226.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:00.189131 0.349370 udp 10.0.2.104 54523 <-> 211.72.66.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:01.191184 0.401795 udp 10.0.2.104 54523 <-> 187.26.47.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:02.192748 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:03.193824 0.130676 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:04.185095 0.034304 udp 10.0.2.104 54523 <-> 86.30.195.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:05.187027 0.059786 udp 10.0.2.104 54523 <-> 188.246.77.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:06.188066 0.096333 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:07.189593 0.150601 udp 10.0.2.104 54523 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:08.191307 2.065616 udp 10.0.2.104 54523 <-> 151.237.7.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:09.192218 0.000000 udp 10.0.2.104 54523 -> 213.87.121.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:11.185476 1.039814 udp 10.0.2.104 54523 <-> 213.112.230.161 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:13.187805 0.050974 udp 10.0.2.104 54523 <-> 86.123.213.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:14.189739 0.226556 udp 10.0.2.104 54523 <-> 78.136.73.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:15.190949 0.126524 udp 10.0.2.104 54523 <-> 50.157.214.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:16.192313 0.000000 udp 10.0.2.104 54523 -> 173.238.13.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:16.853145 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:26:17.193502 0.019627 udp 10.0.2.104 54523 <-> 5.146.147.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:18.185649 0.049817 udp 10.0.2.104 54523 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:19.187016 0.170650 udp 10.0.2.104 54523 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:20.188362 0.000000 udp 10.0.2.104 54523 -> 82.85.60.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:21.189385 0.146095 udp 10.0.2.104 54523 <-> 67.242.84.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:22.190994 0.044230 udp 10.0.2.104 54523 <-> 178.148.77.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:23.192774 0.250573 udp 10.0.2.104 54523 <-> 143.107.215.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:24.193862 0.000000 udp 10.0.2.104 54523 -> 5.15.146.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:25.185484 0.142331 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:26.186791 0.417349 udp 10.0.2.104 54523 <-> 27.2.150.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:27.188426 0.000000 udp 10.0.2.104 54523 -> 27.3.107.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:28.189937 0.296570 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:29.191423 0.057696 udp 10.0.2.104 54523 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:30.192616 0.175186 udp 10.0.2.104 54523 <-> 173.23.208.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:31.193809 0.136204 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:32.185227 0.206424 udp 10.0.2.104 54523 <-> 50.26.127.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:33.187126 4.005416 udp 10.0.2.104 54523 -> 115.250.37.162 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:34.188098 0.133437 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:35.189905 0.000000 udp 10.0.2.104 54523 -> 86.121.18.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:36.191321 0.005680 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:38.194122 0.324471 udp 10.0.2.104 54523 <-> 1.34.204.71 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:39.185394 0.054378 udp 10.0.2.104 54523 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:40.187219 0.089890 udp 10.0.2.104 54523 <-> 91.120.99.47 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:41.188721 0.133204 udp 10.0.2.104 54523 <-> 82.53.102.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:42.189503 3.153548 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:43.191813 0.000000 udp 10.0.2.104 54523 -> 115.240.63.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:44.193030 0.157386 udp 10.0.2.104 54523 <-> 27.106.76.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:46.185502 0.000000 udp 10.0.2.104 54523 -> 83.41.35.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:47.187186 2.144542 udp 10.0.2.104 54523 <-> 24.164.171.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:48.188648 0.162684 udp 10.0.2.104 54523 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:50.191628 0.103650 udp 10.0.2.104 54523 <-> 79.179.19.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:51.193007 0.000000 udp 10.0.2.104 54523 -> 79.117.217.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:52.194412 0.310285 udp 10.0.2.104 54523 <-> 218.220.129.199 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:53.185449 0.301482 udp 10.0.2.104 54523 <-> 62.177.243.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:54.187258 0.069319 udp 10.0.2.104 54523 <-> 109.110.18.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:55.188521 0.134430 udp 10.0.2.104 54523 <-> 74.89.59.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:56.189931 0.343167 udp 10.0.2.104 54523 <-> 219.174.52.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:57.191728 0.166232 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:26:58.202856 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:26:59.213925 0.000000 udp 10.0.2.104 54523 -> 213.87.121.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:00.205948 0.000000 udp 10.0.2.104 54523 -> 31.18.28.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:01.206952 0.058511 udp 10.0.2.104 54523 <-> 82.228.128.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:02.208553 0.164371 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:03.210286 0.201618 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:03.881088 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:27:04.221161 0.156745 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:05.223136 0.119394 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:06.224522 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:07.216021 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:08.217275 0.144328 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:09.218549 0.041549 udp 10.0.2.104 54523 <-> 213.231.137.6 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:10.219873 0.039634 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:11.221400 0.315154 udp 10.0.2.104 54523 <-> 118.43.169.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:12.222945 2.135349 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:13.224650 4.258446 udp 10.0.2.104 54523 <-> 181.166.240.133 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:15.217221 0.141550 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:16.219115 0.153764 udp 10.0.2.104 54523 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:18.221885 2.046632 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:19.223277 0.000000 udp 10.0.2.104 54523 -> 115.241.27.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:21.216094 0.000000 udp 10.0.2.104 54523 -> 94.190.190.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:22.217085 0.104591 udp 10.0.2.104 54523 <-> 90.129.86.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:23.218965 0.000000 udp 10.0.2.104 54523 -> 14.99.37.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:24.220704 0.000000 udp 10.0.2.104 54523 -> 192.168.1.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:25.222040 0.000000 udp 10.0.2.104 54523 -> 109.182.53.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:26.223620 0.000000 udp 10.0.2.104 54523 -> 115.241.27.7 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:27.224886 0.058706 udp 10.0.2.104 54523 <-> 89.32.153.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:28.215968 0.044065 udp 10.0.2.104 54523 <-> 147.156.232.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:29.217094 0.294190 udp 10.0.2.104 54523 <-> 125.4.21.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:30.218735 0.093058 udp 10.0.2.104 54523 <-> 90.129.86.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:31.220266 0.000000 udp 10.0.2.104 54523 -> 109.182.53.22 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:32.221550 0.000000 udp 10.0.2.104 54523 -> 112.119.99.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:33.222860 0.000000 udp 10.0.2.104 54523 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:34.224510 0.208147 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:35.215714 0.000000 udp 10.0.2.104 54523 -> 94.87.89.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:36.217302 0.140227 udp 10.0.2.104 54523 <-> 75.99.213.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:37.218732 0.046153 udp 10.0.2.104 54523 <-> 83.141.175.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:38.220504 0.000000 udp 10.0.2.104 54523 -> 5.15.233.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:39.222051 0.353886 udp 10.0.2.104 54523 <-> 1.173.194.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:40.223322 0.291691 udp 10.0.2.104 54523 <-> 218.220.129.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:41.225060 0.039544 udp 10.0.2.104 54523 <-> 79.171.124.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:42.215882 0.000000 udp 10.0.2.104 54523 -> 151.233.128.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:43.217816 0.080915 udp 10.0.2.104 54523 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:44.219266 0.440894 udp 10.0.2.104 54523 <-> 220.120.63.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:45.220424 0.312494 udp 10.0.2.104 54523 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:46.222206 0.111278 udp 10.0.2.104 54523 <-> 146.115.58.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:47.223014 0.139594 udp 10.0.2.104 54523 <-> 24.151.86.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:48.224401 0.284704 udp 10.0.2.104 54523 <-> 201.92.116.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:49.216296 0.320060 udp 10.0.2.104 54523 <-> 125.133.16.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:50.217349 0.143107 udp 10.0.2.104 54523 <-> 184.160.62.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:50.878880 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:27:51.218930 0.054499 udp 10.0.2.104 54523 <-> 89.216.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:52.220893 0.000000 udp 10.0.2.104 54523 -> 83.49.162.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:53.222242 0.358685 udp 10.0.2.104 54523 <-> 36.232.196.61 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:54.223179 0.000000 udp 10.0.2.104 54523 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:55.225082 0.345645 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:56.216516 0.022580 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:57.217365 0.044129 udp 10.0.2.104 54523 <-> 89.216.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:27:58.219333 0.000000 udp 10.0.2.104 54523 -> 93.41.49.0 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:27:59.220259 0.000000 udp 10.0.2.104 54523 -> 62.18.205.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:00.222082 2.062280 udp 10.0.2.104 54523 <-> 84.120.186.165 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:01.223274 0.000000 udp 10.0.2.104 54523 -> 122.149.39.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:03.216212 0.159801 udp 10.0.2.104 54523 <-> 69.137.7.210 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:04.217981 0.070862 udp 10.0.2.104 54523 <-> 83.97.251.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:05.219035 0.153576 udp 10.0.2.104 54523 <-> 67.242.194.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:06.220887 0.092761 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:07.222179 0.026872 udp 10.0.2.104 54523 <-> 213.222.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:08.223386 0.161919 udp 10.0.2.104 54523 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:09.214970 0.164195 udp 10.0.2.104 54523 <-> 68.226.220.74 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:10.216398 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:11.217682 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:12.219247 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:13.220465 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:14.222237 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:15.223553 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:16.215059 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:17.216442 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:18.218151 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:19.219480 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:20.220410 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:21.222368 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:22.223424 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:23.215292 0.000000 udp 10.0.2.104 54523 -> 79.113.161.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:24.216566 0.129675 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:25.218272 0.134567 udp 10.0.2.104 54523 <-> 68.194.2.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:26.219132 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:27.221005 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:28.222350 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:29.224020 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:30.214760 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:31.216414 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:32.217818 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:33.219777 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:34.220542 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:35.222339 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:36.223991 0.279023 udp 10.0.2.104 54523 <-> 113.193.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:37.215190 0.051709 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:37.876040 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:28:38.216980 0.000000 udp 10.0.2.104 54523 -> 219.205.248.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:39.218027 0.382748 udp 10.0.2.104 54523 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:40.219669 0.025244 udp 10.0.2.104 54523 <-> 213.222.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:41.221229 0.187004 udp 10.0.2.104 54523 <-> 68.7.210.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:41.423360 3.002482 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:28:42.222422 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:43.223915 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:44.215571 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:45.216686 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:46.218281 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:47.219327 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:48.221363 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:48.221412 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:28:48.431613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:28:49.222307 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:50.224404 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:51.215414 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:52.216990 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:54.219801 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:55.221222 0.265991 udp 10.0.2.104 54523 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:56.222791 0.000000 udp 10.0.2.104 54523 -> 98.243.238.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:28:56.432776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:28:57.223802 0.325349 udp 10.0.2.104 54523 <-> 114.40.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:58.215028 0.349820 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:28:59.216701 0.060463 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:00.218526 0.000000 udp 10.0.2.104 54523 -> 83.230.237.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:01.220014 0.093832 udp 10.0.2.104 54523 <-> 188.97.116.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:02.221386 0.065575 udp 10.0.2.104 54523 <-> 84.120.113.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:03.222916 1.155963 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:05.215366 0.317447 udp 10.0.2.104 54523 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:06.216903 0.047681 udp 10.0.2.104 54523 <-> 150.214.29.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:07.218063 0.062538 udp 10.0.2.104 54523 <-> 79.114.63.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:08.219462 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:09.221505 0.000083 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:09.221588 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:29:10.222864 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:11.224558 0.350005 udp 10.0.2.104 54523 <-> 1.172.69.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:12.215183 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:12.436275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:29:13.217092 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:14.218294 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:16.221717 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:17.223125 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:18.224138 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:19.216007 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:20.216895 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:21.218270 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:22.220002 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:22.220110 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:29:23.221450 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:24.222919 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:24.873576 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:29:25.223921 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:26.215467 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:27.216770 0.000000 udp 10.0.2.104 54523 -> 1.172.69.226 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:28.218292 0.350422 udp 10.0.2.104 54523 <-> 106.1.36.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:29.220312 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:30.221352 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:31.222937 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:32.224506 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:33.215455 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:35.218751 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:36.219850 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:37.221234 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:38.223109 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:38.223169 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:29:39.224441 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:40.216153 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:41.217433 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:42.218413 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:43.219737 0.349937 udp 10.0.2.104 54523 <-> 1.172.69.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:29:44.221745 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:44.442148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:29:45.222982 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:46.224542 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:47.216131 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:48.217213 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:50.220146 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:51.221429 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:52.223214 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:53.224632 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:54.216135 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:55.217760 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:56.218507 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:57.219961 0.000086 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:57.220047 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:29:58.221949 4.996711 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:29:59.223675 0.349495 udp 10.0.2.104 54523 <-> 106.1.36.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:00.224178 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:01.216408 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:02.217240 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:04.220071 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:05.221377 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:06.223364 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:07.224807 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:08.216256 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:09.217415 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:10.219310 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:11.220256 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:11.881399 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:30:12.221824 0.000137 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:12.221961 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:30:13.223564 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:15.215735 0.141156 udp 10.0.2.104 54523 <-> 24.182.94.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:16.217318 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:17.219226 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:18.220281 0.000171 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:18.220452 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:30:19.221716 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:20.223073 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:21.224578 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:22.216507 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:23.217761 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:24.219173 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:25.220560 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:26.221811 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:27.223290 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:28.224948 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:29.216256 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:30.217451 0.350018 udp 10.0.2.104 54523 <-> 1.172.69.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:31.219149 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:32.220472 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:33.222096 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:34.223095 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:35.214596 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:36.216566 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:37.217546 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:38.218896 0.349902 udp 10.0.2.104 54523 <-> 1.172.69.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:39.220406 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:40.222165 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:41.223778 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:42.214899 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:43.216528 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:44.217878 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:45.219196 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:46.220285 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:47.221781 0.350227 udp 10.0.2.104 54523 <-> 1.172.69.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:48.223585 0.154597 udp 10.0.2.104 54523 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:49.214860 0.186796 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:50.216211 0.117933 udp 10.0.2.104 54523 <-> 70.160.231.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:51.217559 0.318876 udp 10.0.2.104 54523 <-> 58.64.126.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:52.219004 0.717605 udp 10.0.2.104 54523 <-> 117.207.62.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:53.220456 0.000000 udp 10.0.2.104 54523 -> 213.87.121.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:30:54.222205 0.053541 udp 10.0.2.104 54523 <-> 94.72.125.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:55.223515 0.293945 udp 10.0.2.104 54523 <-> 187.39.52.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:56.215267 0.564762 udp 10.0.2.104 54523 <-> 117.214.156.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:57.216437 0.215975 udp 10.0.2.104 54523 <-> 1.23.142.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:58.218066 0.309052 udp 10.0.2.104 54523 <-> 221.121.174.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:30:58.878895 0.000126 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:30:59.219140 0.556086 udp 10.0.2.104 54523 <-> 200.84.242.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:00.221085 0.060996 udp 10.0.2.104 54523 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:01.221910 0.477872 udp 10.0.2.104 54523 <-> 187.26.47.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:02.224179 0.056105 udp 10.0.2.104 54523 <-> 94.253.87.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:03.214776 0.056305 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:04.216416 0.199887 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:05.217855 0.155930 udp 10.0.2.104 54523 <-> 76.188.9.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:06.219375 0.047371 udp 10.0.2.104 54523 <-> 79.173.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:07.221106 0.000000 udp 10.0.2.104 54523 -> 90.227.35.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:08.222289 0.000000 udp 10.0.2.104 54523 -> 77.231.80.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:09.223792 0.042179 udp 10.0.2.104 54523 <-> 82.22.227.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:10.214812 0.137456 udp 10.0.2.104 54523 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:11.216414 0.049376 udp 10.0.2.104 54523 <-> 5.14.212.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:12.218047 0.093216 udp 10.0.2.104 54523 <-> 79.2.146.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:13.219237 1.829931 udp 10.0.2.104 54523 <-> 89.228.127.108 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:15.222678 0.117582 udp 10.0.2.104 54523 <-> 62.10.137.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:16.223498 2.805942 udp 10.0.2.104 54523 <-> 89.29.148.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:17.214907 0.293688 udp 10.0.2.104 54523 <-> 187.41.78.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:18.216945 0.048439 udp 10.0.2.104 54523 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:19.218028 0.241166 udp 10.0.2.104 54523 <-> 98.155.248.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:20.219652 0.175749 udp 10.0.2.104 54523 <-> 68.207.191.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:21.220916 0.058339 udp 10.0.2.104 54523 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:22.222568 0.000000 udp 10.0.2.104 54523 -> 14.96.188.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:23.224132 0.079786 udp 10.0.2.104 54523 <-> 83.228.41.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:24.215472 0.151876 udp 10.0.2.104 54523 <-> 68.194.18.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:25.216520 0.168045 udp 10.0.2.104 54523 <-> 2.180.111.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:26.218061 0.000000 udp 10.0.2.104 54523 -> 83.230.237.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:27.219438 4.997280 udp 10.0.2.104 54523 <-> 78.218.21.46 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:28.220775 0.000000 udp 10.0.2.104 54523 -> 70.68.49.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:29.222306 0.146059 udp 10.0.2.104 54523 <-> 70.83.217.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:30.223737 0.192687 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:31.215376 0.047716 udp 10.0.2.104 54523 <-> 88.196.202.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:32.573886 0.000000 udp 10.0.2.104 54523 <- 78.218.21.46 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:33.217886 0.616860 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:34.219436 0.000000 udp 10.0.2.104 54523 -> 83.230.237.18 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:35.221339 0.303848 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:36.222927 0.000000 udp 10.0.2.104 54523 -> 81.215.161.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:37.224409 0.080729 udp 10.0.2.104 54523 <-> 78.58.198.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:38.215439 0.000000 udp 10.0.2.104 54523 -> 213.91.147.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:39.217035 4.417912 udp 10.0.2.104 54523 -> 79.107.170.44 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:31:43.634947 0.000000 icmp 79.107.170.44 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:31:40.218124 0.395194 udp 10.0.2.104 54523 <-> 78.218.21.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:41.219724 0.186967 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:42.221675 0.058918 udp 10.0.2.104 54523 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:44.224448 0.175744 udp 10.0.2.104 54523 <-> 128.218.187.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:45.215349 0.200075 udp 10.0.2.104 54523 <-> 75.95.31.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:45.876048 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:31:46.217187 0.148834 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:47.218197 0.174476 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:48.219634 0.269118 udp 10.0.2.104 54523 <-> 117.222.179.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:49.220968 0.094055 udp 10.0.2.104 54523 <-> 88.169.45.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:50.222793 0.051606 udp 10.0.2.104 54523 <-> 89.34.99.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:51.224197 0.156117 udp 10.0.2.104 54523 <-> 68.56.123.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:52.215789 0.038644 udp 10.0.2.104 54523 <-> 46.239.115.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:53.217118 0.027508 udp 10.0.2.104 54523 <-> 78.83.60.121 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:54.218103 0.069583 udp 10.0.2.104 54523 <-> 79.97.4.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:55.219770 0.055387 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:56.221481 2.330739 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:57.222529 0.153475 udp 10.0.2.104 54523 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:31:59.215324 0.517689 udp 10.0.2.104 54523 <-> 111.249.6.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:00.217230 0.134904 udp 10.0.2.104 54523 <-> 24.164.171.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:01.218172 0.069571 udp 10.0.2.104 54523 <-> 83.213.199.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:02.219723 0.242011 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:03.221801 0.184034 udp 10.0.2.104 54523 <-> 31.147.146.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:04.223198 0.014839 udp 10.0.2.104 54523 <-> 5.146.59.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:05.224404 0.000000 udp 10.0.2.104 54523 -> 115.240.75.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:06.215397 0.060887 udp 10.0.2.104 54523 <-> 194.140.132.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:07.217321 0.133064 udp 10.0.2.104 54523 <-> 62.117.137.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:08.218419 0.356671 udp 10.0.2.104 54523 <-> 68.59.72.41 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:09.220065 0.198221 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:10.221588 0.038916 udp 10.0.2.104 54523 <-> 188.24.75.70 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:11.222843 0.350101 udp 10.0.2.104 54523 <-> 61.207.180.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:12.224448 0.000000 udp 10.0.2.104 54523 -> 86.121.41.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:13.216346 0.000000 udp 10.0.2.104 54523 -> 2.28.17.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:14.217380 0.046444 udp 10.0.2.104 54523 <-> 80.80.41.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:15.218817 0.392834 udp 10.0.2.104 54523 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:16.219918 0.000000 udp 10.0.2.104 54523 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:17.221773 0.000000 udp 10.0.2.104 54523 -> 125.173.214.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:18.222979 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:19.224415 0.000000 udp 10.0.2.104 54523 -> 188.9.44.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:20.216036 0.000000 udp 10.0.2.104 54523 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:21.216911 0.000000 udp 10.0.2.104 54523 -> 182.237.168.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:22.218476 0.321358 udp 10.0.2.104 54523 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:23.220098 0.160751 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:24.221549 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:25.222778 0.000097 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:25.222875 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:32:26.224604 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:27.215559 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:28.217150 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:29.218843 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:30.220443 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:31.221722 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:32.222920 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:32.873763 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:32:33.224786 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:34.215877 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:35.217298 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:36.218798 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:37.220359 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:38.221825 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:39.222842 0.143041 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:40.224690 0.038416 udp 10.0.2.104 54523 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:41.215726 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:42.217452 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:43.218995 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:44.220578 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:45.221749 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:47.225034 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:48.215786 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:49.217609 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:50.219345 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:51.220186 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:52.221952 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:53.223384 2.993921 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:53.223626 2.993679 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 01:32:54.224413 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:55.215895 0.407089 udp 10.0.2.104 54523 <-> 201.93.194.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:32:57.219349 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:58.220195 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:32:59.221746 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:00.223469 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:01.224831 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:02.216161 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:03.217435 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:04.218961 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:05.220192 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:06.222120 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:07.223724 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:08.214975 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:09.216243 3.004871 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:10.217421 0.119293 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:11.219434 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:13.221700 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:14.223770 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:15.215104 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:16.216541 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:17.217725 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:19.220929 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:19.881726 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:33:20.222009 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:21.223531 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:22.215089 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:23.216309 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:24.217567 0.000090 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:24.217657 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:33:25.219529 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:26.221010 0.000000 udp 10.0.2.104 54523 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:27.222307 4.997317 udp 10.0.2.104 54523 <-> 82.17.168.108 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:28.223672 0.154020 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:29.214857 0.353830 udp 10.0.2.104 54523 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:30.216205 0.123174 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:31.217641 0.667482 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:32.265684 0.000000 udp 10.0.2.104 54523 <- 82.17.168.108 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:33.220703 0.000000 udp 10.0.2.104 54523 -> 74.56.6.140 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:34.222029 0.068109 udp 10.0.2.104 54523 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:35.223425 4.077776 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:36.215379 1.027305 udp 10.0.2.104 54523 <-> 95.49.101.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:37.216282 0.000000 udp 10.0.2.104 54523 -> 92.247.198.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:38.218362 0.706327 udp 10.0.2.104 54523 <-> 187.52.83.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:40.220749 0.506777 udp 10.0.2.104 54523 <-> 117.208.11.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:41.222156 0.049758 udp 10.0.2.104 54523 <-> 5.14.145.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:42.223624 1.146482 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:44.216749 0.095714 udp 10.0.2.104 54523 <-> 46.159.185.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:45.218041 0.137582 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:46.219181 0.064191 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:47.220605 0.222147 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:48.222807 0.121414 udp 10.0.2.104 54523 <-> 90.157.111.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:49.223709 0.163064 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:50.215214 0.000000 udp 10.0.2.104 54523 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:51.216645 0.071207 udp 10.0.2.104 54523 <-> 78.251.28.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:52.218024 2.032268 udp 10.0.2.104 54523 <-> 111.92.102.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:53.219357 0.000000 udp 10.0.2.104 54523 -> 94.228.236.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:33:54.220840 0.256419 udp 10.0.2.104 54523 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:55.222352 0.015396 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:56.224270 0.041249 udp 10.0.2.104 54523 <-> 80.238.103.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:57.214927 0.154907 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:58.216692 0.011561 udp 10.0.2.104 54523 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:33:59.217942 0.304237 udp 10.0.2.104 54523 <-> 111.232.197.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:00.219299 0.121290 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:01.221168 0.168994 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:02.222660 0.000000 udp 10.0.2.104 54523 -> 77.77.128.207 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:03.223725 0.193366 udp 10.0.2.104 54523 <-> 94.191.227.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:04.215439 0.167667 udp 10.0.2.104 54523 <-> 84.225.224.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:05.216470 0.471963 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:06.218499 0.344134 udp 10.0.2.104 54523 <-> 49.158.158.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:06.879670 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:34:07.219424 0.099278 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:08.221059 0.408269 udp 10.0.2.104 54523 <-> 79.12.88.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:09.222499 0.192166 udp 10.0.2.104 54523 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:10.223957 0.204436 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:11.215653 0.000000 udp 10.0.2.104 54523 -> 112.201.169.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:12.216934 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:13.218079 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:14.219939 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:15.220953 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:16.222387 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:17.223998 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:18.215746 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:19.217296 0.027831 udp 10.0.2.104 54523 <-> 80.218.193.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:20.218091 0.013559 udp 10.0.2.104 54523 <-> 94.113.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:21.219768 3.004012 udp 10.0.2.104 54523 <-> 82.132.101.37 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:22.221481 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:23.222734 2.162258 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:26.218502 0.000000 udp 10.0.2.104 54523 -> 95.111.109.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:27.218599 0.047714 udp 10.0.2.104 54523 <-> 150.214.103.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:28.219745 4.166758 udp 10.0.2.104 54523 <-> 2.193.204.236 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:29.220936 0.000000 udp 10.0.2.104 54523 -> 79.180.98.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:30.222906 1.206743 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:33.217486 0.000000 udp 10.0.2.104 54523 -> 117.200.12.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:34.218851 0.060326 udp 10.0.2.104 54523 <-> 86.126.2.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:35.220061 0.132703 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:36.221262 0.039128 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:37.222635 0.225580 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:38.224022 0.000000 udp 10.0.2.104 54523 -> 85.156.60.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:39.215688 0.030585 udp 10.0.2.104 54523 <-> 78.90.170.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:40.217207 0.194990 udp 10.0.2.104 54523 <-> 208.104.153.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:41.218790 0.057040 udp 10.0.2.104 54523 <-> 79.117.168.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:42.220104 0.074030 udp 10.0.2.104 54523 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:43.221134 0.201193 udp 10.0.2.104 54523 <-> 124.123.223.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:44.222851 0.099068 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:45.224106 0.388174 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:46.216276 0.154659 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:47.217225 0.118271 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:48.218890 0.354644 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:49.219974 0.149890 udp 10.0.2.104 54523 <-> 161.6.244.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:50.221152 0.360022 udp 10.0.2.104 54523 <-> 122.106.10.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:51.223309 0.034109 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:52.224676 0.000000 udp 10.0.2.104 54523 -> 114.40.221.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:53.216068 0.104546 udp 10.0.2.104 54523 -> 79.148.108.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:53.320614 0.000000 icmp 79.148.108.3 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:34:53.876517 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:34:54.216879 0.122066 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:55.218616 2.771087 udp 10.0.2.104 54523 <-> 213.87.121.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:56.220026 0.132820 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:57.221586 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:34:58.223318 0.362300 udp 10.0.2.104 54523 <-> 61.227.54.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:34:59.224278 0.307875 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:00.215586 0.000000 udp 10.0.2.104 54523 -> 81.37.229.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:01.217216 0.038902 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:02.218599 0.042336 udp 10.0.2.104 54523 <-> 84.0.176.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:03.220272 0.073836 udp 10.0.2.104 54523 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:04.222034 0.000000 udp 10.0.2.104 54523 -> 124.125.44.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:05.222852 0.167249 udp 10.0.2.104 54523 <-> 70.178.41.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:06.224608 0.192392 udp 10.0.2.104 54523 <-> 68.107.129.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:07.216159 0.035477 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:08.217208 0.128470 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:09.218483 0.027055 udp 10.0.2.104 54523 <-> 80.98.70.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:10.220594 0.358745 udp 10.0.2.104 54523 <-> 140.127.62.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:11.221446 0.062700 udp 10.0.2.104 54523 <-> 79.112.23.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:12.222920 0.000000 udp 10.0.2.104 54523 -> 219.44.252.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:13.224393 0.133241 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:14.215931 0.124716 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:15.217454 0.000000 udp 10.0.2.104 54523 -> 122.164.110.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:16.289081 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:17.290264 0.355559 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:18.291917 0.223170 udp 10.0.2.104 54523 <-> 190.204.81.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:19.293100 0.055153 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:20.294398 0.000000 udp 10.0.2.104 54523 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:21.286040 0.000000 udp 10.0.2.104 54523 -> 94.228.236.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:22.287275 0.987184 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:23.289265 0.165357 udp 10.0.2.104 54523 <-> 108.183.69.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:24.290501 0.000000 udp 10.0.2.104 54523 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:25.292210 0.201427 udp 10.0.2.104 54523 <-> 111.119.254.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:26.293299 0.032797 udp 10.0.2.104 54523 <-> 195.14.221.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:27.294964 0.164876 udp 10.0.2.104 54523 <-> 108.183.125.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:28.286537 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:29.288014 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:30.289482 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:31.290304 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:32.292359 0.182289 udp 10.0.2.104 54523 <-> 103.250.147.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:33.293620 0.000000 udp 10.0.2.104 54523 -> 114.129.167.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:34.294746 0.161042 udp 10.0.2.104 54523 <-> 69.73.42.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:35.286260 0.153120 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:36.288052 0.367863 udp 10.0.2.104 54523 <-> 114.47.92.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:37.288944 0.355816 udp 10.0.2.104 54523 <-> 39.117.105.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:38.290432 0.167011 udp 10.0.2.104 54523 <-> 72.23.77.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:39.292316 0.346711 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:40.293514 0.159549 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:40.944306 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:35:41.284887 0.167603 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:42.286338 0.000000 udp 10.0.2.104 54523 -> 14.207.72.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:43.288111 0.000000 udp 10.0.2.104 54523 -> 95.230.42.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:44.289507 0.200133 udp 10.0.2.104 54523 <-> 200.75.192.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:45.290439 1.032490 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:47.293325 0.000000 udp 10.0.2.104 54523 -> 98.194.123.59 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:48.285019 0.000000 udp 10.0.2.104 54523 -> 209.169.143.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:48.517550 3.001782 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:35:49.286355 0.158082 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:50.288100 0.373553 udp 10.0.2.104 54523 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:51.289194 0.137703 udp 10.0.2.104 54523 <-> 31.18.241.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:52.290891 3.995775 udp 10.0.2.104 54523 -> 188.253.245.53 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:53.292194 2.132271 udp 10.0.2.104 54523 <-> 23.28.66.127 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:55.525716 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:35:57.287680 0.341092 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:35:58.289249 0.000000 udp 10.0.2.104 54523 -> 31.18.241.48 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:35:59.290963 0.160056 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:00.292000 0.385028 udp 10.0.2.104 54523 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:01.293326 0.165465 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:02.284981 0.027691 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:03.286885 0.000000 udp 10.0.2.104 54523 -> 70.90.50.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:03.526589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:36:04.287920 0.153110 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:05.289261 0.156069 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:06.291152 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:07.292047 0.139880 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:08.293463 0.214462 udp 10.0.2.104 54523 <-> 49.204.218.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:09.285361 0.150364 udp 10.0.2.104 54523 <-> 74.221.196.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:10.286617 4.153814 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:11.287906 0.153168 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:12.289833 0.062440 udp 10.0.2.104 54523 <-> 92.36.233.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:13.290591 0.049732 udp 10.0.2.104 54523 <-> 5.14.43.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:15.293639 0.666103 udp 10.0.2.104 54523 <-> 116.203.105.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:16.285333 0.048796 udp 10.0.2.104 54523 <-> 212.80.54.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:17.286831 0.321132 udp 10.0.2.104 54523 <-> 119.207.19.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:18.288279 0.377977 udp 10.0.2.104 54523 <-> 61.227.65.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:19.289307 0.516472 udp 10.0.2.104 54523 <-> 190.179.130.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:19.530159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:36:20.290896 0.000000 udp 10.0.2.104 54523 -> 190.0.3.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:21.292904 0.315359 udp 10.0.2.104 54523 <-> 183.100.235.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:22.294059 0.151644 udp 10.0.2.104 54523 <-> 24.231.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:23.285266 0.149249 udp 10.0.2.104 54523 <-> 65.27.248.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:24.286415 0.206771 udp 10.0.2.104 54523 <-> 27.106.20.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:25.288576 0.000000 udp 10.0.2.104 54523 -> 180.220.28.183 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:26.289458 0.153371 udp 10.0.2.104 54523 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:27.290830 0.686687 udp 10.0.2.104 54523 <-> 70.184.95.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:27.951901 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:36:28.292381 0.144578 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:29.294147 0.000000 udp 10.0.2.104 54523 -> 108.204.224.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:30.285014 0.385185 udp 10.0.2.104 54523 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:31.286722 0.052351 udp 10.0.2.104 54523 <-> 79.114.24.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:32.287914 0.165178 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:33.289340 0.207558 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:34.291467 0.134023 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:35.292618 0.056473 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:36.293888 0.168763 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:37.285756 0.038915 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:38.286565 0.015062 udp 10.0.2.104 54523 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:40.289925 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:41.291255 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:41.291301 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:36:42.292780 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:43.294492 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:44.285950 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:45.286962 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:46.288496 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:47.290115 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:48.290928 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:49.002763 0.012224 udp 10.0.2.104 54529 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 01:36:49.015267 0.000000 udp 10.0.2.104 54530 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:49.292672 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:50.294315 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:51.285860 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:51.536187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:36:52.286943 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:53.288763 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:54.289885 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:55.291525 0.368192 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:56.292991 0.155025 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:36:57.294364 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:36:58.285412 1.049695 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:00.288529 0.332547 udp 10.0.2.104 54523 <-> 203.202.216.17 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:01.290370 0.055234 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:03.293250 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:04.294339 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:05.285884 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:06.287000 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:07.288909 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:08.289806 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:09.291660 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:09.291720 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:37:10.293193 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:11.294466 0.048450 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:12.285790 0.000000 udp 10.0.2.104 54523 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:13.286912 0.028903 udp 10.0.2.104 54523 <-> 89.142.152.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:14.288870 2.331030 udp 10.0.2.104 54523 <-> 188.6.67.253 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:14.949566 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:37:15.290024 0.050205 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:17.293298 0.055305 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:18.294375 0.000000 udp 10.0.2.104 54523 -> 177.149.127.27 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:19.285816 0.048483 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:20.287508 0.297973 udp 10.0.2.104 54523 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:21.288956 1.469116 udp 10.0.2.104 54523 <-> 24.232.160.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:22.290101 0.399823 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:23.291815 0.063027 udp 10.0.2.104 54523 <-> 109.60.87.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:24.293220 0.000000 udp 10.0.2.104 54523 -> 89.34.99.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:25.294232 0.031578 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:26.285696 0.000000 udp 10.0.2.104 54523 -> 14.98.243.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:27.287363 0.165707 udp 10.0.2.104 54523 <-> 209.33.13.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:28.288600 0.169370 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:29.290519 4.996762 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:30.291401 0.294510 udp 10.0.2.104 54523 <-> 118.20.34.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:31.293078 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:32.294717 0.000000 udp 10.0.2.104 54523 -> 95.17.159.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:33.286022 0.000000 udp 10.0.2.104 54523 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:34.413533 0.000000 udp 10.0.2.104 54523 <- 50.70.157.3 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:35.289184 0.169602 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:36.290196 0.000105 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:36.290301 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:37:37.291771 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:38.292938 0.000000 udp 10.0.2.104 54523 -> 50.26.127.53 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:39.294468 0.341618 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:40.286355 0.113791 udp 10.0.2.104 54523 <-> 24.254.149.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:41.287634 0.162710 udp 10.0.2.104 54523 <-> 111.119.254.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:42.289120 3.086045 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:43.290557 0.527727 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:46.294707 0.000000 udp 10.0.2.104 54523 -> 217.114.188.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:47.285832 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:48.287339 0.079665 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:49.289195 0.346423 udp 10.0.2.104 54523 <-> 14.99.96.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:50.290299 0.081196 udp 10.0.2.104 54523 <-> 78.84.18.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:51.291790 4.996935 udp 10.0.2.104 54523 <-> 97.89.76.203 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:52.292981 0.196562 udp 10.0.2.104 54523 <-> 77.77.128.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:53.294567 0.310569 udp 10.0.2.104 54523 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:54.286137 0.000000 udp 10.0.2.104 54523 -> 36.2.47.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:55.287924 2.050514 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:37:58.292181 0.000000 udp 10.0.2.104 54523 -> 62.57.201.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:37:59.293233 0.000000 udp 10.0.2.104 54523 -> 36.2.47.13 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:00.294462 0.309435 udp 10.0.2.104 54523 <-> 218.153.252.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:01.286457 0.748916 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:01.947312 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:38:02.287355 0.000000 udp 10.0.2.104 54523 -> 94.228.236.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:03.289080 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:04.290402 1.360097 udp 10.0.2.104 54523 <-> 14.99.96.126 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:06.293521 0.051222 udp 10.0.2.104 54523 <-> 81.225.87.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:07.294791 0.055966 udp 10.0.2.104 54523 <-> 81.230.67.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:08.286702 0.000000 udp 10.0.2.104 54523 -> 24.177.207.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:09.287384 0.159755 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:10.289095 0.142598 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:11.290823 0.219356 udp 10.0.2.104 54523 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:12.292373 0.054274 udp 10.0.2.104 54523 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:13.293106 4.997185 udp 10.0.2.104 54523 -> 46.27.212.228 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:14.285428 0.138509 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:15.286174 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:16.287870 0.088472 udp 10.0.2.104 54523 <-> 178.172.245.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:17.289390 0.344831 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:19.292202 0.308287 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:20.293190 0.000000 udp 10.0.2.104 54523 -> 46.27.212.228 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:21.285168 0.000000 udp 10.0.2.104 54523 -> 122.100.81.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:22.286432 2.003092 udp 10.0.2.104 54523 <-> 31.18.241.48 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:23.288210 0.304473 udp 10.0.2.104 54523 <-> 121.185.98.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:25.290668 1.900179 udp 10.0.2.104 54523 <-> 98.154.166.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:26.291868 2.994823 udp 10.0.2.104 54523 <-> 88.37.113.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:27.293550 0.152514 udp 10.0.2.104 54523 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:28.285181 0.000000 udp 10.0.2.104 54523 -> 77.184.160.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:30.288075 0.038954 udp 10.0.2.104 54523 <-> 130.204.99.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:31.289786 0.041705 udp 10.0.2.104 54523 <-> 147.156.82.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:32.290604 0.124989 udp 10.0.2.104 54523 <-> 84.122.212.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:33.292310 0.174586 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:34.293500 0.396215 udp 10.0.2.104 54523 <-> 27.3.114.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:35.285348 0.000000 udp 10.0.2.104 54523 -> 115.242.130.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:36.286423 1.408596 udp 10.0.2.104 54523 <-> 121.124.80.57 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:38.289103 1.389341 udp 10.0.2.104 54523 <-> 78.8.126.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:39.290920 0.086490 udp 10.0.2.104 54523 <-> 78.251.128.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:40.292431 0.492657 udp 10.0.2.104 54523 <-> 122.108.68.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:41.293472 0.063466 udp 10.0.2.104 54523 <-> 178.79.57.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:42.284924 0.207087 udp 10.0.2.104 54523 <-> 67.168.98.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:43.286252 0.369972 udp 10.0.2.104 54523 <-> 180.148.57.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:44.287702 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:45.289483 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:46.291263 0.053878 udp 10.0.2.104 54523 <-> 91.90.76.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:47.292518 0.094384 udp 10.0.2.104 54523 <-> 95.86.77.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:48.293857 0.000000 udp 10.0.2.104 54523 -> 76.97.226.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:48.945006 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:38:49.285316 0.061556 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:50.286563 1.284265 udp 10.0.2.104 54523 <-> 113.193.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:51.288102 0.000000 udp 10.0.2.104 54523 -> 175.139.128.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:38:52.289449 1.351379 udp 10.0.2.104 54523 <-> 122.100.81.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:54.292865 0.216026 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:55.293837 0.348672 udp 10.0.2.104 54523 <-> 222.166.66.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:56.285587 4.174819 udp 10.0.2.104 54523 <-> 67.11.181.155 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:57.286996 0.179827 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:38:59.289504 0.000000 udp 10.0.2.104 54523 -> 122.100.81.50 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:01.292293 0.000000 udp 10.0.2.104 54523 -> 151.73.78.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:02.294223 0.000000 udp 10.0.2.104 54523 -> 113.193.163.61 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:03.284997 0.000000 udp 10.0.2.104 54523 -> 175.139.128.48 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:04.287141 0.211338 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:05.288435 0.000000 udp 10.0.2.104 54523 -> 97.68.51.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:06.289765 0.051033 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:07.290770 0.133094 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:08.292690 0.114439 udp 10.0.2.104 54523 <-> 82.124.235.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:09.293905 1.164839 udp 10.0.2.104 54523 <-> 59.96.230.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:10.285044 0.000000 udp 10.0.2.104 54523 -> 184.167.18.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:11.287096 0.501702 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:12.288312 0.000000 udp 10.0.2.104 54523 -> 78.51.37.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:13.290060 0.217429 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:14.290994 0.000000 udp 10.0.2.104 54523 -> 180.215.118.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:15.292938 4.068645 udp 10.0.2.104 54523 <-> 176.8.141.175 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:16.293985 0.000000 udp 10.0.2.104 54523 -> 188.131.18.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:17.285287 0.220852 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:18.287253 0.000000 udp 10.0.2.104 54523 -> 27.3.220.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:20.289522 0.585862 udp 10.0.2.104 54523 <-> 117.204.151.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:21.291265 0.188206 udp 10.0.2.104 54523 <-> 64.147.212.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:22.292943 0.052464 udp 10.0.2.104 54523 <-> 147.163.71.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:23.294139 1.348574 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:25.287320 0.352764 udp 10.0.2.104 54523 <-> 211.14.251.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:26.288292 0.232927 udp 10.0.2.104 54523 <-> 117.222.105.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:27.289538 0.216358 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:28.291243 0.107121 udp 10.0.2.104 54523 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:29.292740 2.220569 udp 10.0.2.104 54523 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:30.294459 0.000000 udp 10.0.2.104 54523 -> 14.96.188.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:31.285914 0.139421 udp 10.0.2.104 54523 <-> 76.114.222.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:32.287184 1.329345 udp 10.0.2.104 54523 <-> 24.232.160.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:33.288523 0.357679 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:34.290054 0.356209 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:35.291214 0.000000 udp 10.0.2.104 54523 -> 188.34.37.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:35.952111 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:39:36.292980 0.162129 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:37.294845 0.000000 udp 10.0.2.104 54523 -> 94.52.120.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:38.285527 0.367089 udp 10.0.2.104 54523 <-> 121.125.114.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:39.287299 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:40.288922 0.073650 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:41.289972 0.497279 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:42.291904 0.366410 udp 10.0.2.104 54523 <-> 184.156.20.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:43.292820 0.000000 udp 10.0.2.104 54523 -> 71.82.221.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:44.294585 0.199888 udp 10.0.2.104 54523 <-> 123.238.137.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:45.285377 0.000000 udp 10.0.2.104 54523 -> 88.240.191.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:46.287298 0.187696 udp 10.0.2.104 54523 <-> 96.21.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:47.298790 0.000000 udp 10.0.2.104 54523 -> 109.54.98.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:48.300212 0.052545 udp 10.0.2.104 54523 <-> 147.163.71.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:49.301297 0.363463 udp 10.0.2.104 54523 <-> 220.96.116.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:50.303322 0.043207 udp 10.0.2.104 54523 <-> 178.148.128.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:51.304483 0.000000 udp 10.0.2.104 54523 -> 67.172.193.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:52.295799 4.006091 udp 10.0.2.104 54523 -> 80.171.87.95 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:53.297321 0.331230 udp 10.0.2.104 54523 <-> 111.253.130.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:54.298984 0.165195 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:55.299912 0.050190 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:57.303158 0.000000 udp 10.0.2.104 54523 -> 79.133.238.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:39:58.304734 1.747386 udp 10.0.2.104 54523 <-> 71.197.28.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:39:59.295734 0.025989 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:00.297501 0.139798 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:01.299104 0.319851 udp 10.0.2.104 54523 <-> 179.134.109.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:02.300023 0.296439 udp 10.0.2.104 54523 <-> 58.64.63.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:03.301755 4.221379 udp 10.0.2.104 54523 <-> 200.75.192.42 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:04.302743 0.142046 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:05.304719 0.013488 udp 10.0.2.104 54523 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:06.295981 0.000000 udp 10.0.2.104 54523 -> 180.215.70.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:08.298841 0.049325 udp 10.0.2.104 54523 <-> 5.14.121.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:09.300380 0.381462 udp 10.0.2.104 54523 <-> 114.39.184.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:10.302075 0.322205 udp 10.0.2.104 54523 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:11.303178 0.463902 udp 10.0.2.104 54523 <-> 219.109.128.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:12.304495 0.119580 udp 10.0.2.104 54523 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:13.296131 0.086193 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:14.297291 0.028193 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:15.299280 0.029819 udp 10.0.2.104 54523 <-> 213.240.213.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:16.300404 0.181553 udp 10.0.2.104 54523 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:17.301958 0.000000 udp 10.0.2.104 54523 -> 27.3.220.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:18.303357 0.309693 udp 10.0.2.104 54523 <-> 122.219.62.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:19.304703 0.325010 udp 10.0.2.104 54523 <-> 121.84.135.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:20.296159 0.037495 udp 10.0.2.104 54523 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:21.297304 0.148915 udp 10.0.2.104 54523 <-> 69.132.237.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:22.299089 0.165907 udp 10.0.2.104 54523 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:22.960190 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:40:23.300030 0.213817 udp 10.0.2.104 54523 <-> 190.77.25.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:24.302038 0.000000 udp 10.0.2.104 54523 -> 115.72.193.165 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:25.303345 0.058339 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:26.304921 0.165440 udp 10.0.2.104 54523 <-> 72.191.127.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:27.295823 1.309689 udp 10.0.2.104 54523 <-> 112.169.223.114 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:29.298996 0.327661 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:30.300334 0.254683 udp 10.0.2.104 54523 <-> 193.30.248.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:31.302043 2.163134 udp 10.0.2.104 54523 <-> 108.170.53.186 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:32.303526 0.000000 udp 10.0.2.104 54523 -> 116.14.234.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:34.296536 1.633599 udp 10.0.2.104 54523 <-> 189.54.80.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:35.298008 0.333698 udp 10.0.2.104 54523 <-> 202.78.81.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:36.298762 0.000000 udp 10.0.2.104 54523 -> 67.238.190.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:37.300843 0.044722 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:38.302342 0.286993 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:39.303250 0.084496 udp 10.0.2.104 54523 <-> 95.115.79.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:40.304731 0.382858 udp 10.0.2.104 54523 <-> 184.156.13.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:41.296123 0.067545 udp 10.0.2.104 54523 <-> 188.214.34.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:42.297888 0.164724 udp 10.0.2.104 54523 <-> 68.206.170.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:43.299160 0.155493 udp 10.0.2.104 54523 <-> 24.214.119.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:44.300737 3.082274 udp 10.0.2.104 54523 <-> 87.122.138.173 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:45.302468 0.000000 udp 10.0.2.104 54523 -> 14.97.245.217 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:46.303894 0.141047 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:48.296614 0.304628 udp 10.0.2.104 54523 <-> 79.9.45.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:49.297766 0.088871 udp 10.0.2.104 54523 <-> 95.155.30.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:50.299495 0.124138 udp 10.0.2.104 54523 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:51.300357 0.349918 udp 10.0.2.104 54523 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:52.302267 0.229402 udp 10.0.2.104 54523 <-> 190.77.25.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:53.303620 0.183179 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:40:54.295227 0.000000 udp 10.0.2.104 54523 -> 2.190.9.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:56.298077 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:56.298136 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:40:57.299296 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:58.300927 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:40:59.301904 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:00.303838 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:01.294770 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:02.296844 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:03.297560 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:04.298979 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:05.300628 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:06.301888 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:07.303552 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:08.294856 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:09.296547 4.005610 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:09.957441 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:41:10.298022 2.002854 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:11.299050 0.251755 udp 10.0.2.104 54523 <-> 173.121.93.1 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:14.303514 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:15.295490 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:16.296227 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:17.298275 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:18.299421 0.090522 udp 10.0.2.104 54523 <-> 82.130.204.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:19.301034 0.195874 udp 10.0.2.104 54523 <-> 103.250.188.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:20.302641 0.000000 udp 10.0.2.104 54523 -> 88.26.177.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:21.303871 0.369288 udp 10.0.2.104 54523 <-> 117.204.245.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:22.295019 0.043122 udp 10.0.2.104 54523 <-> 79.118.33.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:23.296547 0.000000 udp 10.0.2.104 54523 -> 1.23.142.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:24.297749 0.295309 udp 10.0.2.104 54523 <-> 123.237.188.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:26.300685 0.171896 udp 10.0.2.104 54523 <-> 183.87.170.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:27.302461 0.105913 udp 10.0.2.104 54523 <-> 85.84.94.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:28.303654 0.060798 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:29.295000 0.294951 udp 10.0.2.104 54523 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:30.296661 0.154857 udp 10.0.2.104 54523 <-> 24.60.166.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:31.298455 0.000000 udp 10.0.2.104 54523 -> 95.247.105.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:32.299725 0.306834 udp 10.0.2.104 54523 <-> 107.9.137.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:33.300733 0.050939 udp 10.0.2.104 54523 <-> 94.53.32.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:34.302752 0.142933 udp 10.0.2.104 54523 <-> 79.20.95.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:35.303591 0.360635 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:36.295120 0.155450 udp 10.0.2.104 54523 <-> 98.230.48.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:37.296609 0.035457 udp 10.0.2.104 54523 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:38.298588 0.322063 udp 10.0.2.104 54523 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:39.299355 0.159248 udp 10.0.2.104 54523 <-> 69.47.169.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:40.300955 0.044680 udp 10.0.2.104 54523 <-> 83.253.53.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:41.302194 0.112380 udp 10.0.2.104 54523 <-> 95.235.71.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:42.304207 0.073990 udp 10.0.2.104 54523 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:43.295277 0.000000 udp 10.0.2.104 54523 -> 101.175.212.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:44.296619 0.038516 udp 10.0.2.104 54523 <-> 130.204.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:45.298563 3.003808 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:46.299366 0.192345 udp 10.0.2.104 54523 <-> 188.2.105.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:47.301190 0.000000 udp 10.0.2.104 54523 -> 192.168.1.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:41:49.304273 0.015410 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:50.295330 2.058003 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:51.297019 0.041636 udp 10.0.2.104 54523 <-> 80.238.103.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:53.299469 0.974885 udp 10.0.2.104 54523 <-> 200.84.242.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:54.301159 0.040335 udp 10.0.2.104 54523 <-> 5.15.242.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:55.302564 0.136182 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:56.304373 0.053396 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:56.954848 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:41:57.295206 0.311202 udp 10.0.2.104 54523 <-> 115.241.56.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:58.296817 1.433933 udp 10.0.2.104 54523 <-> 85.64.72.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:41:59.298569 0.000000 udp 10.0.2.104 54523 -> 90.228.224.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:00.299540 0.000000 udp 10.0.2.104 54523 -> 190.198.80.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:01.301626 0.057803 udp 10.0.2.104 54523 <-> 84.1.45.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:42:02.302734 0.019628 udp 10.0.2.104 54523 <-> 130.180.97.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:42:03.304336 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:04.295782 0.000000 udp 10.0.2.104 54523 -> 78.157.87.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:05.297435 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:06.298140 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:07.300201 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:08.301087 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:09.302782 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:10.304180 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:11.296131 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:12.297304 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:13.298326 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:14.299656 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:15.301551 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:16.302581 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:17.304333 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:18.296079 0.136873 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:42:20.298663 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:21.300339 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:22.301552 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:23.303089 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:24.304606 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:25.296152 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:26.297292 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:27.298965 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:28.300046 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:29.301256 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:30.303027 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:31.304680 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:32.296310 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:33.297455 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:34.299031 0.000000 udp 10.0.2.104 54523 -> 130.180.97.205 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:35.300257 0.139430 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:42:36.301566 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:37.303316 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:38.304516 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:39.295719 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:40.297031 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:41.298892 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:42.300224 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:43.302079 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:43.962637 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:42:44.303536 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:45.304380 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:46.295624 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:47.297220 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:48.298765 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:49.300024 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:50.301478 0.017578 udp 10.0.2.104 54523 <-> 130.180.97.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:42:52.304771 0.000068 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:52.304839 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:42:53.296020 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:54.297500 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:55.299159 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:55.551293 3.002577 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:42:56.300640 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:57.301702 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:58.303410 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:42:59.304508 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:00.296027 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:01.297847 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:02.298760 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:02.559044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:43:03.300091 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:04.301854 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:05.303580 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:06.304929 0.022966 udp 10.0.2.104 54523 <-> 130.180.97.205 16464 CON 0 0 8 6288 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:43:07.296276 0.000070 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:07.296346 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:43:08.297338 0.000000 udp 10.0.2.104 54523 -> 78.157.87.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:10.300596 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:10.570766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:43:11.301583 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:12.303635 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:13.305059 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:14.296661 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:15.297466 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:16.299623 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:17.300518 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:18.302390 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:19.303340 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:20.294515 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:21.296406 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:22.297931 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:23.299100 0.137222 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:43:24.300989 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:25.302279 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:26.303854 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:26.574264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:43:27.295085 0.002955 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:27.298040 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.104 0x9efe URN 192 1 110 flow=Background 1970/01/01 01:43:28.296052 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:29.297625 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:30.299044 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:30.959802 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:43:31.300742 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:32.301793 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:33.303210 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:34.294626 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:35.296360 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:36.297585 4.997779 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:37.299361 0.146923 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:43:38.300774 0.000000 udp 10.0.2.104 54523 -> 78.157.87.145 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:40.303320 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:42.296604 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:43.297603 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:44.299422 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:45.300466 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:46.302537 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:47.303540 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:48.294901 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:49.296332 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:50.297866 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:51.299796 4.996485 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:52.301150 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:53.301977 0.136066 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:43:54.303864 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:54.303911 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:43:55.295261 0.000000 udp 10.0.2.104 54523 -> 78.157.87.145 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:57.298319 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:58.299434 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:43:58.579890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:43:59.301272 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:00.302046 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:01.303564 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:02.294884 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:03.296961 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:04.298194 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:05.299243 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:06.301021 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:07.302559 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:08.303954 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:09.295302 0.137384 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:44:10.296735 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:11.298164 0.000087 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:11.298251 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:44:12.299525 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:13.301193 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:14.302173 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:15.304393 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:16.295218 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:17.297078 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:17.957665 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:44:18.297911 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:19.300041 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:20.301242 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:21.302673 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:22.304125 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:23.295854 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:24.297156 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:25.298250 0.140411 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:44:26.299780 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:28.302352 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:29.304017 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:30.295643 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:31.297255 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:32.298375 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:33.299457 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:34.301438 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:35.302766 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:36.304550 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:37.295573 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:38.297454 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:39.298572 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:40.299858 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:41.300991 0.135921 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:44:42.303143 0.000000 udp 10.0.2.104 54523 -> 78.157.87.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:43.304045 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:44.296144 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:45.296730 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:46.298791 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:47.299615 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:48.301330 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:49.302861 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:50.304381 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:51.296008 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:52.296981 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:53.298991 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:54.299956 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:55.301285 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:56.302584 0.140693 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:44:58.295795 0.000053 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:44:58.295848 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:44:59.297147 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:00.298965 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:01.300348 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:02.301315 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:03.302898 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:04.304811 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:04.954944 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:45:05.295807 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:06.297361 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:07.298908 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:08.300317 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:09.301909 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:10.303126 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:11.304273 0.141258 udp 10.0.2.104 54523 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:12.295804 0.000000 udp 10.0.2.104 54523 -> 76.188.147.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:13.297318 0.156725 udp 10.0.2.104 54523 <-> 66.229.143.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:14.298812 0.000000 udp 10.0.2.104 54523 -> 218.47.116.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:15.300078 0.000000 udp 10.0.2.104 54523 -> 112.119.99.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:16.302021 0.201212 udp 10.0.2.104 54523 <-> 123.201.176.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:17.303117 0.293922 udp 10.0.2.104 54523 <-> 116.80.242.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:18.304790 0.097715 udp 10.0.2.104 54523 <-> 79.27.145.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:19.296277 0.432723 udp 10.0.2.104 54523 <-> 190.73.143.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:20.297500 0.331865 udp 10.0.2.104 54523 <-> 122.49.247.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:21.299175 1.023669 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:23.301544 0.294603 udp 10.0.2.104 54523 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:24.303066 0.029658 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:25.304471 0.307121 udp 10.0.2.104 54523 <-> 125.4.21.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:26.296268 0.174256 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:27.297131 0.000000 udp 10.0.2.104 54523 -> 122.215.8.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:28.298649 0.042107 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:29.300476 0.000000 udp 10.0.2.104 54523 -> 14.96.249.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:30.301752 0.019999 udp 10.0.2.104 54523 <-> 149.172.196.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:31.303015 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:32.304907 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:33.296360 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:34.297484 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:35.299057 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:36.300057 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:37.301576 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:38.303363 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:38.303434 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:45:39.305148 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:40.296461 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:41.297326 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:43.300770 0.000000 udp 10.0.2.104 54523 -> 83.7.22.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:44.302156 0.204244 udp 10.0.2.104 54523 <-> 124.123.242.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:45.303200 0.042207 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:46.304730 1.466713 udp 10.0.2.104 54523 <-> 72.242.83.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:47.296359 0.324884 udp 10.0.2.104 54523 <-> 221.241.78.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:48.297486 0.008433 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:49.299433 0.000000 udp 10.0.2.104 54523 -> 61.210.105.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:50.300673 0.087057 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:51.301968 0.000000 udp 10.0.2.104 54523 -> 122.178.164.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:51.962734 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:45:52.303328 0.327347 udp 10.0.2.104 54523 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:53.294489 4.557998 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:54.296468 0.000000 udp 10.0.2.104 54523 -> 14.99.37.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:55.297797 0.000000 udp 10.0.2.104 54523 -> 61.210.105.4 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:45:58.302192 0.047281 udp 10.0.2.104 54523 <-> 212.83.78.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:45:59.303358 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:00.294961 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:01.296264 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:02.297949 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:03.299290 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:04.300713 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:05.301763 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:06.303224 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:06.303279 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:46:07.295037 0.013761 udp 10.0.2.104 54523 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:08.296815 0.329161 udp 10.0.2.104 54523 <-> 101.63.181.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:09.297886 0.000000 udp 10.0.2.104 54523 -> 190.155.70.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:10.299411 3.003826 udp 10.0.2.104 54523 -> 92.250.178.152 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:11.300749 1.979960 udp 10.0.2.104 54523 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:12.302578 2.144791 udp 10.0.2.104 54523 <-> 89.2.226.235 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:15.296184 0.073276 udp 10.0.2.104 54523 <-> 78.51.37.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:16.254407 2.937415 udp 10.0.2.104 54523 <- 92.250.178.152 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:16.298160 0.258527 udp 10.0.2.104 54523 <-> 190.247.210.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:17.299668 1.392205 udp 10.0.2.104 54523 <-> 103.246.241.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:18.300658 0.165002 udp 10.0.2.104 54523 <-> 74.194.166.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:19.302271 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:20.303347 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:21.295124 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:22.296635 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:23.298387 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:24.299834 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:25.300885 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:26.302245 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:27.303424 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:28.295522 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:29.296977 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:31.299743 0.166674 udp 10.0.2.104 54523 <-> 173.17.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:32.300574 0.331932 udp 10.0.2.104 54523 <-> 218.45.34.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:33.302347 0.206316 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:34.303465 0.051309 udp 10.0.2.104 54523 <-> 31.131.133.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:35.295407 0.027827 udp 10.0.2.104 54523 <-> 83.166.192.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:36.296472 0.000000 udp 10.0.2.104 54523 -> 219.205.248.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:37.298096 1.208857 udp 10.0.2.104 54523 <-> 24.246.239.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:38.299256 0.000000 udp 10.0.2.104 54523 -> 186.211.41.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:38.960745 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:46:39.300795 0.541324 udp 10.0.2.104 54523 <-> 111.242.159.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:40.302101 0.000000 udp 10.0.2.104 54523 -> 122.121.111.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:41.304210 0.546097 udp 10.0.2.104 54523 <-> 202.29.179.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:42.295048 0.078894 udp 10.0.2.104 54523 <-> 78.247.174.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:43.296954 0.052494 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:44.298313 0.155226 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:45.299326 0.052288 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:46.301466 0.178816 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:47.302753 0.061235 udp 10.0.2.104 54523 <-> 77.122.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:48.304280 0.250124 udp 10.0.2.104 54523 <-> 190.153.152.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:49.295013 0.063926 udp 10.0.2.104 54523 <-> 90.231.187.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:50.296770 0.000000 udp 10.0.2.104 54523 -> 68.8.69.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:51.298380 0.328801 udp 10.0.2.104 54523 <-> 117.194.7.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:52.299778 0.737904 udp 10.0.2.104 54523 <-> 178.127.182.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:53.301397 0.147502 udp 10.0.2.104 54523 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:54.302209 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:55.303835 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:46:56.295677 0.759754 udp 10.0.2.104 54523 <-> 179.253.173.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:57.296853 0.350267 udp 10.0.2.104 54523 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:58.297945 0.156644 udp 10.0.2.104 54523 <-> 76.16.185.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:46:59.299722 1.848946 udp 10.0.2.104 54523 <-> 207.6.90.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:00.301060 0.059362 udp 10.0.2.104 54523 <-> 79.116.214.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:01.302295 0.000000 udp 10.0.2.104 54523 -> 78.180.197.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:02.303886 0.019093 udp 10.0.2.104 54523 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:03.295480 0.077999 udp 10.0.2.104 54523 <-> 78.78.37.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:04.297016 1.431159 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:05.298718 0.317208 udp 10.0.2.104 54523 <-> 222.117.41.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:06.299693 0.169875 udp 10.0.2.104 54523 <-> 60.254.31.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:07.301122 0.165743 udp 10.0.2.104 54523 <-> 173.25.161.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:08.302524 0.000000 udp 10.0.2.104 54523 -> 190.12.190.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:09.303891 0.226799 udp 10.0.2.104 54523 <-> 208.104.153.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:10.295349 0.000000 udp 10.0.2.104 54523 -> 94.113.109.89 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:11.297197 0.160168 udp 10.0.2.104 54523 <-> 192.252.239.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:12.298083 0.343223 udp 10.0.2.104 54523 <-> 39.119.96.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:13.299680 0.077413 udp 10.0.2.104 54523 <-> 85.84.94.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:14.300961 0.247062 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:15.302827 0.066060 udp 10.0.2.104 54523 <-> 79.112.23.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:16.304469 0.000000 udp 10.0.2.104 54523 -> 14.96.199.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:17.295278 0.340402 udp 10.0.2.104 54523 <-> 46.225.5.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:18.296949 0.023561 udp 10.0.2.104 54523 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:19.298796 0.000000 udp 10.0.2.104 54523 -> 14.96.17.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:20.299710 0.327062 udp 10.0.2.104 54523 <-> 36.231.140.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:21.301124 0.153291 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:22.302599 0.308176 udp 10.0.2.104 54523 <-> 59.20.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:23.304345 0.163547 udp 10.0.2.104 54523 <-> 76.123.228.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:24.295380 0.161399 udp 10.0.2.104 54523 <-> 76.97.226.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:25.297560 0.315602 udp 10.0.2.104 54523 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:25.958001 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:47:26.298884 0.370092 udp 10.0.2.104 54523 <-> 123.248.121.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:27.299908 0.000000 udp 10.0.2.104 54523 -> 24.119.59.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:28.301668 0.700257 udp 10.0.2.104 54523 <-> 14.97.153.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:29.303163 0.000000 udp 10.0.2.104 54523 -> 123.238.109.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:30.304204 0.288406 udp 10.0.2.104 54523 <-> 122.210.119.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:31.296019 0.000000 udp 10.0.2.104 54523 -> 108.178.193.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:32.297080 0.402544 udp 10.0.2.104 54523 <-> 14.96.39.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:33.298870 4.997318 udp 10.0.2.104 54523 <-> 85.66.114.73 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:34.299836 0.000000 udp 10.0.2.104 54523 -> 123.201.23.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:35.301755 0.362782 udp 10.0.2.104 54523 <-> 219.44.252.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:36.302891 1.145986 udp 10.0.2.104 54523 <-> 175.37.167.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:37.304665 0.467806 udp 10.0.2.104 54523 <-> 118.168.121.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:38.354734 0.000000 udp 10.0.2.104 54523 <- 85.66.114.73 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:39.296994 0.116081 udp 10.0.2.104 54523 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:40.298657 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:41.300082 0.000000 udp 10.0.2.104 54523 -> 61.227.54.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:42.301554 0.636076 udp 10.0.2.104 54523 <-> 175.37.167.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:43.303025 0.060948 udp 10.0.2.104 54523 <-> 86.123.120.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:44.304715 0.326965 udp 10.0.2.104 54523 <-> 59.190.46.251 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:45.295664 0.000000 udp 10.0.2.104 54523 -> 114.25.138.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:46.296982 0.316993 udp 10.0.2.104 54523 <-> 123.198.106.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:47.298435 0.141264 udp 10.0.2.104 54523 <-> 87.5.250.122 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:48.299958 0.356213 udp 10.0.2.104 54523 <-> 111.249.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:49.301826 1.918821 udp 10.0.2.104 54523 <-> 84.58.23.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:50.303134 0.045867 udp 10.0.2.104 54523 <-> 46.55.146.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:51.304593 0.085408 udp 10.0.2.104 54523 <-> 86.57.157.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:52.295707 0.058921 udp 10.0.2.104 54523 <-> 78.72.225.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:53.297580 0.360561 udp 10.0.2.104 54523 <-> 118.166.167.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:54.298542 0.157451 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:55.300854 1.062922 udp 10.0.2.104 54523 <-> 84.126.6.201 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:57.303242 0.160174 udp 10.0.2.104 54523 <-> 208.107.49.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:47:58.304801 0.000000 udp 10.0.2.104 54523 -> 59.96.230.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:47:59.296349 0.000000 udp 10.0.2.104 54523 -> 49.206.147.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:00.297556 0.157256 udp 10.0.2.104 54523 <-> 98.223.254.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:01.298885 1.041357 udp 10.0.2.104 54523 <-> 195.178.240.98 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:03.301416 0.000000 udp 10.0.2.104 54523 -> 24.226.112.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:04.303260 0.000000 udp 10.0.2.104 54523 -> 197.7.70.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:05.304691 0.812660 udp 10.0.2.104 54523 <-> 117.201.117.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:06.296048 0.335534 udp 10.0.2.104 54523 <-> 122.34.95.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:07.297384 0.162459 udp 10.0.2.104 54523 <-> 68.102.125.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:08.299450 0.051130 udp 10.0.2.104 54523 <-> 79.114.8.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:09.300672 0.354978 udp 10.0.2.104 54523 <-> 174.102.72.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:10.301990 0.116047 udp 10.0.2.104 54523 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:11.303206 0.055365 udp 10.0.2.104 54523 <-> 188.246.71.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:12.304585 0.000000 udp 10.0.2.104 54523 -> 46.191.234.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:12.955300 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:48:13.296166 0.042475 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:14.297461 0.163024 udp 10.0.2.104 54523 <-> 76.180.211.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:15.299054 0.000000 udp 10.0.2.104 54523 -> 27.106.23.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:16.300230 0.034485 udp 10.0.2.104 54523 <-> 151.100.166.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:17.302149 1.161777 udp 10.0.2.104 54523 <-> 201.11.80.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:18.303679 0.038328 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:19.304877 0.000000 udp 10.0.2.104 54523 -> 70.66.227.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:20.296616 0.056053 udp 10.0.2.104 54523 <-> 78.72.225.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:21.297437 0.333232 udp 10.0.2.104 54523 <-> 114.36.30.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:22.298979 0.319943 udp 10.0.2.104 54523 <-> 220.87.77.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:23.300179 0.233128 udp 10.0.2.104 54523 <-> 79.132.162.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:24.302290 0.350462 udp 10.0.2.104 54523 <-> 106.1.36.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:25.303102 0.000000 udp 10.0.2.104 54523 -> 183.83.74.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:26.295032 0.153666 udp 10.0.2.104 54523 <-> 216.115.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:27.296366 0.311519 udp 10.0.2.104 54523 <-> 61.46.106.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:28.297524 0.161031 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:29.299479 0.187400 udp 10.0.2.104 54523 <-> 173.17.3.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:30.300474 0.345928 udp 10.0.2.104 54523 <-> 14.97.58.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:31.301795 0.160495 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:32.303485 0.000000 udp 10.0.2.104 54523 -> 67.189.32.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:33.295302 0.000000 udp 10.0.2.104 54523 -> 92.229.124.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:34.296660 0.181916 udp 10.0.2.104 54523 <-> 111.119.240.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:35.298217 0.054574 udp 10.0.2.104 54523 <-> 85.187.232.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:36.299630 1.086494 udp 10.0.2.104 54523 <-> 83.136.186.86 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:38.302154 0.000000 udp 10.0.2.104 54523 -> 71.197.74.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:39.303669 1.569638 udp 10.0.2.104 54523 <-> 183.87.84.101 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:40.294863 1.404398 udp 10.0.2.104 54523 <-> 111.253.168.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:41.296423 0.060373 udp 10.0.2.104 54523 <-> 81.233.18.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:42.297879 1.477885 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:43.299275 0.058592 udp 10.0.2.104 54523 <-> 80.72.49.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:44.300380 1.309467 udp 10.0.2.104 54523 <-> 125.230.129.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:45.301790 0.147676 udp 10.0.2.104 54523 <-> 74.55.169.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:46.303339 0.000000 udp 10.0.2.104 54523 -> 78.135.5.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:47.294988 3.155068 udp 10.0.2.104 54523 <-> 216.36.28.127 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:48.296482 0.000000 udp 10.0.2.104 54523 -> 84.232.15.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:49.297901 0.000000 udp 10.0.2.104 54523 -> 122.149.39.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:51.300833 0.273188 udp 10.0.2.104 54523 <-> 190.157.39.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:52.302568 0.167703 udp 10.0.2.104 54523 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:53.303320 0.000000 udp 10.0.2.104 54523 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:54.294850 0.139870 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:55.296775 0.166122 udp 10.0.2.104 54523 <-> 69.243.139.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:56.298104 0.155943 udp 10.0.2.104 54523 <-> 68.43.66.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:57.299201 0.311640 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:58.300820 0.145439 udp 10.0.2.104 54523 <-> 203.192.207.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:48:59.302177 0.000000 udp 10.0.2.104 54523 -> 117.220.10.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:48:59.963094 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:49:00.304210 0.000000 udp 10.0.2.104 54523 -> 116.73.60.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:01.294989 0.393628 udp 10.0.2.104 54523 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:02.297023 0.275618 udp 10.0.2.104 54523 <-> 82.240.144.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:03.298098 0.049810 udp 10.0.2.104 54523 <-> 109.86.167.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:04.299802 0.000000 udp 10.0.2.104 54523 -> 14.96.62.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:05.300722 0.000000 udp 10.0.2.104 54523 -> 62.248.2.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:06.302321 0.289315 udp 10.0.2.104 54523 <-> 74.194.166.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:07.303487 0.067059 udp 10.0.2.104 54523 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:08.295295 0.553489 udp 10.0.2.104 54523 <-> 117.195.178.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:09.296951 0.000000 udp 10.0.2.104 54523 -> 91.230.42.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:10.298204 1.547413 udp 10.0.2.104 54523 <-> 72.209.205.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:11.299686 0.000000 udp 10.0.2.104 54523 -> 14.96.62.108 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:12.301345 0.037409 udp 10.0.2.104 54523 <-> 188.254.203.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:13.302537 2.209327 udp 10.0.2.104 54523 <-> 123.201.23.132 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:14.303960 0.000000 udp 10.0.2.104 54523 -> 213.55.89.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:16.296379 0.000000 udp 10.0.2.104 54523 -> 87.198.116.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:17.298437 0.085345 udp 10.0.2.104 54523 <-> 197.200.160.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:18.299513 0.276630 udp 10.0.2.104 54523 <-> 122.175.176.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:19.301400 0.068241 udp 10.0.2.104 54523 <-> 2.94.250.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:20.302595 0.154822 udp 10.0.2.104 54523 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:21.304425 4.323450 udp 10.0.2.104 54523 <-> 113.196.145.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:22.295195 0.074970 udp 10.0.2.104 54523 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:23.296832 0.143448 udp 10.0.2.104 54523 <-> 65.96.143.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:24.297877 0.155352 udp 10.0.2.104 54523 <-> 50.83.33.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:25.299651 0.148837 udp 10.0.2.104 54523 <-> 216.36.28.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:26.301175 0.271604 udp 10.0.2.104 54523 <-> 58.64.71.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:28.303880 3.161895 udp 10.0.2.104 54523 <-> 89.29.148.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:29.295802 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:29.295863 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:49:30.297042 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:31.298100 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:32.299395 0.000000 udp 10.0.2.104 54523 -> 69.76.226.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:33.301001 0.424346 udp 10.0.2.104 54523 <-> 117.221.2.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:34.302544 1.157043 udp 10.0.2.104 54523 <-> 111.92.81.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:35.303887 0.048815 udp 10.0.2.104 54523 <-> 89.136.104.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:36.295269 0.026514 udp 10.0.2.104 54523 <-> 82.212.10.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:37.296716 0.008537 udp 10.0.2.104 54523 <-> 82.209.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:38.298043 0.216869 udp 10.0.2.104 54523 <-> 123.201.191.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:39.299886 0.315211 udp 10.0.2.104 54523 <-> 211.124.168.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:40.301139 0.000000 udp 10.0.2.104 54523 -> 189.54.80.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:41.302644 0.178501 udp 10.0.2.104 54523 <-> 69.76.153.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:42.304098 0.067993 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:43.295195 0.000000 udp 10.0.2.104 54523 -> 194.225.198.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:44.296639 0.293492 udp 10.0.2.104 54523 <-> 66.57.118.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:45.298374 0.390055 udp 10.0.2.104 54523 <-> 27.3.114.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:46.299883 0.167387 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:46.961146 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:49:47.300982 0.000000 udp 10.0.2.104 54523 -> 125.17.82.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:48.302567 0.000087 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:48.302654 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:49:49.304160 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:50.296119 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:51.296860 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:52.298122 4.997189 udp 10.0.2.104 54523 <-> 98.230.48.27 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:53.300267 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:54.301381 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:55.302470 0.000000 udp 10.0.2.104 54523 -> 114.79.55.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:56.304478 4.996842 udp 10.0.2.104 54523 <-> 27.3.114.29 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:49:57.450715 0.000000 udp 10.0.2.104 54523 <- 98.230.48.27 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:58.297034 4.005641 udp 10.0.2.104 54523 -> 125.17.82.30 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:49:59.298788 4.996979 udp 10.0.2.104 54523 <-> 88.169.45.130 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:01.700997 0.000000 udp 10.0.2.104 54523 <- 27.3.114.29 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:02.586387 3.000887 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:50:03.304610 0.000000 udp 10.0.2.104 54523 -> 114.79.55.20 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:04.366836 0.000000 udp 10.0.2.104 54523 <- 88.169.45.130 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:05.296926 0.645043 udp 10.0.2.104 54523 <-> 69.132.237.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:06.298448 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:07.300428 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:09.303309 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:09.593616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:50:10.304020 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:11.295867 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:12.297084 0.000065 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:12.297149 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:50:13.298892 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:14.300348 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:15.301849 0.152431 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:16.302994 0.179957 udp 10.0.2.104 54523 <-> 69.132.237.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:17.304579 0.391405 udp 10.0.2.104 54523 <-> 117.221.83.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:17.595151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:50:18.295751 0.000000 udp 10.0.2.104 54523 -> 116.72.203.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:19.297153 0.000000 udp 10.0.2.104 54523 -> 49.205.136.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:20.298433 0.124121 udp 10.0.2.104 54523 <-> 151.74.213.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:21.300002 1.707344 udp 10.0.2.104 54523 <-> 186.18.88.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:22.301983 0.000000 udp 10.0.2.104 54523 -> 187.10.81.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:23.303448 0.255533 udp 10.0.2.104 54523 <-> 187.20.177.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:24.304455 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:25.296210 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:25.296287 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:50:26.297199 0.734825 udp 10.0.2.104 54523 <-> 89.117.184.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:27.298925 0.155189 udp 10.0.2.104 54523 <-> 24.40.246.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:28.300507 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:29.301864 0.003513 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:29.305377 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.104 0x9efe URN 192 1 110 flow=Background 1970/01/01 01:50:30.303246 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:31.304904 0.356500 udp 10.0.2.104 54523 <-> 61.126.229.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:32.295742 0.000000 udp 10.0.2.104 54523 -> 82.56.162.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:33.297458 0.090979 udp 10.0.2.104 54523 <-> 87.110.25.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:33.598145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:50:33.957982 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:50:34.299173 0.234501 udp 10.0.2.104 54523 <-> 186.91.202.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:35.300275 0.000000 udp 10.0.2.104 54523 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:36.301807 0.183749 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:37.302968 0.331579 udp 10.0.2.104 54523 <-> 118.169.110.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:38.304526 0.000000 udp 10.0.2.104 54523 -> 80.181.217.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:39.295716 0.348041 udp 10.0.2.104 54523 <-> 59.120.147.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:40.297383 0.042778 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:41.298906 0.078840 udp 10.0.2.104 54523 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:42.300508 0.182739 udp 10.0.2.104 54523 <-> 188.18.132.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:43.302198 0.117886 udp 10.0.2.104 54523 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:44.302931 0.328879 udp 10.0.2.104 54523 <-> 115.86.61.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:45.304475 0.051669 udp 10.0.2.104 54523 <-> 93.77.106.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:46.296350 0.313063 udp 10.0.2.104 54523 <-> 219.109.69.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:47.297332 0.038288 udp 10.0.2.104 54523 <-> 95.90.136.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:48.298903 0.360368 udp 10.0.2.104 54523 <-> 116.123.55.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:49.300218 0.851080 udp 10.0.2.104 54523 <-> 217.201.40.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:50.301563 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:51.303356 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:52.304798 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:53.295892 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:54.297601 0.029839 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:55.301304 0.160971 udp 10.0.2.104 54523 <-> 68.102.1.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:56.300439 0.148668 udp 10.0.2.104 54523 <-> 75.143.172.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:57.301962 0.172472 udp 10.0.2.104 54523 <-> 173.218.201.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:50:58.303353 0.000000 udp 10.0.2.104 54523 -> 183.106.127.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:50:59.295201 0.191376 udp 10.0.2.104 54523 <-> 68.224.37.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:00.296122 0.037262 udp 10.0.2.104 54523 <-> 88.129.222.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:01.297811 0.145919 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:02.298964 0.163119 udp 10.0.2.104 54523 <-> 72.191.109.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:03.300275 0.381254 udp 10.0.2.104 54523 <-> 39.1.9.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:04.301977 0.326501 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:05.303259 0.177474 udp 10.0.2.104 54523 <-> 106.51.24.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:05.604113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:51:06.294611 0.133975 udp 10.0.2.104 54523 <-> 76.117.140.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:07.296407 0.212945 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:08.297467 0.259005 udp 10.0.2.104 54523 <-> 49.249.53.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:09.299053 0.140669 udp 10.0.2.104 54523 <-> 184.56.26.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:10.301011 0.031290 udp 10.0.2.104 54523 <-> 86.48.43.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:11.301958 0.294929 udp 10.0.2.104 54523 <-> 117.203.122.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:12.303366 0.313616 udp 10.0.2.104 54523 <-> 220.118.181.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:13.294592 0.000000 udp 10.0.2.104 54523 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:51:14.296263 0.017420 udp 10.0.2.104 54523 <-> 94.112.175.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:15.297918 0.069757 udp 10.0.2.104 54523 <-> 109.245.61.219 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:16.299646 0.142297 udp 10.0.2.104 54523 <-> 67.242.78.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:17.300409 1.010279 udp 10.0.2.104 54523 <-> 152.66.15.222 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:19.303344 0.307134 udp 10.0.2.104 54523 <-> 202.60.165.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:20.295205 0.055031 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:20.956317 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:51:21.296234 0.028640 udp 10.0.2.104 54523 <-> 85.130.74.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:22.297535 0.026839 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:23.299565 0.332217 udp 10.0.2.104 54523 <-> 119.236.63.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:24.300798 0.295143 udp 10.0.2.104 54523 <-> 118.237.15.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:25.302411 0.362671 udp 10.0.2.104 54523 <-> 211.76.35.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:26.303456 0.225313 udp 10.0.2.104 54523 <-> 67.169.170.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:27.294896 0.469425 udp 10.0.2.104 54523 <-> 5.250.118.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:28.296603 0.182509 udp 10.0.2.104 54523 <-> 210.89.38.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:29.298242 0.123369 udp 10.0.2.104 54523 <-> 93.124.125.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:30.299056 0.158490 udp 10.0.2.104 54523 <-> 173.14.55.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:31.300805 0.138871 udp 10.0.2.104 54523 <-> 98.103.10.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:32.302083 0.014297 udp 10.0.2.104 54523 <-> 93.103.29.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:33.303752 0.346184 udp 10.0.2.104 54523 <-> 124.244.148.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:34.295411 0.151695 udp 10.0.2.104 54523 <-> 173.20.220.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:35.296866 0.310572 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:36.298170 0.202706 udp 10.0.2.104 54523 <-> 190.36.226.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:37.299414 0.053817 udp 10.0.2.104 54523 <-> 88.174.60.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:38.300993 0.346961 udp 10.0.2.104 54523 <-> 123.192.142.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:39.302550 0.349163 udp 10.0.2.104 54523 <-> 114.27.146.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:40.303632 0.000000 udp 10.0.2.104 54523 -> 27.5.185.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:51:41.295267 0.037787 udp 10.0.2.104 54523 <-> 213.112.230.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:42.296550 1.081248 udp 10.0.2.104 54523 <-> 87.110.25.178 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:44.299902 0.350228 udp 10.0.2.104 54523 <-> 151.239.3.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:45.300801 0.137231 udp 10.0.2.104 54523 <-> 68.194.88.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:46.302446 0.000000 udp 10.0.2.104 54523 -> 95.67.135.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:51:47.304209 0.324472 udp 10.0.2.104 54523 <-> 111.232.197.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:48.295136 0.160156 udp 10.0.2.104 54523 <-> 173.14.55.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:49.006180 0.025953 udp 10.0.2.104 54531 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 01:51:49.032439 0.000000 udp 10.0.2.104 54532 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:51:49.296624 0.459924 udp 10.0.2.104 54523 <-> 79.133.238.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:50.298147 0.160534 udp 10.0.2.104 54523 <-> 76.179.191.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:51.299916 0.000000 udp 10.0.2.104 54523 -> 115.241.204.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:51:52.301308 0.208661 udp 10.0.2.104 54523 <-> 71.196.226.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:53.302329 0.000000 udp 10.0.2.104 54523 -> 79.117.217.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:51:54.304271 0.322292 udp 10.0.2.104 54523 <-> 220.92.174.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:55.295592 0.123701 udp 10.0.2.104 54523 <-> 93.72.6.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:56.296773 0.148542 udp 10.0.2.104 54523 <-> 98.212.63.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:57.298253 0.000000 udp 10.0.2.104 54523 -> 113.193.163.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:51:58.299298 0.733136 udp 10.0.2.104 54523 <-> 70.184.95.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:51:59.301306 0.144724 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:00.302883 0.000000 udp 10.0.2.104 54523 -> 81.34.0.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:01.303628 0.045388 udp 10.0.2.104 54523 <-> 24.132.8.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:02.295195 2.154484 udp 10.0.2.104 54523 <-> 24.236.189.173 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:03.296900 2.074384 udp 10.0.2.104 54523 <-> 116.73.60.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:05.299926 0.478852 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:06.301149 0.328611 udp 10.0.2.104 54523 <-> 36.229.51.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:07.302768 0.327427 udp 10.0.2.104 54523 <-> 177.106.47.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:07.953206 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:52:08.304361 0.045939 udp 10.0.2.104 54523 <-> 193.68.132.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:09.295462 0.000000 udp 10.0.2.104 54523 -> 222.166.66.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:10.296985 0.283712 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:11.298573 0.047817 udp 10.0.2.104 54523 <-> 150.214.66.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:12.299861 0.333103 udp 10.0.2.104 54523 <-> 211.133.202.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:13.301314 0.000000 udp 10.0.2.104 54523 -> 115.241.210.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:14.302355 0.239002 udp 10.0.2.104 54523 <-> 83.141.175.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:15.304411 0.159337 udp 10.0.2.104 54523 <-> 66.177.33.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:16.295216 0.000000 udp 10.0.2.104 54523 -> 71.45.42.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:17.297259 2.348972 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:18.298428 1.122216 udp 10.0.2.104 54523 <-> 78.8.126.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:20.301457 0.053977 udp 10.0.2.104 54523 <-> 158.49.161.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:21.302928 0.163826 udp 10.0.2.104 54523 <-> 24.140.133.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:22.304481 0.096627 udp 10.0.2.104 54523 <-> 78.84.18.110 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:23.295969 0.000000 udp 10.0.2.104 54523 -> 184.162.1.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:24.297071 0.192688 udp 10.0.2.104 54523 <-> 90.129.90.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:25.298555 0.312400 udp 10.0.2.104 54523 <-> 59.0.9.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:26.299807 0.329203 udp 10.0.2.104 54523 <-> 36.229.51.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:27.301062 0.371179 udp 10.0.2.104 54523 <-> 115.242.150.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:28.302525 0.000000 udp 10.0.2.104 54523 -> 5.15.28.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:29.304471 0.000000 udp 10.0.2.104 54523 -> 46.175.229.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:30.295356 0.443997 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:31.297144 0.219102 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:32.298495 0.198788 udp 10.0.2.104 54523 <-> 190.74.80.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:33.300256 0.363548 udp 10.0.2.104 54523 <-> 1.170.130.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:34.301160 0.057434 udp 10.0.2.104 54523 <-> 109.87.252.226 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:35.303194 0.159499 udp 10.0.2.104 54523 <-> 150.201.62.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:36.304293 0.069222 udp 10.0.2.104 54523 <-> 92.231.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:37.295386 3.004951 udp 10.0.2.104 54523 -> 187.113.192.58 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:38.297050 0.335238 udp 10.0.2.104 54523 <-> 117.204.33.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:39.298944 0.000000 udp 10.0.2.104 54523 -> 72.243.45.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:41.301122 0.053768 udp 10.0.2.104 54523 <-> 85.187.232.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:42.303261 0.095711 udp 10.0.2.104 54523 <-> 95.237.90.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:43.304278 0.195178 udp 10.0.2.104 54523 <-> 98.247.242.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:44.296185 0.074073 udp 10.0.2.104 54523 <-> 88.162.229.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:45.297323 0.430687 udp 10.0.2.104 54523 <-> 58.107.166.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:46.299066 0.000000 udp 10.0.2.104 54523 -> 77.103.126.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:47.300193 1.160172 udp 10.0.2.104 54523 <-> 37.215.216.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:48.301427 0.204524 udp 10.0.2.104 54523 <-> 98.232.99.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:49.302851 0.527201 udp 10.0.2.104 54523 <-> 14.97.171.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:50.304671 0.044512 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:51.295840 0.383833 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:52.297013 0.040983 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:53.298567 0.486505 udp 10.0.2.104 54523 <-> 211.36.185.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:54.300049 0.247147 udp 10.0.2.104 54523 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:54.961362 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:52:55.301252 0.000000 udp 10.0.2.104 54523 -> 114.47.47.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:56.303121 1.208060 udp 10.0.2.104 54523 <-> 70.189.102.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:57.304718 0.312102 udp 10.0.2.104 54523 <-> 59.0.9.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:52:58.296044 0.000000 udp 10.0.2.104 54523 -> 67.218.169.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:52:59.297335 0.054099 udp 10.0.2.104 54523 <-> 95.77.71.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:00.298490 0.177100 udp 10.0.2.104 54523 <-> 98.177.241.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:01.300529 0.131291 udp 10.0.2.104 54523 <-> 68.9.106.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:02.301803 0.134496 udp 10.0.2.104 54523 <-> 24.3.193.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:03.303628 0.695025 udp 10.0.2.104 54523 <-> 202.29.179.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:04.304263 0.528745 udp 10.0.2.104 54523 <-> 60.246.152.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:05.296012 0.369198 udp 10.0.2.104 54523 <-> 220.83.167.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:06.297072 0.297260 udp 10.0.2.104 54523 <-> 117.203.122.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:07.298678 0.138074 udp 10.0.2.104 54523 <-> 95.237.90.202 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:08.300025 0.143547 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:09.301796 0.000000 udp 10.0.2.104 54523 -> 223.184.115.173 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:10.303470 0.000000 udp 10.0.2.104 54523 -> 14.97.58.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:11.304907 0.000000 udp 10.0.2.104 54523 -> 14.198.30.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:12.295743 0.000000 udp 10.0.2.104 54523 -> 180.215.118.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:13.297801 0.165698 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:14.298648 0.159481 udp 10.0.2.104 54523 <-> 184.59.170.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:15.300708 0.210906 udp 10.0.2.104 54523 <-> 98.242.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:16.301980 0.060048 udp 10.0.2.104 54523 <-> 109.245.61.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:17.303603 0.295576 udp 10.0.2.104 54523 <-> 210.133.223.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:18.305063 0.145068 udp 10.0.2.104 54523 <-> 66.57.118.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:19.296094 0.387278 udp 10.0.2.104 54523 <-> 115.241.201.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:20.297647 0.134312 udp 10.0.2.104 54523 <-> 68.194.18.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:21.298615 0.270370 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:22.300364 0.116889 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:23.302050 0.335095 udp 10.0.2.104 54523 <-> 36.235.104.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:24.303784 0.354085 udp 10.0.2.104 54523 <-> 114.36.227.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:25.304859 0.054549 udp 10.0.2.104 54523 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:26.295954 0.000000 udp 10.0.2.104 54523 -> 14.96.35.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:27.297544 0.043360 udp 10.0.2.104 54523 <-> 188.254.153.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:28.298801 0.158939 udp 10.0.2.104 54523 <-> 71.200.230.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:29.300770 0.023267 udp 10.0.2.104 54523 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:30.301687 0.044527 udp 10.0.2.104 54523 <-> 87.188.164.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:31.303635 0.000000 udp 10.0.2.104 54523 -> 101.175.212.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:32.294958 0.102308 udp 10.0.2.104 54523 <-> 78.15.22.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:33.296264 0.702319 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:34.297481 0.439391 udp 10.0.2.104 54523 <-> 189.110.82.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:35.298894 0.328090 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:36.300741 0.058498 udp 10.0.2.104 54523 <-> 93.78.192.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:37.301629 0.144114 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:38.303293 0.555760 udp 10.0.2.104 54523 <-> 124.247.137.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:39.295033 0.171638 udp 10.0.2.104 54523 <-> 75.134.145.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:40.296456 0.139852 udp 10.0.2.104 54523 <-> 74.88.126.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:41.297587 0.276507 udp 10.0.2.104 54523 <-> 118.127.198.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:41.958328 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:53:42.298834 0.149487 udp 10.0.2.104 54523 <-> 24.151.157.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:43.300581 1.109328 udp 10.0.2.104 54523 <-> 223.29.198.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:44.302464 0.352428 udp 10.0.2.104 54523 <-> 114.200.31.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:45.303427 3.920801 udp 10.0.2.104 54523 <-> 190.228.99.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:46.294846 0.415525 udp 10.0.2.104 54523 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:47.296446 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:48.298032 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:49.299640 0.000000 udp 10.0.2.104 54523 -> 153.130.52.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:50.300339 0.172731 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:53:51.302321 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:52.303756 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:53.295109 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:54.296282 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:55.297774 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:56.299459 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:57.300391 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:58.302280 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:53:59.303391 1.044089 udp 10.0.2.104 54523 <-> 75.246.135.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:00.295322 0.307742 udp 10.0.2.104 54523 <-> 220.100.40.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:01.296421 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:02.297818 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:03.299252 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:04.301199 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:05.302208 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:06.303357 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:07.295373 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:08.296513 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:10.299469 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:11.301162 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:12.302175 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:13.303880 4.996959 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:14.294951 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:15.296305 0.000000 udp 10.0.2.104 54523 -> 49.207.202.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:16.298062 0.297846 udp 10.0.2.104 54523 <-> 220.100.40.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:17.299582 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:19.302349 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:20.303585 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:21.295395 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:22.296937 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:23.298055 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:24.299373 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:26.302770 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:27.303821 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:28.295507 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:28.295573 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:54:28.955874 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:54:29.296576 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:30.298345 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:31.299415 0.000000 udp 10.0.2.104 54523 -> 2.193.204.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:32.301282 0.186821 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:33.302828 0.283638 udp 10.0.2.104 54523 <-> 190.163.19.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:34.303647 1.312677 udp 10.0.2.104 54523 <-> 211.230.41.79 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:36.296640 0.034525 udp 10.0.2.104 54523 <-> 79.117.40.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:37.298049 0.396110 udp 10.0.2.104 54523 <-> 14.99.1.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:38.299784 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:39.300984 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:40.302580 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:41.304196 0.152949 udp 10.0.2.104 54523 <-> 192.226.151.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:42.295228 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:43.296751 0.014300 udp 10.0.2.104 54523 <-> 95.222.234.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:44.297981 0.155432 udp 10.0.2.104 54523 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:45.299840 0.000000 udp 10.0.2.104 54523 -> 94.155.231.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:46.301115 0.104356 udp 10.0.2.104 54523 <-> 178.126.73.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:47.302845 0.390665 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:48.304225 0.382596 udp 10.0.2.104 54523 <-> 218.238.158.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:49.295132 0.189721 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:50.296803 0.143654 udp 10.0.2.104 54523 <-> 69.126.154.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:51.298059 0.026078 udp 10.0.2.104 54523 <-> 89.133.190.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:52.300078 0.056778 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:53.301321 0.148939 udp 10.0.2.104 54523 <-> 24.212.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:54.302805 0.000000 udp 10.0.2.104 54523 -> 79.114.63.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:55.303888 0.358141 udp 10.0.2.104 54523 <-> 36.232.196.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:56.295721 0.153929 udp 10.0.2.104 54523 <-> 174.98.145.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:57.297222 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:54:58.298347 0.157600 udp 10.0.2.104 54523 <-> 173.14.55.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:54:59.299832 0.385208 udp 10.0.2.104 54523 <-> 2.185.245.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:00.300966 0.000000 udp 10.0.2.104 54523 -> 65.44.192.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:01.303006 0.048043 udp 10.0.2.104 54523 <-> 212.117.27.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:02.304536 0.136410 udp 10.0.2.104 54523 <-> 69.115.88.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:03.295402 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:04.296899 0.000000 udp 10.0.2.104 54523 -> 86.126.0.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:05.298726 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:06.300301 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:07.301330 0.061064 udp 10.0.2.104 54523 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:08.303187 0.205934 udp 10.0.2.104 54523 <-> 151.232.26.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:09.304502 0.322138 udp 10.0.2.104 54523 <-> 36.239.200.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:10.295953 0.210041 udp 10.0.2.104 54523 <-> 67.160.130.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:11.297376 0.139957 udp 10.0.2.104 54523 <-> 96.21.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:12.298617 0.005148 udp 10.0.2.104 54523 -> 185.5.225.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:12.303765 0.000000 icmp 185.5.225.233 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:55:13.300083 0.000000 udp 10.0.2.104 54523 -> 101.108.133.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:14.301397 0.292047 udp 10.0.2.104 54523 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:15.303247 0.069680 udp 10.0.2.104 54523 <-> 85.84.44.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:15.953549 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:55:16.304582 0.130005 udp 10.0.2.104 54523 <-> 206.74.136.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:17.295706 0.546999 udp 10.0.2.104 54523 <-> 117.212.226.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:18.297056 0.000000 udp 10.0.2.104 54523 -> 115.240.76.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:19.298561 0.142510 udp 10.0.2.104 54523 <-> 202.71.28.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:20.300319 0.435924 udp 10.0.2.104 54523 <-> 115.242.167.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:21.301480 0.181526 udp 10.0.2.104 54523 <-> 75.66.196.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:22.302604 0.073179 udp 10.0.2.104 54523 <-> 82.137.57.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:23.304051 0.040419 udp 10.0.2.104 54523 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:24.295784 2.032354 udp 10.0.2.104 54523 <-> 95.111.72.116 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:25.297236 0.044004 udp 10.0.2.104 54523 <-> 92.241.152.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:27.300052 0.386675 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:28.301880 0.058206 udp 10.0.2.104 54523 <-> 88.170.100.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:29.303174 0.035011 udp 10.0.2.104 54523 <-> 84.194.71.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:30.304906 0.156470 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:31.295766 0.025842 udp 10.0.2.104 54523 <-> 82.101.244.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:32.297560 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:33.298819 0.042945 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:34.300100 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:35.301356 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:36.302751 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:37.304189 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:38.295854 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:39.297546 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:40.298891 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:41.299986 0.070037 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:42.301457 0.075498 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:43.303467 0.000000 udp 10.0.2.104 54523 -> 37.214.88.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:44.304924 0.268846 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:45.296247 0.058821 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:46.297809 0.339387 udp 10.0.2.104 54523 <-> 116.203.137.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:47.299218 1.435607 udp 10.0.2.104 54523 <-> 92.86.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:48.300040 0.151335 udp 10.0.2.104 54523 <-> 96.20.43.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:49.301520 0.117505 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:50.303464 0.158907 udp 10.0.2.104 54523 <-> 75.133.46.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:51.304530 2.053449 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:52.296223 0.041106 udp 10.0.2.104 54523 <-> 92.247.198.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:54.299348 2.193032 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:55.300820 0.000000 udp 10.0.2.104 54523 -> 92.86.49.26 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:55:57.303782 0.159624 udp 10.0.2.104 54523 <-> 75.133.46.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:58.294679 0.176516 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:55:59.296493 0.043110 udp 10.0.2.104 54523 <-> 80.238.103.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:00.297300 0.046623 udp 10.0.2.104 54523 <-> 84.238.186.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:01.299281 0.238666 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:02.300416 0.062310 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:02.961183 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:56:03.301819 0.143885 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:04.303351 0.543154 udp 10.0.2.104 54523 <-> 177.149.127.27 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:05.294965 0.000000 udp 10.0.2.104 54523 -> 151.100.97.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:06.296132 0.460633 udp 10.0.2.104 54523 <-> 117.213.219.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:07.297826 2.390292 udp 10.0.2.104 54523 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:08.299463 0.153516 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:09.300629 0.140245 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:10.301779 0.353690 udp 10.0.2.104 54523 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:11.303436 0.033184 udp 10.0.2.104 54523 <-> 5.53.197.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:12.295163 0.027192 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:13.296615 0.306020 udp 10.0.2.104 54523 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:14.298209 0.136437 udp 10.0.2.104 54523 <-> 68.194.253.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:15.299263 0.161944 udp 10.0.2.104 54523 <-> 184.91.17.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:16.300483 0.137361 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:17.301987 0.133905 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:18.303140 0.140684 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:19.294803 0.239660 udp 10.0.2.104 54523 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:20.296309 0.000000 udp 10.0.2.104 54523 -> 201.241.29.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:21.298000 0.536682 udp 10.0.2.104 54523 <-> 202.29.178.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:22.299164 1.579830 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:23.300475 0.034821 udp 10.0.2.104 54523 <-> 151.100.81.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:24.302156 0.314845 udp 10.0.2.104 54523 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:25.303679 0.493535 udp 10.0.2.104 54523 <-> 115.241.167.59 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:26.295311 0.060015 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:27.296487 0.160948 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:28.297913 0.025777 udp 10.0.2.104 54523 <-> 85.130.46.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:29.299477 0.142394 udp 10.0.2.104 54523 <-> 75.185.186.251 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:30.300599 0.154317 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:31.302543 0.000000 udp 10.0.2.104 54523 -> 5.12.178.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:32.303254 0.156488 udp 10.0.2.104 54523 <-> 78.239.29.143 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:33.294886 0.030450 udp 10.0.2.104 54523 <-> 77.70.127.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:34.296337 0.742482 udp 10.0.2.104 54523 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:35.297940 0.154438 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:36.299154 0.281212 udp 10.0.2.104 54523 <-> 117.200.137.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:37.300754 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:38.302552 0.000000 udp 10.0.2.104 54523 -> 188.167.110.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:39.304077 0.144505 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:40.294853 0.000000 udp 10.0.2.104 54523 -> 158.108.192.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:41.297028 0.000000 udp 10.0.2.104 54523 -> 46.5.250.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:42.298125 0.360412 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:43.299152 0.000000 udp 10.0.2.104 54523 -> 117.194.7.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:44.300594 0.297728 udp 10.0.2.104 54523 <-> 110.233.68.105 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:45.302412 0.000000 udp 10.0.2.104 54523 -> 77.184.160.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:46.303895 0.061013 udp 10.0.2.104 54523 <-> 151.65.231.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:47.295380 0.164537 udp 10.0.2.104 54523 <-> 120.138.105.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:48.296869 0.317013 udp 10.0.2.104 54523 <-> 114.134.149.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:49.297700 0.319619 udp 10.0.2.104 54523 <-> 187.11.102.35 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:49.959137 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:56:50.299478 0.120146 udp 10.0.2.104 54523 <-> 24.122.115.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:51.300566 0.298043 udp 10.0.2.104 54523 <-> 119.47.20.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:52.302180 0.058632 udp 10.0.2.104 54523 <-> 86.122.80.11 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:53.303854 0.150126 udp 10.0.2.104 54523 <-> 107.15.192.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:54.295045 4.006290 udp 10.0.2.104 54523 -> 75.241.130.12 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:55.296584 0.065398 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:56.297764 0.000000 udp 10.0.2.104 54523 -> 117.254.247.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:56:57.299562 0.293342 udp 10.0.2.104 54523 <-> 5.234.63.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:56:59.302089 0.920243 udp 10.0.2.104 54523 <-> 81.31.161.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:00.303638 0.298665 udp 10.0.2.104 54523 <-> 14.97.126.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:01.294949 0.000000 udp 10.0.2.104 54523 -> 89.37.191.146 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:02.297064 0.052929 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:03.298330 4.373447 udp 10.0.2.104 54523 <-> 182.155.52.71 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:04.299294 0.000000 udp 10.0.2.104 54523 -> 114.24.201.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:05.300913 0.588260 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:06.302667 0.181673 udp 10.0.2.104 54523 <-> 76.85.171.149 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:08.295778 0.014047 udp 10.0.2.104 54523 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:09.296909 0.038698 udp 10.0.2.104 54523 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:09.609478 3.001826 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:57:10.298136 0.370822 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:11.299303 0.054982 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:12.300900 0.050986 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:13.302400 0.442152 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:14.303947 0.308902 udp 10.0.2.104 54523 <-> 113.39.129.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:15.295226 0.000000 udp 10.0.2.104 54523 -> 2.146.181.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:16.296798 0.374497 udp 10.0.2.104 54523 <-> 111.246.113.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:16.617354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:57:17.298549 0.000000 udp 10.0.2.104 54523 -> 189.159.13.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:18.299923 0.177541 udp 10.0.2.104 54523 <-> 72.183.63.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:19.301275 0.141678 udp 10.0.2.104 54523 <-> 24.74.188.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:20.302735 0.109461 udp 10.0.2.104 54523 <-> 217.202.248.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:21.304307 0.000000 udp 10.0.2.104 54523 -> 85.108.58.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:22.295842 0.160542 udp 10.0.2.104 54523 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:23.297288 0.418886 udp 10.0.2.104 54523 <-> 118.44.234.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:24.298601 0.165112 udp 10.0.2.104 54523 <-> 24.113.162.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:24.619189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:57:25.300019 0.499573 udp 10.0.2.104 54523 <-> 49.143.252.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:26.301016 0.000000 udp 10.0.2.104 54523 -> 79.148.74.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:27.303017 0.000000 udp 10.0.2.104 54523 -> 139.0.190.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:28.303804 0.000000 udp 10.0.2.104 54523 -> 67.191.122.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:29.295290 0.281895 udp 10.0.2.104 54523 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:30.296879 0.171733 udp 10.0.2.104 54523 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:31.298370 0.362744 udp 10.0.2.104 54523 <-> 101.63.69.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:32.299916 0.000000 udp 10.0.2.104 54523 -> 85.86.194.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:33.301132 0.000000 udp 10.0.2.104 54523 -> 112.201.169.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:34.302792 3.338939 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:35.304394 0.000000 udp 10.0.2.104 54523 -> 61.21.68.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:36.295374 0.000000 udp 10.0.2.104 54523 -> 77.184.160.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:36.956245 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:57:37.616731 0.000000 udp 10.0.2.104 54523 <- 67.191.122.185 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:38.298759 1.133467 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:39.300014 0.097299 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:40.301199 0.224844 udp 10.0.2.104 54523 <-> 117.219.242.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:40.621807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:57:41.302834 0.160318 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:42.304238 0.062173 udp 10.0.2.104 54523 <-> 89.136.104.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:43.295501 0.504834 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:44.297005 0.233942 udp 10.0.2.104 54523 <-> 209.137.215.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:45.298669 0.423260 udp 10.0.2.104 54523 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:46.300161 0.198594 udp 10.0.2.104 54523 <-> 72.47.26.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:47.301477 0.000000 udp 10.0.2.104 54523 -> 180.148.57.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:48.302660 0.211898 udp 10.0.2.104 54523 <-> 123.201.176.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:49.304350 0.000000 udp 10.0.2.104 54523 -> 41.83.193.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:57:50.295698 0.177233 udp 10.0.2.104 54523 <-> 71.62.251.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:51.297186 0.075312 udp 10.0.2.104 54523 <-> 213.64.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:52.298410 0.267587 udp 10.0.2.104 54523 <-> 115.244.86.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:53.300370 0.324081 udp 10.0.2.104 54523 <-> 124.125.44.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:54.301385 1.306659 udp 10.0.2.104 54523 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:55.303161 0.148385 udp 10.0.2.104 54523 <-> 81.28.34.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:56.304723 0.990832 udp 10.0.2.104 54523 <-> 78.90.215.236 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:57:58.297193 3.175634 udp 10.0.2.104 54523 <-> 202.235.233.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:00.300516 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:00.300593 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:58:01.301333 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:02.303173 0.033567 udp 10.0.2.104 54523 <-> 130.204.111.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:03.304946 0.190872 udp 10.0.2.104 54523 <-> 62.5.202.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:04.296126 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:05.297722 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:06.309101 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:07.310540 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:08.311968 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:09.312877 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:10.314685 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:11.306009 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:12.307526 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:12.638182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:58:13.308463 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:14.310648 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:15.311397 0.000000 udp 10.0.2.104 54523 -> 188.158.200.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:16.313194 0.059521 udp 10.0.2.104 54523 <-> 78.247.174.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:17.314648 0.000000 udp 10.0.2.104 54523 -> 79.176.13.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:18.306167 0.080220 udp 10.0.2.104 54523 <-> 89.253.136.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:19.307506 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:20.308597 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:21.309978 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:22.311735 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:23.313169 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:23.963769 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:58:24.315004 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:25.305742 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:26.307731 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:27.309103 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:28.310276 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:29.311570 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:29.311618 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:58:31.304863 0.039111 udp 10.0.2.104 54523 <-> 130.204.111.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:32.306418 1.001075 udp 10.0.2.104 54523 <-> 5.14.33.148 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:34.309103 0.644068 udp 10.0.2.104 54523 <-> 62.5.202.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:35.310361 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:36.312203 0.152404 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:37.313297 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:38.304507 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:40.307982 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:41.309505 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:42.310574 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:43.311906 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:44.313366 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:45.304686 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:45.304752 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:58:46.306546 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:47.307696 0.152172 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:58:48.309217 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:49.310221 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:50.311914 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:51.313366 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:52.305211 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:53.305976 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:54.307605 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:55.309414 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:56.310630 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:57.312047 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:58.313903 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:58:59.304886 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:00.306674 0.172165 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:01.308170 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:02.308986 0.519055 udp 10.0.2.104 54523 <-> 101.63.152.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:03.311109 0.000000 udp 10.0.2.104 54523 -> 118.231.75.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:04.312245 4.997082 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:05.313240 0.000000 udp 10.0.2.104 54523 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:06.304989 0.339710 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:07.306453 0.000000 udp 10.0.2.104 54523 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:08.308041 0.000000 udp 10.0.2.104 54523 -> 101.63.152.23 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:09.360400 0.000000 udp 10.0.2.104 54523 <- 5.58.18.253 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:10.311036 0.147868 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:10.971435 0.000201 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:59:11.312373 0.149744 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:12.313718 0.148682 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:13.305303 0.000000 udp 10.0.2.104 54523 -> 59.161.74.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:14.306290 0.094174 udp 10.0.2.104 54523 <-> 85.84.44.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:15.308085 0.359955 udp 10.0.2.104 54523 <-> 95.75.16.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:16.309258 0.049937 udp 10.0.2.104 54523 <-> 78.20.42.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:17.310937 0.000000 udp 10.0.2.104 54523 -> 61.227.54.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:18.312659 0.155038 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:19.313651 0.351084 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:20.304817 0.216055 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:21.306418 0.000000 udp 10.0.2.104 54523 -> 113.184.4.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:22.307949 1.338494 udp 10.0.2.104 54523 <-> 61.62.169.19 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:24.311137 0.000000 udp 10.0.2.104 54523 -> 90.148.169.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:25.312585 0.000000 udp 10.0.2.104 54523 -> 117.205.210.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:26.314105 2.605449 udp 10.0.2.104 54523 <-> 92.75.209.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:27.305519 0.149089 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:28.306818 0.035182 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:29.308408 0.364151 udp 10.0.2.104 54523 <-> 14.97.58.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:30.309571 0.130029 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:31.311029 0.094128 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:32.312642 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:33.313757 1.992806 udp 10.0.2.104 54523 -> 75.248.251.243 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:34.305148 0.355017 udp 10.0.2.104 54523 <-> 113.184.4.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:36.308063 0.000000 udp 10.0.2.104 54523 -> 79.118.210.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:37.309924 0.000000 udp 10.0.2.104 54523 -> 14.97.153.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:38.310707 0.369777 udp 10.0.2.104 54523 <-> 180.94.163.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:39.312475 0.000000 udp 10.0.2.104 54523 -> 75.248.251.243 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:40.314019 0.000000 udp 10.0.2.104 54523 -> 211.31.51.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:41.305188 0.034441 udp 10.0.2.104 54523 <-> 89.41.36.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:42.306950 0.304782 udp 10.0.2.104 54523 <-> 219.121.216.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:43.308132 0.283912 udp 10.0.2.104 54523 <-> 110.47.154.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:44.309615 0.000000 udp 10.0.2.104 54523 -> 186.92.60.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:45.311148 3.314958 udp 10.0.2.104 54523 <-> 121.185.98.47 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:47.313816 0.000000 udp 10.0.2.104 54523 -> 24.23.11.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:49.306723 0.271458 udp 10.0.2.104 54523 <-> 190.6.210.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:50.308536 0.278549 udp 10.0.2.104 54523 <-> 88.48.221.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:51.309367 0.141502 udp 10.0.2.104 54523 <-> 24.185.176.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:52.311128 0.156233 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:53.312960 0.219606 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:54.313963 0.135702 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:55.305155 0.015690 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:56.306548 0.000000 udp 10.0.2.104 54523 -> 79.40.19.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:57.308198 0.000000 udp 10.0.2.104 54523 -> 46.5.250.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 01:59:57.969418 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:59:58.309842 0.160761 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 01:59:59.311478 0.153283 udp 10.0.2.104 54523 <-> 24.179.39.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:00.312359 0.000000 udp 10.0.2.104 54523 -> 24.233.63.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:01.314303 0.000000 udp 10.0.2.104 54523 -> 14.97.62.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:02.305182 0.038594 udp 10.0.2.104 54523 <-> 188.24.75.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:03.306901 1.210470 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:05.310295 0.144781 udp 10.0.2.104 54523 <-> 67.85.150.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:06.311284 0.145236 udp 10.0.2.104 54523 <-> 204.210.176.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:07.312624 0.391906 udp 10.0.2.104 54523 <-> 222.166.66.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:08.314291 0.538457 udp 10.0.2.104 54523 <-> 5.238.152.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:09.306081 0.366553 udp 10.0.2.104 54523 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:10.307521 0.142030 udp 10.0.2.104 54523 <-> 24.185.176.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:11.309086 1.001011 udp 10.0.2.104 54523 <-> 92.247.198.76 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:13.311917 0.000000 udp 10.0.2.104 54523 -> 178.254.244.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:14.313246 0.151842 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:15.314462 0.991318 udp 10.0.2.104 54523 <-> 117.200.88.239 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:17.307168 0.030864 udp 10.0.2.104 54523 <-> 91.106.225.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:18.308784 0.041359 udp 10.0.2.104 54523 <-> 80.238.103.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:19.309890 0.053051 udp 10.0.2.104 54523 <-> 88.135.210.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:20.311482 0.064852 udp 10.0.2.104 54523 <-> 84.55.7.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:21.312915 0.205657 udp 10.0.2.104 54523 <-> 49.207.73.233 16464 CON 0 0 3 1558 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:22.314363 2.151254 udp 10.0.2.104 54523 <-> 76.179.191.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:23.305382 0.315162 udp 10.0.2.104 54523 <-> 115.20.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:25.308489 0.152389 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:26.309977 0.341299 udp 10.0.2.104 54523 <-> 61.224.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:27.311832 2.036839 udp 10.0.2.104 54523 <-> 151.100.92.23 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:28.312727 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:30.305989 0.000000 udp 10.0.2.104 54523 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:31.306900 0.193780 udp 10.0.2.104 54523 <-> 24.48.169.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:32.308982 0.000000 udp 10.0.2.104 54523 -> 119.234.140.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:33.310155 0.163220 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:34.311976 0.151386 udp 10.0.2.104 54523 <-> 24.214.119.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:35.312768 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:36.314423 0.218370 udp 10.0.2.104 54523 <-> 192.252.239.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:37.306004 0.843996 udp 10.0.2.104 54523 <-> 79.6.184.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:38.307710 0.159590 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:39.309036 0.023013 udp 10.0.2.104 54523 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:40.310265 0.066333 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:41.311602 0.222234 udp 10.0.2.104 54523 <-> 183.83.241.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:42.312704 0.344333 udp 10.0.2.104 54523 <-> 220.246.178.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:43.314289 0.000000 udp 10.0.2.104 54523 -> 64.58.242.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:44.305563 0.000000 udp 10.0.2.104 54523 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:44.966496 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:00:45.307336 0.514661 udp 10.0.2.104 54523 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:46.308557 0.123087 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:47.310233 0.142088 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:48.311620 0.416634 udp 10.0.2.104 54523 <-> 39.112.47.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:49.313273 0.017490 udp 10.0.2.104 54523 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:50.314756 0.082774 udp 10.0.2.104 54523 <-> 217.217.142.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:51.306155 0.064119 udp 10.0.2.104 54523 <-> 83.147.167.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:52.307510 0.000000 udp 10.0.2.104 54523 -> 222.230.98.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:00:53.308502 0.342741 udp 10.0.2.104 54523 <-> 111.250.115.59 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:54.310675 0.162546 udp 10.0.2.104 54523 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:55.312148 2.178220 udp 10.0.2.104 54523 <-> 98.177.241.162 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:56.313379 0.031918 udp 10.0.2.104 54523 <-> 80.218.193.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:58.306387 0.138457 udp 10.0.2.104 54523 <-> 67.82.210.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:00:59.307296 0.145875 udp 10.0.2.104 54523 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:00.308582 0.091085 udp 10.0.2.104 54523 <-> 94.179.110.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:01.310128 2.140096 udp 10.0.2.104 54523 <-> 68.39.158.43 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:02.311918 0.000000 udp 10.0.2.104 54523 -> 88.26.209.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:04.304445 0.000000 udp 10.0.2.104 54523 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:05.306123 0.119103 udp 10.0.2.104 54523 <-> 90.157.111.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:06.307525 0.171897 udp 10.0.2.104 54523 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:07.308708 0.162683 udp 10.0.2.104 54523 <-> 209.33.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:08.310469 0.353063 udp 10.0.2.104 54523 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:09.311796 0.204080 udp 10.0.2.104 54523 <-> 98.232.99.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:10.313569 0.824808 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:11.304871 0.308194 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:12.306164 0.387330 udp 10.0.2.104 54523 <-> 188.6.67.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:13.307390 0.053936 udp 10.0.2.104 54523 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:14.309383 0.365214 udp 10.0.2.104 54523 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:15.310682 0.163040 udp 10.0.2.104 54523 <-> 71.61.44.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:16.311964 0.000000 udp 10.0.2.104 54523 -> 41.174.24.211 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:17.313039 0.083666 udp 10.0.2.104 54523 <-> 79.36.229.153 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:18.304674 0.000000 udp 10.0.2.104 54523 -> 183.83.91.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:19.306373 0.328277 udp 10.0.2.104 54523 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:20.307613 0.176412 udp 10.0.2.104 54523 <-> 71.62.251.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:21.309183 1.233756 udp 10.0.2.104 54523 <-> 95.88.160.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:22.310565 0.075609 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:23.312193 0.318415 udp 10.0.2.104 54523 <-> 119.194.129.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:24.313189 0.173796 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:25.305113 0.142346 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:26.305940 0.000000 udp 10.0.2.104 54523 -> 213.87.121.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:27.307977 0.046756 udp 10.0.2.104 54523 <-> 213.202.37.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:28.308955 0.000000 udp 10.0.2.104 54523 -> 93.118.196.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:29.310669 0.000000 udp 10.0.2.104 54523 -> 95.57.199.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:30.312439 3.197543 udp 10.0.2.104 54523 <-> 49.207.73.233 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:31.313598 0.000000 udp 10.0.2.104 54523 -> 95.252.143.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:31.964464 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:01:32.304588 0.048757 udp 10.0.2.104 54523 <-> 90.228.224.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:34.307923 0.155650 udp 10.0.2.104 54523 <-> 71.91.40.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:35.309412 0.000000 udp 10.0.2.104 54523 -> 79.12.116.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:36.310992 0.160201 udp 10.0.2.104 54523 <-> 97.84.210.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:37.312163 0.200049 udp 10.0.2.104 54523 <-> 76.87.9.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:38.313529 0.000000 udp 10.0.2.104 54523 -> 151.71.19.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:39.304810 0.142378 udp 10.0.2.104 54523 <-> 96.37.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:40.306137 0.048633 udp 10.0.2.104 54523 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:41.307980 0.000000 udp 10.0.2.104 54523 -> 79.15.77.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:42.309548 1.188921 udp 10.0.2.104 54523 <-> 82.135.173.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:43.310643 0.000000 udp 10.0.2.104 54523 -> 68.59.89.183 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:44.312249 0.177089 udp 10.0.2.104 54523 <-> 76.253.138.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:45.313298 0.334350 udp 10.0.2.104 54523 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:46.304821 0.031436 udp 10.0.2.104 54523 <-> 82.176.19.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:47.306284 0.130297 udp 10.0.2.104 54523 <-> 178.122.247.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:48.307676 1.460731 udp 10.0.2.104 54523 <-> 115.250.41.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:49.309274 0.105799 udp 10.0.2.104 54523 <-> 77.43.147.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:50.310826 0.000000 udp 10.0.2.104 54523 -> 117.203.223.179 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:51.312358 4.056550 udp 10.0.2.104 54523 <-> 115.240.30.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:52.313934 0.361358 udp 10.0.2.104 54523 <-> 27.3.107.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:53.305034 0.000000 udp 10.0.2.104 54523 -> 115.242.192.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:54.306866 0.170171 udp 10.0.2.104 54523 <-> 174.59.123.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:55.308176 0.113230 udp 10.0.2.104 54523 <-> 72.209.212.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:56.309525 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:01:56.309581 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:01:58.312042 0.358855 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:01:59.313525 0.277271 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:00.305313 0.161308 udp 10.0.2.104 54523 <-> 76.97.226.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:01.306298 0.248086 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:02.308169 0.116285 udp 10.0.2.104 54523 <-> 157.252.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:03.309420 0.129366 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:04.310842 0.319038 udp 10.0.2.104 54523 <-> 210.197.59.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:05.312537 0.393717 udp 10.0.2.104 54523 <-> 114.42.53.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:06.314118 0.160240 udp 10.0.2.104 54523 <-> 216.186.239.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:07.305420 0.000000 udp 10.0.2.104 54523 -> 88.254.143.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:08.306532 0.128788 udp 10.0.2.104 54523 <-> 82.124.235.110 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:09.307919 0.339698 udp 10.0.2.104 54523 <-> 111.242.75.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:10.309236 0.000000 udp 10.0.2.104 54523 -> 24.0.29.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:11.310670 0.650224 udp 10.0.2.104 54523 <-> 78.70.27.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:12.312333 0.165754 udp 10.0.2.104 54523 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:13.313996 0.061643 udp 10.0.2.104 54523 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:14.305470 0.144592 udp 10.0.2.104 54523 <-> 202.71.10.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:16.308486 0.000094 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:16.308580 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:02:17.310203 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:18.310910 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:18.971910 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:02:19.312453 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:20.314206 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:21.305283 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:22.306722 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:23.308138 0.122151 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:24.309363 0.148604 udp 10.0.2.104 54523 <-> 78.249.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:25.310902 0.154530 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:26.312408 0.000000 udp 10.0.2.104 54523 -> 115.246.120.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:27.313662 0.135546 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:28.305589 0.374465 udp 10.0.2.104 54523 <-> 14.97.58.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:29.307075 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:30.308148 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:31.309460 0.161961 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:32.310865 0.067996 udp 10.0.2.104 54523 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:33.312881 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:34.313754 0.306777 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:35.305181 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:36.306931 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:38.310182 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:39.310931 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:40.313036 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:41.314073 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:42.305407 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:43.306681 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:44.308451 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:45.310185 0.000070 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:45.310255 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:02:46.311197 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:47.312675 0.164719 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:48.313869 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:49.305826 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:49.850837 0.000000 udp 10.0.2.104 54523 <- 115.246.120.245 16464 RSP 0 0 1 750 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:50.307358 0.000000 udp 10.0.2.104 54523 -> 2.191.120.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:51.308500 0.021093 udp 10.0.2.104 54523 <-> 79.121.83.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:52.310139 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:53.311766 0.058773 udp 10.0.2.104 54523 <-> 188.27.218.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:54.312644 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:55.314543 0.389439 udp 10.0.2.104 54523 <-> 219.107.166.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:56.305792 0.164768 udp 10.0.2.104 54523 <-> 173.25.161.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:57.306997 0.000000 udp 10.0.2.104 54523 -> 220.233.131.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:02:58.308262 0.053833 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:02:59.310079 0.034836 udp 10.0.2.104 54523 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:00.311876 0.065509 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:01.313111 4.997032 udp 10.0.2.104 54523 <-> 95.42.254.59 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:02.314059 0.060321 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:03.305432 0.000000 udp 10.0.2.104 54523 -> 61.4.170.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:04.307262 0.000000 udp 10.0.2.104 54523 -> 2.193.24.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:05.308518 0.144034 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:05.969423 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:03:06.372068 0.000000 udp 10.0.2.104 54523 <- 95.42.254.59 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:07.312040 0.177119 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:08.312688 0.000000 udp 10.0.2.104 54523 -> 82.229.184.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:09.314712 0.035713 udp 10.0.2.104 54523 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:10.305707 0.000000 udp 10.0.2.104 54523 -> 220.233.131.30 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:11.307351 0.035079 udp 10.0.2.104 54523 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:12.308539 0.327654 udp 10.0.2.104 54523 <-> 219.171.36.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:13.309821 0.061330 udp 10.0.2.104 54523 <-> 87.126.141.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:14.311469 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:15.312988 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:16.314268 0.002689 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:16.316957 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:03:18.307560 0.000000 udp 10.0.2.104 54523 -> 24.241.36.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:19.308476 0.000000 udp 10.0.2.104 54523 -> 68.11.235.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:20.310338 0.154061 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:21.312046 0.419613 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:22.312956 0.121630 udp 10.0.2.104 54523 <-> 90.232.39.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:23.314632 0.335220 udp 10.0.2.104 54523 <-> 111.250.95.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:24.306252 0.509932 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:25.307320 0.156598 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:26.308788 0.054633 udp 10.0.2.104 54523 <-> 150.140.181.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:27.310566 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:28.311367 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:29.313543 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:30.314635 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:31.305717 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:32.307348 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:32.307397 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:03:33.309106 3.995834 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:35.311959 0.190200 udp 10.0.2.104 54523 <-> 68.224.37.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:36.313178 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:38.305734 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:39.307617 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:40.309236 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:41.310365 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:42.311830 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:43.313578 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:44.304669 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:45.306438 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:46.307293 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:47.309237 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:47.309284 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:03:48.310844 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:49.312181 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:50.313134 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:51.304638 0.195896 udp 10.0.2.104 54523 <-> 174.7.21.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:03:52.306333 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:52.967321 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:03:53.307735 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:55.310914 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:56.311990 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:57.313070 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:58.304955 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:03:59.306401 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:00.307371 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:01.309152 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:02.310760 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:03.311747 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:04.313688 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:05.305010 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:05.305087 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:04:06.306426 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:07.307717 0.147027 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:04:08.309511 0.175478 udp 10.0.2.104 54523 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:04:09.311008 0.359963 udp 10.0.2.104 54523 <-> 122.121.39.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:04:10.312377 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:11.313324 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:12.304854 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:13.306444 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:14.308167 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:15.308969 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:16.311057 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:16.643340 3.002444 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:04:17.311843 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:18.313906 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:19.305019 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:20.306639 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:21.308040 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:21.308090 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:04:22.309335 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:23.310482 0.147667 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:04:23.651254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:04:24.311913 0.272144 udp 10.0.2.104 54523 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:04:25.313485 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:26.305047 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:27.306797 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:28.308309 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:29.309603 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:30.310950 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:31.312692 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:31.312785 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:04:31.652916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:04:32.314057 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:33.305261 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:34.306852 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:35.308299 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:36.309784 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:37.311324 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:38.312512 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:39.313812 0.182889 udp 10.0.2.104 54523 <-> 68.224.37.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:04:39.964429 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:04:40.304889 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:41.306317 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:42.307805 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:43.309211 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:44.311235 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:45.312465 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:46.313872 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:47.304961 0.000083 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:47.305044 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:04:47.655925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:04:48.307032 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:49.307999 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:50.309838 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:51.311278 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:52.312364 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:53.314334 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:54.305674 3.003668 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:55.306880 0.170859 udp 10.0.2.104 54523 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:04:56.308602 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:58.311372 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:04:59.312772 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:00.314044 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:01.305139 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:02.306591 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:03.308546 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:04.309421 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:05.310856 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:06.312760 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:07.313969 4.997336 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:07.314047 4.997258 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 02:05:08.305848 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:09.307233 4.005829 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:10.308375 4.005705 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:11.309556 0.148432 udp 10.0.2.104 54523 <-> 68.193.113.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:05:15.305395 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:16.307127 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:17.308402 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:18.309517 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:19.311205 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:19.661708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:05:20.312402 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:21.314428 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:22.305455 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:23.307341 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:24.308749 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:25.309960 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:26.311098 0.141679 udp 10.0.2.104 54523 <-> 207.181.241.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:05:26.972036 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:05:27.312477 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:28.314050 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:29.305421 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:30.307341 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:31.308338 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:32.310027 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:33.311196 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:34.313020 0.000065 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:34.313085 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:05:35.314184 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:36.305774 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:37.307520 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:38.308427 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:39.310378 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:40.311152 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:41.313016 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:42.314052 0.149928 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:05:43.305481 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:44.307348 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:44.307422 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:05:45.308345 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:46.309987 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:47.311748 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:48.313026 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:49.314691 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:50.305866 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:51.307222 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:52.309008 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:53.310350 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:54.311410 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:55.313017 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:56.314181 0.170239 udp 10.0.2.104 54523 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:05:57.306234 0.181174 udp 10.0.2.104 54523 <-> 68.224.37.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:05:58.307036 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:05:58.307124 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:05:59.308852 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:00.310451 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:01.311595 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:02.313357 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:03.314226 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:04.305909 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:05.307304 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:06.309070 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:07.310592 0.139384 udp 10.0.2.104 54523 <-> 207.181.241.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:08.311848 0.158359 udp 10.0.2.104 54523 <-> 24.214.119.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:09.313013 0.316672 udp 10.0.2.104 54523 <-> 183.100.235.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:10.304642 0.031111 udp 10.0.2.104 54523 <-> 131.114.68.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:11.306127 0.032735 udp 10.0.2.104 54523 <-> 130.204.111.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:12.307388 0.144348 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:13.309133 0.329188 udp 10.0.2.104 54523 <-> 50.10.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:13.970000 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:06:14.310085 2.055780 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:15.311893 0.000000 udp 10.0.2.104 54523 -> 5.53.197.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:17.304564 0.050807 udp 10.0.2.104 54523 <-> 150.140.181.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:18.306009 0.202620 udp 10.0.2.104 54523 <-> 69.145.217.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:19.307375 0.359110 udp 10.0.2.104 54523 <-> 223.19.214.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:20.308861 0.347074 udp 10.0.2.104 54523 <-> 122.121.39.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:21.310819 0.355421 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:22.312081 0.211889 udp 10.0.2.104 54523 <-> 66.214.186.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:23.313446 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:24.304886 0.204364 udp 10.0.2.104 54523 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:25.305845 0.144520 udp 10.0.2.104 54523 <-> 24.182.94.18 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:26.307351 4.187650 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:27.309183 0.458120 udp 10.0.2.104 54523 <-> 59.102.184.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:29.311787 0.153312 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:32.306116 0.000068 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:32.306184 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:06:33.307764 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:34.309332 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:35.310372 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:36.312107 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:37.313632 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:38.304790 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:39.306840 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:40.307416 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:41.309470 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:42.310602 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:43.312415 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:44.313221 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:45.304721 4.006164 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:46.306696 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:47.307933 0.732427 udp 10.0.2.104 54523 <-> 68.123.79.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:06:48.309463 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:49.020336 0.011475 udp 10.0.2.104 54533 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 02:06:49.032084 0.000000 udp 10.0.2.104 54534 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:50.312370 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:51.313289 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:52.304684 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:53.306519 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:55.309002 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:56.310661 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:57.312191 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:58.313357 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:06:59.305381 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:00.306481 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:00.967265 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:07:01.308173 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:01.308242 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:07:02.309341 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:03.311168 0.000000 udp 10.0.2.104 54523 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:04.312065 0.379081 udp 10.0.2.104 54523 <-> 203.210.40.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:07:05.313990 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:06.304863 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:07.306903 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:08.307823 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:09.309748 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:10.310732 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:11.312116 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:13.305209 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:14.306830 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:15.308372 0.000125 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:15.308497 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:07:16.309380 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:17.311258 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:18.312411 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:19.313749 0.075995 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:07:20.305556 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:21.306889 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:23.310000 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:24.311024 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:25.312474 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:26.313574 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:26.313629 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:07:27.305850 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:28.306897 0.186046 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:07:29.308328 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:30.309839 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:31.310932 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:32.312799 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:33.314008 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:34.305402 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:35.306986 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:36.308395 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:37.309392 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:37.309442 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:07:39.312504 0.331968 udp 10.0.2.104 54523 <-> 114.36.30.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:07:40.314128 2.040489 udp 10.0.2.104 54523 <-> 88.196.202.112 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:07:41.305828 0.000000 udp 10.0.2.104 54523 -> 190.203.224.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:43.308232 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:44.309901 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:45.310945 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:46.312754 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:47.313816 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:47.964875 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:07:48.305532 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:49.307243 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:50.308761 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:51.309939 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:51.310003 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:07:52.311032 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:53.312399 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:54.313846 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:55.305868 2.030189 udp 10.0.2.104 54523 <-> 46.108.106.61 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:07:56.306685 0.000000 udp 10.0.2.104 54523 -> 180.215.148.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:07:58.309556 0.148980 udp 10.0.2.104 54523 <-> 87.122.138.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:07:59.311078 0.112803 udp 10.0.2.104 54523 <-> 79.176.4.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:00.313027 1.479322 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:02.305947 0.078687 udp 10.0.2.104 54523 <-> 77.189.73.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:03.307250 0.079786 udp 10.0.2.104 54523 <-> 80.164.97.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:04.308609 0.029459 udp 10.0.2.104 54523 <-> 78.90.170.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:05.309799 0.000000 udp 10.0.2.104 54523 -> 115.241.57.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:06.311450 0.000000 udp 10.0.2.104 54523 -> 5.12.105.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:07.312759 0.384343 udp 10.0.2.104 54523 <-> 27.2.158.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:08.314073 0.032882 udp 10.0.2.104 54523 <-> 5.53.170.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:09.305745 0.278986 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:10.307234 0.000000 udp 10.0.2.104 54523 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:11.308529 4.130213 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:12.310219 0.021186 udp 10.0.2.104 54523 <-> 89.173.235.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:13.311301 0.062291 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:14.313022 0.223401 udp 10.0.2.104 54523 <-> 193.30.248.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:16.305618 0.336199 udp 10.0.2.104 54523 <-> 84.38.87.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:17.307056 0.000000 udp 10.0.2.104 54523 -> 49.207.73.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:18.308354 0.200686 udp 10.0.2.104 54523 <-> 71.197.165.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:19.310281 0.404728 udp 10.0.2.104 54523 <-> 203.210.40.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:20.311249 0.000000 udp 10.0.2.104 54523 -> 115.241.57.189 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:21.313193 0.000000 udp 10.0.2.104 54523 -> 115.135.134.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:22.314223 0.052509 udp 10.0.2.104 54523 <-> 145.236.152.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:23.305847 0.034764 udp 10.0.2.104 54523 <-> 5.53.170.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:24.307497 0.000000 udp 10.0.2.104 54523 -> 108.176.154.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:25.308828 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:26.309899 0.058277 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:27.311783 0.144784 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:28.313301 0.162492 udp 10.0.2.104 54523 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:29.314650 0.091590 udp 10.0.2.104 54523 <-> 79.31.183.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:30.306100 0.051410 udp 10.0.2.104 54523 <-> 93.79.173.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:31.307340 0.156272 udp 10.0.2.104 54523 <-> 24.225.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:32.309230 0.055716 udp 10.0.2.104 54523 <-> 91.90.76.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:33.310345 0.151695 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:34.311753 0.046958 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:34.972674 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:08:35.313126 0.062324 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:36.314789 1.651742 arp 10.0.2.104 who 169.254.201.33 INT 3 126 flow=Background-ARP 1970/01/01 02:08:37.306177 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:38.307284 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:39.309219 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:40.310015 0.125292 udp 10.0.2.104 54523 <-> 77.43.147.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:41.311414 0.000000 udp 10.0.2.104 54523 -> 98.111.197.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:42.313396 0.000000 udp 10.0.2.104 54523 -> 84.78.100.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:43.304481 0.000000 udp 10.0.2.104 54523 -> 95.169.211.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:44.306482 0.046974 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:45.307531 0.034533 udp 10.0.2.104 54523 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:46.308993 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:47.310567 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:48.311933 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:49.313413 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:50.304865 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:51.305994 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:52.307240 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:53.309520 0.000000 udp 10.0.2.104 54523 -> 98.111.197.19 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:54.310154 0.160305 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:55.311948 0.000000 udp 10.0.2.104 54523 -> 151.238.17.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:08:56.312986 0.044198 udp 10.0.2.104 54523 <-> 89.65.112.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:57.304627 0.139355 udp 10.0.2.104 54523 <-> 86.107.40.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:58.306521 0.056128 udp 10.0.2.104 54523 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:08:59.307740 0.463910 udp 10.0.2.104 54523 <-> 177.149.127.27 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:00.309399 0.145943 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:01.310543 0.188099 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:02.311621 0.108606 udp 10.0.2.104 54523 <-> 62.87.129.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:03.313386 1.996087 udp 10.0.2.104 54523 <-> 218.166.33.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:04.305066 0.035712 udp 10.0.2.104 54523 <-> 178.27.77.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:05.306128 0.000000 udp 10.0.2.104 54523 -> 1.161.104.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:06.307437 0.400481 udp 10.0.2.104 54523 <-> 211.209.63.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:07.308801 0.049074 udp 10.0.2.104 54523 <-> 5.14.212.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:08.310389 0.077914 udp 10.0.2.104 54523 <-> 95.192.73.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:09.312014 0.038192 udp 10.0.2.104 54523 <-> 79.117.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:10.313359 0.702550 udp 10.0.2.104 54523 <-> 87.16.84.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:11.305005 0.391455 udp 10.0.2.104 54523 <-> 211.109.216.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:12.306621 0.000000 udp 10.0.2.104 54523 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:13.307488 0.338946 udp 10.0.2.104 54523 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:14.308985 0.000000 udp 10.0.2.104 54523 -> 87.111.51.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:15.310655 0.076371 udp 10.0.2.104 54523 <-> 92.241.136.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:16.312174 0.213656 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:17.313289 0.061502 udp 10.0.2.104 54523 <-> 93.105.14.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:18.305191 0.157494 udp 10.0.2.104 54523 <-> 50.150.148.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:19.306417 0.037083 udp 10.0.2.104 54523 <-> 95.77.141.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:20.307641 0.064269 udp 10.0.2.104 54523 <-> 91.90.3.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:21.309188 0.024139 udp 10.0.2.104 54523 <-> 176.199.23.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:21.970539 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:09:22.311116 0.047072 udp 10.0.2.104 54523 <-> 79.114.8.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:23.312209 1.001009 udp 10.0.2.104 54523 <-> 114.37.155.23 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:25.304637 0.167437 udp 10.0.2.104 54523 <-> 161.6.244.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:26.306149 0.148663 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:27.307822 0.247909 udp 10.0.2.104 54523 <-> 122.175.176.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:28.309175 0.140902 udp 10.0.2.104 54523 <-> 24.161.48.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:29.310563 0.063023 udp 10.0.2.104 54523 <-> 92.87.2.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:30.312418 0.155503 udp 10.0.2.104 54523 <-> 174.100.67.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:31.313951 0.441974 udp 10.0.2.104 54523 <-> 190.75.69.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:32.305171 4.145551 udp 10.0.2.104 54523 <-> 113.196.145.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:33.306819 0.290138 udp 10.0.2.104 54523 <-> 177.132.58.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:34.307828 0.092365 udp 10.0.2.104 54523 <-> 95.251.35.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:35.309194 0.159778 udp 10.0.2.104 54523 <-> 98.193.225.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:36.310823 0.202589 udp 10.0.2.104 54523 <-> 68.35.78.193 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:37.312225 0.000000 udp 10.0.2.104 54523 -> 95.57.199.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:38.313385 2.335925 udp 10.0.2.104 54523 <-> 201.93.194.74 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:39.304894 0.045564 udp 10.0.2.104 54523 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:41.308087 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:42.309319 0.000000 udp 10.0.2.104 54523 -> 87.25.17.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:43.311189 1.720774 udp 10.0.2.104 54523 <-> 187.107.15.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:44.312057 0.166533 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:45.314095 0.051126 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:46.305487 4.005765 udp 10.0.2.104 54523 -> 213.87.121.1 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:47.306578 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:48.308199 0.097000 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:49.309453 1.446541 udp 10.0.2.104 54523 <-> 92.86.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:51.312981 0.064186 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:52.313661 0.052179 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:53.304899 0.000000 udp 10.0.2.104 54523 -> 87.96.140.231 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:54.306358 0.000000 udp 10.0.2.104 54523 -> 109.173.226.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:55.308440 4.057355 udp 10.0.2.104 54523 <-> 188.24.5.233 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:56.309964 0.000000 udp 10.0.2.104 54523 -> 87.25.17.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:09:57.310719 3.090087 udp 10.0.2.104 54523 <-> 83.13.164.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:09:58.312251 0.038012 udp 10.0.2.104 54523 <-> 87.96.140.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:00.305736 0.155731 udp 10.0.2.104 54523 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:01.306854 0.050946 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:02.308305 0.206079 udp 10.0.2.104 54523 <-> 151.232.26.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:03.309304 0.274321 udp 10.0.2.104 54523 <-> 177.34.175.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:04.311117 0.157640 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:05.312494 0.344486 udp 10.0.2.104 54523 <-> 183.179.33.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:06.313622 0.062820 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:07.305392 0.339789 udp 10.0.2.104 54523 <-> 190.48.170.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:08.306825 0.122060 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:08.968209 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:10:09.307924 1.836993 udp 10.0.2.104 54523 <-> 184.63.214.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:10.310020 0.000000 udp 10.0.2.104 54523 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:11.311169 0.351436 udp 10.0.2.104 54523 <-> 49.159.65.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:12.312638 0.000000 udp 10.0.2.104 54523 -> 178.122.247.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:13.313979 0.337830 udp 10.0.2.104 54523 <-> 58.140.164.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:14.305695 0.158913 udp 10.0.2.104 54523 <-> 98.193.225.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:15.306970 0.074021 udp 10.0.2.104 54523 <-> 81.227.139.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:16.308396 0.000000 udp 10.0.2.104 54523 -> 87.5.121.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:17.309900 1.038442 udp 10.0.2.104 54523 <-> 88.129.222.153 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:19.312490 0.049382 udp 10.0.2.104 54523 <-> 188.173.249.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:20.314356 0.052324 udp 10.0.2.104 54523 <-> 93.123.127.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:21.305444 1.214689 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:23.308394 0.129168 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:24.309823 1.141681 udp 10.0.2.104 54523 <-> 181.177.5.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:25.311171 0.000000 udp 10.0.2.104 54523 -> 92.86.74.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:26.312865 0.041415 udp 10.0.2.104 54523 <-> 212.233.239.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:27.314442 0.000000 udp 10.0.2.104 54523 -> 115.242.41.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:28.305743 0.340655 udp 10.0.2.104 54523 <-> 119.70.34.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:29.306776 0.066765 udp 10.0.2.104 54523 <-> 87.121.108.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:30.308529 0.000000 udp 10.0.2.104 54523 -> 1.172.59.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:31.310043 0.171499 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:32.311268 3.458148 udp 10.0.2.104 54523 <-> 172.162.41.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:33.313035 2.399382 udp 10.0.2.104 54523 <-> 190.73.186.63 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:34.314311 0.118299 udp 10.0.2.104 54523 <-> 75.109.145.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:36.307258 0.064795 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:37.308680 2.061245 udp 10.0.2.104 54523 <-> 89.32.153.43 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:38.310292 0.221737 udp 10.0.2.104 54523 <-> 177.38.33.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:40.313126 0.295287 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:41.314415 0.207357 udp 10.0.2.104 54523 <-> 71.95.45.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:42.305909 0.066376 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:43.307047 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:44.308867 0.209276 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:45.310043 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:46.311827 0.140707 udp 10.0.2.104 54523 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:10:48.314505 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:48.314586 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:10:49.305659 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:50.306920 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:51.308659 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:52.310168 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:53.311570 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:54.313062 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:55.314521 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:55.965462 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:10:56.305865 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:57.307285 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:58.308406 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:10:59.309976 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:00.311567 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:01.313179 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:02.314122 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:03.306131 2.379246 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:04.307085 0.000000 udp 10.0.2.104 54523 -> 174.101.238.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:06.309904 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:07.311960 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:08.313002 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:09.314614 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:10.305719 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:11.307651 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:13.310622 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:14.311782 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:15.312848 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:16.304496 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:17.306294 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:17.306402 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:11:18.307643 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:19.309240 1.213104 udp 10.0.2.104 54523 <-> 178.25.74.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:21.311457 0.075300 udp 10.0.2.104 54523 <-> 78.84.18.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:22.313800 0.026061 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:23.304707 0.162504 udp 10.0.2.104 54523 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:23.668614 3.000663 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:11:24.306537 0.134186 udp 10.0.2.104 54523 <-> 87.16.118.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:25.307209 3.155490 udp 10.0.2.104 54523 <-> 71.203.98.104 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:26.308975 0.355059 udp 10.0.2.104 54523 <-> 117.205.84.60 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:27.310070 0.420112 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:29.313194 0.170588 udp 10.0.2.104 54523 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:30.305083 0.084271 udp 10.0.2.104 54523 <-> 62.57.203.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:30.855447 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:11:31.306159 3.091482 udp 10.0.2.104 54523 <-> 88.57.184.106 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:32.307698 0.096651 udp 10.0.2.104 54523 <-> 78.84.18.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:33.309360 0.230825 udp 10.0.2.104 54523 <-> 123.238.232.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:35.311807 4.997430 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:36.313071 0.000000 udp 10.0.2.104 54523 -> 75.241.130.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:37.305126 2.123030 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:38.306177 0.349080 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:38.857348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:11:40.721723 0.000000 udp 10.0.2.104 54523 <- 121.124.80.2 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:41.310440 0.160663 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:42.312309 0.000000 udp 10.0.2.104 54523 -> 181.166.121.231 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:42.972842 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:11:43.313503 2.062572 udp 10.0.2.104 54523 <-> 200.125.109.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:44.304834 0.181582 udp 10.0.2.104 54523 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:45.306860 0.000000 udp 10.0.2.104 54523 -> 118.169.215.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:46.307683 0.000000 udp 10.0.2.104 54523 -> 190.203.224.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:47.309486 0.426166 udp 10.0.2.104 54523 <-> 201.26.213.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:48.310744 0.158155 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:49.312261 0.018957 udp 10.0.2.104 54523 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:50.313541 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:51.305143 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:52.306015 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:53.307982 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:54.309450 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:54.859756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:11:55.310856 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:56.312239 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:57.313298 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:11:58.305137 0.412830 udp 10.0.2.104 54523 <-> 201.26.213.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:11:59.306176 0.136072 udp 10.0.2.104 54523 <-> 64.131.189.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:00.307931 0.018900 udp 10.0.2.104 54523 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:01.309024 0.000000 udp 10.0.2.104 54523 -> 114.129.167.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:02.311089 0.050043 udp 10.0.2.104 54523 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:03.312081 0.390848 udp 10.0.2.104 54523 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:04.314065 0.000000 udp 10.0.2.104 54523 -> 180.215.178.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:05.304850 0.029388 udp 10.0.2.104 54523 <-> 78.90.215.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:06.306681 0.000000 udp 10.0.2.104 54523 -> 67.78.29.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:07.308122 0.173185 udp 10.0.2.104 54523 <-> 173.174.12.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:08.309266 0.000000 udp 10.0.2.104 54523 -> 24.2.166.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:09.310649 0.054976 udp 10.0.2.104 54523 <-> 94.53.96.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:10.312333 0.219522 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:11.313671 2.265431 udp 10.0.2.104 54523 <-> 180.215.178.38 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:12.305530 0.000000 udp 10.0.2.104 54523 -> 95.250.98.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:13.306868 0.133615 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:14.308290 0.000000 udp 10.0.2.104 54523 -> 187.53.181.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:15.309186 0.120686 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:16.311284 0.359296 udp 10.0.2.104 54523 <-> 14.98.124.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:17.312295 0.208504 udp 10.0.2.104 54523 <-> 49.207.219.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:18.314184 0.146593 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:19.305062 0.159679 udp 10.0.2.104 54523 <-> 87.17.229.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:20.306541 0.133212 udp 10.0.2.104 54523 <-> 50.157.214.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:21.307952 1.394613 udp 10.0.2.104 54523 <-> 201.26.213.123 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:23.310902 0.000000 udp 10.0.2.104 54523 -> 188.167.110.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:24.312369 0.199681 udp 10.0.2.104 54523 <-> 124.123.242.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:25.313795 0.436693 udp 10.0.2.104 54523 <-> 118.161.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:26.304872 0.308870 udp 10.0.2.104 54523 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:26.866364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:12:27.306666 0.047789 udp 10.0.2.104 54523 <-> 150.214.66.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:28.307799 4.005772 udp 10.0.2.104 54523 <-> 78.247.174.177 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:29.309587 0.320659 udp 10.0.2.104 54523 <-> 201.93.194.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:29.970203 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:12:30.310818 0.000000 udp 10.0.2.104 54523 -> 90.162.147.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:31.312353 0.308213 udp 10.0.2.104 54523 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:33.305119 0.687092 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:34.306607 0.153533 udp 10.0.2.104 54523 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:35.308244 1.240078 udp 10.0.2.104 54523 <-> 89.250.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:36.309278 0.349910 udp 10.0.2.104 54523 <-> 114.46.103.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:37.310980 0.000000 udp 10.0.2.104 54523 -> 46.225.5.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:38.312374 0.041990 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:39.314131 0.000000 udp 10.0.2.104 54523 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:40.305140 0.000000 udp 10.0.2.104 54523 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:41.307050 1.035474 udp 10.0.2.104 54523 <-> 151.100.92.23 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:43.309364 0.146997 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:44.311342 0.000000 udp 10.0.2.104 54523 -> 151.238.248.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:45.312710 0.142777 udp 10.0.2.104 54523 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:46.313967 0.211873 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:47.305568 0.387521 udp 10.0.2.104 54523 <-> 114.39.184.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:48.306580 0.335425 udp 10.0.2.104 54523 <-> 61.227.71.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:49.307990 1.120565 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:50.309762 0.190008 udp 10.0.2.104 54523 <-> 78.227.210.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:51.311215 0.210833 udp 10.0.2.104 54523 <-> 208.99.142.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:52.312913 0.064238 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:12:53.314063 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:54.305337 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:55.307039 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:56.308211 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:57.309531 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:58.311362 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:12:59.313056 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:00.314197 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:01.305315 0.143798 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:02.307147 0.049248 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:03.308463 0.000000 udp 10.0.2.104 54523 -> 27.4.8.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:04.309962 0.000000 udp 10.0.2.104 54523 -> 173.48.100.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:05.311626 0.343099 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:06.313118 3.995614 udp 10.0.2.104 54523 -> 92.75.209.23 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:07.314280 0.000000 udp 10.0.2.104 54523 -> 79.52.29.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:08.305302 0.250477 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:09.307141 0.342893 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:11.309965 1.031389 udp 10.0.2.104 54523 <-> 27.4.8.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:12.311267 0.313392 udp 10.0.2.104 54523 <-> 87.123.22.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:13.313030 0.191023 udp 10.0.2.104 54523 <-> 123.238.11.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:14.314604 0.000000 udp 10.0.2.104 54523 -> 81.227.139.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:15.305730 0.204231 udp 10.0.2.104 54523 <-> 67.183.78.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:16.307460 0.145358 udp 10.0.2.104 54523 <-> 98.27.22.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:16.967790 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:13:17.308944 0.048358 udp 10.0.2.104 54523 <-> 82.17.168.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:18.310372 0.298496 udp 10.0.2.104 54523 <-> 211.135.100.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:19.311727 0.155430 udp 10.0.2.104 54523 <-> 24.118.222.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:20.313269 0.366721 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:21.314689 0.485793 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:22.305538 0.034177 udp 10.0.2.104 54523 <-> 77.77.31.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:23.307059 0.000000 udp 10.0.2.104 54523 -> 24.0.29.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:24.308973 0.343224 udp 10.0.2.104 54523 <-> 14.98.40.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:25.309726 0.029431 udp 10.0.2.104 54523 <-> 213.222.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:26.311919 0.202282 udp 10.0.2.104 54523 <-> 72.47.26.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:27.313213 0.351073 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:28.314075 0.144579 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:29.305472 0.000000 udp 10.0.2.104 54523 -> 68.63.222.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:30.307594 2.595390 udp 10.0.2.104 54523 <-> 14.97.176.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:31.309005 0.160935 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:32.309955 0.128720 udp 10.0.2.104 54523 <-> 92.41.48.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:33.311815 0.000000 udp 10.0.2.104 54523 -> 197.204.128.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:34.313349 0.000000 udp 10.0.2.104 54523 -> 89.73.207.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:35.314248 0.000000 udp 10.0.2.104 54523 -> 14.194.54.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:36.305729 0.000000 udp 10.0.2.104 54523 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:37.307644 0.000000 udp 10.0.2.104 54523 -> 5.146.110.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:38.308544 1.060171 udp 10.0.2.104 54523 <-> 93.105.14.115 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:40.312065 0.391650 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:41.313480 0.105067 udp 10.0.2.104 54523 <-> 92.41.48.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:42.314525 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:43.306311 2.974700 udp 10.0.2.104 54523 <-> 14.97.176.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:44.307229 0.000000 udp 10.0.2.104 54523 -> 115.245.44.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:45.308840 0.055484 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:46.310481 0.315243 udp 10.0.2.104 54523 <-> 42.147.5.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:47.311395 0.096520 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:48.313035 0.000000 udp 10.0.2.104 54523 -> 109.67.249.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:49.304245 0.671537 udp 10.0.2.104 54523 <-> 94.47.18.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:50.305920 0.408182 udp 10.0.2.104 54523 <-> 118.231.71.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:51.307362 0.000000 udp 10.0.2.104 54523 -> 80.25.99.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:13:52.309004 0.369455 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:53.310178 0.417159 udp 10.0.2.104 54523 <-> 118.43.169.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:54.312132 1.395548 udp 10.0.2.104 54523 <-> 1.22.70.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:55.313312 0.483038 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:56.304637 0.156387 udp 10.0.2.104 54523 <-> 24.210.74.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:57.306154 0.355463 udp 10.0.2.104 54523 <-> 118.232.181.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:58.307224 0.551175 udp 10.0.2.104 54523 <-> 1.169.138.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:13:59.309061 0.209320 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:00.310248 0.136040 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:01.312291 0.309696 udp 10.0.2.104 54523 <-> 115.240.6.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:02.312955 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:03.304890 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:03.965529 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:14:04.306244 0.297010 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:05.308040 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:06.309229 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:06.309311 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:14:07.310569 0.177359 udp 10.0.2.104 54523 <-> 173.22.218.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:09.313042 4.997823 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:10.304707 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:11.306390 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:12.307901 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:13.309501 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:14.608894 0.000000 udp 10.0.2.104 54523 <- 179.216.199.28 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:15.312243 0.295412 udp 10.0.2.104 54523 <-> 153.132.3.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:16.313286 0.000000 udp 10.0.2.104 54523 -> 96.31.10.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:17.304489 0.049654 udp 10.0.2.104 54523 <-> 5.14.212.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:18.306135 0.414336 udp 10.0.2.104 54523 <-> 175.213.179.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:19.307672 0.149884 udp 10.0.2.104 54523 <-> 98.30.8.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:20.309433 0.117614 udp 10.0.2.104 54523 <-> 79.9.99.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:21.310299 0.315579 udp 10.0.2.104 54523 <-> 182.235.170.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:22.312139 2.977627 udp 10.0.2.104 54523 <-> 113.193.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:23.313165 0.000000 udp 10.0.2.104 54523 -> 183.82.191.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:24.304883 0.338644 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:25.306557 0.417913 udp 10.0.2.104 54523 <-> 220.24.200.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:26.307827 0.772185 udp 10.0.2.104 54523 <-> 192.95.192.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:27.308969 0.224812 udp 10.0.2.104 54523 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:28.310336 0.177286 udp 10.0.2.104 54523 <-> 173.177.41.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:29.312451 0.000000 udp 10.0.2.104 54523 -> 14.97.58.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:30.313505 4.306867 udp 10.0.2.104 54523 <-> 119.47.20.41 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:31.304873 0.139286 udp 10.0.2.104 54523 <-> 184.163.34.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:32.306388 0.207272 udp 10.0.2.104 54523 <-> 70.66.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:33.308199 0.000000 udp 10.0.2.104 54523 -> 188.245.169.227 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:35.310847 0.048342 udp 10.0.2.104 54523 <-> 92.109.240.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:36.311798 0.127481 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:37.313550 0.458854 udp 10.0.2.104 54523 <-> 95.49.101.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:38.305350 0.015639 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:39.306613 0.050922 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:40.308125 2.074137 udp 10.0.2.104 54523 <-> 86.121.18.55 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:41.309383 2.154225 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:44.313862 0.000000 udp 10.0.2.104 54523 -> 94.238.118.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:45.305313 0.000000 udp 10.0.2.104 54523 -> 37.145.43.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:46.306560 0.382670 udp 10.0.2.104 54523 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:47.308553 0.000000 udp 10.0.2.104 54523 -> 124.121.94.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:48.309132 0.210481 udp 10.0.2.104 54523 <-> 24.8.139.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:49.311016 0.000000 udp 10.0.2.104 54523 -> 74.69.234.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:50.311996 2.309346 udp 10.0.2.104 54523 <-> 123.110.176.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:50.962915 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:14:51.313541 0.399375 udp 10.0.2.104 54523 <-> 114.37.15.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:53.306424 2.002979 udp 10.0.2.104 54523 -> 115.242.33.145 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:54.308393 0.302667 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:56.311058 0.046113 udp 10.0.2.104 54523 <-> 93.105.185.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:57.312132 0.335682 udp 10.0.2.104 54523 <-> 111.250.95.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:14:58.313899 0.000000 udp 10.0.2.104 54523 -> 220.210.107.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:14:59.305332 0.140098 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:00.307002 0.857249 udp 10.0.2.104 54523 <-> 24.123.44.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:01.308206 0.000000 udp 10.0.2.104 54523 -> 90.129.74.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:02.309614 0.047419 udp 10.0.2.104 54523 <-> 77.45.22.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:03.310945 0.057068 udp 10.0.2.104 54523 <-> 93.78.192.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:04.312485 0.139158 udp 10.0.2.104 54523 <-> 75.177.8.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:05.314000 0.057336 udp 10.0.2.104 54523 <-> 88.169.45.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:06.304996 0.068545 udp 10.0.2.104 54523 <-> 83.168.65.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:07.306433 0.388085 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:08.308097 0.159104 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:09.309369 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:10.311110 0.369417 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:11.312657 4.997143 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:12.314122 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:13.305256 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:14.307040 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:15.308482 0.000000 udp 10.0.2.104 54523 -> 98.243.238.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:16.482683 1.008428 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:18.312823 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:19.314318 0.000133 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:19.314451 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:15:21.306495 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:22.307948 0.039433 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:23.309926 0.000000 udp 10.0.2.104 54523 -> 80.244.132.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:24.310887 0.000000 udp 10.0.2.104 54523 -> 95.75.16.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:25.312321 0.040646 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:26.314006 0.165137 udp 10.0.2.104 54523 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:27.305615 0.364163 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:28.306777 0.293321 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:29.308719 0.000000 udp 10.0.2.104 54523 -> 80.244.132.42 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:30.309463 0.000000 udp 10.0.2.104 54523 -> 124.253.240.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:31.311437 0.180761 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:32.312746 0.023514 udp 10.0.2.104 54523 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:33.313782 0.053409 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:34.305194 0.363946 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:35.306828 0.219283 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:36.308299 1.001202 udp 10.0.2.104 54523 <-> 178.254.244.79 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:37.971141 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:15:38.311538 0.187570 udp 10.0.2.104 54523 <-> 89.132.14.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:39.312577 0.000000 udp 10.0.2.104 54523 -> 46.248.34.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:40.314300 0.160572 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:41.305897 0.000000 udp 10.0.2.104 54523 -> 124.253.240.46 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:42.307221 3.306068 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:43.308161 0.051682 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:44.310273 0.000000 udp 10.0.2.104 54523 -> 80.244.132.42 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:46.312824 0.158719 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:47.314317 0.000000 udp 10.0.2.104 54523 -> 95.75.16.41 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:48.305741 0.359946 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:49.307257 0.364543 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:50.308318 4.131809 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:51.310247 0.424619 udp 10.0.2.104 54523 <-> 46.248.34.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:52.311778 1.514591 udp 10.0.2.104 54523 <-> 77.52.88.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:53.313169 0.000000 udp 10.0.2.104 54523 -> 212.16.181.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:55.305588 4.135708 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:56.306852 0.161248 udp 10.0.2.104 54523 <-> 50.128.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:15:57.308539 0.000000 udp 10.0.2.104 54523 -> 24.241.36.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:15:58.310202 0.126673 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:00.312578 0.000000 udp 10.0.2.104 54523 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:01.314369 0.000000 udp 10.0.2.104 54523 -> 174.78.104.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:02.306138 0.096794 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:03.307257 0.049626 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:04.309000 0.024077 udp 10.0.2.104 54523 <-> 213.222.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:05.309852 0.000000 udp 10.0.2.104 54523 -> 79.176.145.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:06.311435 0.065516 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:07.313406 0.146727 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:08.314105 0.382215 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:09.305902 2.322307 udp 10.0.2.104 54523 <-> 153.135.214.57 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:10.306951 0.337948 udp 10.0.2.104 54523 <-> 59.128.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:12.309863 0.000000 udp 10.0.2.104 54523 -> 79.117.54.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:13.311664 0.149690 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:14.313247 2.993953 udp 10.0.2.104 54523 -> 219.205.248.55 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:15.314648 4.011131 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:16.306242 0.000000 udp 10.0.2.104 54523 -> 69.180.10.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:18.308853 0.150620 udp 10.0.2.104 54523 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:20.312024 0.312672 udp 10.0.2.104 54523 <-> 211.230.32.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:21.313135 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:22.304571 0.047229 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:23.306346 3.004160 udp 10.0.2.104 54523 -> 69.244.18.241 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:24.307299 0.505916 udp 10.0.2.104 54523 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:24.968310 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:16:25.308627 0.000000 udp 10.0.2.104 54523 -> 79.54.233.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:27.311420 0.000000 udp 10.0.2.104 54523 -> 125.230.129.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:28.313524 0.000000 udp 10.0.2.104 54523 -> 24.145.80.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:29.304723 2.050391 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:30.306248 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:32.308957 0.304996 udp 10.0.2.104 54523 <-> 59.171.32.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:33.310301 0.358818 udp 10.0.2.104 54523 <-> 115.242.26.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:34.311904 0.000000 udp 10.0.2.104 54523 -> 50.128.173.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:35.313219 0.000000 udp 10.0.2.104 54523 -> 158.181.66.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:36.305178 0.000000 udp 10.0.2.104 54523 -> 49.241.176.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:37.305861 1.043996 udp 10.0.2.104 54523 <-> 188.254.158.154 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:39.308861 0.000000 udp 10.0.2.104 54523 -> 91.191.58.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:40.310343 0.000000 udp 10.0.2.104 54523 -> 125.167.250.177 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:41.311619 0.404980 udp 10.0.2.104 54523 <-> 27.3.106.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:42.312968 0.318549 udp 10.0.2.104 54523 <-> 14.52.229.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:43.304462 0.000000 udp 10.0.2.104 54523 -> 50.128.173.120 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:44.305924 0.278683 udp 10.0.2.104 54523 <-> 123.201.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:45.307361 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:46.309318 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:47.310778 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:48.312348 0.342578 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:49.313626 0.178870 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:50.304520 0.000000 udp 10.0.2.104 54523 -> 69.204.45.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:51.306808 0.047781 udp 10.0.2.104 54523 <-> 5.14.145.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:52.307923 0.408392 udp 10.0.2.104 54523 <-> 101.99.38.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:53.309544 0.323786 udp 10.0.2.104 54523 <-> 42.148.65.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:54.311002 0.047360 udp 10.0.2.104 54523 <-> 84.192.201.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:55.312415 0.302768 udp 10.0.2.104 54523 <-> 59.171.32.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:56.313466 0.339890 udp 10.0.2.104 54523 <-> 117.223.66.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:57.305222 0.000000 udp 10.0.2.104 54523 -> 69.112.37.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:16:58.305987 0.186257 udp 10.0.2.104 54523 <-> 128.218.187.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:16:59.308149 0.397593 udp 10.0.2.104 54523 <-> 1.44.4.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:00.309389 1.343140 udp 10.0.2.104 54523 <-> 101.63.152.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:01.310906 0.167304 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:02.312062 0.029748 udp 10.0.2.104 54523 <-> 77.81.147.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:03.313474 0.059495 udp 10.0.2.104 54523 <-> 85.66.114.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:04.304867 0.372059 udp 10.0.2.104 54523 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:05.306338 0.200044 udp 10.0.2.104 54523 <-> 46.225.75.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:06.307489 0.295044 udp 10.0.2.104 54523 <-> 177.9.75.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:07.309461 0.400736 udp 10.0.2.104 54523 <-> 76.169.87.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:08.311034 0.367677 udp 10.0.2.104 54523 <-> 118.161.173.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:09.312185 0.133765 udp 10.0.2.104 54523 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:10.313783 0.101705 udp 10.0.2.104 54523 <-> 109.64.210.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:11.305395 0.120029 udp 10.0.2.104 54523 <-> 24.122.115.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:11.966202 0.000135 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:17:12.306573 0.341780 udp 10.0.2.104 54523 <-> 220.129.41.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:13.307583 0.140045 udp 10.0.2.104 54523 <-> 68.193.213.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:14.309284 0.098403 udp 10.0.2.104 54523 <-> 136.169.242.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:15.310839 0.158880 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:16.312591 0.157967 udp 10.0.2.104 54523 <-> 79.101.3.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:17.313295 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:18.304906 0.047256 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:19.306473 0.295165 udp 10.0.2.104 54523 <-> 153.132.3.163 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:20.308421 0.316199 udp 10.0.2.104 54523 <-> 59.30.196.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:21.309458 0.043623 udp 10.0.2.104 54523 <-> 213.100.250.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:22.311151 0.142106 udp 10.0.2.104 54523 <-> 24.186.222.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:23.311936 0.137966 udp 10.0.2.104 54523 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:24.313386 0.191478 udp 10.0.2.104 54523 <-> 95.237.40.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:25.304879 0.110316 udp 10.0.2.104 54523 <-> 62.177.243.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:26.306735 0.144607 udp 10.0.2.104 54523 <-> 174.89.51.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:27.307994 2.433673 udp 10.0.2.104 54523 <-> 190.142.167.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:28.309277 0.131864 udp 10.0.2.104 54523 <-> 24.75.177.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:29.311064 0.000000 udp 10.0.2.104 54523 -> 60.51.49.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:30.312357 0.033079 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:31.314038 0.137078 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:32.305288 0.000000 udp 10.0.2.104 54523 -> 83.83.63.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:33.306722 0.343875 udp 10.0.2.104 54523 <-> 1.172.166.20 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:34.308174 0.116420 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:35.309583 3.039258 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:36.311085 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:37.312240 0.000000 udp 10.0.2.104 54523 -> 60.51.49.36 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:39.305335 0.073038 udp 10.0.2.104 54523 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:40.306589 0.339878 udp 10.0.2.104 54523 <-> 1.172.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:41.308610 0.160885 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:42.309979 0.063217 udp 10.0.2.104 54523 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:43.311405 0.352594 udp 10.0.2.104 54523 <-> 117.212.167.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:44.312313 0.000000 udp 10.0.2.104 54523 -> 212.119.201.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:45.313851 0.333830 udp 10.0.2.104 54523 <-> 211.105.150.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:46.305235 0.228590 udp 10.0.2.104 54523 <-> 123.237.130.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:47.307781 0.147445 udp 10.0.2.104 54523 <-> 74.192.244.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:48.307873 0.000000 udp 10.0.2.104 54523 -> 105.152.153.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:49.309515 3.346917 udp 10.0.2.104 54523 <-> 220.129.41.203 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:50.311389 0.000000 udp 10.0.2.104 54523 -> 188.2.163.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:51.312870 0.000000 udp 10.0.2.104 54523 -> 31.184.129.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:53.305251 0.397294 udp 10.0.2.104 54523 <-> 39.117.59.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:54.306793 0.328193 udp 10.0.2.104 54523 <-> 219.174.52.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:55.308468 0.079732 udp 10.0.2.104 54523 -> 80.37.163.210 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:55.388200 0.000000 icmp 80.37.163.210 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 02:17:56.309609 0.000000 udp 10.0.2.104 54523 -> 115.241.29.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:17:57.313626 1.159333 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:17:58.963375 0.000103 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:17:59.314196 0.280405 udp 10.0.2.104 54523 <-> 84.240.238.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:00.305423 0.801258 udp 10.0.2.104 54523 <-> 190.142.167.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:01.306626 1.316027 udp 10.0.2.104 54523 <-> 218.47.116.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:03.310168 1.616240 udp 10.0.2.104 54523 <-> 103.251.81.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:04.311440 0.000000 udp 10.0.2.104 54523 -> 96.31.10.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:05.312353 0.231876 udp 10.0.2.104 54523 <-> 186.89.201.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:06.314427 0.157974 udp 10.0.2.104 54523 <-> 50.150.148.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:07.305172 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:08.306956 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:09.308340 0.555921 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:10.309868 0.358296 udp 10.0.2.104 54523 <-> 59.115.110.227 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:11.177961 0.000000 udp 10.0.2.104 54523 <- 96.31.10.230 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:11.311385 0.344207 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:12.313026 0.051250 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:13.314111 0.057552 udp 10.0.2.104 54523 <-> 86.122.80.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:14.305797 0.573565 udp 10.0.2.104 54523 <-> 216.8.169.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:15.306793 0.283981 udp 10.0.2.104 54523 <-> 181.164.145.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:16.308687 0.156057 udp 10.0.2.104 54523 <-> 69.138.192.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:17.310234 0.145504 udp 10.0.2.104 54523 <-> 24.189.52.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:18.311136 0.156322 udp 10.0.2.104 54523 <-> 24.212.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:19.313039 0.170306 udp 10.0.2.104 54523 <-> 2.119.11.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:20.314364 1.076515 udp 10.0.2.104 54523 <-> 181.177.5.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:21.306067 0.176837 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:22.306726 0.189429 udp 10.0.2.104 54523 <-> 75.135.53.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:23.309098 0.214670 udp 10.0.2.104 54523 <-> 84.225.93.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:24.309775 3.004176 udp 10.0.2.104 54523 <-> 86.121.41.76 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:25.311600 0.347039 udp 10.0.2.104 54523 <-> 114.40.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:26.312503 0.317642 udp 10.0.2.104 54523 <-> 61.4.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:28.305908 1.159472 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:30.308369 0.082869 udp 10.0.2.104 54523 <-> 91.120.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:30.871767 3.001899 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:18:31.310197 0.021419 udp 10.0.2.104 54523 <-> 91.146.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:32.311485 0.372535 udp 10.0.2.104 54523 <-> 36.232.100.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:33.312729 2.131715 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:34.314102 0.000000 udp 10.0.2.104 54523 -> 117.203.209.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:36.307285 0.143355 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:37.308840 0.000000 udp 10.0.2.104 54523 -> 202.235.236.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:37.879290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:18:38.310231 1.462257 udp 10.0.2.104 54523 <-> 223.29.198.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:39.311204 0.138213 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:40.313300 1.262744 udp 10.0.2.104 54523 <-> 177.42.27.168 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:42.305681 0.155003 udp 10.0.2.104 54523 <-> 203.192.244.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:43.307123 0.067229 udp 10.0.2.104 54523 <-> 87.121.108.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:44.309162 0.000000 udp 10.0.2.104 54523 -> 31.63.129.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:45.310204 0.048911 udp 10.0.2.104 54523 <-> 109.60.104.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:45.881233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:18:45.970835 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:18:46.311639 0.258663 udp 10.0.2.104 54523 <-> 117.216.179.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:47.313348 0.305172 udp 10.0.2.104 54523 <-> 114.180.118.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:48.314264 0.160058 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:49.306046 0.334176 udp 10.0.2.104 54523 <-> 218.164.93.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:50.307228 0.452833 udp 10.0.2.104 54523 <-> 14.97.207.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:51.309125 0.000000 udp 10.0.2.104 54523 -> 82.252.180.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:52.310545 0.138583 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:53.311665 0.000000 udp 10.0.2.104 54523 -> 177.148.34.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:18:54.312801 0.138163 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:55.304643 0.179474 udp 10.0.2.104 54523 <-> 92.246.215.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:56.306290 0.461020 udp 10.0.2.104 54523 <-> 115.241.54.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:57.307287 0.163593 udp 10.0.2.104 54523 <-> 65.27.180.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:58.308986 0.151251 udp 10.0.2.104 54523 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:18:59.310592 0.353850 udp 10.0.2.104 54523 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:00.311877 1.072899 udp 10.0.2.104 54523 <-> 92.250.178.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:01.313252 3.150186 udp 10.0.2.104 54523 <-> 109.215.175.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:01.883924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:19:02.304256 0.000000 udp 10.0.2.104 54523 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:03.306400 0.000000 udp 10.0.2.104 54523 -> 190.246.10.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:04.307512 0.000000 udp 10.0.2.104 54523 -> 117.203.114.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:05.308912 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:06.310299 0.143393 udp 10.0.2.104 54523 <-> 97.95.228.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:07.312009 0.159417 udp 10.0.2.104 54523 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:08.313071 0.193398 udp 10.0.2.104 54523 <-> 72.175.79.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:09.304971 0.099322 udp 10.0.2.104 54523 <-> 62.99.1.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:10.305758 0.171328 udp 10.0.2.104 54523 <-> 66.169.209.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:11.307377 0.178528 udp 10.0.2.104 54523 <-> 75.65.7.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:12.309134 0.347276 udp 10.0.2.104 54523 <-> 36.238.37.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:13.310611 0.317266 udp 10.0.2.104 54523 <-> 46.225.124.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:14.311698 0.218482 udp 10.0.2.104 54523 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:15.312987 0.211403 udp 10.0.2.104 54523 <-> 107.2.211.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:16.304631 0.146608 udp 10.0.2.104 54523 <-> 74.69.234.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:17.306009 0.054026 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:18.307389 0.292495 udp 10.0.2.104 54523 <-> 121.2.96.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:19.309080 0.000000 udp 10.0.2.104 54523 -> 114.25.138.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:20.310350 0.000000 udp 10.0.2.104 54523 -> 79.108.202.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:21.311816 0.000000 udp 10.0.2.104 54523 -> 151.33.234.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:22.313504 0.109334 udp 10.0.2.104 54523 <-> 176.215.172.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:23.304608 4.213350 udp 10.0.2.104 54523 <-> 1.23.230.135 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:24.306638 0.000000 udp 10.0.2.104 54523 -> 177.59.72.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:25.307884 0.387129 udp 10.0.2.104 54523 <-> 178.252.156.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:27.310495 0.975801 udp 10.0.2.104 54523 <-> 46.223.92.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:28.312311 0.158968 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:29.313216 0.000000 udp 10.0.2.104 54523 -> 203.109.124.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:30.304792 0.162080 udp 10.0.2.104 54523 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:31.306288 0.227488 udp 10.0.2.104 54523 <-> 81.90.158.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:32.307816 1.597209 udp 10.0.2.104 54523 <-> 187.37.207.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:32.968487 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:19:33.308833 0.000000 udp 10.0.2.104 54523 -> 210.89.38.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:33.890014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:19:34.310582 0.176558 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:35.312356 0.000000 udp 10.0.2.104 54523 -> 70.41.145.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:36.313725 1.493309 udp 10.0.2.104 54523 <-> 62.43.82.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:37.304887 0.258865 udp 10.0.2.104 54523 <-> 98.155.248.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:38.306757 0.000000 udp 10.0.2.104 54523 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:39.308060 0.162010 udp 10.0.2.104 54523 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:40.309500 0.221578 udp 10.0.2.104 54523 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:41.310895 0.400715 udp 10.0.2.104 54523 <-> 36.227.126.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:42.312080 0.154891 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:43.313902 0.000000 udp 10.0.2.104 54523 -> 58.11.136.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:44.304626 0.000000 udp 10.0.2.104 54523 -> 46.252.210.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:45.306568 0.295637 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:46.308234 0.239553 udp 10.0.2.104 54523 <-> 122.175.176.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:47.309823 0.117402 udp 10.0.2.104 54523 <-> 92.41.48.240 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:48.311142 2.237895 udp 10.0.2.104 54523 <-> 74.69.234.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:49.312494 0.322368 udp 10.0.2.104 54523 <-> 180.146.156.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:51.305060 0.198873 udp 10.0.2.104 54523 <-> 50.150.82.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:19:52.306698 0.000089 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:52.306787 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:19:53.308492 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:54.309695 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:55.310458 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:56.312463 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:57.313724 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:58.304880 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:19:59.306881 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:00.307773 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:01.309138 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:02.310550 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:03.312653 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:04.313725 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:05.305276 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:06.306887 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:07.308187 0.000000 udp 10.0.2.104 54523 -> 71.23.119.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:08.309560 0.376974 udp 10.0.2.104 54523 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:09.311152 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:10.312821 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:11.313478 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:12.305165 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:13.306501 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:14.308096 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:15.309552 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:16.311136 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:17.312161 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:18.313513 0.005399 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:18.318912 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.104 0x9efe URN 192 1 110 flow=Background 1970/01/01 02:20:19.305356 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:19.965900 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:20:20.306413 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:21.308184 0.191106 udp 10.0.2.104 54523 <-> 68.7.45.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:22.309765 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:23.310775 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:24.312810 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:25.314431 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:26.305018 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:27.306656 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:28.308316 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:29.309589 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:30.310934 0.000128 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:30.311062 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:20:31.312509 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:32.313936 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:33.305652 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:34.307027 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:35.308183 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:36.309477 0.332086 udp 10.0.2.104 54523 <-> 183.103.133.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:37.311409 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:38.312299 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:39.314127 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:40.305209 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:41.306774 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:42.308345 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:43.309474 0.000000 udp 10.0.2.104 54523 -> 116.202.23.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:44.311500 0.528559 udp 10.0.2.104 54523 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:45.312904 0.373485 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:46.314398 0.206992 udp 10.0.2.104 54523 <-> 50.150.82.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:47.305937 0.319628 udp 10.0.2.104 54523 <-> 5.198.164.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:48.307365 0.170591 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:49.308598 0.109499 udp 10.0.2.104 54523 <-> 92.41.48.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:50.309691 0.201606 udp 10.0.2.104 54523 <-> 113.21.73.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:51.311181 1.070953 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:52.313067 0.000000 udp 10.0.2.104 54523 -> 24.173.112.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:53.314357 0.316492 udp 10.0.2.104 54523 <-> 27.143.12.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:54.306026 0.064247 udp 10.0.2.104 54523 <-> 86.126.127.7 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:55.306708 0.000000 udp 10.0.2.104 54523 -> 1.22.246.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:56.308244 1.756113 udp 10.0.2.104 54523 <-> 187.107.15.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:57.309899 0.210325 udp 10.0.2.104 54523 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:20:58.311196 0.000000 udp 10.0.2.104 54523 -> 79.118.137.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:20:59.313153 0.160591 udp 10.0.2.104 54523 <-> 27.106.107.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:00.314041 0.405151 udp 10.0.2.104 54523 <-> 108.82.13.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:01.305363 0.367108 udp 10.0.2.104 54523 <-> 95.236.42.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:02.306918 0.142843 udp 10.0.2.104 54523 <-> 24.186.222.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:03.308467 0.109957 udp 10.0.2.104 54523 <-> 178.123.34.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:04.310473 0.000000 udp 10.0.2.104 54523 -> 24.250.18.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:05.311231 0.000000 udp 10.0.2.104 54523 -> 24.63.83.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:06.313080 0.260345 udp 10.0.2.104 54523 <-> 187.73.244.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:06.963740 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:21:07.314236 0.036513 udp 10.0.2.104 54523 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:08.306156 0.306840 udp 10.0.2.104 54523 <-> 27.142.3.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:09.307543 0.320738 udp 10.0.2.104 54523 <-> 115.43.11.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:10.308789 0.150304 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:11.310422 0.173972 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:12.311367 0.208242 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:13.313024 0.717073 udp 10.0.2.104 54523 <-> 88.118.174.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:14.314502 0.061685 udp 10.0.2.104 54523 <-> 213.37.230.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:15.306210 0.026129 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:16.307349 0.056206 udp 10.0.2.104 54523 <-> 79.101.3.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:17.309030 0.053061 udp 10.0.2.104 54523 <-> 158.49.133.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:18.310283 0.029496 udp 10.0.2.104 54523 <-> 83.166.192.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:19.311441 0.164463 udp 10.0.2.104 54523 <-> 183.87.170.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:20.312744 0.814733 udp 10.0.2.104 54523 <-> 172.243.139.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:21.314311 0.000000 udp 10.0.2.104 54523 -> 105.152.153.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:22.305542 0.166016 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:23.307766 0.000000 udp 10.0.2.104 54523 -> 190.142.155.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:24.308739 0.349098 udp 10.0.2.104 54523 <-> 114.27.146.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:25.310441 0.139797 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:26.311509 0.205877 udp 10.0.2.104 54523 <-> 27.6.149.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:27.313155 0.327466 udp 10.0.2.104 54523 <-> 121.181.165.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:28.304304 0.157535 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:30.307631 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:31.308537 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:32.310382 0.042656 udp 10.0.2.104 54523 <-> 89.68.6.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:33.311349 0.074665 udp 10.0.2.104 54523 <-> 176.8.201.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:34.313438 0.159112 udp 10.0.2.104 54523 <-> 74.193.110.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:35.304867 0.073785 udp 10.0.2.104 54523 <-> 79.185.248.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:36.306226 4.073049 udp 10.0.2.104 54523 <-> 87.121.108.52 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:37.307484 0.306428 udp 10.0.2.104 54523 <-> 116.203.137.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:38.309150 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:39.310565 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:41.312870 0.223507 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:42.304747 0.394450 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:43.306159 0.051863 udp 10.0.2.104 54523 <-> 217.209.140.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:44.307379 0.828927 udp 10.0.2.104 54523 <-> 200.44.254.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:45.308657 0.202019 udp 10.0.2.104 54523 <-> 183.82.191.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:46.310356 0.000000 udp 10.0.2.104 54523 -> 189.111.16.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:47.311858 0.335968 udp 10.0.2.104 54523 <-> 201.93.44.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:48.313471 0.390476 udp 10.0.2.104 54523 <-> 118.220.213.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:49.014806 0.022865 udp 10.0.2.104 54535 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 02:21:49.037992 0.000000 udp 10.0.2.104 54536 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:49.305116 0.060709 udp 10.0.2.104 54523 <-> 93.72.244.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:50.306106 0.000000 udp 10.0.2.104 54523 -> 139.0.190.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:51.307556 0.464725 udp 10.0.2.104 54523 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:52.309357 0.000000 udp 10.0.2.104 54523 -> 78.51.177.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:53.310789 0.000000 udp 10.0.2.104 54523 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:53.971704 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:21:54.311997 1.042405 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:55.313621 0.000000 udp 10.0.2.104 54523 -> 116.203.105.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:56.305111 0.322249 udp 10.0.2.104 54523 <-> 61.228.94.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:57.306347 2.892413 udp 10.0.2.104 54523 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:21:58.307460 0.000000 udp 10.0.2.104 54523 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:21:59.309058 0.086358 udp 10.0.2.104 54523 <-> 78.51.177.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:00.310275 0.148337 udp 10.0.2.104 54523 <-> 71.82.48.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:01.311768 0.173999 udp 10.0.2.104 54523 <-> 87.237.237.210 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:02.313088 0.041824 udp 10.0.2.104 54523 <-> 5.20.165.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:03.304898 0.000000 udp 10.0.2.104 54523 -> 223.191.5.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:04.306383 0.486071 udp 10.0.2.104 54523 <-> 79.132.162.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:05.307781 0.154080 udp 10.0.2.104 54523 <-> 24.214.174.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:06.309475 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:08.312396 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:09.313518 0.000100 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:09.313618 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:22:10.304546 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:11.306633 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:12.307701 0.109612 udp 10.0.2.104 54523 <-> 178.122.72.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:13.308874 0.030970 udp 10.0.2.104 54523 <-> 83.166.192.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:14.310534 0.297860 udp 10.0.2.104 54523 <-> 202.90.212.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:15.311763 0.168295 udp 10.0.2.104 54523 <-> 98.70.75.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:16.313697 0.256047 udp 10.0.2.104 54523 <-> 50.47.95.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:17.304867 0.146383 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:18.306498 0.165258 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:19.307528 0.046866 udp 10.0.2.104 54523 <-> 46.160.101.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:20.309640 0.000000 udp 10.0.2.104 54523 -> 118.161.62.192 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:21.310644 0.370866 udp 10.0.2.104 54523 <-> 61.126.229.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:22.312231 0.405009 udp 10.0.2.104 54523 <-> 115.241.205.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:23.313467 0.164860 udp 10.0.2.104 54523 <-> 27.106.110.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:24.305308 0.077075 udp 10.0.2.104 54523 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:25.306533 0.396714 udp 10.0.2.104 54523 <-> 1.244.229.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:26.308153 0.341825 udp 10.0.2.104 54523 <-> 114.27.79.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:27.309228 0.058627 udp 10.0.2.104 54523 <-> 212.92.232.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:28.311010 0.250412 udp 10.0.2.104 54523 <-> 89.132.14.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:29.312228 0.258902 udp 10.0.2.104 54523 <-> 123.237.188.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:30.313318 0.285462 udp 10.0.2.104 54523 <-> 49.1.104.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:31.305310 0.068041 udp 10.0.2.104 54523 <-> 78.227.210.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:32.306903 0.028023 udp 10.0.2.104 54523 <-> 84.107.67.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:33.308225 0.162506 udp 10.0.2.104 54523 <-> 184.74.129.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:34.309419 0.000000 udp 10.0.2.104 54523 -> 106.215.105.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:35.311077 0.136367 udp 10.0.2.104 54523 <-> 69.115.199.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:36.312002 0.154690 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:37.313438 0.137343 udp 10.0.2.104 54523 <-> 24.189.52.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:38.305506 0.355614 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:39.306494 0.354335 udp 10.0.2.104 54523 <-> 61.62.74.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:40.308308 0.042645 udp 10.0.2.104 54523 <-> 83.166.2.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:40.969248 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:22:41.309259 0.018889 udp 10.0.2.104 54523 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:42.311326 0.330866 udp 10.0.2.104 54523 <-> 220.109.234.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:43.312672 0.400109 udp 10.0.2.104 54523 <-> 114.24.184.148 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:44.313440 0.310696 udp 10.0.2.104 54523 <-> 24.232.15.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:45.305447 0.267980 udp 10.0.2.104 54523 <-> 27.6.149.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:46.306543 0.000000 udp 10.0.2.104 54523 -> 79.40.188.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:22:47.308379 0.750406 udp 10.0.2.104 54523 <-> 111.91.82.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:48.309622 0.286451 udp 10.0.2.104 54523 <-> 210.1.173.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:49.310752 0.164962 udp 10.0.2.104 54523 <-> 98.224.54.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:50.312581 0.136572 udp 10.0.2.104 54523 <-> 24.193.122.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:51.314217 0.312439 udp 10.0.2.104 54523 <-> 182.234.35.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:52.305250 0.037492 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:53.306961 0.168755 udp 10.0.2.104 54523 <-> 67.165.135.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:54.308232 0.062301 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:55.309489 0.060955 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:56.311158 0.067268 udp 10.0.2.104 54523 <-> 78.136.104.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:57.312488 0.053046 udp 10.0.2.104 54523 <-> 79.113.103.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:58.313912 0.310117 udp 10.0.2.104 54523 <-> 59.20.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:22:59.305264 0.305245 udp 10.0.2.104 54523 <-> 187.102.85.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:00.306591 0.380585 udp 10.0.2.104 54523 <-> 59.161.91.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:01.307891 0.169861 udp 10.0.2.104 54523 <-> 184.69.38.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:02.309578 0.064181 udp 10.0.2.104 54523 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:03.311472 1.029462 udp 10.0.2.104 54523 <-> 68.123.79.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:04.312550 0.038285 udp 10.0.2.104 54523 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:05.314125 0.334819 udp 10.0.2.104 54523 <-> 121.149.235.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:06.305474 0.328438 udp 10.0.2.104 54523 <-> 124.98.253.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:07.306501 0.318811 udp 10.0.2.104 54523 <-> 221.115.144.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:08.308262 0.159425 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:09.309399 0.940603 udp 10.0.2.104 54523 <-> 75.14.209.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:10.311100 4.997385 udp 10.0.2.104 54523 <-> 91.83.1.162 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:11.312991 0.000000 udp 10.0.2.104 54523 -> 81.137.247.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:12.314432 0.258776 udp 10.0.2.104 54523 <-> 49.205.245.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:13.305138 0.099376 udp 10.0.2.104 54523 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:14.306742 0.081707 udp 10.0.2.104 54523 <-> 93.155.151.163 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:15.350484 0.000000 udp 10.0.2.104 54523 <- 91.83.1.162 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:16.310206 0.303177 udp 10.0.2.104 54523 <-> 126.122.50.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:17.311489 0.000000 udp 10.0.2.104 54523 -> 188.27.204.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:18.312706 0.071165 udp 10.0.2.104 54523 <-> 80.164.97.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:19.314432 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:20.305634 0.057307 udp 10.0.2.104 54523 <-> 90.154.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:21.307083 0.000000 udp 10.0.2.104 54523 -> 98.70.42.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:22.308480 0.198574 udp 10.0.2.104 54523 <-> 78.239.29.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:23.309887 0.000000 udp 10.0.2.104 54523 -> 27.3.107.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:24.311645 0.148041 udp 10.0.2.104 54523 <-> 67.85.14.60 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:25.313041 0.356419 udp 10.0.2.104 54523 <-> 115.242.112.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:26.314086 0.000000 udp 10.0.2.104 54523 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:27.305820 0.309204 udp 10.0.2.104 54523 <-> 59.20.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:27.966340 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:23:28.306931 0.156417 udp 10.0.2.104 54523 <-> 107.5.244.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:29.308335 0.114751 udp 10.0.2.104 54523 <-> 87.222.107.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:30.309589 0.043457 udp 10.0.2.104 54523 <-> 193.30.248.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:31.311467 0.143915 udp 10.0.2.104 54523 <-> 87.110.25.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:32.312644 0.233372 udp 10.0.2.104 54523 <-> 194.225.198.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:33.314047 0.000000 udp 10.0.2.104 54523 -> 41.141.89.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:34.305403 0.024647 udp 10.0.2.104 54523 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:35.307357 0.000067 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:35.307424 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:23:37.309951 0.000000 udp 10.0.2.104 54523 -> 86.107.40.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:38.311451 0.397747 udp 10.0.2.104 54523 <-> 203.210.40.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:39.312745 0.082926 udp 10.0.2.104 54523 <-> 213.60.133.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:40.314145 0.115204 udp 10.0.2.104 54523 <-> 68.9.106.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:41.306025 1.030780 udp 10.0.2.104 54523 <-> 190.193.96.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:42.307251 0.036587 udp 10.0.2.104 54523 <-> 84.55.122.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:43.308605 0.201381 udp 10.0.2.104 54523 <-> 210.212.99.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:44.309965 0.031359 udp 10.0.2.104 54523 <-> 131.114.68.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:45.311212 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:46.313229 0.327508 udp 10.0.2.104 54523 <-> 188.6.67.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:47.314201 2.118241 udp 10.0.2.104 54523 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:48.305664 0.303004 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:49.307631 0.000000 udp 10.0.2.104 54523 -> 27.106.112.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:50.308836 1.164296 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:52.311823 0.166350 udp 10.0.2.104 54523 <-> 203.109.124.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:23:53.313131 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:54.314112 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:55.305895 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:56.306973 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:57.308505 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:58.310110 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:23:59.311334 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:00.312716 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:01.304821 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:03.307296 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:04.308871 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:05.310521 0.000164 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:05.310685 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:24:06.311968 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:07.312891 0.162536 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:08.304724 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:09.306110 0.028430 udp 10.0.2.104 54523 <-> 91.146.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:10.307306 0.000000 udp 10.0.2.104 54523 -> 117.208.11.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:11.308660 0.090360 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:12.310048 0.000000 udp 10.0.2.104 54523 -> 91.147.223.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:13.311794 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:14.312960 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:14.964047 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:24:15.304684 0.040283 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:16.305741 0.160158 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:17.307366 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:18.309282 0.316806 udp 10.0.2.104 54523 <-> 61.86.180.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:19.310346 4.997299 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:20.312125 0.000000 udp 10.0.2.104 54523 -> 89.34.99.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:21.313178 0.178815 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:22.304673 0.314719 udp 10.0.2.104 54523 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:23.306183 0.299249 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:24.525543 4.004245 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:25.308893 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:26.310293 0.316672 udp 10.0.2.104 54523 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:27.311573 0.040333 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:29.304986 0.114093 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:30.306159 0.162289 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:31.307314 0.731855 udp 10.0.2.104 54523 <-> 186.205.72.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:32.309372 0.041003 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:33.310246 0.093742 udp 10.0.2.104 54523 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:34.312360 0.267826 udp 10.0.2.104 54523 <-> 181.28.105.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:35.313704 0.000000 udp 10.0.2.104 54523 -> 82.124.235.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:36.304627 0.368219 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:37.306518 0.112833 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:38.307806 0.039037 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:39.308929 2.169526 udp 10.0.2.104 54523 <-> 50.165.123.68 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:40.310749 2.994338 udp 10.0.2.104 54523 -> 108.235.49.119 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:42.313610 0.045656 udp 10.0.2.104 54523 <-> 78.8.65.60 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:44.306496 0.000000 udp 10.0.2.104 54523 -> 84.151.135.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:45.307581 0.311841 udp 10.0.2.104 54523 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:46.309138 2.419128 udp 10.0.2.104 54523 <-> 70.70.164.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:47.310652 0.000000 udp 10.0.2.104 54523 -> 46.253.3.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:48.312181 0.054241 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:49.313646 0.155291 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:50.305200 0.141115 udp 10.0.2.104 54523 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:51.306484 0.000000 udp 10.0.2.104 54523 -> 92.241.152.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:52.307504 0.547744 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:53.309009 4.181774 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:54.310386 0.037378 udp 10.0.2.104 54523 <-> 188.246.77.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:24:55.312529 0.000000 udp 10.0.2.104 54523 -> 190.198.162.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:56.313474 0.000000 udp 10.0.2.104 54523 -> 139.0.190.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:58.306660 0.000000 udp 10.0.2.104 54523 -> 94.120.173.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:24:59.307873 1.178749 udp 10.0.2.104 54523 <-> 27.4.8.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:00.309675 0.183409 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:01.310409 0.097424 udp 10.0.2.104 54523 <-> 136.169.242.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:01.971655 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:25:02.312241 0.165429 udp 10.0.2.104 54523 <-> 203.109.124.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:03.313657 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:04.305237 0.394943 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:05.306200 0.067209 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:06.307652 0.030996 udp 10.0.2.104 54523 <-> 149.172.63.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:07.309549 4.997159 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:08.310973 0.351781 udp 10.0.2.104 54523 <-> 189.111.16.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:09.312363 0.000000 udp 10.0.2.104 54523 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:10.313778 0.000000 udp 10.0.2.104 54523 -> 1.36.1.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:11.305155 0.051610 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:12.461090 1.002463 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:14.309548 0.000000 udp 10.0.2.104 54523 -> 189.111.16.169 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:15.310796 0.138310 udp 10.0.2.104 54523 <-> 64.131.160.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:16.312792 0.151047 udp 10.0.2.104 54523 <-> 107.15.192.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:17.313887 0.022892 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:18.305599 0.258122 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:19.306831 0.181422 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:20.307858 0.000000 udp 10.0.2.104 54523 -> 10.0.0.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:21.309895 0.165038 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:22.311315 0.000000 udp 10.0.2.104 54523 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:23.312680 0.000000 udp 10.0.2.104 54523 -> 27.51.58.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:24.313744 0.000000 udp 10.0.2.104 54523 -> 79.121.110.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:25.305191 0.000000 udp 10.0.2.104 54523 -> 212.98.191.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:26.306542 4.005646 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:27.308458 4.020702 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:28.309247 4.997514 udp 10.0.2.104 54523 -> 84.229.204.125 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:29.310688 0.313110 udp 10.0.2.104 54523 <-> 187.10.81.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:32.305348 0.000000 udp 10.0.2.104 54523 -> 212.98.191.56 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:34.308151 0.036600 udp 10.0.2.104 54523 <-> 188.246.81.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:35.309501 0.000000 udp 10.0.2.104 54523 -> 10.0.0.1 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:36.311463 0.312313 udp 10.0.2.104 54523 <-> 187.10.81.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:37.312623 3.010113 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:37.895235 3.002193 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:25:39.305398 0.016325 udp 10.0.2.104 54523 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:41.308647 0.000000 udp 10.0.2.104 54523 -> 84.229.204.125 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:42.309507 0.163770 udp 10.0.2.104 54523 <-> 203.109.124.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:43.311789 4.997667 udp 10.0.2.104 54523 -> 98.243.238.45 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:44.312683 0.164281 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:44.903559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:25:45.314056 0.000000 udp 10.0.2.104 54523 -> 122.151.71.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:46.305305 0.132929 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:47.306822 0.066916 udp 10.0.2.104 54523 <-> 188.27.204.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:48.969190 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:25:49.309620 0.000000 udp 10.0.2.104 54523 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:50.311428 0.000000 udp 10.0.2.104 54523 -> 218.250.127.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:50.981016 0.000000 udp 10.0.2.104 54523 <- 122.151.71.119 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:51.312759 0.000000 udp 10.0.2.104 54523 -> 223.191.5.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:52.313768 0.021648 udp 10.0.2.104 54523 <-> 78.42.147.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:52.904886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:25:53.305317 0.185331 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:54.307085 4.509305 udp 10.0.2.104 54523 <-> 189.103.208.104 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:55.308065 0.147721 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:56.310000 0.182610 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:25:57.311268 0.000000 udp 10.0.2.104 54523 -> 173.23.113.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:25:59.314277 0.022984 udp 10.0.2.104 54523 <-> 78.42.147.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:00.305543 0.579083 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:01.306788 0.614583 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:02.308442 0.952359 udp 10.0.2.104 54523 <-> 223.191.5.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:03.309987 1.277484 udp 10.0.2.104 54523 <-> 68.48.58.156 16464 CON 0 0 4 776 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:05.313095 0.029160 udp 10.0.2.104 54523 <-> 78.42.147.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:06.314132 0.074326 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:07.305341 0.152926 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:08.306939 0.297878 udp 10.0.2.104 54523 <-> 122.102.197.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:08.908208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:26:09.308201 0.343513 udp 10.0.2.104 54523 <-> 114.24.22.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:10.309933 0.177457 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:11.311086 0.000000 udp 10.0.2.104 54523 -> 84.225.79.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:12.312949 0.127154 udp 10.0.2.104 54523 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:13.314165 0.184318 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:14.305878 4.075816 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:15.307160 4.435542 udp 10.0.2.104 54523 <-> 122.151.71.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:16.308904 1.383461 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:19.312743 0.000000 udp 10.0.2.104 54523 -> 114.24.22.131 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:20.314364 1.148968 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:22.307490 4.005832 udp 10.0.2.104 54523 -> 201.243.112.174 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:23.308987 0.038085 udp 10.0.2.104 54523 <-> 79.117.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:24.310503 0.000000 udp 10.0.2.104 54523 -> 46.237.76.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:25.311946 0.507726 udp 10.0.2.104 54523 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:27.314826 0.022800 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:28.305837 0.156803 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:29.307099 0.000000 udp 10.0.2.104 54523 -> 101.63.152.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:30.309121 2.520023 udp 10.0.2.104 54523 <-> 108.178.146.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:31.310350 0.212459 udp 10.0.2.104 54523 <-> 183.83.241.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:32.311596 0.055320 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:33.313112 0.050966 udp 10.0.2.104 54523 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:34.304294 0.279459 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:35.305569 0.158983 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:35.966480 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:26:36.307265 0.181674 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:37.308571 0.199619 udp 10.0.2.104 54523 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:38.310367 0.160144 udp 10.0.2.104 54523 <-> 78.204.132.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:39.311360 0.000000 udp 10.0.2.104 54523 -> 212.106.25.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:40.312886 0.091084 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:40.914118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:26:41.304700 0.000000 udp 10.0.2.104 54523 -> 75.177.1.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:42.306078 0.096336 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:43.307752 0.040549 udp 10.0.2.104 54523 <-> 86.18.63.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:44.308919 0.200437 udp 10.0.2.104 54523 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:45.310363 2.033654 udp 10.0.2.104 54523 <-> 181.208.87.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:46.311758 0.236035 udp 10.0.2.104 54523 <-> 78.204.132.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:47.312991 0.000000 udp 10.0.2.104 54523 -> 203.202.216.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:48.304687 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:49.306116 0.262881 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:50.307850 0.127894 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:51.309226 0.172872 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:52.310527 0.167265 udp 10.0.2.104 54523 <-> 75.66.130.254 16464 CON 0 0 2 388 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:53.312175 0.509347 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:54.312981 0.024740 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:55.304698 0.065781 udp 10.0.2.104 54523 <-> 86.126.127.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:56.305791 0.153618 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:57.307470 0.069407 udp 10.0.2.104 54523 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:26:58.309081 3.004541 udp 10.0.2.104 54523 -> 114.76.142.179 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:26:59.310741 0.394748 udp 10.0.2.104 54523 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:00.311578 0.067330 udp 10.0.2.104 54523 <-> 91.90.3.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:02.304387 0.335529 udp 10.0.2.104 54523 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:03.306480 0.063804 udp 10.0.2.104 54523 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:04.307331 0.152808 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:05.309074 0.125838 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:06.310164 3.564380 udp 10.0.2.104 54523 <-> 115.241.1.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:07.312453 0.000000 udp 10.0.2.104 54523 -> 72.26.130.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:08.313070 0.000000 udp 10.0.2.104 54523 -> 197.35.180.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:09.304804 0.362874 udp 10.0.2.104 54523 <-> 202.30.12.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:10.306192 0.000000 udp 10.0.2.104 54523 -> 117.226.158.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:11.307473 0.155279 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:12.309253 0.148026 udp 10.0.2.104 54523 <-> 75.143.174.18 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:13.310538 1.171802 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:15.313101 0.341048 udp 10.0.2.104 54523 <-> 36.231.250.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:16.305081 0.000000 udp 10.0.2.104 54523 -> 175.100.158.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:17.306057 0.000000 udp 10.0.2.104 54523 -> 75.152.30.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:18.307748 0.139482 udp 10.0.2.104 54523 <-> 65.189.203.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:19.309449 0.173279 udp 10.0.2.104 54523 <-> 74.128.200.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:20.310761 0.081249 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:21.312120 0.160178 udp 10.0.2.104 54523 <-> 76.180.211.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:22.313365 0.188232 udp 10.0.2.104 54523 <-> 182.237.169.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:22.964461 0.000146 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:27:23.304814 0.147254 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:24.306314 0.221427 udp 10.0.2.104 54523 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:25.307828 0.000000 udp 10.0.2.104 54523 -> 78.51.177.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:26.309700 0.128901 udp 10.0.2.104 54523 <-> 89.132.14.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:27.310908 0.296390 udp 10.0.2.104 54523 <-> 122.102.197.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:28.312446 0.000000 udp 10.0.2.104 54523 -> 122.179.28.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:28.332350 0.000000 udp 10.0.2.104 54523 <- 175.100.158.199 16464 RSP 0 0 1 750 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:29.313908 1.211211 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:31.306525 0.140045 udp 10.0.2.104 54523 <-> 63.131.171.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:32.307686 0.000000 udp 10.0.2.104 54523 -> 178.77.18.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:33.309078 0.045938 udp 10.0.2.104 54523 <-> 188.230.65.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:34.310957 4.996777 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:35.311834 0.042633 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:36.313386 0.167861 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:37.304704 0.000000 udp 10.0.2.104 54523 -> 114.24.201.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:38.306178 0.000000 udp 10.0.2.104 54523 -> 188.216.6.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:39.534422 0.000000 udp 10.0.2.104 54523 <- 24.209.250.28 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:40.309098 0.363185 udp 10.0.2.104 54523 <-> 1.162.95.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:41.310560 0.373760 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:42.312343 0.000000 udp 10.0.2.104 54523 -> 90.30.19.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:43.314162 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:44.304962 0.939134 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:45.307028 0.000000 udp 10.0.2.104 54523 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:46.308219 0.000000 udp 10.0.2.104 54523 -> 67.251.124.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:47.309208 3.004265 udp 10.0.2.104 54523 -> 159.251.12.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:48.311267 0.148383 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:49.312577 0.389085 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:52.306557 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:53.308431 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:53.308524 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:27:54.309152 4.997616 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:55.311149 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:56.312453 0.096142 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:27:57.313828 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:27:58.305201 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:00.308448 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:01.309803 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:02.311433 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:03.312744 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:04.314250 1.271251 udp 10.0.2.104 54523 <-> 108.178.146.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:05.305132 0.095920 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:06.306734 0.037839 udp 10.0.2.104 54523 <-> 213.240.213.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:07.307920 0.068023 udp 10.0.2.104 54523 <-> 212.231.224.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:08.309588 0.000000 udp 10.0.2.104 54523 -> 188.94.82.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:09.311421 0.152029 udp 10.0.2.104 54523 <-> 151.74.222.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:09.972287 0.000118 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:28:10.312550 0.049329 udp 10.0.2.104 54523 <-> 95.96.225.26 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:11.314200 0.239663 udp 10.0.2.104 54523 <-> 117.222.179.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:12.305566 0.000000 udp 10.0.2.104 54523 -> 181.168.168.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:13.306586 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:14.308122 0.324840 udp 10.0.2.104 54523 <-> 1.175.123.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:15.309907 0.000000 udp 10.0.2.104 54523 -> 212.42.123.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:16.311196 0.164020 udp 10.0.2.104 54523 <-> 66.227.200.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:17.312287 0.140643 udp 10.0.2.104 54523 <-> 97.80.121.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:18.313676 0.325545 udp 10.0.2.104 54523 <-> 210.222.222.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:19.305351 0.362927 udp 10.0.2.104 54523 <-> 219.73.68.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:20.306530 0.151678 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:21.308442 0.155238 udp 10.0.2.104 54523 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:22.309828 0.053102 udp 10.0.2.104 54523 <-> 94.53.96.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:23.310936 0.615717 udp 10.0.2.104 54523 <-> 115.241.136.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:24.312626 0.157900 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:25.313859 0.528805 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:26.305166 0.000000 udp 10.0.2.104 54523 -> 5.58.18.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:27.307033 0.000000 udp 10.0.2.104 54523 -> 61.70.234.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:28.308359 2.159891 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:29.309963 3.004247 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:31.312501 0.000000 udp 10.0.2.104 54523 -> 92.229.124.245 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:33.305421 0.000000 udp 10.0.2.104 54523 -> 87.20.159.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:34.306994 0.134735 udp 10.0.2.104 54523 <-> 68.195.20.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:35.308932 0.072373 udp 10.0.2.104 54523 <-> 2.119.11.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:36.309850 0.317002 udp 10.0.2.104 54523 <-> 211.135.100.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:37.311181 0.000000 udp 10.0.2.104 54523 -> 69.122.169.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:38.312413 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:39.313866 0.000000 udp 10.0.2.104 54523 -> 195.97.36.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:40.305904 0.398217 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:41.307202 0.145509 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:42.308570 0.000000 udp 10.0.2.104 54523 -> 61.70.234.252 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:43.309835 0.565001 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:44.311646 0.158505 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:45.312897 0.299864 udp 10.0.2.104 54523 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:46.313922 0.157755 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:47.305993 1.342285 udp 10.0.2.104 54523 <-> 46.5.112.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:48.306925 0.058342 udp 10.0.2.104 54523 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:49.308553 0.000000 udp 10.0.2.104 54523 -> 124.241.132.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:50.310418 0.000000 udp 10.0.2.104 54523 -> 189.10.65.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:51.311221 0.087976 udp 10.0.2.104 54523 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:52.313260 0.153790 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:53.314518 0.015642 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:54.306034 0.317090 udp 10.0.2.104 54523 <-> 222.117.41.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:55.306851 0.034389 udp 10.0.2.104 54523 <-> 178.27.77.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:56.308910 3.003682 udp 10.0.2.104 54523 -> 77.85.43.251 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:28:56.969424 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:28:57.309735 0.044206 udp 10.0.2.104 54523 <-> 95.180.114.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:28:58.311347 0.390626 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:00.314756 0.058871 udp 10.0.2.104 54523 <-> 217.174.48.38 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:01.305535 0.053134 udp 10.0.2.104 54523 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:02.307197 0.185868 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:03.308447 0.000000 udp 10.0.2.104 54523 -> 201.213.98.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:04.310548 0.000000 udp 10.0.2.104 54523 -> 67.181.230.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:05.311824 0.036756 udp 10.0.2.104 54523 <-> 147.143.158.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:06.312948 0.733767 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:07.304580 0.133402 udp 10.0.2.104 54523 <-> 76.117.140.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:08.305818 0.073116 udp 10.0.2.104 54523 <-> 93.156.254.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:09.307105 0.146754 udp 10.0.2.104 54523 <-> 70.15.122.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:10.308783 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:11.310293 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:12.311379 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:13.313303 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:14.304796 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:15.306274 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:16.307275 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:17.309176 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:18.310275 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:19.311662 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:20.313148 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:22.305706 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:23.307775 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:23.307855 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:29:24.309051 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:25.310273 0.948605 udp 10.0.2.104 54523 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:26.311977 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:27.313523 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:28.304489 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:29.306248 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:30.307645 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:31.309021 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:32.310342 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:33.312082 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:34.313360 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:35.304886 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:36.306165 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:37.307463 0.000070 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:37.307533 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:29:38.308891 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:39.310713 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:40.312491 0.145668 udp 10.0.2.104 54523 <-> 70.15.122.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:41.313091 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:42.304760 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:43.306354 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:43.967241 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:29:44.307666 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:45.309130 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:46.310374 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:47.312174 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:48.313415 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:49.304540 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:50.305944 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:51.307697 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:52.308810 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:53.310250 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:54.312116 0.000090 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:54.312206 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:29:55.313351 4.997553 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:56.304666 0.000000 udp 10.0.2.104 54523 -> 5.12.11.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:57.306509 0.162158 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:29:58.307584 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:29:59.309356 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:01.311945 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:02.313460 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:03.304731 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:04.306790 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:05.307712 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:06.309131 0.000118 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:06.309249 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:30:08.312396 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:09.313474 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:10.304709 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:11.306551 0.144598 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:12.307594 0.782649 udp 10.0.2.104 54523 <-> 189.10.65.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:13.309019 0.345315 udp 10.0.2.104 54523 <-> 114.47.92.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:14.311013 0.855821 udp 10.0.2.104 54523 <-> 117.203.132.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:15.312218 0.326572 udp 10.0.2.104 54523 <-> 202.220.251.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:16.313626 0.166987 udp 10.0.2.104 54523 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:17.305534 1.229075 udp 10.0.2.104 54523 <-> 123.238.232.90 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:19.307737 0.168482 udp 10.0.2.104 54523 <-> 75.64.134.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:20.309127 0.133340 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:21.310900 0.143564 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:22.312271 0.000000 udp 10.0.2.104 54523 -> 42.3.155.214 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:23.313449 0.005249 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:24.305074 0.000000 udp 10.0.2.104 54523 -> 24.209.250.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:25.306351 0.195088 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:26.308503 0.339133 udp 10.0.2.104 54523 <-> 111.252.46.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:27.309498 0.000000 udp 10.0.2.104 54523 -> 83.31.19.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:28.311067 3.995379 udp 10.0.2.104 54523 <-> 46.214.189.242 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:29.312316 0.000000 udp 10.0.2.104 54523 -> 24.10.251.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:30.313951 0.194254 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:30.965012 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:30:31.305323 0.064601 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:33.307789 0.149026 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:34.309741 0.055234 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:35.310977 0.403300 udp 10.0.2.104 54523 <-> 211.109.216.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:36.312810 0.111879 udp 10.0.2.104 54523 <-> 176.238.175.251 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:37.313972 0.000000 udp 10.0.2.104 54523 -> 142.166.205.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:38.305264 4.506710 udp 10.0.2.104 54523 <-> 115.240.25.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:39.306945 0.163393 udp 10.0.2.104 54523 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:40.308471 0.333670 udp 10.0.2.104 54523 <-> 202.95.39.74 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:41.310036 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:42.310943 0.106268 udp 10.0.2.104 54523 <-> 176.238.175.251 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:43.312196 1.852897 udp 10.0.2.104 54523 <-> 211.74.239.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:44.313623 0.131526 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:45.305608 0.154061 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:46.306793 3.623263 udp 10.0.2.104 54523 <-> 175.35.18.93 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:48.309575 2.080392 udp 10.0.2.104 54523 <-> 176.8.141.175 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:51.314325 0.000000 udp 10.0.2.104 54523 -> 201.235.95.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:52.305111 0.402308 udp 10.0.2.104 54523 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:53.306493 0.144665 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:54.308231 0.362880 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:55.309778 0.000000 udp 10.0.2.104 54523 -> 219.205.248.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:56.311628 0.000000 udp 10.0.2.104 54523 -> 92.241.136.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:57.312429 0.000000 udp 10.0.2.104 54523 -> 59.93.124.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:30:58.314191 0.175444 udp 10.0.2.104 54523 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:30:59.305581 0.357836 udp 10.0.2.104 54523 <-> 111.252.46.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:00.307041 0.309529 udp 10.0.2.104 54523 <-> 112.170.230.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:01.308684 0.000000 udp 10.0.2.104 54523 -> 176.58.84.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:02.309760 0.209377 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:03.310881 0.035458 udp 10.0.2.104 54523 <-> 149.172.200.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:04.313215 0.059172 udp 10.0.2.104 54523 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:05.313896 2.322652 udp 10.0.2.104 54523 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:06.305943 0.318393 udp 10.0.2.104 54523 <-> 115.241.205.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:07.306630 1.001714 udp 10.0.2.104 54523 -> 98.112.212.46 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:09.310217 0.165369 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:10.311098 0.086243 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:11.313090 0.336785 udp 10.0.2.104 54523 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:12.314181 0.000000 udp 10.0.2.104 54523 -> 83.54.119.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:13.305368 0.148876 udp 10.0.2.104 54523 <-> 24.114.217.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:14.306755 0.000000 udp 10.0.2.104 54523 -> 98.112.212.46 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:15.308194 0.000000 udp 10.0.2.104 54523 -> 188.53.70.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:16.310096 0.040893 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:17.311387 0.131315 udp 10.0.2.104 54523 <-> 95.111.219.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:17.972607 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:31:18.312461 0.016105 udp 10.0.2.104 54523 <-> 84.118.6.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:19.314092 4.334849 udp 10.0.2.104 54523 <-> 220.142.70.108 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:20.305357 0.000000 udp 10.0.2.104 54523 -> 85.87.36.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:21.306819 0.174584 udp 10.0.2.104 54523 <-> 76.85.171.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:22.308872 0.000000 udp 10.0.2.104 54523 -> 109.175.40.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:24.311104 0.080946 udp 10.0.2.104 54523 <-> 84.90.96.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:25.312759 0.354365 udp 10.0.2.104 54523 <-> 1.162.95.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:26.314001 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:27.306164 0.212961 udp 10.0.2.104 54523 <-> 123.201.23.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:28.307333 0.053323 udp 10.0.2.104 54523 <-> 188.24.75.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:29.308896 0.000000 udp 10.0.2.104 54523 -> 87.13.213.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:30.309716 2.003173 udp 10.0.2.104 54523 -> 74.231.186.96 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:31.311716 0.160242 udp 10.0.2.104 54523 <-> 68.59.56.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:33.314135 0.204753 udp 10.0.2.104 54523 <-> 123.201.23.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:34.305463 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:35.307287 0.299182 udp 10.0.2.104 54523 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:36.308877 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:37.310495 0.085991 udp 10.0.2.104 54523 <-> 78.220.84.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:38.311426 0.061754 udp 10.0.2.104 54523 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:39.313145 0.077048 udp 10.0.2.104 54523 <-> 79.101.3.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:40.304085 0.339575 udp 10.0.2.104 54523 <-> 114.24.119.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:41.305510 0.560913 udp 10.0.2.104 54523 <-> 117.204.73.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:42.307275 0.305806 udp 10.0.2.104 54523 <-> 180.146.156.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:43.308825 0.229248 udp 10.0.2.104 54523 <-> 123.236.223.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:44.310410 0.379038 udp 10.0.2.104 54523 <-> 117.212.167.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:45.311436 2.227009 udp 10.0.2.104 54523 <-> 115.243.103.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:46.313384 1.240754 udp 10.0.2.104 54523 <-> 106.207.199.33 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:47.304754 0.334595 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:48.305745 1.150550 udp 10.0.2.104 54523 <-> 71.80.67.63 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:50.309080 0.336337 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:51.310005 0.368489 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:52.311625 0.203056 udp 10.0.2.104 54523 <-> 202.71.18.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:53.312853 0.000000 udp 10.0.2.104 54523 -> 71.197.28.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:54.304525 0.000000 udp 10.0.2.104 54523 -> 79.12.116.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:31:55.306381 0.819732 udp 10.0.2.104 54523 <-> 122.151.71.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:56.307602 2.343091 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:57.308959 0.321601 udp 10.0.2.104 54523 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:31:59.311988 2.325777 udp 10.0.2.104 54523 <-> 121.245.46.194 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:00.313574 0.037090 udp 10.0.2.104 54523 <-> 81.161.245.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:02.305972 0.000000 udp 10.0.2.104 54523 -> 83.136.186.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:03.307527 0.105784 udp 10.0.2.104 54523 <-> 78.220.84.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:04.308998 1.367664 udp 10.0.2.104 54523 <-> 213.233.178.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:04.969524 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:32:05.310654 0.145466 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:06.311608 0.000000 udp 10.0.2.104 54523 -> 173.18.114.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:08.304588 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:09.306302 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:09.306376 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:32:10.307221 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:11.309362 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:12.310095 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:13.311704 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:14.313376 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:15.304695 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:16.306177 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:17.307340 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:18.309306 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:19.310158 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:20.312308 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:21.313452 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:22.304952 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:23.306569 0.144714 udp 10.0.2.104 54523 <-> 75.143.174.18 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:24.307581 0.317490 udp 10.0.2.104 54523 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:25.308792 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:26.310919 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:27.311688 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:28.313927 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:30.306643 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:31.307453 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:32.309652 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:33.310371 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:34.312352 0.000105 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:34.312457 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:32:35.313540 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:36.305114 0.146278 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:37.306287 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:38.308254 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:39.309451 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:40.311042 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:41.312254 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:42.313316 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:43.304739 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:44.306793 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:44.920659 3.001392 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:32:45.307950 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:46.308968 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:47.311146 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:48.311913 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:50.304975 0.000094 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:50.305069 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:32:51.306726 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:51.927438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:32:51.967592 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:32:52.307986 0.056487 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:32:53.309065 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:54.310992 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:55.312054 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:56.313502 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:57.304904 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:58.306832 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:59.308457 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:32:59.928892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:33:01.311110 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:02.312029 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:03.313794 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:04.304923 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:05.306730 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:06.308099 0.000100 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:06.308199 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:33:07.309433 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:08.310802 4.020505 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:09.312552 0.338330 udp 10.0.2.104 54523 <-> 180.57.33.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:10.314050 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:11.305045 0.305428 udp 10.0.2.104 54523 <-> 211.135.100.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:13.308223 0.085588 udp 10.0.2.104 54523 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:14.309379 0.028339 udp 10.0.2.104 54523 <-> 95.111.26.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:15.311246 4.590972 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:15.931670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:33:16.312926 0.262811 udp 10.0.2.104 54523 <-> 96.10.91.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:17.313853 0.061908 udp 10.0.2.104 54523 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:18.305566 0.054242 udp 10.0.2.104 54523 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:20.308596 3.372685 udp 10.0.2.104 54523 <-> 194.123.75.91 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:21.309323 0.000000 udp 10.0.2.104 54523 -> 124.40.96.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:22.311122 0.155394 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:24.314014 0.000000 udp 10.0.2.104 54523 -> 223.191.5.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:25.305229 0.210412 udp 10.0.2.104 54523 <-> 124.125.249.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:26.306622 0.000000 udp 10.0.2.104 54523 -> 98.112.212.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:27.308025 0.000000 udp 10.0.2.104 54523 -> 36.225.131.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:28.310028 0.310583 udp 10.0.2.104 54523 <-> 49.250.97.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:29.311354 0.137853 udp 10.0.2.104 54523 <-> 87.5.37.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:30.312993 0.064563 udp 10.0.2.104 54523 <-> 82.139.22.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:31.313879 0.000000 udp 10.0.2.104 54523 -> 14.99.96.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:32.305242 0.000000 udp 10.0.2.104 54523 -> 80.86.237.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:33.306683 0.162468 udp 10.0.2.104 54523 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:34.308037 0.000000 udp 10.0.2.104 54523 -> 86.126.2.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:35.309673 0.027230 udp 10.0.2.104 54523 <-> 89.133.13.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:36.311567 0.345270 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:37.312607 0.000000 udp 10.0.2.104 54523 -> 108.162.90.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:38.314438 0.000000 udp 10.0.2.104 54523 -> 106.67.97.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:38.964750 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:33:39.305428 0.000000 udp 10.0.2.104 54523 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:40.307331 0.171602 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:41.308916 0.709143 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:42.309544 0.169365 udp 10.0.2.104 54523 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:43.311628 0.306971 udp 10.0.2.104 54523 <-> 218.47.116.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:44.313094 0.285255 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:45.313958 3.996277 udp 10.0.2.104 54523 -> 126.117.115.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:46.305437 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:47.306994 0.579444 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:47.938284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:33:48.308754 4.031601 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:50.311099 0.368338 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:51.312692 1.993324 udp 10.0.2.104 54523 -> 14.194.54.247 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:54.307381 0.284831 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:55.308596 0.047201 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:56.310372 0.155524 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:57.311531 0.233371 udp 10.0.2.104 54523 <-> 161.200.26.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:33:58.312796 0.000000 udp 10.0.2.104 54523 -> 114.37.155.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:33:59.314519 0.134390 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:00.305650 1.057689 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:02.308804 0.035183 udp 10.0.2.104 54523 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:03.310361 0.140266 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:04.311321 1.060696 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:06.314483 0.160449 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:07.305869 4.005465 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:08.306982 0.000000 udp 10.0.2.104 54523 -> 74.190.148.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:09.308321 0.141511 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:10.310279 0.000000 udp 10.0.2.104 54523 -> 193.13.114.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:12.313346 0.451248 udp 10.0.2.104 54523 <-> 75.241.130.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:12.845158 0.000000 udp 10.0.2.104 54523 <- 208.101.72.234 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:13.304472 0.005283 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:14.305822 0.428782 udp 10.0.2.104 54523 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:15.307370 0.306606 udp 10.0.2.104 54523 <-> 219.117.119.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:16.309083 0.325454 udp 10.0.2.104 54523 <-> 14.96.169.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:17.310092 0.000000 udp 10.0.2.104 54523 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:18.311380 0.000000 udp 10.0.2.104 54523 -> 109.60.31.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:19.312872 0.016219 udp 10.0.2.104 54523 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:20.304476 1.648812 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:21.305890 0.138316 udp 10.0.2.104 54523 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:22.307060 0.356532 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:23.309126 0.159669 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:24.310361 0.000000 udp 10.0.2.104 54523 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:25.311688 0.078680 udp 10.0.2.104 54523 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:25.972559 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:34:26.312901 0.013766 udp 10.0.2.104 54523 <-> 94.113.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:27.304650 0.126051 udp 10.0.2.104 54523 <-> 79.33.64.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:28.305722 0.122373 udp 10.0.2.104 54523 <-> 130.15.154.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:29.307690 0.153499 udp 10.0.2.104 54523 <-> 96.42.34.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:30.308831 0.000000 udp 10.0.2.104 54523 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:31.310471 0.211864 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:32.311583 0.000000 udp 10.0.2.104 54523 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:33.313334 0.000000 udp 10.0.2.104 54523 -> 212.98.191.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:34.304243 0.297883 udp 10.0.2.104 54523 <-> 124.144.206.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:35.306350 0.000000 udp 10.0.2.104 54523 -> 87.112.8.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:36.307260 0.160388 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:37.308902 2.046946 udp 10.0.2.104 54523 <-> 178.254.244.79 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:38.310356 0.066946 udp 10.0.2.104 54523 <-> 188.25.111.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:40.313607 0.231109 udp 10.0.2.104 54523 <-> 79.132.162.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:41.304953 0.312187 udp 10.0.2.104 54523 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:42.305913 0.297439 udp 10.0.2.104 54523 <-> 180.199.144.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:43.307215 0.000000 udp 10.0.2.104 54523 -> 46.1.74.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:44.309155 0.159864 udp 10.0.2.104 54523 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:45.310745 0.355460 udp 10.0.2.104 54523 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:46.311898 0.288985 udp 10.0.2.104 54523 <-> 101.63.202.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:47.313372 0.631813 udp 10.0.2.104 54523 <-> 117.200.81.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:48.304904 0.000000 udp 10.0.2.104 54523 -> 77.176.38.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:49.305825 0.000000 udp 10.0.2.104 54523 -> 41.213.176.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:50.307489 0.170456 udp 10.0.2.104 54523 <-> 70.178.163.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:51.309446 0.076473 udp 10.0.2.104 54523 <-> 2.94.11.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:52.310554 0.338356 udp 10.0.2.104 54523 <-> 220.142.70.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:53.311617 0.000000 udp 10.0.2.104 54523 -> 113.193.40.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:54.313425 0.000000 udp 10.0.2.104 54523 -> 182.64.167.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:34:55.304816 3.022316 udp 10.0.2.104 54523 <-> 88.132.62.75 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:56.306735 1.465848 udp 10.0.2.104 54523 <-> 58.84.170.170 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:57.308048 0.340811 udp 10.0.2.104 54523 <-> 114.27.79.169 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:34:59.310917 0.000000 udp 10.0.2.104 54523 -> 86.126.32.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:00.312357 4.481413 udp 10.0.2.104 54523 <-> 180.215.184.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:01.313579 0.070746 udp 10.0.2.104 54523 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:02.305007 0.168361 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:03.306211 0.000000 udp 10.0.2.104 54523 -> 113.168.98.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:04.307405 0.219613 udp 10.0.2.104 54523 <-> 174.63.38.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:05.309222 0.151129 udp 10.0.2.104 54523 <-> 24.177.207.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:06.310339 0.151469 udp 10.0.2.104 54523 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:07.312078 0.083564 udp 10.0.2.104 54523 <-> 213.60.133.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:08.313940 0.040730 udp 10.0.2.104 54523 <-> 195.14.221.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:09.305341 0.148316 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:10.306308 0.000000 udp 10.0.2.104 54523 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:11.308123 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:12.309307 0.000000 udp 10.0.2.104 54523 -> 85.232.150.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:12.970309 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:35:13.310969 0.381038 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:14.311991 0.027447 udp 10.0.2.104 54523 <-> 80.99.199.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:15.313880 0.384159 udp 10.0.2.104 54523 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:16.304670 0.071305 udp 10.0.2.104 54523 <-> 92.145.128.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:17.306082 0.000000 udp 10.0.2.104 54523 -> 92.229.124.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:18.308078 0.391023 udp 10.0.2.104 54523 <-> 115.240.19.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:19.309214 0.360396 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:20.310445 0.062424 udp 10.0.2.104 54523 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:21.312284 0.000000 udp 10.0.2.104 54523 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:22.313448 0.000000 udp 10.0.2.104 54523 -> 114.27.79.169 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:23.305137 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:24.306641 0.085220 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:25.307627 0.022335 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:26.309626 0.000000 udp 10.0.2.104 54523 -> 181.166.124.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:27.311193 0.035292 udp 10.0.2.104 54523 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:28.312466 0.080963 udp 10.0.2.104 54523 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:29.313454 0.000000 udp 10.0.2.104 54523 -> 5.15.146.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:30.305505 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:31.306224 0.358224 udp 10.0.2.104 54523 <-> 115.240.60.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:32.308184 0.204044 udp 10.0.2.104 54523 <-> 120.60.42.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:33.309564 0.304510 udp 10.0.2.104 54523 <-> 58.70.117.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:34.311179 0.086450 udp 10.0.2.104 54523 <-> 213.60.133.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:35.312220 0.020737 udp 10.0.2.104 54523 <-> 93.103.42.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:36.314085 0.039422 udp 10.0.2.104 54523 <-> 185.22.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:37.304842 1.337883 udp 10.0.2.104 54523 <-> 114.37.155.23 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:39.308143 0.000000 udp 10.0.2.104 54523 -> 59.161.100.202 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:40.309330 0.074817 udp 10.0.2.104 54523 <-> 93.156.254.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:41.310991 0.206641 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:42.312112 0.217187 udp 10.0.2.104 54523 <-> 75.25.1.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:43.314012 0.173707 udp 10.0.2.104 54523 <-> 98.200.250.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:44.305392 0.028100 udp 10.0.2.104 54523 <-> 80.99.199.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:45.306828 0.154293 udp 10.0.2.104 54523 <-> 24.158.210.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:46.307853 0.048525 udp 10.0.2.104 54523 <-> 188.219.92.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:47.309511 0.144575 udp 10.0.2.104 54523 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:48.310914 0.000000 udp 10.0.2.104 54523 -> 87.0.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:49.312530 0.000000 udp 10.0.2.104 54523 -> 194.183.18.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:50.314247 0.403168 udp 10.0.2.104 54523 <-> 59.94.4.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:51.305252 0.352341 udp 10.0.2.104 54523 <-> 111.252.46.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:52.306426 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:35:53.308552 0.311890 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:54.309338 0.157451 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:55.310928 0.044485 udp 10.0.2.104 54523 <-> 95.158.153.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:56.312245 0.074997 udp 10.0.2.104 54523 <-> 78.84.18.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:57.314318 2.083013 udp 10.0.2.104 54523 <-> 136.169.242.142 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:58.305465 0.591823 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:35:59.967847 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:36:00.308273 0.294538 udp 10.0.2.104 54523 <-> 201.27.127.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:01.309569 0.079925 udp 10.0.2.104 54523 <-> 78.220.84.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:02.311512 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:03.312674 0.163008 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:04.314109 0.422505 udp 10.0.2.104 54523 <-> 180.215.93.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:05.305401 0.000000 udp 10.0.2.104 54523 -> 111.125.237.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:06.306837 0.030021 udp 10.0.2.104 54523 <-> 77.21.231.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:07.308398 0.061079 udp 10.0.2.104 54523 <-> 194.140.132.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:08.310046 0.211814 udp 10.0.2.104 54523 <-> 106.51.80.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:09.311398 0.166063 udp 10.0.2.104 54523 <-> 71.40.150.82 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:10.313073 0.300867 udp 10.0.2.104 54523 <-> 117.221.112.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:11.314093 0.000000 udp 10.0.2.104 54523 -> 98.229.185.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:12.305450 0.725560 udp 10.0.2.104 54523 <-> 221.39.55.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:13.306824 0.143572 udp 10.0.2.104 54523 <-> 67.85.14.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:14.308424 0.051056 udp 10.0.2.104 54523 <-> 89.99.62.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:15.309765 0.000000 udp 10.0.2.104 54523 -> 60.228.50.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:16.311761 0.135318 udp 10.0.2.104 54523 <-> 24.186.222.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:17.312735 0.067418 udp 10.0.2.104 54523 <-> 87.121.108.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:18.314412 0.260258 udp 10.0.2.104 54523 <-> 1.186.112.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:19.305735 0.150872 udp 10.0.2.104 54523 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:20.306960 0.043681 udp 10.0.2.104 54523 <-> 80.97.88.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:21.308286 0.165869 udp 10.0.2.104 54523 <-> 69.207.82.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:22.309546 0.094118 udp 10.0.2.104 54523 <-> 85.87.142.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:23.311331 2.416124 udp 10.0.2.104 54523 <-> 175.211.29.15 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:24.312588 1.992922 udp 10.0.2.104 54523 -> 59.181.113.5 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:27.306961 0.035892 udp 10.0.2.104 54523 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:28.308611 0.031052 udp 10.0.2.104 54523 <-> 131.114.68.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:29.310399 0.127385 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:30.311238 0.174968 udp 10.0.2.104 54523 <-> 74.197.79.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:31.312852 0.086199 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:32.314176 0.144692 udp 10.0.2.104 54523 <-> 97.95.228.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:33.305843 0.047887 udp 10.0.2.104 54523 <-> 150.214.66.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:34.307312 0.000000 udp 10.0.2.104 54523 -> 98.217.103.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:35.309047 0.381329 udp 10.0.2.104 54523 <-> 200.101.111.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:36.310352 0.191399 udp 10.0.2.104 54523 <-> 68.107.129.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:37.311817 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:38.313181 0.142001 udp 10.0.2.104 54523 <-> 24.185.38.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:39.314738 0.339721 udp 10.0.2.104 54523 <-> 111.249.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:40.305731 0.235400 udp 10.0.2.104 54523 <-> 62.99.119.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:41.307366 2.408329 udp 10.0.2.104 54523 <-> 84.232.108.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:42.308507 0.000000 udp 10.0.2.104 54523 -> 189.54.80.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:43.310289 0.068677 udp 10.0.2.104 54523 <-> 88.186.78.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:44.311370 3.326774 udp 10.0.2.104 54523 <-> 95.252.143.43 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:45.313148 0.065663 udp 10.0.2.104 54523 <-> 91.90.3.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:46.304268 0.307812 udp 10.0.2.104 54523 <-> 119.173.79.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:46.965019 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:36:48.307300 0.431547 udp 10.0.2.104 54523 <-> 175.119.240.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:49.018213 0.021895 udp 10.0.2.104 54537 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 02:36:49.040414 0.000000 udp 10.0.2.104 54538 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:49.309040 0.077428 udp 10.0.2.104 54523 <-> 92.231.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:50.310374 0.000000 udp 10.0.2.104 54523 -> 77.211.42.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:36:51.311334 0.140783 udp 10.0.2.104 54523 <-> 67.242.95.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:52.313104 0.111119 udp 10.0.2.104 54523 <-> 128.143.29.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:53.304719 0.038918 udp 10.0.2.104 54523 <-> 89.65.132.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:54.305551 1.811539 udp 10.0.2.104 54523 <-> 190.94.244.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:55.307143 0.055028 udp 10.0.2.104 54523 <-> 77.85.204.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:56.308614 3.151344 udp 10.0.2.104 54523 <-> 74.221.196.35 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:57.310026 0.072030 udp 10.0.2.104 54523 <-> 93.156.61.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:36:58.311788 0.128759 udp 10.0.2.104 54523 <-> 157.252.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:00.304888 0.029485 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:01.305930 0.334821 udp 10.0.2.104 54523 <-> 223.16.38.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:02.307599 0.038685 udp 10.0.2.104 54523 <-> 81.226.88.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:03.308919 0.084860 udp 10.0.2.104 54523 <-> 83.213.6.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:04.310143 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:05.311745 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:06.313070 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:06.313119 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:37:07.304405 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:08.305776 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:10.308624 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:11.310203 0.309202 udp 10.0.2.104 54523 <-> 61.26.178.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:12.311797 0.000000 udp 10.0.2.104 54523 -> 65.30.26.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:13.313725 0.090170 udp 10.0.2.104 54523 <-> 83.213.6.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:14.304758 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:15.306112 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:16.307480 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:17.309093 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:18.310093 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:19.311692 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:20.313224 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:21.304563 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:22.306544 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:23.307385 0.000225 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:23.307610 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:37:24.309411 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:25.310269 0.310054 udp 10.0.2.104 54523 <-> 61.26.178.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:26.311993 0.175839 udp 10.0.2.104 54523 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:27.313461 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:28.305111 0.000000 udp 10.0.2.104 54523 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:29.306210 0.179153 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:30.308048 0.336135 udp 10.0.2.104 54523 <-> 1.172.166.20 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:31.309194 0.500232 udp 10.0.2.104 54523 <-> 5.250.118.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:32.310670 0.378590 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:33.312240 0.172646 udp 10.0.2.104 54523 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:33.972690 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:37:34.313236 0.133148 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:35.305157 0.353131 udp 10.0.2.104 54523 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:36.306346 0.264949 udp 10.0.2.104 54523 <-> 117.204.240.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:37.307457 0.037645 udp 10.0.2.104 54523 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:38.309055 0.000000 udp 10.0.2.104 54523 -> 173.81.129.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:39.310245 0.158921 udp 10.0.2.104 54523 <-> 75.143.148.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:40.312234 0.042908 udp 10.0.2.104 54523 <-> 213.89.225.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:41.313332 0.000000 udp 10.0.2.104 54523 -> 88.203.26.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:42.304931 2.002998 udp 10.0.2.104 54523 -> 213.27.242.93 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:43.306658 0.027956 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:45.309542 0.156602 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:46.310653 0.166350 udp 10.0.2.104 54523 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:47.311991 0.411248 udp 10.0.2.104 54523 <-> 87.19.151.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:48.313863 0.730085 udp 10.0.2.104 54523 <-> 118.231.71.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:49.305335 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:50.306495 0.207531 udp 10.0.2.104 54523 <-> 67.185.164.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:51.308229 0.041775 udp 10.0.2.104 54523 <-> 147.156.82.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:52.308950 0.170486 udp 10.0.2.104 54523 <-> 50.162.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:53.310829 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:54.312281 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:55.313394 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:56.304863 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:57.306230 0.310705 udp 10.0.2.104 54523 <-> 219.112.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:37:58.307609 0.000000 udp 10.0.2.104 54523 -> 112.120.27.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:37:59.309543 1.037514 udp 10.0.2.104 54523 <-> 78.8.126.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:00.310928 0.331402 udp 10.0.2.104 54523 <-> 210.153.214.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:01.312260 0.091874 udp 10.0.2.104 54523 <-> 92.41.48.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:02.313478 0.075123 udp 10.0.2.104 54523 <-> 94.180.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:03.304879 0.040702 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:04.306463 0.598581 udp 10.0.2.104 54523 <-> 14.96.97.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:05.307931 0.395493 udp 10.0.2.104 54523 <-> 118.231.71.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:06.309594 0.156288 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:07.310618 0.000000 udp 10.0.2.104 54523 -> 87.19.151.254 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:08.312138 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:09.313778 0.060868 udp 10.0.2.104 54523 <-> 86.121.160.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:10.305259 0.000000 udp 10.0.2.104 54523 -> 89.77.192.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:11.306869 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:12.307913 0.000000 udp 10.0.2.104 54523 -> 116.202.212.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:13.309288 0.175412 udp 10.0.2.104 54523 <-> 98.200.250.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:14.310668 0.335073 udp 10.0.2.104 54523 <-> 60.238.117.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:15.312382 0.020061 udp 10.0.2.104 54523 <-> 109.90.62.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:16.313958 0.026223 udp 10.0.2.104 54523 <-> 83.80.245.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:17.304911 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:18.306423 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:19.308114 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:20.309360 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:20.970563 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:38:21.310912 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:22.312793 0.064253 udp 10.0.2.104 54523 <-> 78.204.48.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:23.314039 0.034530 udp 10.0.2.104 54523 <-> 79.117.54.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:24.305245 0.000000 udp 10.0.2.104 54523 -> 101.63.233.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:25.306973 0.000000 udp 10.0.2.104 54523 -> 108.176.154.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:26.307961 0.000000 udp 10.0.2.104 54523 -> 151.74.104.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:27.309431 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:28.311224 0.198053 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:29.312513 0.151852 udp 10.0.2.104 54523 <-> 107.15.192.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:30.313695 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:31.305126 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:32.306603 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:33.308451 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:34.309357 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:35.311171 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:36.312698 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:37.314192 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:38.305355 0.137917 udp 10.0.2.104 54523 <-> 24.186.222.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:39.306881 0.005256 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:40.308557 0.131051 udp 10.0.2.104 54523 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:41.310105 0.317911 udp 10.0.2.104 54523 <-> 58.114.242.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:42.311122 0.000000 udp 10.0.2.104 54523 -> 183.72.69.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:38:43.312660 0.016089 udp 10.0.2.104 54523 <-> 130.180.97.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:44.314204 0.358310 udp 10.0.2.104 54523 <-> 140.127.62.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:45.305394 0.325730 udp 10.0.2.104 54523 <-> 14.52.229.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:46.307027 0.172883 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:47.308232 0.163443 udp 10.0.2.104 54523 <-> 149.140.171.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:48.309465 0.027977 udp 10.0.2.104 54523 <-> 80.99.240.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:49.311172 0.135391 udp 10.0.2.104 54523 <-> 24.186.222.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:50.312712 0.049700 udp 10.0.2.104 54523 <-> 109.86.167.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:51.314508 0.134829 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:52.305278 2.079505 udp 10.0.2.104 54523 <-> 62.18.186.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:53.307122 0.642111 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:54.308156 0.154538 udp 10.0.2.104 54523 <-> 24.101.81.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:55.309887 0.870389 udp 10.0.2.104 54523 <-> 186.205.72.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:56.311562 0.373947 udp 10.0.2.104 54523 <-> 27.3.230.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:57.312934 0.043741 udp 10.0.2.104 54523 <-> 213.119.25.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:58.313994 0.308527 udp 10.0.2.104 54523 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:38:59.305270 0.000000 udp 10.0.2.104 54523 -> 116.73.17.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:00.307163 0.069637 udp 10.0.2.104 54523 <-> 89.142.183.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:01.308596 0.038346 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:02.310121 0.056436 udp 10.0.2.104 54523 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:03.311259 0.399134 udp 10.0.2.104 54523 <-> 115.242.23.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:04.313189 0.000000 udp 10.0.2.104 54523 -> 69.123.197.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:05.314081 0.285928 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:06.305359 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:07.307276 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:07.307356 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:39:07.968338 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:39:09.309773 0.157710 udp 10.0.2.104 54523 <-> 50.83.202.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:10.311747 0.870136 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:11.312730 0.935114 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:12.314497 0.068579 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:13.305572 0.179971 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:14.307231 2.003172 udp 10.0.2.104 54523 -> 117.206.116.17 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:15.308672 0.194678 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:17.311234 0.000000 udp 10.0.2.104 54523 -> 183.83.74.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:18.313169 0.144446 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:19.304618 0.159707 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:20.306199 0.000000 udp 10.0.2.104 54523 -> 219.91.230.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:21.307269 0.145967 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:22.308364 0.073995 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:23.310238 1.097322 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:24.311567 0.361026 udp 10.0.2.104 54523 <-> 124.244.60.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:25.313029 0.184739 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:26.304102 0.159634 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:27.305691 0.000000 udp 10.0.2.104 54523 -> 68.14.166.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:28.307082 0.125810 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:29.308861 0.081309 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:30.310496 0.000000 udp 10.0.2.104 54523 -> 114.41.94.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:31.312047 0.216591 udp 10.0.2.104 54523 <-> 87.19.151.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:32.313215 4.997345 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:33.304372 0.000000 udp 10.0.2.104 54523 -> 14.99.94.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:34.305798 0.324172 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:35.307295 0.000000 udp 10.0.2.104 54523 -> 68.14.166.5 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:36.308930 0.155846 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:37.376667 0.000000 udp 10.0.2.104 54523 <- 85.85.49.251 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:38.311503 0.411611 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:39.313058 0.192903 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:40.304462 1.217463 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:41.306335 0.450513 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:42.307299 0.053349 udp 10.0.2.104 54523 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:43.309235 0.286486 udp 10.0.2.104 54523 <-> 124.37.205.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:44.310213 0.000000 udp 10.0.2.104 54523 -> 75.224.237.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:45.311810 0.032338 udp 10.0.2.104 54523 <-> 84.115.144.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:46.313241 0.107691 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:47.304429 0.000000 udp 10.0.2.104 54523 -> 114.39.29.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:48.306378 0.156544 udp 10.0.2.104 54523 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:49.307835 0.162463 udp 10.0.2.104 54523 <-> 76.107.155.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:50.309257 0.319727 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:51.310294 0.000000 udp 10.0.2.104 54523 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:51.944118 3.001273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:39:52.311947 0.000000 udp 10.0.2.104 54523 -> 115.244.117.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:53.312956 0.000000 udp 10.0.2.104 54523 -> 117.212.146.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:54.304836 0.529038 udp 10.0.2.104 54523 <-> 14.97.91.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:54.965461 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:39:55.306373 0.495800 udp 10.0.2.104 54523 <-> 115.187.62.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:56.307854 0.299386 udp 10.0.2.104 54523 <-> 115.250.103.177 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:57.308936 0.110785 udp 10.0.2.104 54523 <-> 62.117.137.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:58.310796 0.041300 udp 10.0.2.104 54523 <-> 79.113.37.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:39:58.951329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:39:59.141889 0.000000 udp 10.0.2.104 54523 <- 75.224.237.145 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:39:59.311936 0.000000 udp 10.0.2.104 54523 -> 82.57.64.208 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:00.312985 0.047404 udp 10.0.2.104 54523 <-> 95.180.65.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:01.305079 0.000000 udp 10.0.2.104 54523 -> 105.152.153.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:02.306373 0.147496 udp 10.0.2.104 54523 <-> 68.196.203.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:03.307646 0.143003 udp 10.0.2.104 54523 <-> 65.185.76.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:04.309413 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:05.310259 0.049008 udp 10.0.2.104 54523 <-> 90.230.7.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:06.312190 0.039763 udp 10.0.2.104 54523 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:06.953122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:40:07.313340 0.231877 udp 10.0.2.104 54523 <-> 49.207.73.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:08.305077 0.043640 udp 10.0.2.104 54523 <-> 109.251.72.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:09.306210 1.314862 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:11.309384 0.292750 udp 10.0.2.104 54523 <-> 190.138.32.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:12.310239 0.431459 udp 10.0.2.104 54523 <-> 117.217.209.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:13.311779 0.164479 udp 10.0.2.104 54523 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:14.313186 2.994265 udp 10.0.2.104 54523 <-> 79.117.214.8 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:15.304758 0.000000 udp 10.0.2.104 54523 -> 14.97.131.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:16.306413 0.000000 udp 10.0.2.104 54523 -> 173.12.230.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:18.309280 0.000000 udp 10.0.2.104 54523 -> 201.213.98.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:19.310711 0.000000 udp 10.0.2.104 54523 -> 88.15.116.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:20.312284 0.000000 udp 10.0.2.104 54523 -> 151.246.94.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:21.313566 0.118948 udp 10.0.2.104 54523 <-> 178.122.80.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:22.304623 0.015382 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:22.956076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:40:23.306623 0.263116 udp 10.0.2.104 54523 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:24.308187 0.040043 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:25.308917 0.000000 udp 10.0.2.104 54523 -> 65.8.166.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:26.310743 0.042202 udp 10.0.2.104 54523 <-> 24.132.8.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:27.312404 0.000000 udp 10.0.2.104 54523 -> 76.109.136.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:28.314096 0.000000 udp 10.0.2.104 54523 -> 83.21.115.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:29.304801 0.036300 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:30.306719 0.364377 udp 10.0.2.104 54523 <-> 115.244.237.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:31.307853 0.091306 udp 10.0.2.104 54523 <-> 77.242.54.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:32.309218 0.133492 udp 10.0.2.104 54523 <-> 24.148.4.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:33.310673 0.579283 udp 10.0.2.104 54523 <-> 117.199.38.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:34.312767 0.000000 udp 10.0.2.104 54523 -> 10.100.1.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:35.313719 1.437883 udp 10.0.2.104 54523 <-> 85.64.72.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:36.305356 0.292781 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:37.306776 1.143760 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:40.311043 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:41.312023 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:41.312105 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:40:41.963332 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:40:42.313481 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:43.305016 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:44.306798 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:45.307698 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:46.309117 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:47.310750 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:48.312547 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:49.313788 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:50.304898 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:51.306377 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:52.308421 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:53.309750 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:54.310992 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:54.962232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:40:55.312799 0.983502 udp 10.0.2.104 54523 <-> 190.107.109.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:40:56.313864 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:57.305526 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:58.306912 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:40:59.308043 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:00.309301 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:01.311036 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:02.312505 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:03.314199 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:04.305105 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:05.306849 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:06.308170 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:07.309554 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:08.311412 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:10.314167 0.330158 udp 10.0.2.104 54523 <-> 101.63.3.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:12.307148 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:13.308639 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:14.309991 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:15.311016 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:16.313054 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:17.314191 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:18.305616 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:19.307209 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:20.308348 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:21.309686 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:22.311054 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:23.312834 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:24.314152 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:24.314240 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:41:25.305793 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:26.307062 0.082171 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:27.308147 0.051460 udp 10.0.2.104 54523 <-> 46.237.118.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:29.311495 1.887073 udp 10.0.2.104 54523 <-> 50.29.153.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:29.972370 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:41:30.312660 0.151155 udp 10.0.2.104 54523 <-> 74.57.34.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:31.313818 0.283463 udp 10.0.2.104 54523 <-> 200.232.183.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:32.305374 0.549836 udp 10.0.2.104 54523 <-> 117.201.116.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:33.307074 0.161198 udp 10.0.2.104 54523 <-> 98.250.16.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:34.308814 0.057171 udp 10.0.2.104 54523 <-> 86.127.163.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:35.309846 0.000000 udp 10.0.2.104 54523 -> 79.169.17.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:36.310994 0.038776 udp 10.0.2.104 54523 <-> 89.215.95.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:37.312951 0.000000 udp 10.0.2.104 54523 -> 95.111.109.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:38.314129 0.290992 udp 10.0.2.104 54523 <-> 190.185.185.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:39.305715 0.155956 udp 10.0.2.104 54523 <-> 161.6.244.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:40.306908 0.344267 udp 10.0.2.104 54523 <-> 49.158.158.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:41.309025 0.341532 udp 10.0.2.104 54523 <-> 121.136.22.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:42.309647 0.322909 udp 10.0.2.104 54523 <-> 117.199.121.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:43.311775 0.155873 udp 10.0.2.104 54523 <-> 24.154.41.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:44.312820 0.045519 udp 10.0.2.104 54523 <-> 88.135.210.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:45.314135 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:46.305870 0.000000 udp 10.0.2.104 54523 -> 188.27.196.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:47.307377 0.156323 udp 10.0.2.104 54523 <-> 161.6.244.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:48.308468 1.819123 udp 10.0.2.104 54523 <-> 207.6.90.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:49.310083 0.150742 udp 10.0.2.104 54523 <-> 79.1.217.115 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:50.311373 0.044708 udp 10.0.2.104 54523 <-> 5.20.68.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:51.312615 0.259195 udp 10.0.2.104 54523 <-> 117.214.52.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:52.304085 0.791981 udp 10.0.2.104 54523 <-> 184.63.28.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:53.305816 0.000000 udp 10.0.2.104 54523 -> 109.229.7.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:54.307336 0.000000 udp 10.0.2.104 54523 -> 109.64.210.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:41:55.308451 0.045144 udp 10.0.2.104 54523 <-> 5.13.113.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:56.310224 0.011442 udp 10.0.2.104 54523 <-> 89.176.244.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:57.311753 0.596661 udp 10.0.2.104 54523 <-> 118.175.166.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:58.312790 0.276892 udp 10.0.2.104 54523 <-> 190.124.149.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:41:59.304059 0.145226 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:00.305941 0.028077 udp 10.0.2.104 54523 <-> 78.35.97.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:01.307279 0.030909 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:02.308650 0.982986 udp 10.0.2.104 54523 <-> 59.96.225.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:03.311909 0.124981 udp 10.0.2.104 54523 <-> 87.19.252.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:04.311659 0.347939 udp 10.0.2.104 54523 <-> 190.206.37.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:05.312734 0.160770 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:06.304827 0.265912 udp 10.0.2.104 54523 <-> 117.213.195.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:07.305770 0.221670 udp 10.0.2.104 54523 <-> 1.186.119.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:08.307405 1.001225 udp 10.0.2.104 54523 <-> 83.248.224.175 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:10.310293 0.000000 udp 10.0.2.104 54523 -> 117.207.220.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:11.311349 0.352436 udp 10.0.2.104 54523 <-> 186.48.57.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:12.312781 0.317666 udp 10.0.2.104 54523 <-> 180.44.78.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:13.304871 0.176775 udp 10.0.2.104 54523 <-> 68.3.172.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:14.306210 0.267839 udp 10.0.2.104 54523 <-> 90.137.158.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:15.307486 0.430593 udp 10.0.2.104 54523 <-> 60.244.68.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:16.308676 0.197015 udp 10.0.2.104 54523 <-> 72.251.39.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:16.969772 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:42:17.310161 0.866750 udp 10.0.2.104 54523 <-> 59.96.225.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:18.311532 0.036198 udp 10.0.2.104 54523 <-> 89.44.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:19.313564 1.525209 udp 10.0.2.104 54523 <-> 183.87.73.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:20.304281 0.000000 udp 10.0.2.104 54523 -> 151.33.234.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:21.305833 0.146230 udp 10.0.2.104 54523 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:22.307496 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:23.308832 0.217614 udp 10.0.2.104 54523 <-> 87.19.151.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:24.310376 0.571750 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:25.311786 0.302539 udp 10.0.2.104 54523 <-> 190.136.239.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:26.313281 0.192264 udp 10.0.2.104 54523 <-> 72.251.39.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:27.304462 0.353098 udp 10.0.2.104 54523 <-> 1.169.136.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:28.305919 0.204546 udp 10.0.2.104 54523 <-> 113.21.73.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:29.307433 0.064737 udp 10.0.2.104 54523 <-> 217.208.123.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:30.309229 0.347604 udp 10.0.2.104 54523 <-> 36.231.246.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:31.310090 0.033841 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:32.312092 0.000000 udp 10.0.2.104 54523 -> 2.190.217.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:33.313283 0.234307 udp 10.0.2.104 54523 <-> 151.72.17.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:34.304952 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:35.306099 0.000000 udp 10.0.2.104 54523 -> 14.97.131.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:36.307369 0.309729 udp 10.0.2.104 54523 <-> 14.98.124.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:37.308902 1.153489 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:39.311754 0.000000 udp 10.0.2.104 54523 -> 150.140.164.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:40.313591 0.180150 udp 10.0.2.104 54523 <-> 207.134.187.82 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:41.304448 2.154326 udp 10.0.2.104 54523 <-> 24.231.152.202 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:42.306164 0.150156 udp 10.0.2.104 54523 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:44.309293 0.000000 udp 10.0.2.104 54523 -> 2.190.217.24 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:45.310614 0.000000 udp 10.0.2.104 54523 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:46.312441 0.000000 udp 10.0.2.104 54523 -> 87.97.204.26 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:47.313105 3.148334 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:48.304585 0.000000 udp 10.0.2.104 54523 -> 151.72.17.12 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:49.306114 0.435333 udp 10.0.2.104 54523 <-> 115.242.101.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:51.309255 0.000000 udp 10.0.2.104 54523 -> 117.201.117.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:52.310681 0.000000 udp 10.0.2.104 54523 -> 2.190.217.24 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:53.312132 0.190891 udp 10.0.2.104 54523 <-> 92.47.53.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:54.313425 0.211419 udp 10.0.2.104 54523 <-> 151.72.17.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:55.304969 0.213198 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:56.306761 0.145878 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:57.307626 0.000000 udp 10.0.2.104 54523 -> 61.227.75.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:42:58.309541 0.239205 udp 10.0.2.104 54523 <-> 49.207.99.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:42:59.311067 0.260550 udp 10.0.2.104 54523 <-> 75.109.199.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:00.312062 0.390235 udp 10.0.2.104 54523 <-> 210.57.250.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:01.313315 0.142991 udp 10.0.2.104 54523 <-> 65.185.171.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:02.305156 0.000000 udp 10.0.2.104 54523 -> 94.21.204.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:03.306643 0.209189 udp 10.0.2.104 54523 <-> 76.91.133.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:03.967411 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:43:04.308201 0.160680 udp 10.0.2.104 54523 <-> 76.16.185.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:05.309402 0.310305 udp 10.0.2.104 54523 <-> 59.2.41.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:06.310652 0.000000 udp 10.0.2.104 54523 -> 188.9.60.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:07.312485 4.996550 udp 10.0.2.104 54523 -> 114.129.167.174 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:08.313761 0.000000 udp 10.0.2.104 54523 -> 183.87.84.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:09.305115 0.000000 udp 10.0.2.104 54523 -> 124.125.22.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:10.306416 0.000000 udp 10.0.2.104 54523 -> 79.115.66.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:11.308364 0.406264 udp 10.0.2.104 54523 <-> 115.241.129.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:13.310633 1.464077 udp 10.0.2.104 54523 <-> 74.72.169.152 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:15.313880 1.293374 udp 10.0.2.104 54523 <-> 190.204.12.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:16.305258 1.827932 udp 10.0.2.104 54523 <-> 183.87.84.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:17.306781 0.052678 udp 10.0.2.104 54523 <-> 94.253.202.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:18.308135 0.182551 udp 10.0.2.104 54523 <-> 76.106.208.214 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:19.309812 0.239734 udp 10.0.2.104 54523 <-> 49.207.99.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:20.311200 0.201170 udp 10.0.2.104 54523 <-> 93.180.198.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:21.312090 0.320365 udp 10.0.2.104 54523 <-> 211.230.32.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:22.313649 0.211138 udp 10.0.2.104 54523 <-> 183.82.241.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:23.304988 0.000000 udp 10.0.2.104 54523 -> 105.137.22.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:24.306969 0.148281 udp 10.0.2.104 54523 <-> 111.91.89.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:25.308348 0.265422 udp 10.0.2.104 54523 <-> 75.243.38.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:26.309698 0.304360 udp 10.0.2.104 54523 <-> 180.198.167.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:27.311208 0.187486 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:28.312541 0.137731 udp 10.0.2.104 54523 <-> 75.177.8.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:29.313710 1.303693 udp 10.0.2.104 54523 <-> 27.127.165.41 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:31.307040 0.160890 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:32.204036 0.000000 udp 10.0.2.104 54523 <- 105.137.22.58 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:32.308188 0.323260 udp 10.0.2.104 54523 <-> 122.167.101.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:33.309835 0.054170 udp 10.0.2.104 54523 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:34.310665 0.836787 udp 10.0.2.104 54523 <-> 87.204.219.177 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:35.312193 0.096708 udp 10.0.2.104 54523 <-> 176.238.175.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:36.314022 0.000000 udp 10.0.2.104 54523 -> 183.87.84.101 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:37.304972 0.408658 udp 10.0.2.104 54523 <-> 175.199.55.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:38.306856 0.184461 udp 10.0.2.104 54523 <-> 68.98.24.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:39.308414 0.033557 udp 10.0.2.104 54523 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:40.309800 0.452313 udp 10.0.2.104 54523 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:41.311171 4.032240 udp 10.0.2.104 54523 <-> 89.71.59.189 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:42.312481 0.000000 udp 10.0.2.104 54523 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:43.314003 0.337567 udp 10.0.2.104 54523 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:44.305205 0.160828 udp 10.0.2.104 54523 <-> 69.23.215.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:46.308362 0.156872 udp 10.0.2.104 54523 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:47.310027 0.211992 udp 10.0.2.104 54523 <-> 67.183.71.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:48.311390 0.297261 udp 10.0.2.104 54523 <-> 115.161.4.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:49.312885 0.705122 udp 10.0.2.104 54523 <-> 58.107.227.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:50.314060 0.445233 udp 10.0.2.104 54523 <-> 138.130.242.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:50.964770 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:43:51.305223 0.029001 udp 10.0.2.104 54523 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:52.306866 0.103363 udp 10.0.2.104 54523 <-> 87.222.107.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:53.308416 0.367161 udp 10.0.2.104 54523 <-> 27.3.158.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:54.309700 0.274434 udp 10.0.2.104 54523 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:55.310994 0.216842 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:56.312500 0.037449 udp 10.0.2.104 54523 <-> 78.22.119.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:57.314329 0.059688 udp 10.0.2.104 54523 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:43:58.305392 0.000000 udp 10.0.2.104 54523 -> 1.173.194.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:43:59.307366 0.000000 udp 10.0.2.104 54523 -> 173.81.250.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:00.308596 0.000000 udp 10.0.2.104 54523 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:01.309828 0.000000 udp 10.0.2.104 54523 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:02.311076 2.207593 udp 10.0.2.104 54523 <-> 75.84.176.143 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:03.312356 0.000000 udp 10.0.2.104 54523 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:05.305324 0.345155 udp 10.0.2.104 54523 <-> 220.246.178.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:06.307290 0.044957 udp 10.0.2.104 54523 <-> 78.239.42.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:07.308598 1.454471 udp 10.0.2.104 54523 <-> 117.207.251.95 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:09.311254 0.153700 udp 10.0.2.104 54523 <-> 75.134.145.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:10.312759 0.143484 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:11.314437 0.140404 udp 10.0.2.104 54523 <-> 178.125.164.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:12.305517 0.379636 udp 10.0.2.104 54523 <-> 1.161.106.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:13.307219 0.135759 udp 10.0.2.104 54523 <-> 82.115.28.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:14.308345 2.002874 udp 10.0.2.104 54523 -> 81.154.204.94 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:15.309941 3.873096 udp 10.0.2.104 54523 <-> 138.130.242.186 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:17.312491 0.000000 udp 10.0.2.104 54523 -> 85.210.226.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:19.305539 0.158997 udp 10.0.2.104 54523 <-> 71.195.155.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:20.307257 0.136117 udp 10.0.2.104 54523 <-> 67.85.150.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:21.308527 3.004030 udp 10.0.2.104 54523 -> 27.3.164.111 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:22.309676 0.155386 udp 10.0.2.104 54523 <-> 71.234.18.167 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:23.311586 0.186102 udp 10.0.2.104 54523 <-> 70.173.33.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:25.304046 0.406368 udp 10.0.2.104 54523 <-> 175.193.196.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:26.305760 0.000000 udp 10.0.2.104 54523 -> 213.171.242.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:27.307039 0.058132 udp 10.0.2.104 54523 <-> 86.127.163.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:28.308505 0.144048 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:29.310221 0.137698 udp 10.0.2.104 54523 <-> 76.106.112.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:30.311416 0.000000 udp 10.0.2.104 54523 -> 98.243.238.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:31.313466 0.066017 udp 10.0.2.104 54523 <-> 77.179.32.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:31.895717 0.000000 udp 10.0.2.104 54523 <- 213.171.242.218 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:32.304459 0.174169 udp 10.0.2.104 54523 <-> 72.201.215.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:33.306190 0.000000 udp 10.0.2.104 54523 -> 98.159.24.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:34.307508 0.416375 udp 10.0.2.104 54523 <-> 49.138.15.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:35.309134 0.109209 udp 10.0.2.104 54523 <-> 178.122.31.58 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:36.309955 0.051891 udp 10.0.2.104 54523 <-> 86.126.102.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:37.311821 0.180829 udp 10.0.2.104 54523 <-> 76.106.208.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:37.972725 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:44:38.313334 0.000000 udp 10.0.2.104 54523 -> 118.165.68.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:39.304861 0.000000 udp 10.0.2.104 54523 -> 112.137.92.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:40.305899 0.078675 udp 10.0.2.104 54523 <-> 85.152.248.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:41.307161 0.278032 udp 10.0.2.104 54523 <-> 187.66.17.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:42.309016 0.409696 udp 10.0.2.104 54523 <-> 211.208.134.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:43.310523 0.000000 udp 10.0.2.104 54523 -> 91.191.58.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:44.311316 0.157688 udp 10.0.2.104 54523 <-> 96.30.149.126 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:45.312747 0.173576 udp 10.0.2.104 54523 <-> 184.156.13.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:46.304166 0.090124 udp 10.0.2.104 54523 <-> 82.60.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:47.305883 0.024137 udp 10.0.2.104 54523 <-> 89.133.190.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:48.307291 0.323738 udp 10.0.2.104 54523 <-> 123.205.144.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:49.308529 0.356090 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:50.310531 0.317064 udp 10.0.2.104 54523 <-> 183.102.244.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:51.311553 0.138204 udp 10.0.2.104 54523 <-> 74.64.73.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:52.313254 0.162383 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:53.304806 0.248068 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:54.305931 0.162006 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:54.410850 0.000000 udp 10.0.2.104 54523 <- 98.159.24.125 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:55.307126 0.000000 udp 10.0.2.104 54523 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:56.309372 0.138357 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:57.310001 0.000000 udp 10.0.2.104 54523 -> 27.4.8.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:44:58.311652 0.139688 udp 10.0.2.104 54523 <-> 68.195.20.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:44:59.313315 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:00.304500 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:01.305779 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:02.307357 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:03.309287 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:04.310349 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:05.311864 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:06.313562 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:07.304564 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:08.306529 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:09.307293 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:10.309378 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:11.310769 0.269947 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:12.312233 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:13.313592 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:14.304544 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:15.306599 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:16.307394 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:17.308969 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:18.310294 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:19.311836 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:20.313080 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:21.304686 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:22.305964 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:23.307381 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:24.970189 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:45:25.310490 0.000123 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:25.310613 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:45:26.311745 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:27.313289 3.109860 udp 10.0.2.104 54523 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:28.305119 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:29.306673 0.024228 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:30.308017 0.000000 udp 10.0.2.104 54523 -> 46.159.185.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:31.309051 0.038619 udp 10.0.2.104 54523 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:32.310849 0.000000 udp 10.0.2.104 54523 -> 114.25.138.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:33.312047 0.183087 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:34.313500 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:35.305105 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:36.306581 0.000075 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:36.306656 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:45:37.308013 0.241445 udp 10.0.2.104 54523 <-> 190.78.182.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:38.309648 0.171799 udp 10.0.2.104 54523 <-> 2.192.195.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:39.310661 0.228199 udp 10.0.2.104 54523 <-> 63.147.47.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:40.312291 0.035746 udp 10.0.2.104 54523 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:41.313294 0.071149 udp 10.0.2.104 54523 <-> 217.186.199.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:42.304924 0.000000 udp 10.0.2.104 54523 -> 58.9.225.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:43.306632 0.866235 udp 10.0.2.104 54523 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:44.307837 0.000000 udp 10.0.2.104 54523 -> 114.25.138.159 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:45.309214 0.094004 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:46.311115 3.162183 udp 10.0.2.104 54523 <-> 2.192.195.123 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:47.312318 0.675199 udp 10.0.2.104 54523 <-> 101.63.92.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:48.313374 0.044203 udp 10.0.2.104 54523 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:50.306859 0.119372 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:51.308295 3.003819 udp 10.0.2.104 54523 <-> 79.116.248.144 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:52.309082 0.000000 udp 10.0.2.104 54523 -> 92.250.178.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:53.310663 0.000000 udp 10.0.2.104 54523 -> 58.9.225.106 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:55.313597 0.000000 udp 10.0.2.104 54523 -> 61.62.169.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:45:56.305279 1.001577 udp 10.0.2.104 54523 <-> 84.151.135.118 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:45:58.307995 1.001185 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:00.311166 4.997320 udp 10.0.2.104 54523 <-> 24.51.69.97 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:01.312389 0.043896 udp 10.0.2.104 54523 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:02.313608 0.000000 udp 10.0.2.104 54523 -> 2.192.195.123 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:03.305226 0.336955 udp 10.0.2.104 54523 <-> 114.25.138.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:04.306344 0.153771 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:06.309479 0.266500 udp 10.0.2.104 54523 <-> 190.78.182.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:06.462354 0.000000 udp 10.0.2.104 54523 <- 24.51.69.97 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:07.311383 2.046387 udp 10.0.2.104 54523 <-> 5.20.66.155 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:08.312145 0.176593 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:10.305662 0.201447 udp 10.0.2.104 54523 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:11.306807 2.061956 udp 10.0.2.104 54523 <-> 79.116.248.144 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:11.967695 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:46:12.308329 4.997110 udp 10.0.2.104 54523 -> 61.62.169.19 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:14.311189 4.996929 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:15.312425 0.314085 udp 10.0.2.104 54523 <-> 61.86.180.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:16.313939 0.000000 udp 10.0.2.104 54523 -> 91.214.131.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:17.663798 0.007519 udp 10.0.2.104 54523 <- 61.62.169.19 16464 RSP 0 0 3 2670 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:18.306663 1.081116 udp 10.0.2.104 54523 <-> 92.250.178.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:19.336720 0.001170 udp 10.0.2.104 54523 <- 95.111.109.155 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:20.309374 0.000000 udp 10.0.2.104 54523 -> 67.251.77.65 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:21.311075 0.000000 udp 10.0.2.104 54523 -> 217.186.199.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:22.312332 0.313107 udp 10.0.2.104 54523 <-> 61.86.180.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:23.313977 0.176057 udp 10.0.2.104 54523 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:24.305461 0.358515 udp 10.0.2.104 54523 <-> 61.62.169.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:25.306619 0.035809 udp 10.0.2.104 54523 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:26.308106 0.153132 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:27.309917 0.172647 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:28.311381 0.035732 udp 10.0.2.104 54523 <-> 89.77.192.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:29.312479 0.100193 udp 10.0.2.104 54523 <-> 88.165.10.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:30.314388 0.055840 udp 10.0.2.104 54523 <-> 79.117.214.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:31.305378 0.000000 udp 10.0.2.104 54523 -> 68.117.189.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:32.306981 0.000000 udp 10.0.2.104 54523 -> 71.238.72.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:33.308641 0.075435 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:34.310082 0.052109 udp 10.0.2.104 54523 <-> 86.100.68.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:35.311290 0.035969 udp 10.0.2.104 54523 <-> 89.137.112.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:36.313111 0.053150 udp 10.0.2.104 54523 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:37.314357 0.357588 udp 10.0.2.104 54523 <-> 114.41.94.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:38.305202 0.081118 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:39.306730 0.362893 udp 10.0.2.104 54523 <-> 201.223.227.25 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:40.308099 1.426330 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:41.309788 0.183883 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:42.311228 0.055155 udp 10.0.2.104 54523 <-> 195.222.80.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:43.312832 0.148734 udp 10.0.2.104 54523 <-> 50.70.40.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:44.314454 0.000000 udp 10.0.2.104 54523 -> 186.18.88.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:45.305613 0.130003 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:46.307078 1.249964 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:47.308935 0.035194 udp 10.0.2.104 54523 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:48.309941 0.000000 udp 10.0.2.104 54523 -> 12.132.99.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:49.311181 0.000000 udp 10.0.2.104 54523 -> 98.215.116.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:50.313011 0.000000 udp 10.0.2.104 54523 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:51.304634 2.133166 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:52.305888 0.280558 udp 10.0.2.104 54523 <-> 49.251.192.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:54.308345 2.032174 udp 10.0.2.104 54523 <-> 95.154.49.88 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:55.309887 0.000000 udp 10.0.2.104 54523 -> 186.212.196.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:55.706938 0.000000 udp 10.0.2.104 54523 <- 95.244.159.69 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:46:57.313133 0.131061 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:58.304652 0.171862 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:46:58.965155 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:46:58.967706 3.001722 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:46:59.305567 0.140452 udp 10.0.2.104 54523 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:00.307128 0.146926 udp 10.0.2.104 54523 <-> 98.102.219.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:01.308426 4.997440 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:02.310202 0.000000 udp 10.0.2.104 54523 -> 27.51.14.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:03.311197 0.000000 udp 10.0.2.104 54523 -> 219.91.230.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:04.313423 1.202695 udp 10.0.2.104 54523 <-> 189.193.82.67 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:05.975191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:47:06.616844 0.000000 udp 10.0.2.104 54523 <- 24.23.11.39 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:07.307451 0.329284 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:08.309172 0.059261 udp 10.0.2.104 54523 <-> 109.163.149.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:09.310175 0.398506 udp 10.0.2.104 54523 <-> 211.109.254.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:10.311717 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:11.313001 0.000000 udp 10.0.2.104 54523 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:12.304536 0.233586 udp 10.0.2.104 54523 <-> 110.5.75.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:13.305546 0.556441 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:13.977137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:47:14.307387 0.483976 udp 10.0.2.104 54523 <-> 117.208.11.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:15.308410 0.000000 udp 10.0.2.104 54523 -> 1.44.4.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:16.310303 1.450658 udp 10.0.2.104 54523 <-> 92.240.41.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:17.311477 0.168437 udp 10.0.2.104 54523 <-> 72.23.77.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:18.312875 0.820983 udp 10.0.2.104 54523 <-> 117.214.222.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:19.304545 0.404076 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:20.305582 0.023821 udp 10.0.2.104 54523 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:21.307571 0.075356 udp 10.0.2.104 54523 <-> 88.161.48.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:22.309005 0.158089 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:23.310096 0.235350 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:24.311964 0.127114 udp 10.0.2.104 54523 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:25.313623 0.050936 udp 10.0.2.104 54523 <-> 77.244.194.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:26.304539 0.353338 udp 10.0.2.104 54523 <-> 114.41.94.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:27.306292 0.125283 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:28.307317 0.289547 udp 10.0.2.104 54523 <-> 88.187.104.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:29.308765 0.151610 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:29.980229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:47:30.310343 0.188221 udp 10.0.2.104 54523 <-> 110.5.75.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:31.311757 3.134747 udp 10.0.2.104 54523 <-> 41.33.182.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:32.312911 0.327893 udp 10.0.2.104 54523 <-> 61.4.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:33.304307 0.053035 udp 10.0.2.104 54523 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:35.307326 0.386512 udp 10.0.2.104 54523 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:36.308635 0.000000 udp 10.0.2.104 54523 -> 98.70.42.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:37.310355 0.000000 udp 10.0.2.104 54523 -> 80.24.38.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:38.311601 0.263987 udp 10.0.2.104 54523 <-> 186.91.202.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:39.313360 0.143478 udp 10.0.2.104 54523 <-> 24.159.153.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:40.304450 0.043249 udp 10.0.2.104 54523 <-> 86.18.63.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:41.306391 0.146402 udp 10.0.2.104 54523 <-> 71.82.48.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:42.307241 0.106788 udp 10.0.2.104 54523 <-> 176.54.6.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:43.308951 0.153803 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:44.310878 0.145105 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:45.311782 0.000000 udp 10.0.2.104 54523 -> 108.204.224.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:45.972792 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:47:46.313532 0.014072 udp 10.0.2.104 54523 <-> 94.113.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:47.304688 0.425388 udp 10.0.2.104 54523 <-> 1.44.4.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:48.306313 0.000000 udp 10.0.2.104 54523 -> 70.30.90.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:49.307312 0.303843 udp 10.0.2.104 54523 <-> 210.194.128.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:50.309309 0.000000 udp 10.0.2.104 54523 -> 115.242.148.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:51.310525 0.460035 udp 10.0.2.104 54523 <-> 119.157.133.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:52.312131 0.056875 udp 10.0.2.104 54523 <-> 90.154.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:53.313463 0.157119 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:54.304618 0.006385 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:55.306221 0.000000 udp 10.0.2.104 54523 -> 125.224.112.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:55.904471 0.000000 udp 10.0.2.104 54523 <- 115.242.148.125 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:56.307885 0.000000 udp 10.0.2.104 54523 -> 77.244.194.198 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:47:57.309237 0.142202 udp 10.0.2.104 54523 <-> 70.63.221.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:58.310747 4.996743 udp 10.0.2.104 54523 <-> 63.147.47.73 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:47:59.314681 0.383221 udp 10.0.2.104 54523 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:00.313747 0.304166 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:01.304623 0.043652 udp 10.0.2.104 54523 <-> 178.148.220.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:01.985990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:48:02.306625 0.053303 udp 10.0.2.104 54523 <-> 77.91.22.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:03.538132 0.000000 udp 10.0.2.104 54523 <- 63.147.47.73 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:04.309331 0.061786 udp 10.0.2.104 54523 <-> 194.140.132.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:05.310464 0.000000 udp 10.0.2.104 54523 -> 176.238.175.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:06.312423 0.581152 udp 10.0.2.104 54523 <-> 74.195.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:07.313478 0.156384 udp 10.0.2.104 54523 <-> 173.18.163.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:08.305058 0.059455 udp 10.0.2.104 54523 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:09.306696 0.026511 udp 10.0.2.104 54523 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:10.307905 1.351992 udp 10.0.2.104 54523 <-> 118.233.136.107 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:12.310363 0.000000 udp 10.0.2.104 54523 -> 117.208.11.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:13.312494 1.029976 udp 10.0.2.104 54523 <-> 95.154.49.88 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:15.305264 0.133901 udp 10.0.2.104 54523 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:16.306797 0.066168 udp 10.0.2.104 54523 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:17.308275 0.148029 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:18.309014 0.205783 udp 10.0.2.104 54523 <-> 85.216.122.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:19.310971 0.119670 udp 10.0.2.104 54523 <-> 136.169.242.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:20.312186 0.000000 udp 10.0.2.104 54523 -> 113.155.48.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:21.313847 0.000000 udp 10.0.2.104 54523 -> 101.63.152.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:22.305051 0.043432 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:23.306176 0.264828 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:24.307625 2.003149 udp 10.0.2.104 54523 -> 86.153.21.241 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:25.309718 0.144004 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:27.312489 4.996953 udp 10.0.2.104 54523 <-> 24.102.154.241 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:28.313374 0.000000 udp 10.0.2.104 54523 -> 101.63.152.23 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:29.305193 4.026271 udp 10.0.2.104 54523 <-> 115.242.25.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:30.306905 0.000000 udp 10.0.2.104 54523 -> 198.179.118.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:31.307999 0.157179 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:32.970529 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:48:33.311027 0.269025 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:34.312653 4.159292 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:35.313777 0.141879 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:36.305719 1.133797 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:39.309427 0.496927 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:40.311074 0.135416 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:41.312502 0.000000 udp 10.0.2.104 54523 -> 58.152.190.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:42.313835 4.054134 udp 10.0.2.104 54523 <-> 89.32.153.43 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:43.305322 2.002550 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:44.306568 0.314641 udp 10.0.2.104 54523 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:47.311325 0.323612 udp 10.0.2.104 54523 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:48.312340 0.062356 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:49.314347 0.128441 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:50.305399 0.000000 udp 10.0.2.104 54523 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:51.306965 4.052346 udp 10.0.2.104 54523 <-> 88.196.202.112 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:52.307911 0.000000 udp 10.0.2.104 54523 -> 173.23.113.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:53.309679 0.208763 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:54.311184 0.000000 udp 10.0.2.104 54523 -> 122.121.229.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:48:56.314051 0.162801 udp 10.0.2.104 54523 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:57.305887 0.054717 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:58.306896 0.156770 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:48:59.308313 0.000000 udp 10.0.2.104 54523 -> 78.246.146.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:00.309461 0.320114 udp 10.0.2.104 54523 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:01.311118 0.000000 udp 10.0.2.104 54523 -> 68.185.124.13 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:02.312711 2.003818 udp 10.0.2.104 54523 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:03.314265 4.996736 udp 10.0.2.104 54523 -> 85.11.182.239 16464 REQ 0 3 174 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:04.305177 0.341963 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:06.308643 0.073859 udp 10.0.2.104 54523 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:07.309532 0.061752 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:09.312926 0.343263 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:10.314511 0.000000 udp 10.0.2.104 54523 -> 27.51.14.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:11.306816 0.659264 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:12.306878 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:13.308064 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:13.308143 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:49:14.310100 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:15.311374 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:16.313067 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:17.313837 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:18.305622 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:19.307130 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:19.968308 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:49:20.308473 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:21.309797 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:22.311203 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:23.312893 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:24.304235 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:25.305964 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:26.307443 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:27.308911 0.148812 udp 10.0.2.104 54523 <-> 24.176.157.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:28.309968 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:29.311335 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:30.313154 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:31.303958 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:32.305489 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:33.307450 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:34.308811 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:35.309774 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:36.311266 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:37.313223 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:38.304491 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:39.305595 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:39.305655 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:49:41.308575 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:42.310277 0.148201 udp 10.0.2.104 54523 <-> 65.96.143.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:43.311752 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:44.312685 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:45.304630 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:46.306106 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:47.307644 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:48.308948 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:49.310373 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:50.311813 0.000106 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:50.311919 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:49:51.313138 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:52.304727 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:53.305838 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:54.307049 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:55.308616 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:56.310393 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:49:58.313352 0.021358 udp 10.0.2.104 54523 <-> 93.103.42.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:49:59.304567 0.000000 udp 10.0.2.104 54523 -> 147.143.158.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:00.306247 0.357671 udp 10.0.2.104 54523 <-> 189.47.44.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:01.307358 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:02.309198 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:03.310604 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:04.311905 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:05.313164 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:06.305102 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:06.965532 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:50:07.305720 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:08.307663 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:09.308926 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:10.310274 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:12.312901 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:12.312965 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:50:13.304743 4.005554 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:14.306350 0.000000 udp 10.0.2.104 54523 -> 95.169.211.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:15.307322 0.066366 udp 10.0.2.104 54523 <-> 178.233.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:16.309386 0.817187 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:18.311835 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:19.313425 0.149387 udp 10.0.2.104 54523 <-> 24.176.157.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:20.304936 0.020728 udp 10.0.2.104 54523 <-> 93.103.42.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:21.306464 0.057155 udp 10.0.2.104 54523 <-> 188.26.208.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:22.307354 0.142575 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:23.309305 0.321305 udp 10.0.2.104 54523 <-> 189.79.170.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:24.310844 0.337073 udp 10.0.2.104 54523 <-> 14.98.224.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:25.311741 0.288652 udp 10.0.2.104 54523 <-> 183.83.91.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:26.313386 0.000000 udp 10.0.2.104 54523 -> 5.13.236.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:27.304900 0.458733 udp 10.0.2.104 54523 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:28.305906 3.325762 udp 10.0.2.104 54523 <-> 180.215.35.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:29.307415 0.000236 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:29.307651 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:50:30.309000 0.085394 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:31.310589 0.099236 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:32.311978 0.063271 udp 10.0.2.104 54523 <-> 188.213.162.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:33.313112 0.420234 udp 10.0.2.104 54523 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:34.304578 0.000000 udp 10.0.2.104 54523 -> 50.10.109.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:35.306682 0.159332 udp 10.0.2.104 54523 <-> 97.95.93.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:36.307649 0.751098 udp 10.0.2.104 54523 <-> 115.241.53.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:37.338893 0.043217 udp 10.0.2.104 54523 <-> 91.83.1.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:38.340876 0.076320 udp 10.0.2.104 54523 <-> 95.192.73.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:39.342362 0.038234 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:40.343771 0.132350 udp 10.0.2.104 54523 <-> 74.72.169.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:41.335210 0.017067 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:41.352277 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:50:42.336436 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:43.337874 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:44.339003 0.174761 udp 10.0.2.104 54523 <-> 68.185.195.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:45.340542 0.409306 udp 10.0.2.104 54523 <-> 121.166.87.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:46.342505 0.211045 udp 10.0.2.104 54523 <-> 74.193.210.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:47.353735 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:48.345208 0.000000 udp 10.0.2.104 54523 -> 117.99.51.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:49.346435 0.000000 udp 10.0.2.104 54523 -> 83.33.39.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:50.348169 0.156993 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:51.349691 0.000000 udp 10.0.2.104 54523 -> 188.173.128.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:52.351135 0.027540 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:53.352122 0.000000 udp 10.0.2.104 54523 -> 207.191.144.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:50:54.002933 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:50:54.353500 0.134663 udp 10.0.2.104 54523 <-> 24.192.199.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:55.344928 4.057199 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:56.346924 1.032326 udp 10.0.2.104 54523 <-> 176.199.23.172 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:50:58.349162 0.058862 udp 10.0.2.104 54523 <-> 95.65.118.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:00.352228 0.204083 udp 10.0.2.104 54523 <-> 151.232.26.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:01.353688 0.178844 udp 10.0.2.104 54523 <-> 68.56.123.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:02.345034 0.073965 udp 10.0.2.104 54523 <-> 87.59.123.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:03.346963 0.416700 udp 10.0.2.104 54523 <-> 180.148.57.244 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:04.348238 2.070075 udp 10.0.2.104 54523 <-> 211.74.239.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:05.349278 0.062548 udp 10.0.2.104 54523 <-> 89.32.155.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:06.351040 3.144181 udp 10.0.2.104 54523 <-> 92.75.161.224 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:07.352450 0.000000 udp 10.0.2.104 54523 -> 178.129.93.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:08.353543 0.157514 udp 10.0.2.104 54523 <-> 116.73.204.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:10.346408 0.171627 udp 10.0.2.104 54523 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:11.348360 0.000000 udp 10.0.2.104 54523 -> 83.24.131.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:12.349483 0.065248 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:13.350991 0.045349 udp 10.0.2.104 54523 <-> 188.124.95.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:14.352793 0.049463 udp 10.0.2.104 54523 <-> 88.216.22.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:15.353957 0.307516 udp 10.0.2.104 54523 <-> 119.25.84.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:16.345369 0.024057 udp 10.0.2.104 54523 <-> 89.33.186.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:17.347006 0.290762 udp 10.0.2.104 54523 <-> 183.82.228.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:18.347852 0.329383 udp 10.0.2.104 54523 <-> 201.186.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:19.349408 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:20.350862 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:21.352672 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:22.354038 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:23.345755 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:24.346484 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:25.348515 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:27.350886 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:28.352894 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:29.353665 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:30.345447 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:31.346555 0.000068 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:31.346623 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:51:32.348308 3.003990 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:33.349760 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:34.351152 0.316480 udp 10.0.2.104 54523 <-> 219.71.227.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:36.353929 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:37.345799 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:38.346901 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:39.348604 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:40.349939 0.000000 udp 10.0.2.104 54523 -> 117.201.31.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:41.010765 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:51:41.351231 0.291589 udp 10.0.2.104 54523 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:42.353004 2.332103 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:43.353944 1.473825 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:45.346890 0.103637 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:46.348910 0.054812 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:47.349590 0.067061 udp 10.0.2.104 54523 <-> 82.225.217.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:48.351831 0.169728 udp 10.0.2.104 54523 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:49.062705 0.021887 udp 10.0.2.104 54539 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 02:51:49.084955 0.000000 udp 10.0.2.104 54540 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:49.352439 0.304009 udp 10.0.2.104 54523 <-> 14.98.86.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:50.354239 0.177450 udp 10.0.2.104 54523 <-> 192.252.239.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:51.345309 0.279759 udp 10.0.2.104 54523 <-> 124.123.108.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:52.347363 2.040390 udp 10.0.2.104 54523 <-> 89.133.113.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:53.348488 0.000000 udp 10.0.2.104 54523 -> 92.73.249.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:55.351488 0.000000 udp 10.0.2.104 54523 -> 86.123.54.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:51:56.353168 0.133055 udp 10.0.2.104 54523 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:57.343942 0.054202 udp 10.0.2.104 54523 <-> 82.211.188.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:58.345721 0.166187 udp 10.0.2.104 54523 <-> 74.143.231.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:51:59.347271 0.144352 udp 10.0.2.104 54523 <-> 71.71.254.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:00.348253 0.000000 udp 10.0.2.104 54523 -> 82.156.60.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:01.350207 0.478992 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:02.351419 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:03.352652 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:04.344425 0.194763 udp 10.0.2.104 54523 <-> 123.238.140.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:05.345595 0.151603 udp 10.0.2.104 54523 <-> 68.194.88.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:06.346962 0.184126 udp 10.0.2.104 54523 <-> 219.91.230.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:07.348684 0.168933 udp 10.0.2.104 54523 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:08.350059 0.795932 udp 10.0.2.104 54523 <-> 219.80.138.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:09.351308 0.055080 udp 10.0.2.104 54523 <-> 79.113.147.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:10.352699 0.067418 udp 10.0.2.104 54523 <-> 89.187.36.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:11.344654 0.318437 udp 10.0.2.104 54523 <-> 187.11.102.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:12.346002 0.092093 udp 10.0.2.104 54523 <-> 95.86.77.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:13.347093 0.276114 udp 10.0.2.104 54523 <-> 178.252.154.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:14.348880 0.332573 udp 10.0.2.104 54523 <-> 122.209.168.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:15.350447 0.000000 udp 10.0.2.104 54523 -> 116.203.105.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:16.351459 0.310582 udp 10.0.2.104 54523 <-> 180.3.235.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:17.352865 0.081727 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:18.344554 0.137631 udp 10.0.2.104 54523 <-> 173.81.25.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:19.345876 0.287781 udp 10.0.2.104 54523 <-> 183.82.228.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:20.347034 0.166083 udp 10.0.2.104 54523 <-> 74.143.231.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:21.348640 0.153960 udp 10.0.2.104 54523 <-> 65.185.50.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:22.350001 0.162489 udp 10.0.2.104 54523 <-> 71.61.50.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:23.351555 0.077193 udp 10.0.2.104 54523 <-> 85.84.44.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:24.353087 0.139056 udp 10.0.2.104 54523 <-> 68.42.12.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:25.344305 0.000000 udp 10.0.2.104 54523 -> 79.1.217.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:26.346194 0.067905 udp 10.0.2.104 54523 <-> 82.225.217.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:27.347330 0.000000 udp 10.0.2.104 54523 -> 78.8.126.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:28.008502 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:52:28.348749 0.000000 udp 10.0.2.104 54523 -> 190.79.250.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:29.350091 0.211323 udp 10.0.2.104 54523 <-> 98.242.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:30.352090 0.058660 udp 10.0.2.104 54523 <-> 88.165.10.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:31.353481 0.239109 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:32.344982 0.288678 udp 10.0.2.104 54523 <-> 186.244.216.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:33.346104 0.135222 udp 10.0.2.104 54523 <-> 88.247.23.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:34.347104 0.000000 udp 10.0.2.104 54523 -> 27.4.114.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:35.349059 0.269650 udp 10.0.2.104 54523 <-> 178.252.154.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:36.350328 0.146687 udp 10.0.2.104 54523 <-> 76.181.153.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:37.352167 0.379484 udp 10.0.2.104 54523 <-> 5.200.232.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:38.353209 0.047535 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:39.344610 0.343239 udp 10.0.2.104 54523 <-> 1.165.166.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:40.345945 0.303310 udp 10.0.2.104 54523 <-> 124.100.80.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:41.347275 0.000000 udp 10.0.2.104 54523 -> 79.115.73.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:52:42.349084 0.074102 udp 10.0.2.104 54523 <-> 176.8.160.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:43.350202 0.336623 udp 10.0.2.104 54523 <-> 124.244.148.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:44.352029 0.060211 udp 10.0.2.104 54523 <-> 188.24.130.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:45.353541 2.872779 udp 10.0.2.104 54523 <-> 211.74.239.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:46.344752 0.352550 udp 10.0.2.104 54523 <-> 117.195.151.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:47.345969 0.342366 udp 10.0.2.104 54523 <-> 125.182.241.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:48.347273 0.151769 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:49.349126 0.325919 udp 10.0.2.104 54523 <-> 14.97.9.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:50.350515 0.164297 udp 10.0.2.104 54523 <-> 183.87.241.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:51.351809 3.159324 udp 10.0.2.104 54523 <-> 24.231.189.51 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:52.353193 0.098100 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:53.344889 0.149307 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:55.347764 0.138400 udp 10.0.2.104 54523 <-> 69.206.137.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:56.349200 0.208346 udp 10.0.2.104 54523 <-> 103.24.86.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:57.350776 1.087997 udp 10.0.2.104 54523 <-> 27.4.9.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:58.352143 0.174281 udp 10.0.2.104 54523 <-> 209.106.45.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:52:59.353425 1.567521 udp 10.0.2.104 54523 <-> 113.193.65.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:00.344523 1.141216 udp 10.0.2.104 54523 <-> 117.206.124.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:01.346221 0.000000 udp 10.0.2.104 54523 -> 180.56.125.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:02.348048 0.092136 udp 10.0.2.104 54523 <-> 178.77.18.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:03.349100 0.000000 udp 10.0.2.104 54523 -> 216.45.40.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:04.350456 0.170300 udp 10.0.2.104 54523 <-> 66.130.254.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:05.351990 0.121416 udp 10.0.2.104 54523 <-> 2.192.119.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:06.353268 0.171141 udp 10.0.2.104 54523 <-> 74.192.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:07.345227 0.138504 udp 10.0.2.104 54523 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:08.366105 0.027256 udp 10.0.2.104 54523 <-> 213.109.121.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:09.367496 0.000000 udp 10.0.2.104 54523 -> 67.218.169.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:10.369521 0.161363 udp 10.0.2.104 54523 <-> 74.77.223.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:11.370973 0.019411 udp 10.0.2.104 54523 <-> 161.53.202.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:12.375636 0.156287 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:13.374083 0.142375 udp 10.0.2.104 54523 <-> 24.48.99.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:14.365187 0.114988 udp 10.0.2.104 54523 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:15.025582 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:53:15.110023 0.000000 udp 10.0.2.104 54523 <- 67.218.169.68 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:15.366520 0.053017 udp 10.0.2.104 54523 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:16.367806 0.161054 udp 10.0.2.104 54523 <-> 76.123.228.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:17.369148 0.406459 udp 10.0.2.104 54523 <-> 211.209.63.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:18.370434 0.071670 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:19.372025 0.076248 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:20.373398 0.322243 udp 10.0.2.104 54523 <-> 219.71.14.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:21.364909 0.093851 udp 10.0.2.104 54523 <-> 37.215.196.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:22.366769 0.000000 udp 10.0.2.104 54523 -> 62.18.187.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:23.367773 0.177222 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:24.369517 0.350005 udp 10.0.2.104 54523 <-> 60.34.74.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:25.370639 0.306206 udp 10.0.2.104 54523 <-> 186.5.223.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:26.372562 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:27.373363 0.406031 udp 10.0.2.104 54523 <-> 175.193.63.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:28.365305 0.000000 udp 10.0.2.104 54523 -> 88.254.143.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:29.366218 0.000000 udp 10.0.2.104 54523 -> 179.148.110.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:30.367787 0.039555 udp 10.0.2.104 54523 <-> 86.56.97.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:31.369509 0.050276 udp 10.0.2.104 54523 <-> 86.106.28.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:32.371168 0.140080 udp 10.0.2.104 54523 <-> 75.138.193.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:33.372440 0.156045 udp 10.0.2.104 54523 <-> 97.69.173.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:34.374072 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:35.365385 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:36.366850 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:37.368367 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:38.369825 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:39.371053 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:40.372729 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:41.373969 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:42.365478 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:43.366563 0.046961 udp 10.0.2.104 54523 <-> 85.232.158.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:44.367943 0.211927 udp 10.0.2.104 54523 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:45.369787 0.047636 udp 10.0.2.104 54523 <-> 150.214.29.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:46.370684 2.475931 udp 10.0.2.104 54523 <-> 189.28.214.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:47.372511 0.136570 udp 10.0.2.104 54523 <-> 74.90.138.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:48.373786 4.029725 udp 10.0.2.104 54523 <-> 195.14.221.191 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:49.364991 0.047264 udp 10.0.2.104 54523 <-> 31.11.113.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:50.366427 0.125915 udp 10.0.2.104 54523 <-> 94.70.24.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:51.368540 0.328510 udp 10.0.2.104 54523 <-> 27.141.208.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:53.371448 0.000000 udp 10.0.2.104 54523 -> 208.98.235.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:53:54.372843 4.054883 udp 10.0.2.104 54523 <-> 82.240.144.160 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:55.373958 0.110082 udp 10.0.2.104 54523 <-> 78.85.176.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:56.365775 0.343736 udp 10.0.2.104 54523 <-> 218.191.64.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:57.366497 0.288042 udp 10.0.2.104 54523 <-> 183.82.228.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:53:59.369452 0.147583 udp 10.0.2.104 54523 <-> 96.20.86.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:00.371133 0.211716 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:01.372764 0.067992 udp 10.0.2.104 54523 <-> 82.225.217.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:02.023278 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:54:02.373858 0.155413 udp 10.0.2.104 54523 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:03.365685 0.139740 udp 10.0.2.104 54523 <-> 84.225.160.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:04.366582 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:05.368503 0.075462 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:06.052299 3.001618 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:54:06.369470 0.071006 udp 10.0.2.104 54523 <-> 78.242.194.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:07.371230 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:08.372311 0.140680 udp 10.0.2.104 54523 <-> 174.89.51.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:09.374341 0.124262 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:10.365583 0.057895 udp 10.0.2.104 54523 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:11.367201 0.056963 udp 10.0.2.104 54523 <-> 178.148.139.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:12.368448 0.050227 udp 10.0.2.104 54523 <-> 95.180.246.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:13.059795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:54:13.369745 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:14.371032 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:15.372671 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:16.374539 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:17.365377 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:18.367271 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:19.368576 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:20.370218 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:21.060989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:54:21.371076 0.014971 udp 10.0.2.104 54523 <-> 89.176.72.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:22.372844 0.420557 udp 10.0.2.104 54523 <-> 115.242.101.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:23.374055 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:24.366157 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:25.366941 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:25.367000 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:54:26.368702 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:27.370191 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:28.371097 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:29.373154 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:30.364244 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:31.365423 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:32.367308 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:33.368656 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:34.369978 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:35.371854 0.104833 udp 10.0.2.104 54523 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:36.373192 2.048505 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:37.064035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:54:37.364127 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:38.365525 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:39.367446 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:39.367508 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:54:40.368386 0.361177 udp 10.0.2.104 54523 <-> 114.41.85.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:41.370189 0.143930 udp 10.0.2.104 54523 <-> 184.59.170.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:42.371347 0.045528 udp 10.0.2.104 54523 <-> 212.182.29.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:43.373140 0.061053 udp 10.0.2.104 54523 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:44.364558 0.000000 udp 10.0.2.104 54523 -> 184.151.61.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:45.366265 0.000000 udp 10.0.2.104 54523 -> 108.176.154.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:46.367593 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:47.369028 0.071556 udp 10.0.2.104 54523 <-> 217.16.136.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:48.370090 0.157799 udp 10.0.2.104 54523 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:49.031264 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:54:49.371695 0.105476 udp 10.0.2.104 54523 <-> 95.180.36.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:50.372786 4.346555 udp 10.0.2.104 54523 <-> 111.240.96.234 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:51.364922 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:52.365785 0.000000 udp 10.0.2.104 54523 -> 218.166.199.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:54:53.367206 0.306606 udp 10.0.2.104 54523 <-> 110.133.134.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:55.370226 0.532583 udp 10.0.2.104 54523 <-> 181.16.98.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:56.372000 2.849611 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:57.373045 0.028140 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:54:59.366037 0.212975 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:00.367251 0.000000 udp 10.0.2.104 54523 -> 59.161.91.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:01.369079 0.051516 udp 10.0.2.104 54523 <-> 86.106.28.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:02.370260 0.000000 udp 10.0.2.104 54523 -> 220.210.107.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:03.371392 0.154847 udp 10.0.2.104 54523 <-> 71.61.202.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:04.373057 0.000000 udp 10.0.2.104 54523 -> 187.11.102.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:05.364642 0.000000 udp 10.0.2.104 54523 -> 1.171.26.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:06.366073 1.946872 udp 10.0.2.104 54523 <-> 1.23.89.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:07.367358 0.028950 udp 10.0.2.104 54523 <-> 85.130.74.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:08.257684 0.000000 udp 10.0.2.104 54523 <- 59.161.91.216 16464 RSP 0 0 1 750 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:08.368751 0.000000 udp 10.0.2.104 54523 -> 213.133.17.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:09.070202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:55:09.369998 0.467343 udp 10.0.2.104 54523 <-> 202.92.172.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:10.371803 0.051721 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:11.373316 0.348536 udp 10.0.2.104 54523 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:12.364519 0.182524 udp 10.0.2.104 54523 <-> 219.91.230.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:13.365768 0.321563 udp 10.0.2.104 54523 <-> 61.19.25.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:14.367478 0.487130 udp 10.0.2.104 54523 <-> 115.240.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:15.368930 4.468438 udp 10.0.2.104 54523 <-> 190.94.221.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:16.370302 0.095025 udp 10.0.2.104 54523 <-> 62.106.23.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:17.371552 0.144006 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:18.373224 0.485874 udp 10.0.2.104 54523 <-> 117.194.211.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:20.366105 0.147699 udp 10.0.2.104 54523 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:21.367588 0.086204 udp 10.0.2.104 54523 <-> 176.194.179.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:22.369416 0.225695 udp 10.0.2.104 54523 <-> 190.36.226.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:23.370520 0.048606 udp 10.0.2.104 54523 <-> 95.77.177.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:24.372081 0.157947 udp 10.0.2.104 54523 <-> 209.33.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:25.373250 0.240933 udp 10.0.2.104 54523 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:26.364440 0.070065 udp 10.0.2.104 54523 <-> 2.228.29.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:27.366568 0.350946 udp 10.0.2.104 54523 <-> 114.42.159.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:28.367618 0.035812 udp 10.0.2.104 54523 <-> 109.60.116.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:29.368935 0.058289 udp 10.0.2.104 54523 <-> 87.121.26.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:30.370466 0.308244 udp 10.0.2.104 54523 <-> 112.170.230.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:31.372046 0.326030 udp 10.0.2.104 54523 <-> 180.3.235.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:32.373654 0.279471 udp 10.0.2.104 54523 <-> 189.79.76.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:33.364644 0.030258 udp 10.0.2.104 54523 <-> 131.114.121.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:34.366237 0.000000 udp 10.0.2.104 54523 -> 217.98.2.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:35.367683 0.054595 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:36.028658 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:55:36.369381 0.249852 udp 10.0.2.104 54523 <-> 115.242.96.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:37.370253 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:38.371710 3.082982 udp 10.0.2.104 54523 <-> 90.132.212.133 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:39.373253 3.331126 udp 10.0.2.104 54523 <-> 82.213.133.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:40.364603 0.000000 udp 10.0.2.104 54523 -> 203.171.229.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:42.367763 0.103149 udp 10.0.2.104 54523 <-> 62.18.203.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:43.369290 0.297522 udp 10.0.2.104 54523 <-> 219.112.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:44.370978 0.394398 udp 10.0.2.104 54523 <-> 114.46.117.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:45.372277 0.158707 udp 10.0.2.104 54523 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:46.373369 0.153335 udp 10.0.2.104 54523 <-> 70.83.217.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:47.365192 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:48.366430 0.000000 udp 10.0.2.104 54523 -> 187.102.97.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:55:49.367890 0.116590 udp 10.0.2.104 54523 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:50.369284 0.219895 udp 10.0.2.104 54523 <-> 78.249.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:51.370575 1.081330 udp 10.0.2.104 54523 <-> 83.24.131.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:52.372361 0.373799 udp 10.0.2.104 54523 <-> 190.193.115.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:53.373289 0.337338 udp 10.0.2.104 54523 <-> 180.60.36.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:54.365080 0.606561 udp 10.0.2.104 54523 <-> 189.106.52.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:55.366386 0.051167 udp 10.0.2.104 54523 <-> 194.28.234.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:56.367934 0.294797 udp 10.0.2.104 54523 <-> 42.124.159.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:57.369449 0.168012 udp 10.0.2.104 54523 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:58.370994 0.128949 udp 10.0.2.104 54523 <-> 82.48.76.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:55:59.372585 0.588953 udp 10.0.2.104 54523 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:00.373810 0.033557 udp 10.0.2.104 54523 <-> 188.254.163.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:01.365089 0.277972 udp 10.0.2.104 54523 <-> 190.36.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:02.366539 0.039657 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:03.368216 0.151022 udp 10.0.2.104 54523 <-> 96.30.147.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:04.369181 0.172409 udp 10.0.2.104 54523 <-> 66.130.254.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:05.371052 0.000000 udp 10.0.2.104 54523 -> 49.204.171.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:06.372289 0.156646 udp 10.0.2.104 54523 <-> 69.245.165.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:07.373632 0.000000 udp 10.0.2.104 54523 -> 67.221.119.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:08.365078 1.409184 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:10.367711 0.000000 udp 10.0.2.104 54523 -> 200.158.193.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:11.369517 0.115107 udp 10.0.2.104 54523 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:12.370602 0.046806 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:13.372555 0.198720 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:14.373548 0.124846 udp 10.0.2.104 54523 <-> 31.204.5.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:15.365300 0.123657 udp 10.0.2.104 54523 <-> 46.161.106.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:16.366973 0.000000 udp 10.0.2.104 54523 -> 69.139.109.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:17.368026 0.313744 udp 10.0.2.104 54523 <-> 75.213.231.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:18.369331 0.150964 udp 10.0.2.104 54523 <-> 24.15.40.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:19.370895 0.000000 udp 10.0.2.104 54523 -> 85.14.9.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:20.372744 0.110170 udp 10.0.2.104 54523 <-> 46.161.106.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:21.373535 0.057410 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:22.365260 0.181853 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:23.026206 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:56:23.366622 0.033450 udp 10.0.2.104 54523 <-> 188.254.163.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:24.368163 0.317173 udp 10.0.2.104 54523 <-> 112.169.196.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:25.369748 0.157318 udp 10.0.2.104 54523 <-> 66.176.196.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:26.370946 0.050766 udp 10.0.2.104 54523 <-> 92.241.152.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:27.372654 0.379223 udp 10.0.2.104 54523 <-> 201.14.147.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:28.373733 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:29.365082 0.349513 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:30.366732 2.003355 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:31.368292 4.997345 udp 10.0.2.104 54523 <-> 79.121.110.96 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:33.370937 0.000000 udp 10.0.2.104 54523 -> 58.8.98.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:34.372761 4.091986 udp 10.0.2.104 54523 <-> 220.210.107.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:35.373686 0.326063 udp 10.0.2.104 54523 <-> 220.143.113.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:37.046064 0.000000 udp 10.0.2.104 54523 <- 79.121.110.96 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:37.366757 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:56:38.368688 0.155143 udp 10.0.2.104 54523 <-> 194.225.52.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:39.369514 0.311056 udp 10.0.2.104 54523 <-> 58.188.42.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:40.371077 0.018685 udp 10.0.2.104 54523 <-> 91.146.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:41.373003 0.151636 udp 10.0.2.104 54523 <-> 96.21.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:42.374267 0.051386 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:43.365672 0.038221 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:44.366576 0.054134 udp 10.0.2.104 54523 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:45.368633 0.296007 udp 10.0.2.104 54523 <-> 112.110.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:46.369726 0.308743 udp 10.0.2.104 54523 <-> 222.159.225.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:47.371294 0.320489 udp 10.0.2.104 54523 <-> 202.220.251.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:48.372674 0.343436 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:49.374551 0.598688 udp 10.0.2.104 54523 <-> 70.243.123.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:50.365379 0.128220 udp 10.0.2.104 54523 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:51.367039 0.158110 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:52.368556 0.337873 udp 10.0.2.104 54523 <-> 117.213.205.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:53.369699 0.044714 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:54.371200 0.118772 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:55.372773 1.047407 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:56.374071 0.021082 udp 10.0.2.104 54523 <-> 88.152.117.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:57.365880 0.320687 udp 10.0.2.104 54523 <-> 49.128.167.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:58.367219 3.003917 udp 10.0.2.104 54523 <-> 112.119.100.111 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:56:59.368760 0.611601 udp 10.0.2.104 54523 <-> 95.56.17.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:00.370149 0.141410 udp 10.0.2.104 54523 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:02.372658 0.076120 udp 10.0.2.104 54523 <-> 90.231.187.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:03.364147 0.093862 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:04.365468 0.576455 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:05.367121 0.000000 udp 10.0.2.104 54523 -> 61.62.169.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:06.368565 0.330459 udp 10.0.2.104 54523 <-> 177.107.236.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:07.369822 0.425377 udp 10.0.2.104 54523 <-> 117.199.247.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:08.371205 0.047720 udp 10.0.2.104 54523 <-> 78.157.75.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:09.372708 0.000000 udp 10.0.2.104 54523 -> 78.78.37.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:10.023918 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:57:10.364501 0.000000 udp 10.0.2.104 54523 -> 87.139.6.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:11.366101 0.476616 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:12.367262 0.000000 udp 10.0.2.104 54523 -> 24.57.120.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:13.368868 0.294159 udp 10.0.2.104 54523 <-> 219.105.184.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:14.370401 0.364798 udp 10.0.2.104 54523 <-> 24.135.219.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:15.371317 0.340857 udp 10.0.2.104 54523 <-> 180.215.86.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:16.372897 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:17.364643 0.059438 udp 10.0.2.104 54523 <-> 178.75.248.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:18.365641 0.050524 udp 10.0.2.104 54523 <-> 91.126.197.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:19.367138 0.000000 udp 10.0.2.104 54523 -> 186.213.239.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:20.368857 0.400802 udp 10.0.2.104 54523 <-> 219.103.99.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:21.370478 0.035470 udp 10.0.2.104 54523 <-> 92.247.205.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:22.372040 0.322773 udp 10.0.2.104 54523 <-> 115.241.38.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:23.373266 0.184971 udp 10.0.2.104 54523 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:24.364379 0.000000 udp 10.0.2.104 54523 -> 94.21.66.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:25.365874 0.000000 udp 10.0.2.104 54523 -> 183.83.241.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:26.367307 0.333961 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:27.368811 0.027572 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:28.370424 0.058140 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:29.371801 0.301539 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:30.372802 0.142009 udp 10.0.2.104 54523 <-> 50.157.253.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:31.364594 0.221440 udp 10.0.2.104 54523 <-> 186.90.22.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:32.366022 0.000000 udp 10.0.2.104 54523 -> 180.19.158.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:33.367662 0.040479 udp 10.0.2.104 54523 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:34.368745 0.000000 udp 10.0.2.104 54523 -> 109.98.105.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:35.370534 0.030331 udp 10.0.2.104 54523 <-> 84.252.20.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:36.371466 0.176562 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:37.373524 0.000000 udp 10.0.2.104 54523 -> 79.42.198.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:38.364686 0.138159 udp 10.0.2.104 54523 <-> 1.186.182.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:39.365824 0.168908 udp 10.0.2.104 54523 <-> 66.169.201.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:40.367237 0.940697 udp 10.0.2.104 54523 <-> 37.215.216.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:41.368764 0.480426 udp 10.0.2.104 54523 <-> 189.110.82.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:42.370412 0.294208 udp 10.0.2.104 54523 <-> 126.122.50.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:43.371816 0.142620 udp 10.0.2.104 54523 <-> 98.236.150.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:44.372878 0.157572 udp 10.0.2.104 54523 <-> 198.251.45.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:45.364302 0.047735 udp 10.0.2.104 54523 <-> 150.214.25.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:46.365956 0.420338 udp 10.0.2.104 54523 <-> 119.157.170.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:47.367282 0.196433 udp 10.0.2.104 54523 <-> 76.169.87.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:48.368635 0.292199 udp 10.0.2.104 54523 <-> 115.240.41.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:49.370781 0.312556 udp 10.0.2.104 54523 <-> 220.118.181.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:50.371633 0.321893 udp 10.0.2.104 54523 <-> 14.98.210.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:57:51.373088 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:52.364903 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:53.366436 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:54.367300 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:55.369100 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:56.370554 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:57.031316 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:57:57.372027 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:58.373018 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:57:59.364822 0.328551 udp 10.0.2.104 54523 <-> 117.200.31.107 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:58:00.366090 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:01.367774 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:02.368879 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:03.370574 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:05.373527 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:06.364662 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:07.366530 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:08.367874 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:09.369254 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:10.370656 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:11.372300 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:12.373428 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:13.365212 0.000070 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:13.365282 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:58:14.366387 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:15.367436 0.311513 udp 10.0.2.104 54523 <-> 117.200.31.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:58:16.369251 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:17.370699 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:18.371998 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:19.373890 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:20.365260 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:21.366551 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:22.367546 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:22.367622 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:58:23.369270 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:24.370682 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:25.371928 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:26.373484 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:27.364917 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:28.366647 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:29.368119 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:31.370848 0.000000 udp 10.0.2.104 54523 -> 86.101.156.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:32.371980 0.322931 udp 10.0.2.104 54523 <-> 117.200.31.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:58:34.364755 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:35.366367 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:36.367950 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:37.369244 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:38.370847 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:39.372174 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:40.373493 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:41.364808 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:42.366386 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:43.368013 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:44.028708 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:58:44.369345 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:45.370816 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:45.370867 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:58:46.372533 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:47.374080 0.000000 udp 10.0.2.104 54523 -> 117.200.31.107 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:48.365242 0.022689 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:58:50.368442 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:51.369562 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:52.370873 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:53.372076 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:54.373766 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:55.364939 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:56.366745 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:57.368276 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:58.369333 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:58:59.371293 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:00.372259 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:01.374034 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:01.374079 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:59:02.365162 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:03.366752 0.312692 udp 10.0.2.104 54523 <-> 117.200.31.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:59:05.369462 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:06.370934 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:07.372825 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:08.373675 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:09.365257 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:10.366810 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:11.368238 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:12.370017 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:13.371712 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:14.372341 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:15.374087 0.000100 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:15.374187 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:59:16.365796 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:17.366596 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:18.368418 3.003897 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:19.369587 0.294193 udp 10.0.2.104 54523 <-> 117.200.31.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:59:22.374241 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:23.365193 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:24.366788 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:25.368674 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:26.370105 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:27.371575 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:28.372384 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:29.373850 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:30.365838 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:31.026494 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:59:31.367319 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:32.369007 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:33.369910 0.000044 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:33.369954 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:59:34.371713 1.992698 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:35.372668 0.023369 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:59:37.365496 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:38.367135 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:39.368915 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:40.369990 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:41.371463 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:42.372657 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:43.364113 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:44.366095 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:45.367161 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:47.369735 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:48.371307 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:49.372821 0.000107 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:49.372928 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:59:50.364505 3.004043 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:51.365753 0.027257 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 02:59:52.367234 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:54.370288 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:55.371208 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:56.372962 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:57.364587 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 02:59:58.366028 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:00.368446 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:01.370412 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:02.371619 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:02.371670 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:00:03.373089 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:04.364428 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:05.365898 4.005577 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:06.367071 0.281321 udp 10.0.2.104 54523 <-> 117.200.31.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:00:07.368812 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:08.370652 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:10.373418 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:11.364409 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:12.365946 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:13.367189 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:14.368761 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:15.370314 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:16.371858 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:18.024399 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:00:18.364597 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:19.365741 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:20.367193 0.000120 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:20.367313 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:00:21.368595 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:22.370041 0.021832 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:00:23.371710 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:24.433053 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:25.424679 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:26.426098 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:27.427396 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:28.429047 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:29.430543 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:30.431668 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:31.433691 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:32.424734 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:33.426269 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:33.426365 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:00:34.427569 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:36.430469 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:37.432462 0.021877 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:00:38.433603 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:39.424810 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:40.426446 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:41.427834 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:42.429128 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:43.430625 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:44.431755 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:45.433796 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:46.424759 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:46.424820 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:00:47.426431 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:48.428039 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:49.428933 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:50.430796 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:52.433730 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:53.425271 0.023145 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:00:54.426848 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:55.428104 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:56.429578 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:57.430676 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:58.432415 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:00:59.433690 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:00.425189 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:02.428317 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:03.429730 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:04.430720 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:05.091664 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:01:05.432482 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:06.433545 4.997650 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:07.424802 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:07.424910 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:01:08.426773 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:09.427936 0.023597 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:01:10.429297 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:12.432755 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:13.136462 3.001016 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:01:13.433668 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:14.425483 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:15.426722 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:16.428431 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:17.429410 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:18.430960 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:19.432270 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:20.143266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:01:20.433810 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:20.433873 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:01:21.424973 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:22.426418 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:24.429779 0.281407 udp 10.0.2.104 54523 <-> 117.200.31.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:01:25.430956 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:26.432153 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:27.433825 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:28.145216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:01:28.425297 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:29.426741 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:30.428393 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:31.429353 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:32.431379 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:33.432880 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:34.433915 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:35.425136 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:36.426778 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:38.429899 0.023450 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:01:39.430851 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:39.430914 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:01:40.432891 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:41.433690 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:42.425451 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:43.426697 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:44.147628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:01:44.428315 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:45.429811 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:46.431264 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:47.432345 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:48.434499 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:50.427248 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:51.428157 4.997728 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:52.089337 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:01:52.430210 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:53.430960 0.024340 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:01:54.432907 0.000140 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:54.433047 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:01:55.434514 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:57.427423 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:58.428144 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:01:59.430346 0.725854 udp 10.0.2.104 54523 <-> 115.185.2.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:00.431041 1.097783 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:02.434368 0.126387 udp 10.0.2.104 54523 <-> 50.29.242.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:03.425684 0.316084 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:04.427460 0.000000 udp 10.0.2.104 54523 -> 204.14.77.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:05.428980 0.164121 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:06.429904 0.163427 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:07.431919 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:08.432572 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:09.424301 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:10.425454 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:11.426973 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:12.428750 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:13.430161 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:14.431231 3.995655 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:15.433220 0.000000 udp 10.0.2.104 54523 -> 113.254.247.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:16.153769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:02:16.424314 0.049156 udp 10.0.2.104 54523 <-> 77.249.34.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:17.425567 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:19.428779 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:20.430045 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:21.431386 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:22.433312 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:24.425525 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:25.427256 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:26.429108 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:27.430184 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:28.431609 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:29.433350 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:29.433414 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:02:30.424782 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:31.425608 4.067096 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:32.427309 0.000000 udp 10.0.2.104 54523 -> 223.205.119.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:33.428727 0.000000 udp 10.0.2.104 54523 -> 115.241.146.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:34.430112 0.000000 udp 10.0.2.104 54523 -> 14.97.250.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:36.433199 1.151751 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:38.426370 0.339511 udp 10.0.2.104 54523 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:39.086726 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:02:39.427097 0.000000 udp 10.0.2.104 54523 -> 223.205.119.49 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:40.429054 0.174602 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:41.429994 4.265423 udp 10.0.2.104 54523 <-> 190.77.199.238 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:42.432029 0.167763 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:43.433242 0.000000 udp 10.0.2.104 54523 -> 174.100.82.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:44.424976 0.136910 udp 10.0.2.104 54523 <-> 76.114.222.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:46.427383 0.043315 udp 10.0.2.104 54523 <-> 95.90.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:47.428918 0.290270 udp 10.0.2.104 54523 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:48.430050 0.349113 udp 10.0.2.104 54523 <-> 1.172.166.20 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:49.431743 0.067822 udp 10.0.2.104 54523 <-> 85.226.51.136 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:50.433353 0.506937 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:51.424869 0.129833 udp 10.0.2.104 54523 <-> 64.53.47.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:52.426193 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:53.427816 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:54.429334 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:55.430715 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:56.432083 0.141758 udp 10.0.2.104 54523 <-> 1.186.182.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:02:57.433305 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:58.424490 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:02:59.426400 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:00.427489 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:01.429162 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:02.430436 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:03.431955 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:04.433498 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:05.425126 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:06.426002 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:07.427618 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:08.429002 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:09.430739 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:10.432249 0.000043 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:10.432292 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:03:11.433728 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:12.424692 0.299226 udp 10.0.2.104 54523 <-> 101.111.191.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:03:13.426617 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:14.427714 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:15.429230 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:16.430814 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:17.432169 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:18.433174 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:20.426598 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:21.427893 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:22.429033 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:23.430684 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:24.432171 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:25.433446 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:25.433526 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:03:26.084478 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:03:26.425025 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:27.426467 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:28.428094 0.000000 udp 10.0.2.104 54523 -> 151.74.145.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:29.429145 0.141954 udp 10.0.2.104 54523 <-> 1.186.182.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:03:30.430713 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:31.432281 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:32.433348 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:33.424849 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:34.426504 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:35.467775 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:36.469823 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:37.470951 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:38.472166 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:39.474024 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:40.465086 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:41.466910 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:42.467984 0.000100 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:42.468084 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:03:43.469629 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:44.470693 0.123652 udp 10.0.2.104 54523 <-> 151.74.145.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:03:45.472585 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:46.473509 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:47.465086 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:48.466992 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:49.467981 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:50.509285 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:51.510786 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:52.512605 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:53.513712 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:54.505311 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:55.506917 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:56.508328 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:03:56.508436 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:03:58.511001 0.298529 udp 10.0.2.104 54523 <-> 101.111.191.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:03:59.512477 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:00.534205 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:01.525151 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:02.527253 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:03.528406 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:04.529775 0.000053 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:04.529828 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:04:05.531137 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:06.532558 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:07.534141 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:08.525287 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:09.526891 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:11.559715 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:12.561175 3.995546 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:13.222125 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:04:13.562490 3.995854 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:14.564606 0.153089 udp 10.0.2.104 54523 <-> 1.186.182.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:04:15.555788 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:19.561106 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:20.592759 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:21.594733 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:22.585803 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:23.587218 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:24.588994 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:25.589875 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:26.591326 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:26.591372 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:04:27.593054 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:28.594299 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:29.585478 0.105935 udp 10.0.2.104 54523 <-> 151.74.145.80 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:04:30.586912 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:31.588753 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:32.589940 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:33.591322 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:34.592938 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:35.594501 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:36.585704 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:37.587819 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:38.588472 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:39.589961 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:40.591970 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:41.593190 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:41.593261 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:04:42.584580 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:43.585709 4.005646 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:45.588764 0.165514 udp 10.0.2.104 54523 <-> 1.186.182.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:04:46.589928 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:48.593468 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:49.584802 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:50.586466 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:51.587743 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:52.588805 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:53.590304 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:54.592382 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:56.584671 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:57.585876 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:58.587228 0.000058 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:04:58.587286 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:04:59.588757 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:00.590701 0.163724 udp 10.0.2.104 54523 <-> 1.186.182.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:01.251077 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:05:01.591874 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:02.593390 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:03.584792 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:04.586192 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:05.587238 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:06.589286 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:07.590586 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:08.592029 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:09.593785 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:10.584799 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:11.586160 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:12.587292 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:13.589421 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:13.589497 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:05:14.590788 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:15.592202 0.167728 udp 10.0.2.104 54523 <-> 1.186.182.89 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:16.593066 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:17.584931 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:18.586177 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:19.588015 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:20.589342 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:21.590714 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:22.592076 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:23.593184 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:24.585041 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:25.586261 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:25.586307 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:05:27.588870 4.997737 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:28.590779 4.996984 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:29.592224 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:30.593810 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:31.585202 0.306353 udp 10.0.2.104 54523 <-> 60.62.158.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:34.589397 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:35.590822 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:36.592315 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:37.593394 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:38.584931 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:39.586154 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:40.588251 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:41.589014 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:42.590572 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:44.593428 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:44.593501 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:05:45.585119 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:46.586803 3.003951 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:47.587936 0.086742 udp 10.0.2.104 54523 <-> 151.74.145.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:48.589073 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:50.251862 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:05:50.592296 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:51.593625 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:52.585290 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:05:53.586304 0.141659 udp 10.0.2.104 54523 <-> 1.186.182.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:54.587796 0.056726 udp 10.0.2.104 54523 <-> 79.116.15.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:55.589364 0.342240 udp 10.0.2.104 54523 <-> 118.167.3.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:56.590857 0.406338 udp 10.0.2.104 54523 <-> 111.220.236.165 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:57.593023 0.131589 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:58.593793 0.179002 udp 10.0.2.104 54523 <-> 180.188.225.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:05:59.585435 0.000000 udp 10.0.2.104 54523 -> 201.93.194.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:00.586314 0.137946 udp 10.0.2.104 54523 <-> 67.85.183.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:01.588046 0.000000 udp 10.0.2.104 54523 -> 171.77.106.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:02.589497 0.138964 udp 10.0.2.104 54523 <-> 24.151.86.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:03.590733 0.137037 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:04.592375 0.023348 udp 10.0.2.104 54523 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:05.593511 0.163621 udp 10.0.2.104 54523 <-> 114.79.166.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:06.585286 0.497430 udp 10.0.2.104 54523 <-> 58.164.238.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:07.586732 0.360114 udp 10.0.2.104 54523 <-> 1.170.44.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:08.588214 0.000000 udp 10.0.2.104 54523 -> 203.115.94.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:09.589729 0.051143 udp 10.0.2.104 54523 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:10.591333 0.044515 udp 10.0.2.104 54523 <-> 80.200.192.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:11.592521 0.301164 udp 10.0.2.104 54523 <-> 122.145.172.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:12.594069 0.000000 udp 10.0.2.104 54523 -> 88.130.189.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:13.585149 0.087957 udp 10.0.2.104 54523 <-> 94.41.251.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:14.586964 1.912051 udp 10.0.2.104 54523 <-> 24.246.239.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:16.589484 0.153679 udp 10.0.2.104 54523 <-> 98.237.3.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:17.591485 0.000078 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:17.591563 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:06:18.592219 0.000000 udp 10.0.2.104 54523 -> 79.241.225.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:19.593648 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:20.585242 0.038430 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:21.587213 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:22.588176 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:23.589926 0.000000 udp 10.0.2.104 54523 -> 90.236.21.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:24.591082 0.000000 udp 10.0.2.104 54523 -> 92.148.89.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:25.592714 0.029476 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:26.594432 0.034523 udp 10.0.2.104 54523 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:27.585755 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:28.586813 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:29.588550 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:30.589451 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:31.591175 0.077995 udp 10.0.2.104 54523 <-> 86.107.40.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:32.592376 0.000000 udp 10.0.2.104 54523 -> 90.236.21.68 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:33.593944 0.422443 udp 10.0.2.104 54523 <-> 218.102.238.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:34.585771 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:35.586858 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:36.588306 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:37.248969 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:06:37.589889 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:38.590974 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:39.592636 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:40.594387 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:42.587279 0.000151 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:42.587430 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:06:43.588507 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:44.590049 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:45.591414 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:46.592667 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:47.594135 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:48.585352 0.000000 udp 10.0.2.104 54523 -> 84.123.162.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:49.296729 0.014458 udp 10.0.2.104 54541 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 03:06:49.311651 0.000000 udp 10.0.2.104 54542 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:49.587634 0.024184 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:50.588211 0.324283 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:51.590356 4.023134 udp 10.0.2.104 54523 <-> 46.108.106.61 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:52.591569 0.029175 udp 10.0.2.104 54523 <-> 95.154.49.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:53.593066 0.154925 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:54.594586 0.000000 udp 10.0.2.104 54523 -> 79.186.156.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:56.587119 0.129346 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:57.588562 0.477399 udp 10.0.2.104 54523 <-> 101.63.174.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:06:58.589912 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:06:59.591429 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:00.593453 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:01.594411 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:02.585889 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:03.587107 0.348726 udp 10.0.2.104 54523 <-> 14.96.187.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:04.588664 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:05.590216 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:06.591367 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:07.592949 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:08.594100 0.000091 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:08.594191 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:07:10.587768 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:11.588428 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:12.590484 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:13.591482 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:14.592707 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:15.584363 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:16.585592 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:17.587123 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:18.589074 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:19.590149 0.047112 udp 10.0.2.104 54523 <-> 91.65.196.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:20.591437 0.000000 udp 10.0.2.104 54523 -> 14.96.187.122 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:21.593575 0.303698 udp 10.0.2.104 54523 <-> 126.15.243.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:22.584782 0.039227 udp 10.0.2.104 54523 <-> 79.117.106.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:23.586344 0.000000 udp 10.0.2.104 54523 -> 94.190.190.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:24.246904 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:07:24.587341 0.139895 udp 10.0.2.104 54523 <-> 63.131.171.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:25.588853 2.753463 udp 10.0.2.104 54523 <-> 122.100.80.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:26.589968 1.023179 udp 10.0.2.104 54523 <-> 149.172.196.116 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:28.593016 0.569311 udp 10.0.2.104 54523 <-> 62.5.202.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:29.584950 0.150702 udp 10.0.2.104 54523 <-> 98.237.3.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:30.586071 0.166473 udp 10.0.2.104 54523 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:31.587450 0.137340 udp 10.0.2.104 54523 <-> 47.16.108.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:32.588597 0.033177 udp 10.0.2.104 54523 <-> 89.132.240.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:33.590037 2.264836 udp 10.0.2.104 54523 <-> 67.213.111.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:34.592084 0.429868 udp 10.0.2.104 54523 <-> 203.210.40.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:35.593380 0.097278 udp 10.0.2.104 54523 <-> 88.165.10.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:36.584984 0.100083 udp 10.0.2.104 54523 <-> 88.247.23.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:37.586451 0.000000 udp 10.0.2.104 54523 -> 86.123.120.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:38.587261 0.338757 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:39.588737 0.463219 udp 10.0.2.104 54523 <-> 124.120.179.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:40.590896 0.157044 udp 10.0.2.104 54523 <-> 50.83.202.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:41.592100 0.140848 udp 10.0.2.104 54523 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:42.593413 0.071871 udp 10.0.2.104 54523 <-> 85.84.44.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:43.584413 0.159021 udp 10.0.2.104 54523 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:44.586318 0.039717 udp 10.0.2.104 54523 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:45.587559 0.037256 udp 10.0.2.104 54523 <-> 188.254.186.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:46.589272 0.110477 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:47.590301 0.364551 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:48.591961 2.994659 udp 10.0.2.104 54523 -> 87.156.220.249 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:49.593038 0.060717 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:50.584921 0.000000 udp 10.0.2.104 54523 -> 101.63.206.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:52.587709 0.159050 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:53.589372 0.301262 udp 10.0.2.104 54523 <-> 220.100.40.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:54.590838 1.004370 udp 10.0.2.104 54523 <-> 78.42.218.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:55.592234 0.059759 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:56.593327 0.220831 udp 10.0.2.104 54523 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:57.584853 0.033317 udp 10.0.2.104 54523 <-> 213.222.46.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:07:58.586434 0.000000 udp 10.0.2.104 54523 -> 190.177.223.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:07:59.587772 0.170317 udp 10.0.2.104 54523 <-> 172.129.4.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:00.589156 0.295187 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:01.590939 0.000000 udp 10.0.2.104 54523 -> 86.126.32.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:02.591804 2.994942 udp 10.0.2.104 54523 <-> 78.136.117.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:03.593287 0.021792 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:04.584620 3.105607 udp 10.0.2.104 54523 <-> 169.244.248.127 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:06.587744 0.161095 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:08.590773 0.152342 udp 10.0.2.104 54523 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:09.592312 0.292832 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:10.593304 0.305399 udp 10.0.2.104 54523 <-> 1.22.88.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:11.244622 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:08:11.585500 0.054295 udp 10.0.2.104 54523 <-> 92.233.16.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:12.586380 0.108509 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:13.588088 0.318356 udp 10.0.2.104 54523 <-> 78.157.7.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:14.589560 0.092199 udp 10.0.2.104 54523 <-> 178.126.73.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:15.590727 0.187182 udp 10.0.2.104 54523 <-> 203.88.154.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:16.591860 0.160740 udp 10.0.2.104 54523 <-> 65.26.227.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:17.593884 0.071069 udp 10.0.2.104 54523 <-> 93.156.61.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:18.585449 2.045048 udp 10.0.2.104 54523 <-> 79.118.33.217 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:19.586494 0.168683 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:20.320633 3.001318 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:08:21.589209 0.059088 udp 10.0.2.104 54523 <-> 89.32.153.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:22.590865 0.728794 udp 10.0.2.104 54523 <-> 117.214.222.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:23.592555 0.295540 udp 10.0.2.104 54523 <-> 200.104.188.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:24.593456 0.000000 udp 10.0.2.104 54523 -> 86.123.120.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:25.585275 0.318711 udp 10.0.2.104 54523 <-> 111.107.89.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:26.586633 0.140356 udp 10.0.2.104 54523 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:27.327395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:08:27.587659 0.205366 udp 10.0.2.104 54523 <-> 190.36.226.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:28.589129 0.152004 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:29.590591 0.288337 udp 10.0.2.104 54523 <-> 116.64.170.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:30.592472 0.050301 udp 10.0.2.104 54523 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:31.594047 0.061360 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:32.585050 0.139978 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:33.586607 2.410841 udp 10.0.2.104 54523 <-> 117.237.40.25 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:34.588387 0.138159 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:35.328949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:08:36.590974 0.000000 udp 10.0.2.104 54523 -> 83.24.131.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:37.592205 0.000000 udp 10.0.2.104 54523 -> 68.62.193.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:38.593948 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:39.585310 0.000000 udp 10.0.2.104 54523 -> 84.123.162.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:40.586737 0.000000 udp 10.0.2.104 54523 -> 41.206.74.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:41.588447 0.000000 udp 10.0.2.104 54523 -> 118.165.68.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:42.589450 0.058919 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:43.590885 1.437347 udp 10.0.2.104 54523 <-> 59.191.145.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:44.592620 0.079244 udp 10.0.2.104 54523 <-> 93.156.61.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:45.593693 0.368456 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:46.585578 0.000000 udp 10.0.2.104 54523 -> 27.251.231.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:47.586888 0.266312 udp 10.0.2.104 54523 <-> 189.32.253.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:48.587875 0.063093 udp 10.0.2.104 54523 <-> 88.183.185.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:49.589517 0.302441 udp 10.0.2.104 54523 <-> 61.21.52.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:50.591046 0.319473 udp 10.0.2.104 54523 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:51.332111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:08:51.592520 0.050906 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:52.593788 0.058731 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:53.585600 0.164397 udp 10.0.2.104 54523 <-> 71.45.41.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:54.586514 0.164269 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:55.588596 0.150656 udp 10.0.2.104 54523 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:56.589877 0.399799 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:57.591197 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:08:58.252216 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:08:58.592789 3.044158 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:08:59.593799 3.127629 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:00.585334 0.371553 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:03.589891 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:04.591023 0.039457 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:05.592569 3.995664 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:06.594209 4.148853 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:07.585787 0.000000 udp 10.0.2.104 54523 -> 113.179.253.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:08.586952 0.117478 udp 10.0.2.104 54523 <-> 216.121.246.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:11.591216 0.065325 udp 10.0.2.104 54523 <-> 79.112.79.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:12.592745 0.000000 udp 10.0.2.104 54523 -> 79.165.97.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:13.593885 0.155533 udp 10.0.2.104 54523 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:14.585883 0.304664 udp 10.0.2.104 54523 <-> 219.71.90.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:15.587104 0.124777 udp 10.0.2.104 54523 <-> 92.246.215.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:16.588470 0.000000 udp 10.0.2.104 54523 -> 201.223.227.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:17.590037 0.217127 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:18.591339 0.335235 udp 10.0.2.104 54523 <-> 202.94.59.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:19.593111 0.000000 udp 10.0.2.104 54523 -> 79.35.1.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:20.594451 0.334769 udp 10.0.2.104 54523 <-> 119.70.34.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:21.585811 0.165970 udp 10.0.2.104 54523 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:22.587300 0.000000 udp 10.0.2.104 54523 -> 89.106.103.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:23.337925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:09:23.588791 0.152162 udp 10.0.2.104 54523 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:24.590210 0.161726 udp 10.0.2.104 54523 <-> 74.65.45.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:25.591383 0.922653 udp 10.0.2.104 54523 <-> 197.6.63.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:26.592999 0.154112 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:27.594645 0.166815 udp 10.0.2.104 54523 <-> 74.56.189.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:28.585559 0.951868 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:29.586902 0.484265 udp 10.0.2.104 54523 <-> 190.57.242.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:30.588586 0.861853 udp 10.0.2.104 54523 <-> 115.242.132.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:31.590106 2.002836 udp 10.0.2.104 54523 <-> 182.156.174.121 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:32.591817 0.111880 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:34.594374 0.000000 udp 10.0.2.104 54523 -> 10.36.7.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:35.586116 0.210660 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:36.587387 2.089493 udp 10.0.2.104 54523 <-> 211.74.239.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:37.588824 0.000000 udp 10.0.2.104 54523 -> 31.11.113.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:38.589760 0.160434 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:39.591183 0.350188 udp 10.0.2.104 54523 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:40.593092 0.133045 udp 10.0.2.104 54523 <-> 50.157.214.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:41.594542 0.154700 udp 10.0.2.104 54523 <-> 65.185.50.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:42.585697 0.000000 udp 10.0.2.104 54523 -> 190.57.242.34 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:43.587633 0.155538 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:44.589143 0.036099 udp 10.0.2.104 54523 <-> 143.225.236.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:45.249906 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:09:45.590621 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:46.591981 0.015612 udp 10.0.2.104 54523 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:47.593350 0.230591 udp 10.0.2.104 54523 <-> 186.92.116.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:48.584540 0.000000 udp 10.0.2.104 54523 -> 174.97.209.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:49.586068 0.000000 udp 10.0.2.104 54523 -> 24.51.69.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:50.587027 1.890792 udp 10.0.2.104 54523 <-> 27.7.3.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:51.588634 0.069085 udp 10.0.2.104 54523 <-> 82.130.204.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:52.590526 0.058522 udp 10.0.2.104 54523 <-> 79.118.193.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:53.591630 3.996033 udp 10.0.2.104 54523 -> 71.12.81.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:09:54.592886 0.035019 udp 10.0.2.104 54523 <-> 143.225.66.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:55.584365 0.270861 udp 10.0.2.104 54523 <-> 181.167.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:56.586298 0.024240 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:58.588673 0.440708 udp 10.0.2.104 54523 <-> 101.63.92.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:09:59.590587 0.161764 udp 10.0.2.104 54523 <-> 184.77.144.6 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:00.591727 0.401760 udp 10.0.2.104 54523 <-> 1.244.171.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:01.593375 0.140881 udp 10.0.2.104 54523 <-> 24.34.106.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:02.584771 0.152074 udp 10.0.2.104 54523 <-> 68.42.123.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:03.586172 0.000000 udp 10.0.2.104 54523 -> 87.121.26.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:04.587806 0.000000 udp 10.0.2.104 54523 -> 173.81.29.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:05.588771 0.250879 udp 10.0.2.104 54523 <-> 183.82.164.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:06.590715 0.311329 udp 10.0.2.104 54523 <-> 122.102.210.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:07.591511 0.127542 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:08.592884 0.316662 udp 10.0.2.104 54523 <-> 61.46.123.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:09.585000 0.299551 udp 10.0.2.104 54523 <-> 14.96.179.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:10.585759 0.165219 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:11.587498 0.000000 udp 10.0.2.104 54523 -> 188.21.161.214 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:12.589127 0.058807 udp 10.0.2.104 54523 <-> 84.201.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:13.590241 0.364777 udp 10.0.2.104 54523 <-> 85.202.213.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:14.592065 3.198503 udp 10.0.2.104 54523 <-> 82.135.173.158 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:15.593091 0.249281 udp 10.0.2.104 54523 <-> 180.235.185.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:17.586363 0.277921 udp 10.0.2.104 54523 <-> 187.65.57.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:18.587742 0.209573 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:19.588848 0.000000 udp 10.0.2.104 54523 -> 68.144.6.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:20.590567 0.364747 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:21.592210 0.021021 udp 10.0.2.104 54523 <-> 161.53.166.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:22.593494 0.051451 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:23.584892 0.000000 udp 10.0.2.104 54523 -> 188.77.191.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:24.586545 0.000000 udp 10.0.2.104 54523 -> 46.5.250.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:25.588114 0.062468 udp 10.0.2.104 54523 <-> 81.237.99.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:26.588790 0.164759 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:27.590396 3.980058 udp 10.0.2.104 54523 <-> 115.184.187.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:28.592298 0.151626 udp 10.0.2.104 54523 <-> 71.75.221.61 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:29.593593 0.047066 udp 10.0.2.104 54523 <-> 46.237.92.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:30.585147 0.038773 udp 10.0.2.104 54523 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:31.586155 0.036064 udp 10.0.2.104 54523 <-> 86.30.195.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:32.247368 0.000227 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:10:32.587619 0.306993 udp 10.0.2.104 54523 <-> 117.104.45.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:33.588991 0.281969 udp 10.0.2.104 54523 <-> 89.165.8.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:34.590273 0.335032 udp 10.0.2.104 54523 <-> 111.242.73.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:35.592034 0.000000 udp 10.0.2.104 54523 -> 92.109.240.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:36.593325 0.116736 udp 10.0.2.104 54523 <-> 184.175.42.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:37.584742 0.356055 udp 10.0.2.104 54523 <-> 124.6.23.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:38.586777 3.305493 udp 10.0.2.104 54523 <-> 187.35.13.71 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:39.587452 0.178883 udp 10.0.2.104 54523 <-> 71.62.251.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:40.589436 0.000000 udp 10.0.2.104 54523 -> 115.240.76.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:42.592246 0.000000 udp 10.0.2.104 54523 -> 101.210.201.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:43.593616 0.000000 udp 10.0.2.104 54523 -> 85.86.78.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:44.585146 0.121688 udp 10.0.2.104 54523 <-> 178.122.101.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:45.586633 2.159059 udp 10.0.2.104 54523 <-> 71.194.150.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:46.587726 0.000000 udp 10.0.2.104 54523 -> 41.32.137.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:48.590402 0.293629 udp 10.0.2.104 54523 <-> 14.99.123.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:49.592318 0.066559 udp 10.0.2.104 54523 <-> 84.236.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:50.593575 0.210944 udp 10.0.2.104 54523 <-> 67.160.81.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:51.585099 1.410570 udp 10.0.2.104 54523 <-> 173.214.226.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:53.588046 0.162360 udp 10.0.2.104 54523 <-> 69.140.208.250 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:54.589311 0.547138 udp 10.0.2.104 54523 <-> 92.36.202.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:55.590914 0.197463 udp 10.0.2.104 54523 <-> 173.25.251.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:56.591909 0.182320 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:10:57.593557 0.000000 udp 10.0.2.104 54523 -> 118.171.70.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:58.585383 0.000000 udp 10.0.2.104 54523 -> 90.236.21.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:10:59.586406 0.257147 udp 10.0.2.104 54523 <-> 190.206.89.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:00.587886 0.186061 udp 10.0.2.104 54523 <-> 128.218.187.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:01.589914 0.000000 udp 10.0.2.104 54523 -> 114.40.170.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:02.590627 0.051066 udp 10.0.2.104 54523 <-> 83.141.175.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:03.592543 0.361827 udp 10.0.2.104 54523 <-> 114.26.25.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:04.593775 0.369301 udp 10.0.2.104 54523 <-> 115.242.50.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:05.584900 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:06.586739 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:07.587954 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:08.589260 0.521959 udp 10.0.2.104 54523 <-> 151.76.52.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:09.590937 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:10.592432 0.240447 udp 10.0.2.104 54523 <-> 49.207.105.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:11.593477 0.000000 udp 10.0.2.104 54523 -> 116.87.8.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:12.584958 0.146099 udp 10.0.2.104 54523 <-> 69.116.80.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:13.586879 0.207959 udp 10.0.2.104 54523 <-> 67.185.164.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:14.588354 0.222283 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:15.589896 0.377892 udp 10.0.2.104 54523 <-> 92.36.202.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:16.590734 0.060359 udp 10.0.2.104 54523 <-> 79.132.163.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:17.592856 0.160671 udp 10.0.2.104 54523 <-> 72.200.63.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:18.594059 0.335387 udp 10.0.2.104 54523 <-> 58.141.149.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:19.244485 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:11:19.584962 0.696637 udp 10.0.2.104 54523 <-> 117.221.65.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:20.586731 0.159484 udp 10.0.2.104 54523 <-> 74.143.231.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:21.587877 0.188145 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:22.589934 0.407589 udp 10.0.2.104 54523 <-> 175.213.179.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:23.590959 0.158543 udp 10.0.2.104 54523 <-> 76.16.185.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:24.592933 0.056494 udp 10.0.2.104 54523 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:25.593997 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:26.585391 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:27.587039 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:28.588253 2.003414 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:28.588341 2.003326 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 03:11:29.589356 0.065311 udp 10.0.2.104 54523 <-> 37.235.189.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:31.592588 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:32.594400 0.000000 udp 10.0.2.104 54523 -> 117.222.8.227 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:33.585085 0.100668 udp 10.0.2.104 54523 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:34.586810 0.097442 udp 10.0.2.104 54523 <-> 77.232.161.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:35.588276 0.196985 udp 10.0.2.104 54523 <-> 209.62.210.13 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:36.589551 0.301504 udp 10.0.2.104 54523 <-> 61.26.178.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:37.591433 0.182080 udp 10.0.2.104 54523 <-> 98.176.21.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:38.593011 0.291890 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:39.593888 0.000000 udp 10.0.2.104 54523 -> 24.48.45.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:11:40.585324 0.136899 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:41.586942 0.931628 udp 10.0.2.104 54523 <-> 77.10.239.233 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:42.588633 0.148352 udp 10.0.2.104 54523 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:43.589561 0.061186 udp 10.0.2.104 54523 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:44.591502 0.050347 udp 10.0.2.104 54523 <-> 91.126.97.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:45.592905 0.142778 udp 10.0.2.104 54523 <-> 216.20.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:46.593980 0.330777 udp 10.0.2.104 54523 <-> 202.78.81.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:47.585444 0.029784 udp 10.0.2.104 54523 <-> 158.181.66.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:48.586888 0.163240 udp 10.0.2.104 54523 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:49.588704 0.167069 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:50.590016 2.766193 udp 10.0.2.104 54523 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:51.591805 0.181749 udp 10.0.2.104 54523 <-> 98.176.21.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:52.592999 0.346840 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:53.593859 0.151214 udp 10.0.2.104 54523 <-> 24.202.60.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:54.585774 1.051633 udp 10.0.2.104 54523 <-> 91.126.197.109 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:56.588252 0.145929 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:57.589590 4.054004 udp 10.0.2.104 54523 <-> 188.213.162.104 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:58.591160 0.011749 udp 10.0.2.104 54523 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:11:59.592504 0.362779 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:00.594092 0.000000 udp 10.0.2.104 54523 -> 91.126.197.109 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:02.587031 0.000000 udp 10.0.2.104 54523 -> 78.169.68.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:03.588424 0.171572 udp 10.0.2.104 54523 <-> 172.129.4.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:04.590350 0.060586 udp 10.0.2.104 54523 <-> 143.225.66.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:05.591430 0.085604 udp 10.0.2.104 54523 <-> 83.136.186.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:06.252394 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:12:06.592821 0.000000 udp 10.0.2.104 54523 -> 190.141.88.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:07.594359 3.313504 udp 10.0.2.104 54523 <-> 97.102.73.130 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:08.585408 0.151821 udp 10.0.2.104 54523 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:09.586859 0.000000 udp 10.0.2.104 54523 -> 1.162.148.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:11.590288 0.059418 udp 10.0.2.104 54523 <-> 217.174.48.38 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:12.591757 0.323688 udp 10.0.2.104 54523 <-> 14.99.156.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:13.592855 0.155403 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:14.594457 1.035089 udp 10.0.2.104 54523 <-> 75.210.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:15.585705 0.236964 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:16.587597 3.112406 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:17.588642 0.000000 udp 10.0.2.104 54523 -> 14.139.86.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:18.589808 0.000000 udp 10.0.2.104 54523 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:20.593028 0.043387 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:21.584210 0.000000 udp 10.0.2.104 54523 -> 92.241.136.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:22.586127 0.000000 udp 10.0.2.104 54523 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:23.587288 0.165045 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:24.588548 0.366912 udp 10.0.2.104 54523 <-> 27.2.138.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:25.590300 1.656312 udp 10.0.2.104 54523 <-> 187.25.176.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:26.592025 0.099891 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:27.593589 0.013905 udp 10.0.2.104 54523 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:28.584413 0.000000 udp 10.0.2.104 54523 -> 114.178.49.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:29.585627 0.000000 udp 10.0.2.104 54523 -> 14.96.28.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:30.587416 0.078821 udp 10.0.2.104 54523 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:31.588632 0.062862 udp 10.0.2.104 54523 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:32.589936 0.000000 udp 10.0.2.104 54523 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:33.591708 0.000000 udp 10.0.2.104 54523 -> 24.193.20.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:34.593203 0.024938 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:35.584773 0.263545 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:36.586308 0.381809 udp 10.0.2.104 54523 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:37.587331 0.071194 udp 10.0.2.104 54523 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:38.588976 0.079828 udp 10.0.2.104 54523 <-> 151.33.100.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:39.590369 1.221705 udp 10.0.2.104 54523 <-> 183.179.52.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:40.591910 0.377594 udp 10.0.2.104 54523 <-> 117.223.65.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:41.593319 0.076467 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:42.180835 0.000000 udp 10.0.2.104 54523 <- 14.96.28.49 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:42.584309 0.230975 udp 10.0.2.104 54523 <-> 49.204.136.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:43.586150 0.000000 udp 10.0.2.104 54523 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:44.587319 1.297841 udp 10.0.2.104 54523 <-> 61.21.68.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:46.590803 0.288405 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:47.591522 0.336749 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:48.593312 0.240820 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:49.584966 0.047347 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:50.586453 0.052553 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:51.587318 0.000000 udp 10.0.2.104 54523 -> 82.78.183.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:52.589247 0.000000 udp 10.0.2.104 54523 -> 85.87.202.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:53.249959 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:12:53.590147 0.023489 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:54.591773 0.139361 udp 10.0.2.104 54523 <-> 97.80.104.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:55.593000 0.078894 udp 10.0.2.104 54523 <-> 151.50.126.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:56.585011 0.000000 udp 10.0.2.104 54523 -> 69.141.251.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:12:57.586504 0.186085 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:58.587904 1.414446 udp 10.0.2.104 54523 <-> 59.93.201.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:12:59.589004 0.000000 udp 10.0.2.104 54523 -> 31.11.113.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:00.590906 0.000000 udp 10.0.2.104 54523 -> 220.105.38.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:01.591681 0.168544 udp 10.0.2.104 54523 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:02.593389 0.084959 udp 10.0.2.104 54523 <-> 46.120.136.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:03.585118 0.286489 udp 10.0.2.104 54523 <-> 120.75.17.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:04.586438 0.362831 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:05.587516 0.000000 udp 10.0.2.104 54523 -> 125.230.96.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:06.588868 0.160709 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:07.590297 0.000000 udp 10.0.2.104 54523 -> 190.36.226.135 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:08.591729 0.000000 udp 10.0.2.104 54523 -> 85.108.54.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:09.593452 0.363943 udp 10.0.2.104 54523 <-> 124.244.148.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:10.584631 0.053994 udp 10.0.2.104 54523 <-> 81.230.67.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:11.586078 0.311368 udp 10.0.2.104 54523 <-> 180.220.170.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:12.587559 0.101654 udp 10.0.2.104 54523 <-> 79.53.75.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:13.589499 2.310799 udp 10.0.2.104 54523 <-> 190.229.208.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:14.590891 0.047136 udp 10.0.2.104 54523 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:16.593268 0.146774 udp 10.0.2.104 54523 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:17.584884 0.000000 udp 10.0.2.104 54523 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:18.586580 0.133768 udp 10.0.2.104 54523 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:19.588248 0.000000 udp 10.0.2.104 54523 -> 220.227.59.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:20.588976 1.195194 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:22.591905 3.339831 udp 10.0.2.104 54523 <-> 202.235.233.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:23.593635 0.000000 udp 10.0.2.104 54523 -> 118.170.244.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:24.584999 0.134214 udp 10.0.2.104 54523 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:25.586235 3.004796 udp 10.0.2.104 54523 -> 112.79.36.122 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:26.588074 0.000000 udp 10.0.2.104 54523 -> 95.49.244.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:27.589016 0.000000 udp 10.0.2.104 54523 -> 14.99.202.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:29.592480 0.154156 udp 10.0.2.104 54523 <-> 67.198.84.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:30.594068 1.187519 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:32.586619 3.048948 udp 10.0.2.104 54523 <-> 5.13.90.52 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:33.587665 0.000000 udp 10.0.2.104 54523 -> 117.200.81.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:34.589224 0.349700 udp 10.0.2.104 54523 <-> 111.249.165.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:36.592225 0.000000 udp 10.0.2.104 54523 -> 220.227.59.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:37.593403 0.000000 udp 10.0.2.104 54523 -> 213.201.97.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:38.585110 0.065668 udp 10.0.2.104 54523 <-> 93.100.170.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:39.586564 0.060910 udp 10.0.2.104 54523 <-> 31.211.136.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:40.247432 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:13:40.587942 0.000000 udp 10.0.2.104 54523 -> 82.245.78.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:41.589574 0.197794 udp 10.0.2.104 54523 <-> 200.84.142.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:42.590764 0.000000 udp 10.0.2.104 54523 -> 14.99.202.181 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:43.592229 0.000000 udp 10.0.2.104 54523 -> 5.13.90.52 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:44.593444 0.151696 udp 10.0.2.104 54523 <-> 67.198.84.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:45.585183 0.000000 udp 10.0.2.104 54523 -> 112.79.36.122 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:46.586511 0.000000 udp 10.0.2.104 54523 -> 111.249.165.119 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:47.588004 0.000000 udp 10.0.2.104 54523 -> 117.200.81.91 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:48.589437 0.000000 udp 10.0.2.104 54523 -> 78.159.49.178 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:49.590805 0.193169 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:50.592699 0.131999 udp 10.0.2.104 54523 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:51.593739 0.049635 udp 10.0.2.104 54523 <-> 188.24.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:52.585256 0.315173 udp 10.0.2.104 54523 <-> 203.112.45.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:53.587021 0.121998 udp 10.0.2.104 54523 <-> 95.232.66.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:54.588166 0.157983 udp 10.0.2.104 54523 <-> 114.79.189.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:55.589504 0.278105 udp 10.0.2.104 54523 <-> 139.228.161.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:56.591281 0.000000 udp 10.0.2.104 54523 -> 115.241.146.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:57.592679 0.000000 udp 10.0.2.104 54523 -> 65.26.227.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:13:58.594274 0.094236 udp 10.0.2.104 54523 <-> 78.228.174.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:13:59.585294 0.409931 udp 10.0.2.104 54523 <-> 88.156.89.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:00.586722 0.057113 udp 10.0.2.104 54523 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:01.588570 0.056581 udp 10.0.2.104 54523 <-> 81.230.67.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:02.589970 0.000000 udp 10.0.2.104 54523 -> 175.37.69.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:03.591351 0.445193 udp 10.0.2.104 54523 <-> 114.49.53.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:04.592537 0.000000 udp 10.0.2.104 54523 -> 70.233.97.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:05.594253 0.367245 udp 10.0.2.104 54523 <-> 219.107.199.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:06.585135 0.000000 udp 10.0.2.104 54523 -> 178.36.161.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:07.587246 0.102593 udp 10.0.2.104 54523 <-> 86.38.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:08.588425 0.356617 udp 10.0.2.104 54523 <-> 187.71.176.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:09.589409 4.165231 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:11.592999 0.179321 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:12.593843 0.000000 udp 10.0.2.104 54523 -> 175.211.29.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:14.586898 1.001689 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:16.590076 0.000000 udp 10.0.2.104 54523 -> 24.232.19.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:17.591208 0.056674 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:18.592763 0.079694 udp 10.0.2.104 54523 <-> 85.84.44.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:19.593861 0.137188 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:20.585905 0.321855 udp 10.0.2.104 54523 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:21.586656 0.262127 udp 10.0.2.104 54523 <-> 1.22.38.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:22.588293 0.000000 udp 10.0.2.104 54523 -> 14.96.169.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:23.589903 1.610637 udp 10.0.2.104 54523 <-> 182.233.71.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:24.591336 0.333628 udp 10.0.2.104 54523 <-> 121.149.235.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:25.592496 0.025529 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:26.594035 0.263025 udp 10.0.2.104 54523 <-> 201.17.131.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:27.245255 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:14:27.585424 0.146508 udp 10.0.2.104 54523 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:28.587344 0.064781 udp 10.0.2.104 54523 <-> 176.101.9.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:29.588607 0.000000 udp 10.0.2.104 54523 -> 187.70.69.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:30.589767 0.222225 udp 10.0.2.104 54523 <-> 190.39.98.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:31.591161 0.053501 udp 10.0.2.104 54523 <-> 85.14.74.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:32.592671 0.156077 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:33.594591 0.000000 udp 10.0.2.104 54523 -> 89.44.100.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:34.585927 0.137143 udp 10.0.2.104 54523 <-> 68.194.88.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:35.587286 0.148357 udp 10.0.2.104 54523 <-> 71.47.172.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:36.588252 0.320290 udp 10.0.2.104 54523 <-> 121.177.85.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:37.590174 2.048458 udp 10.0.2.104 54523 <-> 94.26.34.226 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:38.591196 0.336058 udp 10.0.2.104 54523 <-> 61.227.71.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:40.594037 0.154734 udp 10.0.2.104 54523 <-> 71.88.178.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:41.586137 2.146813 udp 10.0.2.104 54523 <-> 203.192.205.254 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:42.587040 0.000000 udp 10.0.2.104 54523 -> 118.165.68.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:44.589719 1.001968 udp 10.0.2.104 54523 <-> 111.253.130.102 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:46.592623 1.329806 udp 10.0.2.104 54523 <-> 36.239.200.55 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:48.585923 0.390438 udp 10.0.2.104 54523 <-> 211.109.254.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:49.587165 1.428748 udp 10.0.2.104 54523 <-> 81.31.161.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:50.588956 0.000000 udp 10.0.2.104 54523 -> 181.42.196.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:51.589804 0.142332 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:14:52.591288 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:53.593348 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:54.584614 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:55.585738 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:56.587561 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:57.589086 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:58.590247 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:14:59.591627 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:00.592878 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:01.584787 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:02.585781 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:03.587485 4.997085 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:04.588622 0.298373 udp 10.0.2.104 54523 <-> 220.96.151.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:05.590012 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:06.592272 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:07.592842 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:10.587805 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:11.588630 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:12.589954 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:13.591629 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:14.593478 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:15.244433 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:15:15.584670 0.319507 udp 10.0.2.104 54523 <-> 61.46.55.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:16.585912 0.585364 udp 10.0.2.104 54523 <-> 82.56.43.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:17.587330 0.029942 udp 10.0.2.104 54523 <-> 84.115.251.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:18.588949 0.315377 udp 10.0.2.104 54523 <-> 175.179.140.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:19.590583 0.000000 udp 10.0.2.104 54523 -> 117.203.199.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:20.591516 0.348866 udp 10.0.2.104 54523 <-> 118.165.202.64 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:21.593239 3.288704 udp 10.0.2.104 54523 <-> 174.151.166.116 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:22.584586 1.387775 udp 10.0.2.104 54523 <-> 117.201.144.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:23.585845 0.312711 udp 10.0.2.104 54523 <-> 220.109.234.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:25.588805 0.318303 udp 10.0.2.104 54523 <-> 211.51.37.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:26.590506 0.138668 udp 10.0.2.104 54523 <-> 75.99.213.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:27.343470 3.002333 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:15:27.592164 0.310412 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:28.593561 0.158732 udp 10.0.2.104 54523 <-> 50.142.111.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:29.584790 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:30.586316 0.000121 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:30.586437 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:15:31.587327 0.322851 udp 10.0.2.104 54523 <-> 221.71.99.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:32.589413 0.194765 udp 10.0.2.104 54523 <-> 72.251.39.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:33.590357 0.293949 udp 10.0.2.104 54523 <-> 117.204.247.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:34.351675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:15:34.591642 0.000000 udp 10.0.2.104 54523 -> 37.106.118.177 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:35.593057 0.048910 udp 10.0.2.104 54523 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:36.584878 0.000083 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:36.584961 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:15:37.586279 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:38.587839 0.053597 udp 10.0.2.104 54523 <-> 178.210.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:39.589433 0.311255 udp 10.0.2.104 54523 <-> 211.10.166.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:40.590703 3.077653 udp 10.0.2.104 54523 <-> 77.126.204.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:41.592041 0.000000 udp 10.0.2.104 54523 -> 219.91.131.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:42.353500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:15:42.593437 0.412545 udp 10.0.2.104 54523 <-> 189.93.176.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:43.585239 0.341406 udp 10.0.2.104 54523 <-> 27.142.3.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:44.586370 0.000000 udp 10.0.2.104 54523 -> 87.111.41.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:45.587420 0.036810 udp 10.0.2.104 54523 <-> 81.161.241.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:46.589659 0.181099 udp 10.0.2.104 54523 <-> 69.76.153.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:47.590393 0.065558 udp 10.0.2.104 54523 <-> 37.235.189.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:48.592274 0.043209 udp 10.0.2.104 54523 <-> 79.118.98.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:49.593531 1.485391 udp 10.0.2.104 54523 <-> 115.241.55.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:50.584901 0.171274 udp 10.0.2.104 54523 <-> 135.19.188.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:51.586229 0.000000 udp 10.0.2.104 54523 -> 180.215.136.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:15:52.587600 2.554390 udp 10.0.2.104 54523 <-> 77.126.204.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:53.589485 0.026749 udp 10.0.2.104 54523 <-> 151.237.10.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:54.591104 0.073439 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:55.592368 0.070297 udp 10.0.2.104 54523 <-> 92.231.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:56.593951 0.256806 udp 10.0.2.104 54523 <-> 183.83.99.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:57.585111 0.306554 udp 10.0.2.104 54523 <-> 14.97.62.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:58.356161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:15:58.586767 0.023008 udp 10.0.2.104 54523 <-> 89.33.186.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:15:59.588107 0.113403 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:00.589319 0.000000 udp 10.0.2.104 54523 -> 151.246.103.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:01.591139 4.996487 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:02.251437 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:16:02.592121 0.005471 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:03.594146 0.030727 udp 10.0.2.104 54523 <-> 89.67.108.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:04.585424 0.395211 udp 10.0.2.104 54523 <-> 122.108.68.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:05.586580 0.000000 udp 10.0.2.104 54523 -> 68.115.176.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:06.746624 0.000000 udp 10.0.2.104 54523 <- 174.78.104.11 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:07.589216 0.119403 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:08.590796 0.000000 udp 10.0.2.104 54523 -> 31.44.194.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:09.592350 0.555573 udp 10.0.2.104 54523 <-> 14.97.150.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:10.593399 3.617527 udp 10.0.2.104 54523 <-> 66.41.191.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:11.585177 0.110117 udp 10.0.2.104 54523 <-> 79.17.72.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:12.586928 0.064140 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:13.587929 0.046684 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:14.589288 0.136432 udp 10.0.2.104 54523 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:15.590615 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:16.592042 0.000146 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:16.592188 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:16:17.593466 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:18.585127 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:19.586706 3.004664 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:20.588250 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:21.589416 0.042324 udp 10.0.2.104 54523 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:23.592449 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:24.593711 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:25.585197 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:26.586806 0.000103 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:26.586909 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:16:27.588540 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:28.589885 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:29.590710 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:30.362215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:16:30.592752 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:31.593586 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:32.585154 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:34.588622 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:35.589386 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:36.590976 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:37.592741 0.022852 udp 10.0.2.104 54523 <-> 89.33.186.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:38.593772 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:39.585038 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:40.586648 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:41.587907 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:42.589848 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:43.590833 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:44.592396 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:45.593892 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:46.585096 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:47.586727 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:48.588029 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:49.248917 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:16:49.589436 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:51.593065 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:51.593141 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:16:52.593945 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:53.585997 0.029052 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:16:54.587279 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:55.588799 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:56.590007 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:57.590955 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:58.592832 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:16:59.594447 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:00.585236 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:01.586883 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:02.588285 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:04.591565 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:05.592717 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:06.594287 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:06.594335 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:17:07.585688 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:08.587339 4.005897 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:09.588214 0.000000 udp 10.0.2.104 54523 -> 71.77.141.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:10.590310 0.028666 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:17:11.591414 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:13.593943 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:14.585671 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:15.586989 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:16.588959 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:17.589798 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:19.593251 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:20.594242 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:21.585817 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:22.587105 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:22.587155 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:17:23.588872 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:24.590259 0.029103 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:17:25.591296 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:27.584672 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:28.585714 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:29.587400 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:30.588392 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:31.590184 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:32.591839 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:33.593074 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:34.584764 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:35.586145 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:36.246994 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:17:36.587245 0.000112 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:36.587357 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:17:37.588663 2.002677 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:38.590150 0.119671 udp 10.0.2.104 54523 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:17:40.592761 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:41.584176 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:42.585849 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:43.587792 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:45.590307 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:46.591472 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:47.593599 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:48.584261 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:49.585765 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:50.587356 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:51.589244 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:52.590276 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:52.590335 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:17:53.591466 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:54.593142 0.028852 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:17:55.584931 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:56.585850 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:57.587337 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:58.589099 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:17:59.590566 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:00.591737 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:01.592983 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:02.585226 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:03.585832 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:04.587675 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:06.590497 0.140466 udp 10.0.2.104 54523 <-> 24.3.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:07.591942 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:08.593180 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:09.584690 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:10.586156 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:12.588808 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:13.590832 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:14.591636 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:15.593352 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:16.584854 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:17.586649 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:18.587769 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:19.589183 3.004276 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:19.589283 3.004176 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 03:18:20.591007 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:21.592541 0.068226 udp 10.0.2.104 54523 <-> 109.107.103.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:23.244684 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:18:23.584917 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:25.587604 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:26.589175 0.137007 udp 10.0.2.104 54523 <-> 68.197.223.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:27.590609 0.125141 udp 10.0.2.104 54523 <-> 95.239.141.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:28.591944 0.000000 udp 10.0.2.104 54523 -> 201.0.15.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:29.593323 4.997452 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:30.584683 0.000000 udp 10.0.2.104 54523 -> 115.241.54.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:31.586717 0.073911 udp 10.0.2.104 54523 <-> 151.77.132.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:32.587546 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:33.589138 2.088797 udp 10.0.2.104 54523 <-> 190.49.238.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:34.638141 0.000000 udp 10.0.2.104 54523 <- 85.232.150.7 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:35.592000 0.146343 udp 10.0.2.104 54523 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:36.593473 0.000000 udp 10.0.2.104 54523 -> 187.102.85.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:37.585378 0.250699 udp 10.0.2.104 54523 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:38.586721 0.000000 udp 10.0.2.104 54523 -> 5.239.163.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:39.587670 0.000000 udp 10.0.2.104 54523 -> 95.49.101.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:40.589471 0.243139 udp 10.0.2.104 54523 <-> 37.63.229.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:41.590911 0.329986 udp 10.0.2.104 54523 <-> 14.46.114.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:42.592477 0.043237 udp 10.0.2.104 54523 <-> 83.250.76.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:43.593330 0.000000 udp 10.0.2.104 54523 -> 115.242.90.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:44.585004 0.158833 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:45.586236 4.066482 udp 10.0.2.104 54523 <-> 79.113.177.17 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:46.588525 0.058393 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:47.589353 0.022755 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:48.590897 0.361280 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:50.593406 0.156527 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:51.585490 1.226417 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:52.586630 0.757055 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:53.587883 1.049020 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:55.590864 0.000000 udp 10.0.2.104 54523 -> 98.100.253.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:56.592079 0.483687 udp 10.0.2.104 54523 <-> 201.212.133.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:57.593734 1.342113 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:18:58.585452 0.000000 udp 10.0.2.104 54523 -> 85.34.40.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:18:59.586946 0.000000 udp 10.0.2.104 54523 -> 95.65.118.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:00.587821 0.287941 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:19:01.589570 0.000000 udp 10.0.2.104 54523 -> 27.51.14.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:02.590749 0.157294 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:19:04.593793 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:04.593841 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:19:05.585454 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:06.586618 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:07.588320 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:08.589337 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:09.591409 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:10.252326 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:19:10.592503 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:11.593944 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:12.585018 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:13.587021 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:14.588467 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:15.589985 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:16.591250 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:17.592256 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:18.594113 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:19.585236 0.000000 udp 10.0.2.104 54523 -> 24.77.226.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:20.587092 0.029447 udp 10.0.2.104 54523 <-> 95.154.49.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:19:21.588111 0.009928 udp 10.0.2.104 54523 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:19:22.589736 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:23.591588 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:24.592692 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:25.593947 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:26.585470 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:27.586964 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:28.588438 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:29.589941 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:30.591011 0.000068 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:30.591079 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:19:31.592659 0.000000 udp 10.0.2.104 54523 -> 72.130.237.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:32.593816 0.310842 udp 10.0.2.104 54523 <-> 14.43.147.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:19:33.585696 0.108029 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:19:34.587126 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:35.588200 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:36.589558 0.000084 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:36.589642 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:19:37.591241 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:38.592734 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:39.594053 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:40.585289 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:41.587489 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:42.588368 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:43.589860 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:44.591066 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:45.593103 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:46.593919 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:47.585489 0.000000 udp 10.0.2.104 54523 -> 72.130.237.152 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:48.587317 0.552468 udp 10.0.2.104 54523 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:19:49.588608 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:50.590222 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:51.591955 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:52.592847 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:52.592895 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:19:53.594719 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:54.585428 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:55.587268 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:56.589011 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:57.589965 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:58.251246 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:19:58.591517 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:19:59.592711 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:00.584684 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:01.585752 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:02.587321 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:03.588369 0.148308 udp 10.0.2.104 54523 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:04.590286 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:05.591546 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:06.593082 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:07.584093 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:08.585583 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:09.587345 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:10.589111 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:11.590396 0.183612 udp 10.0.2.104 54523 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:12.591412 1.049712 udp 10.0.2.104 54523 <-> 31.185.113.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:13.593251 0.120569 udp 10.0.2.104 54523 <-> 81.233.138.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:14.584812 0.191282 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:15.585797 0.000000 udp 10.0.2.104 54523 -> 177.225.129.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:16.587909 0.131386 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:17.588495 1.185948 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:19.591499 0.000000 udp 10.0.2.104 54523 -> 201.21.42.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:20.593393 0.140463 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:21.584755 0.040011 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:22.586014 3.220536 udp 10.0.2.104 54523 <-> 71.197.74.70 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:23.587509 3.117885 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:24.589195 0.137653 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:27.593154 0.000000 udp 10.0.2.104 54523 -> 82.245.78.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:28.584874 0.323785 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:29.586037 2.003035 udp 10.0.2.104 54523 -> 72.95.148.247 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:20:30.587857 0.134465 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:32.590773 0.159915 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:33.591873 0.407992 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:34.592983 3.041878 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:35.585079 0.162171 udp 10.0.2.104 54523 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:36.586039 4.275073 udp 10.0.2.104 54523 <-> 24.32.236.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:38.588693 0.629022 udp 10.0.2.104 54523 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:39.590826 0.171978 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:40.591832 0.194083 udp 10.0.2.104 54523 <-> 203.192.241.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:41.593242 2.030220 udp 10.0.2.104 54523 <-> 188.143.29.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:42.584891 0.299717 udp 10.0.2.104 54523 <-> 122.134.49.223 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:44.587431 0.071200 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:45.248494 0.000121 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:20:45.588733 0.028836 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:46.590828 1.027759 udp 10.0.2.104 54523 <-> 95.180.36.221 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:48.593916 0.048532 udp 10.0.2.104 54523 <-> 5.14.145.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:49.584739 0.347572 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:50.586099 0.077324 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:51.588007 2.168033 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:52.588971 0.311875 udp 10.0.2.104 54523 <-> 114.145.242.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:54.591982 0.346815 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:55.593426 0.181115 udp 10.0.2.104 54523 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:56.585115 0.131533 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:57.586703 0.029604 udp 10.0.2.104 54523 <-> 89.137.97.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:58.587728 0.145350 udp 10.0.2.104 54523 <-> 67.85.183.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:20:59.589019 0.000000 udp 10.0.2.104 54523 -> 69.122.169.250 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:00.590602 0.000000 udp 10.0.2.104 54523 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:01.592028 0.047243 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:02.593563 0.077200 udp 10.0.2.104 54523 <-> 90.132.212.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:03.585168 0.122029 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:04.586287 0.034685 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:05.588007 0.159459 udp 10.0.2.104 54523 <-> 184.160.62.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:06.589458 4.746029 udp 10.0.2.104 54523 <-> 24.32.236.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:07.590928 0.396444 udp 10.0.2.104 54523 <-> 162.192.99.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:08.592282 0.450506 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:09.594007 0.292667 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:10.585359 0.064554 udp 10.0.2.104 54523 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:11.586762 0.132240 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:12.588044 0.027394 udp 10.0.2.104 54523 <-> 89.132.219.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:13.589257 0.272065 udp 10.0.2.104 54523 <-> 200.136.9.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:14.591099 0.149933 udp 10.0.2.104 54523 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:15.592723 0.451288 udp 10.0.2.104 54523 <-> 61.27.89.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:16.593964 0.070466 udp 10.0.2.104 54523 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:17.585376 0.818929 udp 10.0.2.104 54523 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:18.586738 0.356879 udp 10.0.2.104 54523 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:19.588019 0.134792 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:20.589580 0.000000 udp 10.0.2.104 54523 -> 202.142.106.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:21.590726 0.338222 udp 10.0.2.104 54523 <-> 58.141.149.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:22.592153 1.096139 udp 10.0.2.104 54523 <-> 190.36.115.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:23.593867 0.547142 udp 10.0.2.104 54523 <-> 190.94.249.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:24.584818 1.628510 udp 10.0.2.104 54523 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:25.586352 0.494885 udp 10.0.2.104 54523 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:26.588147 0.038143 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:27.589391 0.000000 udp 10.0.2.104 54523 -> 190.79.250.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:28.590968 3.153323 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:29.592159 0.000000 udp 10.0.2.104 54523 -> 14.99.202.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:30.593764 2.369692 udp 10.0.2.104 54523 <-> 118.168.121.70 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:32.246367 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:21:33.588460 2.122683 udp 10.0.2.104 54523 <-> 178.25.74.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:34.589804 0.286704 udp 10.0.2.104 54523 <-> 190.44.59.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:36.592640 0.320386 udp 10.0.2.104 54523 <-> 98.70.75.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:37.594122 0.951743 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:38.585101 0.036474 udp 10.0.2.104 54523 <-> 89.142.152.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:39.586387 0.551284 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:40.588241 0.000000 udp 10.0.2.104 54523 -> 68.204.178.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:41.589471 0.486814 udp 10.0.2.104 54523 <-> 221.39.55.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:42.591350 0.000000 udp 10.0.2.104 54523 -> 187.70.92.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:43.592427 0.132333 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:44.593903 0.137793 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:45.585017 0.269763 udp 10.0.2.104 54523 <-> 181.167.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:46.587122 0.417035 udp 10.0.2.104 54523 <-> 61.27.89.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:47.588221 0.000000 udp 10.0.2.104 54523 -> 78.90.215.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:48.589451 0.308186 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:49.300762 0.023518 udp 10.0.2.104 54543 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 03:21:49.324585 0.000000 udp 10.0.2.104 54544 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:49.590753 0.172623 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:50.592726 0.331647 udp 10.0.2.104 54523 <-> 49.250.97.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:51.594269 0.000000 udp 10.0.2.104 54523 -> 49.205.17.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:52.585452 0.182725 udp 10.0.2.104 54523 <-> 74.213.86.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:53.586529 0.000000 udp 10.0.2.104 54523 -> 87.19.151.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:54.588487 0.164212 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:55.589574 0.159732 udp 10.0.2.104 54523 <-> 71.197.28.72 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:56.590939 0.000000 udp 10.0.2.104 54523 -> 188.2.105.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:21:57.592739 0.339666 udp 10.0.2.104 54523 <-> 187.35.109.40 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:58.593701 0.163264 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:21:59.585459 0.246018 udp 10.0.2.104 54523 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:00.587189 4.246824 udp 10.0.2.104 54523 <-> 223.191.5.160 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:01.588559 2.002500 udp 10.0.2.104 54523 <-> 27.2.138.119 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:02.590088 0.000000 udp 10.0.2.104 54523 -> 74.61.161.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:05.594302 0.000000 udp 10.0.2.104 54523 -> 92.247.91.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:06.585265 0.000000 udp 10.0.2.104 54523 -> 61.227.75.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:07.587278 0.000000 udp 10.0.2.104 54523 -> 111.242.31.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:08.588093 0.655776 udp 10.0.2.104 54523 <-> 223.191.5.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:09.589840 2.002798 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:10.590994 2.122263 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:13.585365 2.336212 udp 10.0.2.104 54523 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:14.587239 0.000000 udp 10.0.2.104 54523 -> 5.238.109.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:15.588799 0.300822 udp 10.0.2.104 54523 <-> 202.222.56.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:16.589729 0.446289 udp 10.0.2.104 54523 <-> 219.115.73.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:16.874756 0.000000 udp 10.0.2.104 54523 <- 92.247.91.199 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:17.591211 0.549745 udp 10.0.2.104 54523 <-> 24.49.211.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:18.593118 0.238765 udp 10.0.2.104 54523 <-> 79.27.166.246 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:19.243369 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:22:19.594357 0.000000 udp 10.0.2.104 54523 -> 75.130.142.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:20.585484 0.000000 udp 10.0.2.104 54523 -> 89.132.14.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:21.587022 0.052238 udp 10.0.2.104 54523 <-> 188.246.87.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:22.589142 0.293588 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:23.590067 0.000000 udp 10.0.2.104 54523 -> 14.96.184.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:24.591766 0.350090 udp 10.0.2.104 54523 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:25.593049 0.446230 udp 10.0.2.104 54523 <-> 114.42.174.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:26.594162 0.040912 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:27.585747 0.036771 udp 10.0.2.104 54523 <-> 93.103.42.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:28.587667 0.147554 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:29.588762 0.413793 udp 10.0.2.104 54523 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:30.590156 0.000000 udp 10.0.2.104 54523 -> 69.149.65.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:31.591192 0.179451 udp 10.0.2.104 54523 <-> 74.213.86.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:32.593021 0.153870 udp 10.0.2.104 54523 <-> 174.98.145.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:33.584338 0.037560 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:34.368934 3.001048 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:22:34.586073 0.161895 udp 10.0.2.104 54523 <-> 65.26.227.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:35.587480 0.416651 udp 10.0.2.104 54523 <-> 74.195.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:36.588514 0.568675 udp 10.0.2.104 54523 <-> 75.14.212.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:37.590413 0.000000 udp 10.0.2.104 54523 -> 74.2.105.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:38.591716 0.038045 udp 10.0.2.104 54523 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:39.593280 0.197615 udp 10.0.2.104 54523 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:40.584441 0.208686 udp 10.0.2.104 54523 <-> 24.21.31.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:41.375959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:22:41.586285 0.364858 udp 10.0.2.104 54523 <-> 60.62.114.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:42.587399 0.051853 udp 10.0.2.104 54523 <-> 77.91.50.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:43.589027 0.030464 udp 10.0.2.104 54523 <-> 130.204.99.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:44.589827 0.302649 udp 10.0.2.104 54523 <-> 112.186.250.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:45.592102 0.000000 udp 10.0.2.104 54523 -> 94.156.153.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:46.592830 0.000000 udp 10.0.2.104 54523 -> 213.91.147.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:47.584304 0.321911 udp 10.0.2.104 54523 <-> 200.158.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:48.585980 0.166232 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:49.377435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:22:49.587316 0.030281 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:50.588916 0.113144 udp 10.0.2.104 54523 <-> 95.155.27.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:51.590134 0.000000 udp 10.0.2.104 54523 -> 208.101.72.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:52.591681 0.346934 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:53.592801 0.088038 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:54.584204 0.432918 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:55.586009 0.000000 udp 10.0.2.104 54523 -> 202.77.137.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:56.587227 0.000000 udp 10.0.2.104 54523 -> 190.139.224.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:57.589093 0.066797 udp 10.0.2.104 54523 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:22:58.590442 0.000000 udp 10.0.2.104 54523 -> 83.40.36.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:22:59.591598 0.277021 udp 10.0.2.104 54523 <-> 111.95.108.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:00.593139 0.000000 udp 10.0.2.104 54523 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:01.584956 3.034565 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:02.586293 0.037019 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:03.587174 0.000000 udp 10.0.2.104 54523 -> 14.96.184.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:05.380531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:23:05.590575 0.000000 udp 10.0.2.104 54523 -> 27.59.11.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:06.251314 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:23:06.591633 3.544480 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:07.593544 0.039668 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:08.584498 1.001333 udp 10.0.2.104 54523 <-> 79.121.110.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:10.587318 0.117491 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:11.589214 0.000000 udp 10.0.2.104 54523 -> 14.96.184.34 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:12.590738 0.850131 udp 10.0.2.104 54523 <-> 79.132.171.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:13.592221 0.194035 udp 10.0.2.104 54523 <-> 74.213.86.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:14.593565 0.159427 udp 10.0.2.104 54523 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:15.584655 0.057903 udp 10.0.2.104 54523 <-> 46.55.189.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:16.586199 0.244122 udp 10.0.2.104 54523 <-> 49.204.104.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:17.587818 0.276468 udp 10.0.2.104 54523 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:18.589326 0.149264 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:20.591635 0.000000 udp 10.0.2.104 54523 -> 178.94.6.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:21.593075 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:21.593137 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:23:22.584606 0.387614 udp 10.0.2.104 54523 <-> 182.188.191.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:23.586048 0.142982 udp 10.0.2.104 54523 <-> 8.28.208.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:24.587809 0.345152 udp 10.0.2.104 54523 <-> 36.238.37.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:25.589196 0.000000 udp 10.0.2.104 54523 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:26.590488 0.296602 udp 10.0.2.104 54523 <-> 126.86.87.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:27.592436 0.051871 udp 10.0.2.104 54523 <-> 93.155.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:28.593786 0.000000 udp 10.0.2.104 54523 -> 187.15.59.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:29.584810 0.000000 udp 10.0.2.104 54523 -> 178.123.17.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:30.586406 0.000000 udp 10.0.2.104 54523 -> 113.193.84.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:31.587590 0.000000 udp 10.0.2.104 54523 -> 65.162.46.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:32.588891 0.083019 udp 10.0.2.104 54523 <-> 212.225.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:33.590717 0.192341 udp 10.0.2.104 54523 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:34.592141 1.388771 udp 10.0.2.104 54523 <-> 190.204.12.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:35.593188 0.302019 udp 10.0.2.104 54523 <-> 60.238.176.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:36.584936 0.287236 udp 10.0.2.104 54523 <-> 124.34.178.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:37.386212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:23:37.586496 0.195565 udp 10.0.2.104 54523 <-> 46.225.75.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:38.587577 0.000000 udp 10.0.2.104 54523 -> 31.59.123.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:39.589521 0.000000 udp 10.0.2.104 54523 -> 174.32.174.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:40.590651 0.114968 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:41.592066 0.060332 udp 10.0.2.104 54523 <-> 151.64.37.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:42.593484 0.000000 udp 10.0.2.104 54523 -> 217.133.96.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:43.584977 0.262478 udp 10.0.2.104 54523 <-> 186.95.24.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:44.586698 0.264179 udp 10.0.2.104 54523 <-> 85.216.5.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:45.587752 0.325763 udp 10.0.2.104 54523 <-> 114.36.30.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:46.589592 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:47.590855 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:48.592278 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:49.593581 0.200356 udp 10.0.2.104 54523 <-> 71.237.245.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:50.585084 0.113951 udp 10.0.2.104 54523 <-> 92.2.234.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:51.586480 0.000000 udp 10.0.2.104 54523 -> 114.177.121.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:52.588023 0.066904 udp 10.0.2.104 54523 <-> 46.10.227.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:53.249050 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:23:53.589378 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:54.590595 0.030701 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:55.591947 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:23:56.593356 0.015978 udp 10.0.2.104 54523 <-> 5.146.59.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:57.585072 0.113800 udp 10.0.2.104 54523 <-> 46.190.86.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:58.586943 2.311150 udp 10.0.2.104 54523 <-> 97.102.73.130 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:23:59.588340 0.319665 udp 10.0.2.104 54523 <-> 121.177.85.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:01.590792 0.000000 udp 10.0.2.104 54523 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:02.592471 0.756986 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:03.594179 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:03.594229 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:24:04.584991 3.004353 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:05.586462 0.346184 udp 10.0.2.104 54523 <-> 118.130.233.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:06.587954 0.040526 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:08.591331 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:09.592252 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:10.594020 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:11.585387 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:12.586642 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:13.588253 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:14.589873 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:15.591423 0.163409 udp 10.0.2.104 54523 <-> 24.214.174.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:16.592171 0.078406 udp 10.0.2.104 54523 <-> 37.123.3.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:17.594111 0.041000 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:18.585577 0.132856 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:19.586899 0.366351 udp 10.0.2.104 54523 <-> 137.166.125.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:20.588065 0.284853 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:21.589559 0.000000 udp 10.0.2.104 54523 -> 82.90.218.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:22.590797 0.321918 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:23.592768 0.199173 udp 10.0.2.104 54523 <-> 183.87.216.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:24.594150 0.142289 udp 10.0.2.104 54523 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:25.585543 0.033063 udp 10.0.2.104 54523 <-> 213.222.46.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:26.586499 0.157482 udp 10.0.2.104 54523 <-> 24.214.174.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:27.588162 0.170462 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:28.589707 0.480697 udp 10.0.2.104 54523 <-> 190.57.242.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:29.591433 0.125043 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:30.592945 0.146117 udp 10.0.2.104 54523 <-> 96.32.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:31.593860 0.033619 udp 10.0.2.104 54523 <-> 217.16.136.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:32.585511 0.047337 udp 10.0.2.104 54523 <-> 5.14.212.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:33.586572 0.000000 udp 10.0.2.104 54523 -> 88.236.157.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:34.588461 0.280949 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:35.589758 0.150219 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:36.591723 0.175051 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:37.592883 0.826407 udp 10.0.2.104 54523 <-> 172.243.139.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:38.594137 1.185534 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:40.246200 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:24:40.587313 0.050191 udp 10.0.2.104 54523 <-> 78.84.143.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:41.588166 0.086271 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:42.589499 0.159436 udp 10.0.2.104 54523 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:43.590973 0.051601 udp 10.0.2.104 54523 <-> 193.219.37.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:44.592855 0.157264 udp 10.0.2.104 54523 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:45.593819 0.362798 udp 10.0.2.104 54523 <-> 177.182.184.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:46.585873 0.118294 udp 10.0.2.104 54523 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:47.587163 0.000000 udp 10.0.2.104 54523 -> 14.97.87.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:48.588480 0.381741 udp 10.0.2.104 54523 <-> 1.36.1.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:49.589948 0.020960 udp 10.0.2.104 54523 <-> 176.199.23.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:50.591010 0.028840 udp 10.0.2.104 54523 <-> 80.218.193.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:51.592887 0.221283 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:52.594546 2.994271 udp 10.0.2.104 54523 -> 77.254.247.145 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:53.585532 3.166762 udp 10.0.2.104 54523 <-> 207.210.56.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:54.586924 0.328279 udp 10.0.2.104 54523 <-> 218.157.141.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:56.589927 0.046489 udp 10.0.2.104 54523 <-> 155.158.53.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:57.591296 0.000000 udp 10.0.2.104 54523 -> 186.63.6.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:24:58.592916 1.656428 udp 10.0.2.104 54523 <-> 195.174.102.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:24:59.594128 0.323108 udp 10.0.2.104 54523 <-> 49.128.166.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:00.586070 0.155370 udp 10.0.2.104 54523 <-> 70.180.79.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:01.587345 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:02.588258 0.355949 udp 10.0.2.104 54523 <-> 118.165.68.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:03.590315 0.166836 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:04.591551 1.084233 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:05.593143 0.358424 udp 10.0.2.104 54523 <-> 36.224.2.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:06.584273 0.207427 udp 10.0.2.104 54523 <-> 124.123.92.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:07.585554 0.152872 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:08.587597 0.157583 udp 10.0.2.104 54523 <-> 202.71.27.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:09.588867 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:10.590389 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:11.591486 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:12.593330 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:13.584432 0.140259 udp 10.0.2.104 54523 <-> 67.103.179.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:14.585571 0.266378 udp 10.0.2.104 54523 <-> 189.32.253.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:15.587341 0.250952 udp 10.0.2.104 54523 <-> 75.54.70.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:16.588956 0.000000 udp 10.0.2.104 54523 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:17.590580 1.678373 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:18.591818 0.251495 udp 10.0.2.104 54523 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:19.592768 0.300937 udp 10.0.2.104 54523 <-> 61.114.73.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:20.584425 0.311531 udp 10.0.2.104 54523 <-> 210.153.214.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:21.585874 0.000000 udp 10.0.2.104 54523 -> 117.207.63.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:22.587935 0.160065 udp 10.0.2.104 54523 <-> 208.107.49.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:23.588556 0.516266 udp 10.0.2.104 54523 <-> 50.70.177.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:24.590022 2.002786 udp 10.0.2.104 54523 -> 201.243.112.174 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:25.592047 0.031175 udp 10.0.2.104 54523 <-> 89.67.108.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:27.244519 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:25:27.584427 0.129856 udp 10.0.2.104 54523 <-> 24.252.198.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:28.585995 0.159483 udp 10.0.2.104 54523 <-> 76.24.95.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:29.587229 0.317426 udp 10.0.2.104 54523 <-> 153.183.74.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:30.588760 0.154621 udp 10.0.2.104 54523 <-> 98.250.250.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:31.590629 0.098583 udp 10.0.2.104 54523 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:32.591782 0.210333 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:33.593114 0.339567 udp 10.0.2.104 54523 <-> 186.91.184.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:34.584251 2.200233 udp 10.0.2.104 54523 <-> 62.57.201.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:35.586380 0.067591 udp 10.0.2.104 54523 <-> 24.133.35.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:36.587191 1.557055 udp 10.0.2.104 54523 <-> 202.29.179.111 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:38.590007 0.330339 udp 10.0.2.104 54523 <-> 79.36.93.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:39.591628 0.353244 udp 10.0.2.104 54523 <-> 124.247.112.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:40.593124 0.161976 udp 10.0.2.104 54523 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:41.584982 1.093728 udp 10.0.2.104 54523 <-> 37.215.216.57 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:42.586370 0.365470 udp 10.0.2.104 54523 <-> 14.99.156.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:43.587856 0.148709 udp 10.0.2.104 54523 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:44.588703 0.000000 udp 10.0.2.104 54523 -> 72.85.61.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:45.590821 0.000000 udp 10.0.2.104 54523 -> 5.15.146.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:46.591994 0.113931 udp 10.0.2.104 54523 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:47.593190 0.000000 udp 10.0.2.104 54523 -> 202.164.156.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:48.585074 0.226404 udp 10.0.2.104 54523 <-> 49.205.125.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:49.586543 0.085464 udp 10.0.2.104 54523 <-> 95.178.112.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:50.587577 0.317449 udp 10.0.2.104 54523 <-> 153.183.74.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:51.588833 0.064238 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:52.590273 0.373797 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:53.592163 0.303655 udp 10.0.2.104 54523 <-> 211.33.152.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:54.593204 0.130145 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:55.584995 0.000000 udp 10.0.2.104 54523 -> 211.178.220.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:56.586239 0.344587 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:57.587342 0.000000 udp 10.0.2.104 54523 -> 98.253.7.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:25:58.589368 0.053839 udp 10.0.2.104 54523 <-> 84.197.114.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:25:59.590437 1.030527 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:01.593319 0.000000 udp 10.0.2.104 54523 -> 5.54.83.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:02.585055 0.037893 udp 10.0.2.104 54523 <-> 62.31.245.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:03.586694 0.313333 udp 10.0.2.104 54523 <-> 59.94.7.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:04.587815 0.237561 udp 10.0.2.104 54523 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:05.589321 0.460584 udp 10.0.2.104 54523 <-> 59.161.88.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:06.591044 0.040684 udp 10.0.2.104 54523 <-> 212.43.50.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:07.592301 1.305933 udp 10.0.2.104 54523 <-> 151.64.199.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:08.593278 0.000000 udp 10.0.2.104 54523 -> 124.244.252.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:09.585084 0.000000 udp 10.0.2.104 54523 -> 76.176.215.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:10.586751 2.431237 udp 10.0.2.104 54523 <-> 67.213.111.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:11.587896 0.071282 udp 10.0.2.104 54523 <-> 151.45.195.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:11.754024 0.000000 udp 10.0.2.104 54523 <- 5.54.83.160 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:12.589111 0.168447 udp 10.0.2.104 54523 <-> 68.56.123.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:13.591035 0.000000 udp 10.0.2.104 54523 -> 87.173.35.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:14.251887 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:26:14.592274 0.300876 udp 10.0.2.104 54523 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:15.593412 0.059057 udp 10.0.2.104 54523 <-> 89.40.194.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:16.585350 0.380912 udp 10.0.2.104 54523 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:17.586149 0.000000 udp 10.0.2.104 54523 -> 83.24.133.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:18.587682 0.900324 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:19.589281 0.211975 udp 10.0.2.104 54523 <-> 178.149.49.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:20.591173 0.159497 udp 10.0.2.104 54523 <-> 74.77.223.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:21.592391 0.145286 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:22.593437 0.000000 udp 10.0.2.104 54523 -> 5.15.59.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:23.585250 0.215261 udp 10.0.2.104 54523 <-> 65.191.163.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:24.586584 0.046871 udp 10.0.2.104 54523 <-> 46.160.101.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:25.587751 0.447268 udp 10.0.2.104 54523 <-> 117.212.121.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:26.589152 0.285001 udp 10.0.2.104 54523 <-> 181.164.188.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:27.590476 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:28.591949 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:29.594073 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:30.584964 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:31.586202 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:32.587948 3.004457 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:33.589319 0.000054 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:33.589373 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:26:34.590927 0.129359 udp 10.0.2.104 54523 <-> 94.190.82.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:36.593805 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:37.585256 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:38.586416 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:39.587716 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:40.589310 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:41.590649 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:42.592721 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:43.594036 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:44.585642 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:45.586354 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:46.588425 4.996700 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:46.588475 4.996650 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 03:26:47.589826 4.996855 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:48.591326 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:49.592553 0.165285 udp 10.0.2.104 54523 <-> 70.178.41.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:26:50.593749 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:53.588468 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:54.589411 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:55.591365 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:56.592773 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:57.593876 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:58.585334 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:26:59.586627 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:00.588403 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:01.249422 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:27:01.589719 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:02.591407 4.997429 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:03.592951 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:04.593826 0.059252 udp 10.0.2.104 54523 <-> 95.158.180.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:05.585245 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:06.586933 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:08.589889 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:09.591038 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:10.592330 0.301321 udp 10.0.2.104 54523 <-> 115.124.226.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:11.594282 0.000000 udp 10.0.2.104 54523 -> 80.116.197.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:12.585191 0.060280 udp 10.0.2.104 54523 <-> 188.24.130.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:13.586772 0.316179 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:14.588525 2.148347 udp 10.0.2.104 54523 <-> 98.204.133.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:15.590123 0.188147 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:17.592411 0.054205 udp 10.0.2.104 54523 <-> 81.190.173.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:18.594461 0.000000 udp 10.0.2.104 54523 -> 208.99.142.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:19.585721 0.038602 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:20.587317 0.464929 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:21.588467 1.016805 udp 10.0.2.104 54523 <-> 161.53.118.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:23.591173 0.143216 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:24.592762 0.333769 udp 10.0.2.104 54523 <-> 103.7.151.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:25.594222 0.000000 udp 10.0.2.104 54523 -> 61.195.230.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:26.585678 0.180123 udp 10.0.2.104 54523 <-> 219.91.230.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:27.586842 1.166753 udp 10.0.2.104 54523 <-> 207.134.187.82 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:29.590013 0.140468 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:30.591830 0.000000 udp 10.0.2.104 54523 -> 116.74.2.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:31.593244 0.000000 udp 10.0.2.104 54523 -> 124.109.194.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:32.594487 0.000000 udp 10.0.2.104 54523 -> 183.83.120.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:33.585769 0.000000 udp 10.0.2.104 54523 -> 83.163.158.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:34.587327 0.233459 udp 10.0.2.104 54523 <-> 59.95.5.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:35.588429 0.171461 udp 10.0.2.104 54523 <-> 109.182.129.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:36.590090 0.122237 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:37.591226 0.448601 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:38.592753 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:39.584365 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:40.585422 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:41.587094 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:42.588759 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:43.590305 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:44.591902 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:45.592979 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:46.584743 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:47.585678 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:48.247056 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:27:48.587347 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:49.589119 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:50.590516 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:51.591727 0.000000 udp 10.0.2.104 54523 -> 190.247.155.53 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:52.593182 0.000000 udp 10.0.2.104 54523 -> 92.86.43.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:53.584678 0.394534 udp 10.0.2.104 54523 <-> 36.225.131.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:27:54.585751 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:56.588707 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:57.590288 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:58.591322 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:27:59.592752 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:00.584666 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:01.586262 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:02.587429 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:03.588509 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:04.590209 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:05.591446 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:05.591515 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:28:06.593593 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:07.584226 0.384319 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:08.586100 0.119594 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:09.587247 0.059859 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:10.589166 0.137256 udp 10.0.2.104 54523 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:11.590642 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:12.591442 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:13.593088 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:14.584810 0.170780 udp 10.0.2.104 54523 <-> 24.55.45.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:15.586392 0.027316 udp 10.0.2.104 54523 <-> 46.108.106.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:16.587313 0.065742 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:17.588823 0.036576 udp 10.0.2.104 54523 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:18.590261 0.059146 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:19.591822 3.050653 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:21.584782 0.051183 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:23.587994 0.045641 udp 10.0.2.104 54523 <-> 213.118.177.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:24.588710 0.361431 udp 10.0.2.104 54523 <-> 112.118.56.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:25.590660 1.387974 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:26.591617 0.139336 udp 10.0.2.104 54523 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:27.593596 0.162246 udp 10.0.2.104 54523 <-> 74.77.226.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:28.584791 3.066238 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:29.586500 0.000000 udp 10.0.2.104 54523 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:30.587775 0.159264 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:32.590667 0.139529 udp 10.0.2.104 54523 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:33.591883 0.155335 udp 10.0.2.104 54523 <-> 68.11.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:34.593275 0.000000 udp 10.0.2.104 54523 -> 108.176.74.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:35.243957 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:28:35.584873 0.061011 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:36.586479 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:37.587766 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:38.589028 0.000000 udp 10.0.2.104 54523 -> 81.45.237.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:39.590957 0.000000 udp 10.0.2.104 54523 -> 217.149.154.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:40.592260 0.036080 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:41.593712 0.061001 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:42.585049 0.042162 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:43.586366 0.309238 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:44.587529 0.027913 udp 10.0.2.104 54523 <-> 78.42.36.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:45.589108 0.159009 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:46.590909 0.000000 udp 10.0.2.104 54523 -> 188.217.186.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:47.592097 0.000000 udp 10.0.2.104 54523 -> 115.246.3.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:48.593646 0.000000 udp 10.0.2.104 54523 -> 109.182.129.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:49.585002 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:50.586395 0.012887 udp 10.0.2.104 54523 <-> 89.103.132.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:51.588103 0.000000 udp 10.0.2.104 54523 -> 200.158.248.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:52.589776 0.318460 udp 10.0.2.104 54523 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:53.591005 0.299759 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:54.247843 0.000000 udp 10.0.2.104 54523 <- 115.246.3.45 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:54.592513 0.000000 udp 10.0.2.104 54523 -> 87.20.123.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:55.593510 0.312805 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:56.585462 0.052428 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:28:57.586642 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:58.587931 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:28:59.589056 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:00.590471 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:01.592602 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:02.593567 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:03.585081 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:03.585152 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:29:04.586327 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:05.588291 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:06.589481 4.997452 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:07.591093 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:08.592465 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:09.593655 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:10.585227 0.046736 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:29:12.588088 0.000117 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:12.588205 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:29:13.589565 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:14.591246 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:15.592149 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:16.593464 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:17.585141 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:18.586976 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:19.588236 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:20.589418 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:21.590991 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:22.251934 0.000137 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:29:22.592116 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:23.593939 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:24.585150 4.006147 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:25.586802 2.002490 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:26.588285 0.046104 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:29:29.592616 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:30.594296 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:31.585004 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:32.586958 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:32.587031 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:29:33.588328 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:34.589928 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:35.590995 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:36.592916 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:37.593930 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:38.585474 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:39.587072 3.004673 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:40.588593 4.997046 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:41.394479 2.999443 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:29:41.589551 0.046789 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:29:43.592996 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:44.594067 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:46.587094 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:47.588293 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:48.399343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:29:48.589491 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:49.591025 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:50.592439 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:51.594490 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:52.585740 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:53.586785 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:54.588629 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:55.589878 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:55.589925 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:29:56.401148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:29:56.591196 2.003050 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:29:57.593023 0.045432 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:29:59.585463 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:00.587473 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:01.588418 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:01.588529 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:30:02.589616 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:03.591212 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:04.592470 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:05.594215 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:06.585611 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:07.587253 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:08.588720 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:09.249429 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:30:09.589909 4.997172 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:10.591252 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:11.593265 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:12.404209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:30:12.584363 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:13.585884 0.046697 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:30:15.588327 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:16.590020 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:17.591343 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:18.593128 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:19.584649 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:20.586154 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:21.586887 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:22.588740 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:23.589827 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:24.591487 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:25.592892 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:26.584620 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:26.584697 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:30:27.586225 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:28.587623 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:29.588442 0.046534 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:30:30.589869 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:31.591297 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:32.592850 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:33.584737 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:34.586077 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:35.587125 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:36.588460 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:37.590489 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:38.591568 0.000120 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:38.591688 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:30:39.593304 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:40.584573 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:41.585703 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:42.587128 4.997411 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:43.588934 0.045955 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:30:44.410246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:30:44.590625 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:45.591804 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:46.592964 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:48.586130 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:49.587284 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:50.588682 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:51.590108 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:52.592145 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:53.592931 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:54.584513 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:55.586313 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:56.246975 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:30:56.587951 0.000091 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:56.588042 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:30:57.589096 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:58.590714 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:30:59.592168 0.049099 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:00.593529 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:01.584902 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:02.585998 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:03.588981 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:04.589387 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:05.590477 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:06.592213 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:07.593115 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:08.584878 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:09.586586 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:10.587804 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:11.588864 4.997341 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:12.590470 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:13.591739 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:14.593508 0.000067 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:14.593575 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:31:15.584578 0.046810 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:17.587654 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:18.589221 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:19.590916 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:20.592139 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:21.593623 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:22.584907 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:23.586334 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:24.587475 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:25.589003 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:26.590940 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:27.592455 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:28.593899 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:29.585030 4.005741 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:29.585101 4.005670 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 03:31:30.586101 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:31.587828 0.045717 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:32.589019 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:34.592136 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:35.594044 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:36.584837 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:37.586159 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:38.588027 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:39.589456 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:40.590644 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:41.592509 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:42.593585 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:43.244356 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:31:43.585411 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:44.586625 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:45.587806 4.005695 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:46.589173 2.002998 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:47.590720 0.047110 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:50.585386 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:51.586825 0.150247 udp 10.0.2.104 54523 <-> 176.201.18.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:52.588455 0.109687 udp 10.0.2.104 54523 <-> 95.155.27.213 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:53.589356 0.126027 udp 10.0.2.104 54523 <-> 64.121.253.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:54.590914 0.279459 udp 10.0.2.104 54523 <-> 201.83.219.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:55.592186 0.000000 udp 10.0.2.104 54523 -> 61.21.68.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:31:56.593506 0.272374 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:57.585024 0.359158 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:58.586670 0.175197 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:31:59.587906 0.303269 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:00.589461 0.045230 udp 10.0.2.104 54523 <-> 86.10.107.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:01.590942 0.139347 udp 10.0.2.104 54523 <-> 151.74.7.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:02.592490 0.060043 udp 10.0.2.104 54523 <-> 81.202.125.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:03.593892 0.044035 udp 10.0.2.104 54523 <-> 194.158.73.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:04.585027 0.157497 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:05.587008 0.059685 udp 10.0.2.104 54523 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:06.588146 0.161612 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:07.589431 2.149535 udp 10.0.2.104 54523 <-> 203.192.205.254 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:08.591255 4.090821 udp 10.0.2.104 54523 <-> 109.60.87.7 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:10.594265 0.073672 udp 10.0.2.104 54523 <-> 188.27.196.55 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:11.585562 0.060660 udp 10.0.2.104 54523 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:13.588764 1.397916 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:14.589534 0.000000 udp 10.0.2.104 54523 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:15.591027 0.000000 udp 10.0.2.104 54523 -> 85.85.71.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:16.592909 0.195312 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:17.594164 0.085975 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:18.585547 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:19.586791 0.162697 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:20.588044 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:21.590150 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:22.591110 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:23.592493 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:24.594430 0.015406 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:25.585470 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:26.587199 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:27.588489 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:28.589611 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:28.589682 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:32:29.591414 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:30.251942 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:32:31.594123 1.119176 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:33.586674 0.073541 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:34.588574 0.192597 udp 10.0.2.104 54523 <-> 88.187.105.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:35.589609 1.200057 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:36.591074 0.310433 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:37.592487 0.000000 udp 10.0.2.104 54523 -> 177.47.195.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:38.593886 0.055999 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:39.585911 0.145088 udp 10.0.2.104 54523 <-> 174.101.11.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:40.587314 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:41.588211 1.364743 udp 10.0.2.104 54523 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:42.590047 0.150516 udp 10.0.2.104 54523 <-> 24.202.240.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:43.591406 0.052249 udp 10.0.2.104 54523 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:44.593011 1.501496 udp 10.0.2.104 54523 <-> 179.235.247.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:45.584422 0.162986 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:46.585388 0.055760 udp 10.0.2.104 54523 <-> 79.98.138.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:47.587507 0.000000 udp 10.0.2.104 54523 -> 178.14.104.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:48.588590 0.049910 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:49.589839 0.199441 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:50.591444 0.165950 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:51.593085 0.364964 udp 10.0.2.104 54523 <-> 119.24.148.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:52.584718 0.570190 udp 10.0.2.104 54523 <-> 201.211.102.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:53.585744 0.051720 udp 10.0.2.104 54523 <-> 86.120.153.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:54.587420 0.000000 udp 10.0.2.104 54523 -> 5.13.90.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:32:55.589109 2.002711 udp 10.0.2.104 54523 <-> 78.97.7.40 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:56.590462 0.259311 udp 10.0.2.104 54523 <-> 186.205.142.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:58.593057 0.765055 udp 10.0.2.104 54523 <-> 94.45.99.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:32:59.584461 4.257665 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:01.587671 0.414386 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:02.589047 0.000000 udp 10.0.2.104 54523 -> 101.63.227.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:04.591307 0.000000 udp 10.0.2.104 54523 -> 111.91.127.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:05.592924 0.554996 udp 10.0.2.104 54523 <-> 94.45.99.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:06.584143 0.162886 udp 10.0.2.104 54523 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:07.585600 0.000000 udp 10.0.2.104 54523 -> 78.90.215.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:08.587327 0.072529 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:09.589020 0.363398 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:10.590426 0.000000 udp 10.0.2.104 54523 -> 75.187.154.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:11.591574 4.997249 udp 10.0.2.104 54523 <-> 46.214.189.242 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:12.593060 0.000000 udp 10.0.2.104 54523 -> 78.90.215.236 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:13.584220 0.168826 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:14.585728 0.601851 udp 10.0.2.104 54523 <-> 114.41.94.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:15.587740 0.191364 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:16.640531 0.000000 udp 10.0.2.104 54523 <- 46.214.189.242 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:17.249784 0.000133 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:33:17.590581 4.996742 udp 10.0.2.104 54523 <-> 75.221.230.247 16464 CON 0 0 3 306 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:18.591750 2.148531 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:19.592958 0.077729 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:21.586414 0.157832 udp 10.0.2.104 54523 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:22.832044 0.000000 udp 10.0.2.104 54523 <- 75.221.230.247 16464 RSP 0 0 1 190 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:23.588911 0.046685 udp 10.0.2.104 54523 <-> 80.217.131.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:24.590701 0.000000 udp 10.0.2.104 54523 -> 114.24.159.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:25.591476 0.793427 udp 10.0.2.104 54523 <-> 116.72.2.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:26.593248 4.612792 udp 10.0.2.104 54523 <-> 95.74.39.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:27.584691 0.165727 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:28.585775 0.179467 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:29.587293 0.116062 udp 10.0.2.104 54523 <-> 62.18.227.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:30.589259 0.000000 udp 10.0.2.104 54523 -> 186.14.134.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:31.590229 0.141941 udp 10.0.2.104 54523 <-> 207.181.241.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:32.591815 0.042166 udp 10.0.2.104 54523 <-> 77.234.87.43 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:33.593809 0.000000 udp 10.0.2.104 54523 -> 188.27.105.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:34.584987 0.343144 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:35.585857 0.108200 udp 10.0.2.104 54523 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:36.587320 0.070499 udp 10.0.2.104 54523 <-> 109.60.87.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:37.588913 0.127541 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:38.590184 0.000000 udp 10.0.2.104 54523 -> 14.97.120.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:39.592303 0.015021 udp 10.0.2.104 54523 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:40.593238 0.068086 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:41.584915 0.056332 udp 10.0.2.104 54523 <-> 94.240.161.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:42.587927 0.000000 udp 10.0.2.104 54523 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:43.587718 0.477997 udp 10.0.2.104 54523 <-> 181.165.132.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:44.589300 0.000000 udp 10.0.2.104 54523 -> 101.63.207.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:45.590920 0.000000 udp 10.0.2.104 54523 -> 186.88.174.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:46.129846 0.000000 udp 10.0.2.104 54523 <- 14.97.120.130 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:46.591809 0.133561 udp 10.0.2.104 54523 <-> 75.109.118.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:47.593293 0.556698 udp 10.0.2.104 54523 <-> 202.29.178.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:48.584771 0.224710 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:49.586036 0.071013 udp 10.0.2.104 54523 <-> 212.225.185.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:50.587585 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:51.589525 0.000000 udp 10.0.2.104 54523 -> 82.227.89.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:52.590974 0.060719 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:53.591877 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:54.593329 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:55.585133 0.520999 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:56.586743 0.000000 udp 10.0.2.104 54523 -> 74.199.89.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:56.973387 0.000000 udp 10.0.2.104 54523 <- 82.227.89.11 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:57.587809 0.709954 udp 10.0.2.104 54523 <-> 27.3.107.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:33:58.589090 0.000000 udp 10.0.2.104 54523 -> 188.2.139.161 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:33:59.590392 0.286600 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:00.592313 0.042978 udp 10.0.2.104 54523 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:01.593236 0.133853 udp 10.0.2.104 54523 <-> 75.109.118.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:02.585322 0.365241 udp 10.0.2.104 54523 <-> 49.249.22.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:03.586467 0.309907 udp 10.0.2.104 54523 -> 61.89.229.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:03.896374 0.000000 icmp 61.89.229.52 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 03:34:04.247151 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:34:04.588167 0.145479 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:05.589391 0.000000 udp 10.0.2.104 54523 -> 46.180.194.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:06.590837 0.215361 udp 10.0.2.104 54523 <-> 180.188.225.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:07.592527 1.560994 udp 10.0.2.104 54523 <-> 186.88.199.130 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:09.584978 1.747487 udp 10.0.2.104 54523 <-> 87.3.116.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:10.586454 0.329259 udp 10.0.2.104 54523 <-> 109.182.60.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:11.588098 3.146036 udp 10.0.2.104 54523 <-> 96.56.91.162 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:12.589547 0.000000 udp 10.0.2.104 54523 -> 75.206.212.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:13.590604 0.038818 udp 10.0.2.104 54523 <-> 92.247.198.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:15.593737 0.050588 udp 10.0.2.104 54523 <-> 82.224.126.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:16.585179 2.305540 udp 10.0.2.104 54523 <-> 101.63.207.42 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:17.587029 4.044718 udp 10.0.2.104 54523 <-> 91.65.14.48 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:19.589344 0.000000 udp 10.0.2.104 54523 -> 114.27.227.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:20.590692 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:22.593607 0.357076 udp 10.0.2.104 54523 <-> 101.63.207.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:23.584963 0.000000 udp 10.0.2.104 54523 -> 173.14.98.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:24.586985 0.000000 udp 10.0.2.104 54523 -> 188.27.204.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:25.588568 0.253117 udp 10.0.2.104 54523 <-> 115.244.252.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:26.589943 0.157705 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:27.590941 0.148339 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:28.592806 0.145018 udp 10.0.2.104 54523 <-> 151.26.102.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:29.594144 0.000000 udp 10.0.2.104 54523 -> 218.164.207.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:30.585089 0.000000 udp 10.0.2.104 54523 -> 94.190.190.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:31.586872 2.896617 udp 10.0.2.104 54523 <-> 109.91.102.14 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:32.588145 0.128554 udp 10.0.2.104 54523 <-> 95.192.53.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:34.591334 0.195328 udp 10.0.2.104 54523 <-> 98.127.16.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:35.592572 0.000000 udp 10.0.2.104 54523 -> 14.97.120.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:36.594272 0.155133 udp 10.0.2.104 54523 <-> 198.91.57.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:37.585251 0.000000 udp 10.0.2.104 54523 -> 114.41.94.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:38.586868 0.000000 udp 10.0.2.104 54523 -> 72.8.2.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:39.588508 0.154339 udp 10.0.2.104 54523 <-> 87.110.25.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:40.589405 0.295701 udp 10.0.2.104 54523 <-> 190.204.17.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:41.591281 0.155232 udp 10.0.2.104 54523 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:42.592466 0.149243 udp 10.0.2.104 54523 <-> 69.251.160.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:43.593769 0.991741 udp 10.0.2.104 54523 <-> 114.41.85.12 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:45.587080 0.152655 udp 10.0.2.104 54523 <-> 216.16.109.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:46.588766 0.000000 udp 10.0.2.104 54523 -> 95.251.23.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:47.589439 0.055480 udp 10.0.2.104 54523 <-> 84.236.4.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:48.590873 0.064731 udp 10.0.2.104 54523 <-> 37.25.100.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:49.592853 0.179293 udp 10.0.2.104 54523 <-> 110.5.74.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:50.593695 0.159590 udp 10.0.2.104 54523 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:51.245294 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:34:51.585412 0.299150 udp 10.0.2.104 54523 <-> 119.246.41.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:52.587257 0.303178 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:53.588166 0.228883 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:54.589434 0.138078 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:55.591340 0.000000 udp 10.0.2.104 54523 -> 2.187.118.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:34:56.592580 0.068082 udp 10.0.2.104 54523 <-> 85.87.145.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:57.594583 0.167885 udp 10.0.2.104 54523 <-> 98.250.16.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:58.585201 0.324583 udp 10.0.2.104 54523 <-> 219.116.88.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:34:59.587122 0.044371 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:00.588642 0.065740 udp 10.0.2.104 54523 <-> 178.79.57.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:01.589718 0.212137 udp 10.0.2.104 54523 <-> 202.63.117.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:02.590946 0.162691 udp 10.0.2.104 54523 <-> 24.118.222.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:03.592859 0.326321 udp 10.0.2.104 54523 <-> 36.231.93.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:04.593938 0.014095 udp 10.0.2.104 54523 <-> 89.176.244.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:05.586017 0.168095 udp 10.0.2.104 54523 <-> 92.149.43.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:06.587035 0.171699 udp 10.0.2.104 54523 <-> 50.142.135.182 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:07.588859 0.145719 udp 10.0.2.104 54523 <-> 202.179.89.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:08.589988 0.186630 udp 10.0.2.104 54523 <-> 117.98.55.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:09.591619 0.135256 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:10.593106 0.128878 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:11.594128 0.282004 udp 10.0.2.104 54523 <-> 72.235.15.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:12.585862 0.139503 udp 10.0.2.104 54523 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:13.587040 0.000000 udp 10.0.2.104 54523 -> 92.241.138.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:35:14.588463 0.155714 udp 10.0.2.104 54523 <-> 24.144.87.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:15.590209 0.000000 udp 10.0.2.104 54523 -> 188.246.87.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:35:16.591420 0.249820 udp 10.0.2.104 54523 <-> 46.48.181.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:17.592982 0.405225 udp 10.0.2.104 54523 <-> 190.207.151.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:18.584487 0.190405 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:19.585431 0.071298 udp 10.0.2.104 54523 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:20.587574 0.315259 udp 10.0.2.104 54523 <-> 177.132.58.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:21.588921 0.207217 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:22.590015 0.180635 udp 10.0.2.104 54523 <-> 174.2.220.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:23.591838 0.323800 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:24.592806 0.167182 udp 10.0.2.104 54523 <-> 75.67.90.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:25.584200 0.063102 udp 10.0.2.104 54523 <-> 178.79.57.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:26.585986 0.174173 udp 10.0.2.104 54523 <-> 142.165.23.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:27.587558 1.271518 udp 10.0.2.104 54523 <-> 99.240.159.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:28.588449 0.228286 udp 10.0.2.104 54523 <-> 178.205.27.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:29.590324 0.313646 udp 10.0.2.104 54523 <-> 60.148.85.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:30.592030 0.316014 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:31.592639 0.000000 udp 10.0.2.104 54523 -> 94.191.227.146 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:35:32.584486 0.282845 udp 10.0.2.104 54523 <-> 72.235.15.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:33.585510 0.149568 udp 10.0.2.104 54523 <-> 107.15.192.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:34.587637 0.000000 udp 10.0.2.104 54523 -> 82.105.203.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:35:35.588747 0.136244 udp 10.0.2.104 54523 <-> 47.16.108.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:36.590412 1.297232 udp 10.0.2.104 54523 <-> 58.11.253.187 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:38.252539 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:35:38.593322 0.062368 udp 10.0.2.104 54523 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:39.584442 0.000000 udp 10.0.2.104 54523 -> 84.238.229.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:35:40.586053 0.123164 udp 10.0.2.104 54523 <-> 87.110.25.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:41.587119 0.135593 udp 10.0.2.104 54523 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:42.588784 0.052759 udp 10.0.2.104 54523 <-> 77.239.83.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:43.590582 0.000000 udp 10.0.2.104 54523 -> 81.226.243.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:35:44.591899 0.000000 udp 10.0.2.104 54523 -> 87.19.151.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:35:45.593561 0.049962 udp 10.0.2.104 54523 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:46.584791 0.151198 udp 10.0.2.104 54523 <-> 24.214.81.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:47.585753 0.047048 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:48.587086 0.041415 udp 10.0.2.104 54523 <-> 77.96.67.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:49.589104 0.162350 udp 10.0.2.104 54523 <-> 76.123.228.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:50.590020 0.276383 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:51.591891 0.469207 udp 10.0.2.104 54523 <-> 115.242.181.10 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:52.592993 0.329925 udp 10.0.2.104 54523 <-> 58.114.242.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:53.584668 0.060525 udp 10.0.2.104 54523 <-> 79.116.213.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:54.586158 0.349454 udp 10.0.2.104 54523 <-> 182.214.34.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:55.587778 0.000000 udp 10.0.2.104 54523 -> 99.240.159.218 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:35:56.589135 0.054825 udp 10.0.2.104 54523 <-> 79.118.105.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:57.590006 1.125194 udp 10.0.2.104 54523 <-> 217.66.215.13 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:35:59.593054 0.389788 udp 10.0.2.104 54523 <-> 24.122.107.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:00.584515 0.073967 udp 10.0.2.104 54523 <-> 85.152.248.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:01.586383 0.378825 udp 10.0.2.104 54523 <-> 115.241.176.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:02.587942 0.320865 udp 10.0.2.104 54523 <-> 182.165.152.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:03.588663 0.076050 udp 10.0.2.104 54523 <-> 217.209.140.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:04.590324 0.612074 udp 10.0.2.104 54523 <-> 117.206.125.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:05.591547 0.096012 udp 10.0.2.104 54523 <-> 37.215.196.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:06.593643 0.197949 udp 10.0.2.104 54523 <-> 72.251.39.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:07.584383 0.357048 udp 10.0.2.104 54523 <-> 111.249.122.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:08.586114 0.148896 udp 10.0.2.104 54523 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:09.587967 0.000053 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:09.588020 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:36:10.588961 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:11.590777 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:12.592293 0.364725 udp 10.0.2.104 54523 <-> 118.165.68.250 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:13.593459 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:14.584840 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:15.586514 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:16.588148 1.486302 udp 10.0.2.104 54523 <-> 14.96.39.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:17.589045 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:18.590198 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:19.592337 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:20.593430 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:21.584753 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:22.586482 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:23.587668 2.042855 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:24.589327 0.000000 udp 10.0.2.104 54523 -> 14.96.39.250 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:25.249854 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:36:26.592375 0.000000 udp 10.0.2.104 54523 -> 118.165.68.250 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:27.593819 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:28.584920 0.309637 udp 10.0.2.104 54523 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:29.586280 0.890675 udp 10.0.2.104 54523 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:30.587914 1.357286 udp 10.0.2.104 54523 <-> 61.124.169.17 16464 CON 0 0 5 686 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:32.590523 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:33.591960 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:35.585242 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:36.586075 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:37.588102 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:38.589593 0.000000 udp 10.0.2.104 54523 -> 83.41.245.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:39.590384 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:40.592183 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:40.592238 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:36:41.593293 0.322751 udp 10.0.2.104 54523 <-> 122.50.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:42.584929 0.528858 udp 10.0.2.104 54523 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:43.586433 0.000000 udp 10.0.2.104 54523 -> 94.20.165.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:44.587973 0.000000 udp 10.0.2.104 54523 -> 78.251.155.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:45.589260 0.168916 udp 10.0.2.104 54523 <-> 76.84.156.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:46.590864 0.022638 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:47.592387 0.050606 udp 10.0.2.104 54523 <-> 82.79.126.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:48.415448 3.001935 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:36:48.593410 0.329049 udp 10.0.2.104 54523 <-> 220.96.154.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:49.294856 0.011533 udp 10.0.2.104 54545 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 03:36:49.306694 0.000000 udp 10.0.2.104 54546 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:49.585367 0.000000 udp 10.0.2.104 54523 -> 180.215.83.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:50.586729 0.080032 udp 10.0.2.104 54523 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:51.587665 0.066664 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:52.589233 0.058508 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:53.590958 3.995310 udp 10.0.2.104 54523 -> 219.64.81.22 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:36:54.592392 0.134200 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:55.423608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:36:55.593476 0.497115 udp 10.0.2.104 54523 <-> 114.42.174.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:56.585496 0.142695 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:58.588247 0.364072 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:36:59.589447 0.045017 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:00.590922 0.048172 udp 10.0.2.104 54523 <-> 81.57.78.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:01.592756 0.882425 udp 10.0.2.104 54523 <-> 88.204.155.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:02.594150 0.086271 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:03.424971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:37:03.585494 0.318586 udp 10.0.2.104 54523 <-> 116.72.134.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:04.586675 0.000000 udp 10.0.2.104 54523 -> 173.10.221.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:05.588363 0.000000 udp 10.0.2.104 54523 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:06.589206 0.000000 udp 10.0.2.104 54523 -> 62.113.14.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:07.591004 0.287909 udp 10.0.2.104 54523 <-> 58.11.136.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:08.592740 0.636043 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:09.593536 0.059198 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:10.584944 0.168500 udp 10.0.2.104 54523 <-> 184.161.209.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:11.587023 0.361231 udp 10.0.2.104 54523 <-> 114.42.212.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:12.247872 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:37:12.588315 0.072492 udp 10.0.2.104 54523 <-> 82.239.45.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:13.589419 0.871803 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:14.591049 0.044801 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:15.592959 0.327789 udp 10.0.2.104 54523 <-> 218.157.141.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:16.593659 2.204242 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:17.585426 0.057917 udp 10.0.2.104 54523 <-> 86.122.145.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:19.428278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:37:19.588270 1.729100 udp 10.0.2.104 54523 <-> 190.17.37.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:20.589540 0.064519 udp 10.0.2.104 54523 <-> 37.145.43.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:21.590813 0.049801 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:22.592580 0.160796 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:23.594293 0.049919 udp 10.0.2.104 54523 <-> 78.60.155.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:24.585092 0.000000 udp 10.0.2.104 54523 -> 220.102.212.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:25.586908 0.065397 udp 10.0.2.104 54523 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:26.588439 0.111580 udp 10.0.2.104 54523 <-> 2.69.166.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:27.589554 0.059720 udp 10.0.2.104 54523 <-> 5.12.105.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:28.591160 3.821013 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:29.592291 2.994857 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:30.594185 0.374049 udp 10.0.2.104 54523 <-> 114.39.141.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:31.585137 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:33.588156 0.109474 udp 10.0.2.104 54523 <-> 178.122.146.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:34.590034 0.050151 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:35.590914 0.384105 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:36.592421 0.679673 udp 10.0.2.104 54523 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:37.594537 0.000000 udp 10.0.2.104 54523 -> 59.190.46.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:38.585616 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:39.586652 0.000000 udp 10.0.2.104 54523 -> 188.29.89.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:40.588506 0.026291 udp 10.0.2.104 54523 <-> 80.98.70.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:41.589859 0.000000 udp 10.0.2.104 54523 -> 79.14.69.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:42.591607 1.377250 udp 10.0.2.104 54523 <-> 61.221.222.149 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:44.594233 2.048254 udp 10.0.2.104 54523 <-> 109.60.31.97 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:45.585761 0.051228 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:47.588204 0.000000 udp 10.0.2.104 54523 -> 190.177.200.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:37:48.590096 0.348911 udp 10.0.2.104 54523 <-> 117.194.199.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:49.591430 0.171284 udp 10.0.2.104 54523 <-> 24.201.35.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:50.592636 0.208050 udp 10.0.2.104 54523 <-> 71.92.68.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:51.433929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:37:51.584545 0.136043 udp 10.0.2.104 54523 <-> 68.193.33.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:52.585524 0.361113 udp 10.0.2.104 54523 <-> 111.252.181.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:53.587143 0.153520 udp 10.0.2.104 54523 <-> 24.192.246.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:54.588368 0.052283 udp 10.0.2.104 54523 <-> 86.100.68.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:55.589763 0.154094 udp 10.0.2.104 54523 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:56.591364 1.345950 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:58.584620 0.299784 udp 10.0.2.104 54523 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:37:59.245238 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:37:59.585514 0.000000 udp 10.0.2.104 54523 -> 87.97.212.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:00.587538 0.303703 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:01.589094 0.186942 udp 10.0.2.104 54523 <-> 97.66.100.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:02.590492 0.172366 udp 10.0.2.104 54523 <-> 116.73.214.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:03.591307 0.315085 udp 10.0.2.104 54523 <-> 219.85.204.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:04.593406 0.037346 udp 10.0.2.104 54523 <-> 188.254.203.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:05.584143 0.067495 udp 10.0.2.104 54523 <-> 151.73.73.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:06.586107 0.149546 udp 10.0.2.104 54523 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:07.587747 0.156995 udp 10.0.2.104 54523 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:08.588688 0.000000 udp 10.0.2.104 54523 -> 118.165.202.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:09.589797 0.353603 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:10.591900 0.000000 udp 10.0.2.104 54523 -> 186.127.197.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:11.592823 2.994469 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:12.584495 0.000000 udp 10.0.2.104 54523 -> 71.77.141.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:13.586256 0.043198 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:15.588434 0.154167 udp 10.0.2.104 54523 <-> 198.91.57.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:16.590008 0.293842 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:17.591633 0.000000 udp 10.0.2.104 54523 -> 159.146.5.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:18.593058 0.000000 udp 10.0.2.104 54523 -> 79.140.165.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:19.584249 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:20.585980 0.005124 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:21.587566 0.156785 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:22.588649 0.000000 udp 10.0.2.104 54523 -> 14.98.242.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:23.589927 0.000000 udp 10.0.2.104 54523 -> 83.27.118.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:24.591669 0.158995 udp 10.0.2.104 54523 <-> 79.43.132.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:25.593001 0.162700 udp 10.0.2.104 54523 <-> 120.138.105.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:26.584827 0.216099 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:27.585856 0.166558 udp 10.0.2.104 54523 <-> 74.192.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:28.587997 0.172510 udp 10.0.2.104 54523 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:29.589156 0.217608 udp 10.0.2.104 54523 <-> 123.238.122.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:30.590586 0.273650 udp 10.0.2.104 54523 <-> 68.226.188.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:31.592033 0.307725 udp 10.0.2.104 54523 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:32.593456 0.135405 udp 10.0.2.104 54523 <-> 2.192.119.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:33.584884 2.002614 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:34.586093 0.204841 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:36.588940 0.052401 udp 10.0.2.104 54523 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:37.590423 0.588692 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:38.592131 0.186275 udp 10.0.2.104 54523 <-> 184.81.168.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:39.593233 0.313340 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:40.584864 0.158200 udp 10.0.2.104 54523 <-> 98.253.230.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:41.586197 0.406983 udp 10.0.2.104 54523 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:42.587917 0.114814 udp 10.0.2.104 54523 <-> 24.122.251.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:43.588901 1.127914 udp 10.0.2.104 54523 <-> 117.217.80.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:44.590625 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:45.591834 0.483306 udp 10.0.2.104 54523 <-> 75.25.1.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:46.242484 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:38:46.593273 0.145664 udp 10.0.2.104 54523 <-> 71.206.190.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:47.584595 0.046556 udp 10.0.2.104 54523 <-> 78.96.183.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:48.586058 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:49.587776 0.207600 udp 10.0.2.104 54523 <-> 98.237.222.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:50.589190 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:51.590441 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:38:52.591642 0.045618 udp 10.0.2.104 54523 <-> 212.182.29.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:53.593362 0.316307 udp 10.0.2.104 54523 <-> 114.134.195.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:54.584715 0.334454 udp 10.0.2.104 54523 <-> 61.207.180.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:55.586389 1.480089 udp 10.0.2.104 54523 <-> 67.210.55.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:56.587366 0.047239 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:57.588985 0.356824 udp 10.0.2.104 54523 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:58.590534 0.153536 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:38:59.592157 0.087143 udp 10.0.2.104 54523 <-> 109.182.129.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:00.593674 0.000000 udp 10.0.2.104 54523 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:01.584965 0.075950 udp 10.0.2.104 54523 <-> 83.228.41.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:02.586576 0.345978 udp 10.0.2.104 54523 <-> 112.104.11.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:03.587716 0.374707 udp 10.0.2.104 54523 <-> 114.26.25.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:04.589393 0.156234 udp 10.0.2.104 54523 <-> 68.63.7.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:05.591034 0.155718 udp 10.0.2.104 54523 <-> 74.56.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:06.592533 0.280370 udp 10.0.2.104 54523 <-> 117.212.197.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:07.593533 0.051171 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:08.585259 0.174238 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:09.586043 0.207816 udp 10.0.2.104 54523 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:10.587968 0.146072 udp 10.0.2.104 54523 <-> 75.143.172.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:11.589517 0.057154 udp 10.0.2.104 54523 <-> 176.73.209.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:12.590631 0.000000 udp 10.0.2.104 54523 -> 2.180.93.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:13.592342 0.392840 udp 10.0.2.104 54523 <-> 118.216.142.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:14.593430 0.138613 udp 10.0.2.104 54523 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:15.584883 0.000000 udp 10.0.2.104 54523 -> 67.210.55.214 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:16.586807 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:17.588011 0.913776 udp 10.0.2.104 54523 <-> 79.118.199.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:18.589010 2.003184 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:19.590484 0.000000 udp 10.0.2.104 54523 -> 123.194.225.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:21.593507 0.177899 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:22.584889 0.409061 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:23.586565 0.115557 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:24.588336 0.000000 udp 10.0.2.104 54523 -> 117.200.81.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:25.589313 0.457080 udp 10.0.2.104 54523 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:26.591212 0.146982 udp 10.0.2.104 54523 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:27.592593 0.056704 udp 10.0.2.104 54523 <-> 86.122.145.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:28.593896 0.331623 udp 10.0.2.104 54523 <-> 1.161.56.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:29.585148 0.000000 udp 10.0.2.104 54523 -> 79.176.4.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:30.586701 0.173497 udp 10.0.2.104 54523 <-> 98.193.225.86 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:31.588440 0.290868 udp 10.0.2.104 54523 <-> 14.97.213.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:32.589177 0.430353 udp 10.0.2.104 54523 <-> 101.63.195.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:33.250018 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:39:33.590922 0.000000 udp 10.0.2.104 54523 -> 123.238.141.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:34.592047 1.579268 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:35.594179 0.000000 udp 10.0.2.104 54523 -> 117.222.125.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:36.585106 0.153860 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:37.586471 0.343685 udp 10.0.2.104 54523 <-> 111.248.89.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:38.588357 0.000000 udp 10.0.2.104 54523 -> 174.56.1.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:39.589771 0.091820 udp 10.0.2.104 54523 <-> 80.135.44.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:40.591120 2.062663 udp 10.0.2.104 54523 <-> 212.104.169.23 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:41.592368 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:43.585581 0.477563 udp 10.0.2.104 54523 <-> 89.229.25.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:44.586704 0.048435 udp 10.0.2.104 54523 <-> 95.76.188.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:45.588002 0.277580 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:46.589368 0.257369 udp 10.0.2.104 54523 <-> 2.194.31.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:47.591303 0.341658 udp 10.0.2.104 54523 <-> 1.174.61.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:48.592569 0.134773 udp 10.0.2.104 54523 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:49.593592 0.159838 udp 10.0.2.104 54523 <-> 69.136.170.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:50.585167 0.261484 udp 10.0.2.104 54523 <-> 181.167.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:51.586523 0.181748 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:52.588165 0.451146 udp 10.0.2.104 54523 <-> 1.36.1.133 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:53.589478 0.334911 udp 10.0.2.104 54523 <-> 175.182.2.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:54.591390 0.000000 udp 10.0.2.104 54523 -> 213.182.120.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:39:55.592728 0.162087 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:56.593978 0.343086 udp 10.0.2.104 54523 <-> 59.9.44.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:57.585071 0.324512 udp 10.0.2.104 54523 <-> 221.71.99.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:58.586747 0.333432 udp 10.0.2.104 54523 <-> 122.118.74.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:39:59.588683 0.158109 udp 10.0.2.104 54523 <-> 68.57.136.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:00.589915 0.542255 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:01.591001 0.359859 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:02.592311 0.430875 udp 10.0.2.104 54523 <-> 117.195.130.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:03.593928 0.158516 udp 10.0.2.104 54523 <-> 69.140.208.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:04.585173 0.349941 udp 10.0.2.104 54523 <-> 1.175.123.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:05.587089 0.153363 udp 10.0.2.104 54523 <-> 71.47.172.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:06.588546 0.140703 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:07.590292 0.136894 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:08.591255 4.133075 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:09.592903 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:10.594210 0.352702 udp 10.0.2.104 54523 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:11.585985 0.000000 udp 10.0.2.104 54523 -> 186.19.203.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:13.588794 1.377556 udp 10.0.2.104 54523 <-> 115.117.158.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:14.589970 0.385885 udp 10.0.2.104 54523 <-> 114.26.25.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:15.591795 0.211814 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:16.592940 0.183611 udp 10.0.2.104 54523 <-> 72.23.77.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:17.584418 0.144187 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:18.585411 0.316939 udp 10.0.2.104 54523 <-> 61.208.224.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:19.586864 0.157723 udp 10.0.2.104 54523 <-> 76.21.161.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:20.247791 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:40:20.588179 0.140747 udp 10.0.2.104 54523 <-> 24.3.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:21.589577 0.336065 udp 10.0.2.104 54523 <-> 61.63.107.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:22.591513 0.149793 udp 10.0.2.104 54523 <-> 67.240.133.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:23.592858 3.345067 udp 10.0.2.104 54523 <-> 219.164.99.133 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:25.585507 0.192408 udp 10.0.2.104 54523 <-> 75.54.70.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:27.588349 0.390032 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:28.590084 0.904087 udp 10.0.2.104 54523 <-> 200.44.254.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:29.591394 0.345332 udp 10.0.2.104 54523 <-> 117.201.99.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:30.592693 0.332743 udp 10.0.2.104 54523 <-> 186.92.116.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:31.584468 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:32.585581 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:33.587208 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:34.588789 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:35.589927 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:36.591787 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:37.592629 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:38.584644 0.544631 udp 10.0.2.104 54523 <-> 142.165.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:39.585682 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:40.587694 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:41.588803 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:42.590151 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:43.591752 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:44.593111 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:44.593184 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:40:45.584592 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:46.586198 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:47.587622 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:49.590078 0.134464 udp 10.0.2.104 54523 <-> 76.117.140.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:50.591802 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:51.592959 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:52.584476 0.339147 udp 10.0.2.104 54523 <-> 219.54.8.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:53.585621 0.555655 udp 10.0.2.104 54523 <-> 202.29.178.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:54.587509 0.000000 udp 10.0.2.104 54523 -> 202.63.117.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:40:55.589166 0.033797 udp 10.0.2.104 54523 <-> 89.149.25.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:56.590578 0.049919 udp 10.0.2.104 54523 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:57.591710 0.164465 udp 10.0.2.104 54523 <-> 46.241.140.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:58.593222 0.143055 udp 10.0.2.104 54523 <-> 74.88.126.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:40:59.584464 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:00.585843 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:01.587711 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:01.587788 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:41:02.589149 0.322964 udp 10.0.2.104 54523 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:03.590195 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:04.591464 0.050633 udp 10.0.2.104 54523 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:05.593112 0.165949 udp 10.0.2.104 54523 <-> 68.56.123.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:06.584471 0.000000 udp 10.0.2.104 54523 -> 94.45.99.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:07.245925 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:41:07.586063 1.484500 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:09.589179 0.144695 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:10.590141 0.043221 udp 10.0.2.104 54523 <-> 217.211.125.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:11.591525 0.000000 udp 10.0.2.104 54523 -> 151.13.5.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:12.593707 0.343953 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:13.584560 0.172582 udp 10.0.2.104 54523 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:14.586579 0.000000 udp 10.0.2.104 54523 -> 84.240.238.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:15.587270 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:16.589029 0.158132 udp 10.0.2.104 54523 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:17.590646 0.159072 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:18.591940 0.204547 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:19.592986 0.247199 udp 10.0.2.104 54523 <-> 14.97.58.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:20.584991 3.375928 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:21.586616 0.044433 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:22.587364 0.000000 udp 10.0.2.104 54523 -> 113.182.135.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:24.590149 0.558077 udp 10.0.2.104 54523 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:25.592251 0.063668 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:26.593173 0.019052 udp 10.0.2.104 54523 <-> 91.146.129.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:27.584541 0.327113 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:28.585969 0.226558 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:29.587550 0.051140 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:30.589211 0.611127 udp 10.0.2.104 54523 <-> 219.80.139.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:31.590645 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:32.591815 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:33.593106 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:34.615269 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:35.616229 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:36.617492 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:37.618954 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:37.619010 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:41:38.621057 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:39.621780 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:40.623726 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:41.615237 4.005339 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:42.616321 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:43.618020 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:44.619231 0.271164 udp 10.0.2.104 54523 <-> 190.39.204.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:41:46.622516 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:47.623503 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:49.616234 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:50.618098 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:50.618147 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:41:51.619482 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:52.621219 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:53.622324 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:54.272785 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:41:54.623469 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:55.615404 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:56.616915 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:57.617708 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:58.619349 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:41:59.621093 0.000000 udp 10.0.2.104 54523 -> 189.94.110.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:00.622493 0.863509 udp 10.0.2.104 54523 <-> 117.194.210.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:42:01.623774 0.658436 udp 10.0.2.104 54523 <-> 219.80.139.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:42:02.614837 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:03.616699 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:05.619268 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:06.621046 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:07.622299 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:08.623604 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:09.615376 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:10.616565 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:11.618285 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:12.619385 0.000072 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:12.619457 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:42:13.621210 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:14.622129 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:15.623786 0.602682 udp 10.0.2.104 54523 <-> 219.80.139.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:42:16.615275 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:17.616383 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:18.618166 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:19.619521 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:21.622278 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:22.623909 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:23.615447 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:24.616894 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:25.618299 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:26.619866 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:27.621089 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:28.622537 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:28.622582 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:42:29.624253 3.995148 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:30.615711 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:31.616739 0.064399 udp 10.0.2.104 54523 <-> 151.77.179.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:42:32.618144 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:34.621325 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:35.622363 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:36.623932 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:37.615806 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:38.616773 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:40.619744 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:41.280742 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:42:41.621039 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:42.622910 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:43.624593 0.000075 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:43.624668 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:42:44.615816 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:45.617203 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:46.618404 0.580401 udp 10.0.2.104 54523 <-> 190.39.204.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:42:47.619758 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:48.621187 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:49.622620 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:50.613843 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:51.615287 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:53.618434 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:54.619862 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:55.621039 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:56.622839 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:57.614522 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:58.615374 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:59.616902 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:42:59.616954 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:43:00.618852 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:01.619908 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:02.621224 0.000000 udp 10.0.2.104 54523 -> 189.94.110.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:03.623125 0.000000 udp 10.0.2.104 54523 -> 117.194.210.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:04.614325 2.003122 udp 10.0.2.104 54523 -> 151.25.195.64 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:05.615771 0.258844 udp 10.0.2.104 54523 <-> 2.181.92.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:07.618903 0.436338 udp 10.0.2.104 54523 <-> 219.80.139.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:08.620209 0.123070 udp 10.0.2.104 54523 <-> 146.115.58.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:09.621309 0.038796 udp 10.0.2.104 54523 <-> 92.247.198.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:10.623195 0.371934 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:11.614562 0.103388 udp 10.0.2.104 54523 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:12.615840 2.002975 udp 10.0.2.104 54523 -> 98.243.238.45 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:13.617331 0.145423 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:15.619970 0.000000 udp 10.0.2.104 54523 -> 72.129.64.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:16.621249 0.030202 udp 10.0.2.104 54523 <-> 46.108.106.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:17.623226 0.042378 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:18.614783 0.100408 udp 10.0.2.104 54523 <-> 213.102.144.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:19.615813 0.151603 udp 10.0.2.104 54523 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:20.617025 0.241236 udp 10.0.2.104 54523 <-> 59.92.50.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:21.618688 0.135144 udp 10.0.2.104 54523 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:22.620302 2.090788 udp 10.0.2.104 54523 <-> 79.133.148.56 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:23.621335 2.033099 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:26.616320 0.404911 udp 10.0.2.104 54523 <-> 92.36.202.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:27.617489 0.000000 udp 10.0.2.104 54523 -> 88.234.89.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:27.672112 0.000000 udp 10.0.2.104 54523 <- 98.243.238.45 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:28.277938 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:43:28.618812 0.322424 udp 10.0.2.104 54523 <-> 110.134.54.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:29.619908 0.140502 udp 10.0.2.104 54523 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:30.621383 0.000000 udp 10.0.2.104 54523 -> 173.212.89.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:31.623033 0.155033 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:32.614259 0.166810 udp 10.0.2.104 54523 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:33.616497 0.170837 udp 10.0.2.104 54523 <-> 66.169.209.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:34.617246 0.050866 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:35.618620 0.000000 udp 10.0.2.104 54523 -> 89.134.236.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:36.620365 0.213304 udp 10.0.2.104 54523 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:37.621649 0.503326 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:38.623503 1.276417 udp 10.0.2.104 54523 <-> 219.96.51.229 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:40.616134 0.695643 udp 10.0.2.104 54523 <-> 68.96.178.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:41.617254 0.313692 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:42.618732 0.135897 udp 10.0.2.104 54523 <-> 142.105.11.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:43.620048 0.183795 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:44.621559 0.358350 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:45.623061 0.000000 udp 10.0.2.104 54523 -> 68.115.233.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:46.614756 0.240300 udp 10.0.2.104 54523 <-> 59.92.50.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:47.616345 0.198957 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:48.617547 0.632423 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:49.618945 1.365832 udp 10.0.2.104 54523 <-> 179.44.219.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:50.620252 0.369258 udp 10.0.2.104 54523 <-> 59.149.197.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:51.621591 0.051015 udp 10.0.2.104 54523 <-> 31.151.186.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:52.623209 0.577252 udp 10.0.2.104 54523 <-> 61.3.187.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:53.614431 0.529044 udp 10.0.2.104 54523 <-> 177.193.132.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:54.616069 0.064757 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:55.470941 3.000528 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:43:55.617341 0.311583 udp 10.0.2.104 54523 <-> 124.100.80.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:56.618762 1.359742 udp 10.0.2.104 54523 <-> 92.250.178.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:57.620216 0.296879 udp 10.0.2.104 54523 <-> 118.108.87.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:43:58.621726 1.993236 udp 10.0.2.104 54523 -> 108.8.113.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:43:59.623624 0.353474 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:01.616317 0.148801 udp 10.0.2.104 54523 <-> 24.202.240.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:02.477731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:44:02.617880 0.348447 udp 10.0.2.104 54523 <-> 61.227.75.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:03.619098 1.184022 udp 10.0.2.104 54523 <-> 203.218.113.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:04.620682 0.046351 udp 10.0.2.104 54523 <-> 78.97.7.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:05.622033 0.000000 udp 10.0.2.104 54523 -> 173.2.97.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:06.623478 0.560902 udp 10.0.2.104 54523 <-> 117.205.247.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:07.615014 0.897274 udp 10.0.2.104 54523 <-> 189.103.208.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:08.616365 0.183663 udp 10.0.2.104 54523 <-> 76.106.208.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:09.617423 3.004630 udp 10.0.2.104 54523 -> 101.63.183.73 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:10.479190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:44:10.618964 4.042912 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:11.620659 0.049109 udp 10.0.2.104 54523 <-> 90.230.7.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:13.623714 0.044527 udp 10.0.2.104 54523 <-> 82.25.161.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:15.276053 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:44:15.616347 0.036957 udp 10.0.2.104 54523 <-> 84.52.157.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:16.618183 0.014106 udp 10.0.2.104 54523 <-> 95.222.234.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:17.619691 0.415684 udp 10.0.2.104 54523 <-> 180.177.186.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:18.620858 0.294495 udp 10.0.2.104 54523 <-> 219.106.157.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:19.622477 0.344649 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:20.623597 0.000000 udp 10.0.2.104 54523 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:21.615201 0.181140 udp 10.0.2.104 54523 <-> 68.56.21.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:22.616676 0.344885 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:23.617571 0.144959 udp 10.0.2.104 54523 <-> 96.33.173.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:24.619109 0.074039 udp 10.0.2.104 54523 <-> 90.15.176.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:25.620880 0.101463 udp 10.0.2.104 54523 <-> 87.17.244.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:26.482353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:44:26.622239 0.059101 udp 10.0.2.104 54523 <-> 84.55.7.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:27.623481 1.294244 udp 10.0.2.104 54523 <-> 124.109.194.224 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:29.616318 0.045260 udp 10.0.2.104 54523 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:30.618433 0.041317 udp 10.0.2.104 54523 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:31.619837 0.166229 udp 10.0.2.104 54523 <-> 71.62.251.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:32.620808 0.039761 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:33.622695 2.438775 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:34.623884 0.074349 udp 10.0.2.104 54523 <-> 93.72.70.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:35.615039 0.156497 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:36.616766 0.122786 udp 10.0.2.104 54523 <-> 93.124.125.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:37.617721 0.000000 udp 10.0.2.104 54523 -> 72.231.172.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:38.619221 1.179443 udp 10.0.2.104 54523 <-> 76.106.208.214 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:40.622350 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:41.623799 0.000090 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:41.623889 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:44:42.615710 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:43.616845 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:44.617762 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:45.619400 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:46.620927 0.168368 udp 10.0.2.104 54523 <-> 76.106.208.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:47.622741 0.181601 udp 10.0.2.104 54523 <-> 103.250.151.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:48.624025 0.146641 udp 10.0.2.104 54523 <-> 76.181.153.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:49.615404 0.000000 udp 10.0.2.104 54523 -> 108.162.90.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:50.616420 0.324139 udp 10.0.2.104 54523 <-> 14.97.222.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:51.618180 0.760907 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:52.619920 0.047430 udp 10.0.2.104 54523 <-> 93.180.162.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:53.621249 0.718536 udp 10.0.2.104 54523 <-> 216.197.194.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:54.622592 0.184086 udp 10.0.2.104 54523 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:55.623870 0.178461 udp 10.0.2.104 54523 <-> 174.2.220.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:44:56.615468 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:57.616965 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:58.487894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:44:58.618528 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:44:59.619728 0.202034 udp 10.0.2.104 54523 <-> 82.57.66.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:00.621015 0.320157 udp 10.0.2.104 54523 <-> 119.150.164.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:01.622402 0.000000 udp 10.0.2.104 54523 -> 78.188.164.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:02.274759 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:45:02.623953 0.029308 udp 10.0.2.104 54523 <-> 46.238.15.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:03.615338 0.156692 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:04.616699 0.278130 udp 10.0.2.104 54523 <-> 94.74.144.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:05.617936 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:05.618015 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:45:06.619838 0.000000 udp 10.0.2.104 54523 -> 37.145.43.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:07.621432 0.213061 udp 10.0.2.104 54523 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:08.622899 1.351515 udp 10.0.2.104 54523 <-> 113.254.247.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:10.615477 0.163827 udp 10.0.2.104 54523 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:11.616861 0.028692 udp 10.0.2.104 54523 <-> 85.121.1.195 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:12.618172 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:13.619629 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:14.621670 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:15.622670 0.133813 udp 10.0.2.104 54523 <-> 24.222.116.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:16.624321 0.068033 udp 10.0.2.104 54523 <-> 151.77.138.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:17.615185 0.000000 udp 10.0.2.104 54523 -> 98.222.5.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:18.617232 0.295001 udp 10.0.2.104 54523 <-> 114.134.195.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:19.618607 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:20.620178 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:22.622568 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:22.622620 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:45:23.614425 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:24.616090 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:25.617257 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:26.618680 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:27.619687 0.166360 udp 10.0.2.104 54523 <-> 76.180.211.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:28.621007 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:29.622829 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:30.614479 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:30.994286 0.000000 udp 10.0.2.104 54523 <- 98.222.5.147 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:31.615406 0.343046 udp 10.0.2.104 54523 <-> 115.240.93.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:32.617219 0.373999 udp 10.0.2.104 54523 <-> 117.109.248.148 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:33.618596 0.088874 udp 10.0.2.104 54523 <-> 87.122.54.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:34.620372 0.050098 udp 10.0.2.104 54523 <-> 212.83.78.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:35.621651 0.156233 udp 10.0.2.104 54523 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:36.622653 0.338318 udp 10.0.2.104 54523 <-> 220.143.213.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:37.614313 0.130011 udp 10.0.2.104 54523 <-> 216.145.87.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:38.615927 0.000000 udp 10.0.2.104 54523 -> 192.95.207.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:39.617640 0.047041 udp 10.0.2.104 54523 <-> 90.231.187.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:40.618454 0.044093 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:41.620151 0.183568 udp 10.0.2.104 54523 <-> 68.145.102.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:42.621171 1.982681 udp 10.0.2.104 54523 <-> 116.73.113.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:43.622775 0.000000 udp 10.0.2.104 54523 -> 190.146.36.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:44.614194 0.168749 udp 10.0.2.104 54523 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:45.615876 0.335885 udp 10.0.2.104 54523 <-> 182.233.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:46.616903 0.351432 udp 10.0.2.104 54523 <-> 111.254.241.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:47.618740 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:48.619952 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:49.281404 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:45:49.621747 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:50.623250 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:51.614675 0.000000 udp 10.0.2.104 54523 -> 118.95.78.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:52.615888 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:45:53.617099 0.301618 udp 10.0.2.104 54523 <-> 218.47.116.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:54.618483 0.159291 udp 10.0.2.104 54523 <-> 98.214.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:55.620362 0.172832 udp 10.0.2.104 54523 <-> 66.169.164.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:56.621885 3.201006 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:57.622753 0.090931 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:45:58.614239 0.151181 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:00.617486 0.000000 udp 10.0.2.104 54523 -> 115.245.236.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:01.618821 0.098427 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:02.620426 0.338792 udp 10.0.2.104 54523 <-> 114.47.92.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:03.621996 0.163281 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:04.622984 0.314871 udp 10.0.2.104 54523 <-> 184.156.20.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:05.614741 4.043937 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:06.616505 1.569856 udp 10.0.2.104 54523 <-> 92.86.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:07.617315 0.044725 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:08.618552 0.451730 udp 10.0.2.104 54523 <-> 14.99.151.6 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:10.621741 0.144038 udp 10.0.2.104 54523 <-> 208.53.245.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:11.623052 0.291861 udp 10.0.2.104 54523 <-> 203.165.99.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:12.614362 0.059873 udp 10.0.2.104 54523 <-> 86.123.120.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:13.616331 0.072469 udp 10.0.2.104 54523 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:14.617342 1.758951 udp 10.0.2.104 54523 <-> 123.194.225.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:15.618933 0.245553 udp 10.0.2.104 54523 <-> 87.19.252.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:16.620102 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:17.621993 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:18.623470 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:19.614485 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:20.616145 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:21.617717 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:22.619036 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:23.620282 0.333800 udp 10.0.2.104 54523 <-> 36.238.196.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:24.622072 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:25.623797 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:26.614475 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:27.616104 0.101930 udp 10.0.2.104 54523 <-> 90.230.252.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:28.617483 0.000000 udp 10.0.2.104 54523 -> 109.155.23.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:29.619155 0.031954 udp 10.0.2.104 54523 <-> 84.107.143.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:30.620778 0.145378 udp 10.0.2.104 54523 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:31.622201 0.633209 udp 10.0.2.104 54523 <-> 173.26.91.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:32.623213 0.065002 udp 10.0.2.104 54523 <-> 88.174.239.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:33.615154 0.571064 udp 10.0.2.104 54523 <-> 1.163.82.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:34.616215 0.000000 udp 10.0.2.104 54523 -> 95.57.52.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:35.617424 4.176272 udp 10.0.2.104 54523 <-> 98.27.139.65 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:36.278865 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:46:36.619133 2.002628 udp 10.0.2.104 54523 -> 186.51.8.133 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:37.620610 0.061767 udp 10.0.2.104 54523 <-> 85.66.42.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:40.614615 2.223769 udp 10.0.2.104 54523 <-> 177.224.152.106 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:41.616223 0.031125 udp 10.0.2.104 54523 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:43.619176 0.000000 udp 10.0.2.104 54523 -> 62.99.117.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:44.620803 0.066147 udp 10.0.2.104 54523 <-> 85.66.42.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:45.621992 0.000000 udp 10.0.2.104 54523 -> 65.25.78.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:46:46.623158 2.944293 udp 10.0.2.104 54523 <-> 46.197.116.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:47.615175 0.040236 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:48.616269 0.713476 udp 10.0.2.104 54523 <-> 27.7.134.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:49.617655 0.141198 udp 10.0.2.104 54523 <-> 76.106.112.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:50.619379 0.058265 udp 10.0.2.104 54523 <-> 95.65.118.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:51.620980 0.031471 udp 10.0.2.104 54523 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:52.622345 0.187083 udp 10.0.2.104 54523 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:53.623246 0.018659 udp 10.0.2.104 54523 <-> 89.177.137.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:54.615078 0.131704 udp 10.0.2.104 54523 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:55.616738 0.043307 udp 10.0.2.104 54523 <-> 78.96.183.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:56.618090 0.306494 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:57.618992 0.095361 udp 10.0.2.104 54523 <-> 151.21.8.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:58.620910 0.037978 udp 10.0.2.104 54523 <-> 5.15.202.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:46:59.622109 0.039301 udp 10.0.2.104 54523 <-> 91.218.81.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:00.623297 0.053420 udp 10.0.2.104 54523 <-> 85.14.74.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:01.615168 0.058991 udp 10.0.2.104 54523 <-> 91.219.80.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:02.616544 0.052515 udp 10.0.2.104 54523 <-> 88.174.239.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:03.617821 0.329739 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:04.619438 0.305500 udp 10.0.2.104 54523 <-> 117.200.101.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:05.620894 0.579585 udp 10.0.2.104 54523 <-> 117.217.80.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:06.622243 0.684000 udp 10.0.2.104 54523 <-> 117.214.218.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:07.624229 0.037009 udp 10.0.2.104 54523 <-> 151.237.10.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:08.614794 0.215648 udp 10.0.2.104 54523 <-> 79.12.116.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:09.617054 0.000000 udp 10.0.2.104 54523 -> 106.212.102.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:10.618269 0.412219 udp 10.0.2.104 54523 <-> 121.166.87.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:11.619822 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:12.620979 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:13.622665 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:13.622726 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:47:14.623618 0.147863 udp 10.0.2.104 54523 <-> 67.85.150.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:15.394100 0.000000 udp 10.0.2.104 54523 <- 106.212.102.167 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:15.615087 0.084830 udp 10.0.2.104 54523 <-> 79.115.73.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:16.616751 0.049185 udp 10.0.2.104 54523 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:17.617901 0.329603 udp 10.0.2.104 54523 <-> 114.38.170.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:18.619450 0.219037 udp 10.0.2.104 54523 <-> 82.59.115.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:19.621197 0.331767 udp 10.0.2.104 54523 <-> 220.129.1.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:20.622205 0.527427 udp 10.0.2.104 54523 <-> 75.216.18.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:21.623735 1.993036 udp 10.0.2.104 54523 -> 91.120.99.47 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:22.615472 0.384027 udp 10.0.2.104 54523 <-> 117.196.58.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:23.276389 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:47:24.618519 0.091660 udp 10.0.2.104 54523 <-> 31.131.86.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:25.619856 0.032091 udp 10.0.2.104 54523 <-> 84.30.232.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:26.621065 0.000000 udp 10.0.2.104 54523 -> 178.35.247.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:27.622580 0.028430 udp 10.0.2.104 54523 <-> 87.97.240.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:28.623791 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:29.615171 0.699143 udp 10.0.2.104 54523 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:30.616836 2.315138 udp 10.0.2.104 54523 <-> 210.231.200.192 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:31.618525 1.327914 udp 10.0.2.104 54523 <-> 116.193.111.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:33.620965 0.264229 udp 10.0.2.104 54523 <-> 181.29.2.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:34.622343 0.000000 udp 10.0.2.104 54523 -> 190.204.134.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:35.624114 0.000000 udp 10.0.2.104 54523 -> 209.137.215.138 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:36.615853 0.153835 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:37.616889 0.186359 udp 10.0.2.104 54523 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:38.618069 0.362897 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:39.620060 0.000000 udp 10.0.2.104 54523 -> 209.155.96.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:40.621493 0.000000 udp 10.0.2.104 54523 -> 79.118.98.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:41.622696 0.150582 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:42.624100 1.029532 udp 10.0.2.104 54523 <-> 188.143.29.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:44.616707 1.340876 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:45.618683 2.157590 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:46.619549 0.394528 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:48.622475 0.000000 udp 10.0.2.104 54523 -> 68.37.105.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:49.624135 0.325472 udp 10.0.2.104 54523 <-> 184.156.20.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:50.655648 0.000000 udp 10.0.2.104 54523 -> 68.14.84.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:51.657226 0.148297 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:52.658604 0.369753 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:53.659561 0.024502 udp 10.0.2.104 54523 <-> 158.58.228.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:54.661425 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:47:55.662677 0.250177 udp 10.0.2.104 54523 <-> 187.63.102.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:56.654367 0.512485 udp 10.0.2.104 54523 <-> 76.244.158.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:57.725883 0.027141 udp 10.0.2.104 54523 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:58.726849 0.334148 udp 10.0.2.104 54523 <-> 1.34.82.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:47:59.728911 0.347751 udp 10.0.2.104 54523 <-> 123.192.142.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:00.730387 0.282912 udp 10.0.2.104 54523 <-> 186.93.97.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:01.731812 0.761619 udp 10.0.2.104 54523 <-> 24.244.173.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:02.733298 0.000000 udp 10.0.2.104 54523 -> 82.61.20.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:48:03.724511 0.026047 udp 10.0.2.104 54523 <-> 78.193.52.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:04.726079 0.203565 udp 10.0.2.104 54523 <-> 65.15.129.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:05.727754 0.285332 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:06.728864 0.129126 udp 10.0.2.104 54523 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:07.730422 0.141046 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:08.731443 0.025133 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:09.732663 0.212304 udp 10.0.2.104 54523 <-> 67.168.98.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:10.384083 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:48:10.724341 0.417477 udp 10.0.2.104 54523 <-> 211.208.134.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:11.725520 0.043135 udp 10.0.2.104 54523 <-> 91.65.14.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:12.727029 4.006068 udp 10.0.2.104 54523 -> 78.191.74.44 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:48:13.728599 0.101466 udp 10.0.2.104 54523 <-> 85.86.78.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:14.729840 0.040506 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:15.731544 0.169251 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:17.724325 0.000000 udp 10.0.2.104 54523 -> 88.247.50.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:48:18.726245 1.988209 udp 10.0.2.104 54523 <-> 89.29.147.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:19.727394 0.213717 udp 10.0.2.104 54523 <-> 67.164.82.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:20.728912 0.264487 udp 10.0.2.104 54523 <-> 50.47.95.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:21.730180 0.000000 udp 10.0.2.104 54523 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:48:22.761406 0.174920 udp 10.0.2.104 54523 <-> 203.194.104.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:23.763697 2.171733 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 4 1616 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:24.754739 0.119634 udp 10.0.2.104 54523 <-> 89.32.153.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:26.777876 0.156872 udp 10.0.2.104 54523 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:27.778903 0.052073 udp 10.0.2.104 54523 <-> 88.216.22.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:28.780270 0.049207 udp 10.0.2.104 54523 <-> 79.173.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:29.781517 0.048222 udp 10.0.2.104 54523 <-> 5.14.105.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:30.783634 0.000000 udp 10.0.2.104 54523 -> 117.207.169.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:48:31.774449 0.147713 udp 10.0.2.104 54523 <-> 69.119.241.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:32.776055 0.069227 udp 10.0.2.104 54523 <-> 188.171.6.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:33.777856 0.071836 udp 10.0.2.104 54523 <-> 193.238.38.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:34.779394 1.710433 udp 10.0.2.104 54523 <-> 68.217.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:35.780211 0.161939 udp 10.0.2.104 54523 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:36.781553 0.173396 udp 10.0.2.104 54523 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:37.783004 0.263618 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:38.774426 4.041834 udp 10.0.2.104 54523 <-> 49.249.229.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:39.776147 0.354461 udp 10.0.2.104 54523 <-> 2.187.231.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:40.777295 0.214156 udp 10.0.2.104 54523 <-> 77.52.122.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:41.779163 1.243827 udp 10.0.2.104 54523 <-> 200.80.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:42.780199 0.282158 udp 10.0.2.104 54523 <-> 49.251.197.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:43.782153 0.382733 udp 10.0.2.104 54523 <-> 117.206.250.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:44.783049 0.164525 udp 10.0.2.104 54523 <-> 70.178.41.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:45.774747 0.019003 udp 10.0.2.104 54523 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:46.776332 0.071122 udp 10.0.2.104 54523 <-> 82.79.126.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:47.777503 0.153249 udp 10.0.2.104 54523 <-> 98.27.34.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:48.779237 0.000000 udp 10.0.2.104 54523 -> 180.215.150.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:48:49.780759 0.165038 udp 10.0.2.104 54523 <-> 67.241.19.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:50.782202 0.175185 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:51.783722 2.582705 udp 10.0.2.104 54523 <-> 14.97.63.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:52.774938 0.290054 udp 10.0.2.104 54523 <-> 50.26.23.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:53.776043 0.360963 udp 10.0.2.104 54523 <-> 61.231.35.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:54.777499 0.450410 udp 10.0.2.104 54523 <-> 177.149.35.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:55.779741 0.290536 udp 10.0.2.104 54523 <-> 121.103.168.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:56.780929 0.361635 udp 10.0.2.104 54523 <-> 75.210.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:57.441745 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:48:57.782212 0.171876 udp 10.0.2.104 54523 <-> 123.238.129.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:58.783568 0.203528 udp 10.0.2.104 54523 <-> 24.21.31.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:48:59.775160 0.034965 udp 10.0.2.104 54523 <-> 212.50.72.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:49:00.776127 0.063722 udp 10.0.2.104 54523 <-> 78.227.210.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:49:01.778139 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:02.779258 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:03.780900 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:04.782235 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:05.783358 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:06.775028 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:07.776375 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:08.777755 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:09.779395 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:10.781054 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:11.782522 0.057856 udp 10.0.2.104 54523 <-> 178.79.25.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:49:12.783373 0.372377 udp 10.0.2.104 54523 <-> 98.69.141.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:49:13.774747 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:14.776664 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:15.777805 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:16.779188 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:17.780904 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:18.782023 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:19.783915 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:20.775639 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:21.776895 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:22.777826 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:24.780754 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:25.782149 0.000099 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:25.782248 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:49:26.783441 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:27.775073 0.458660 udp 10.0.2.104 54523 <-> 69.104.55.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:49:28.776562 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:29.777993 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:30.780067 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:31.780670 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:32.782061 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:33.783831 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:34.775075 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:35.777025 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:37.779654 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:38.780772 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:39.782473 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:40.784226 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:41.775809 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:41.775890 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:49:42.776491 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:43.778052 0.164453 udp 10.0.2.104 54523 <-> 61.95.250.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:49:44.439235 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:49:44.779424 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:45.781095 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:46.782477 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:47.783640 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:48.775172 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:49.776760 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:50.778479 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:51.779440 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:52.781427 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:53.782440 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:54.784133 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:55.775462 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:56.776956 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:57.778732 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:49:57.778805 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:49:59.781027 0.154344 udp 10.0.2.104 54523 <-> 96.42.34.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:00.782466 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:01.783792 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:02.775328 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:03.776837 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:04.778590 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:05.779964 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:06.781042 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:07.782449 0.000091 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:07.782540 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:50:08.783821 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:09.775497 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:10.777350 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:11.778226 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:12.780214 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:13.781109 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:15.784640 3.667958 udp 10.0.2.104 54523 <-> 184.21.12.183 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:16.775850 0.164437 udp 10.0.2.104 54523 <-> 61.95.250.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:17.777319 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:18.778690 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:19.780431 0.308517 udp 10.0.2.104 54523 <-> 75.232.205.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:20.781159 0.050981 udp 10.0.2.104 54523 <-> 77.45.22.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:21.782690 0.118574 udp 10.0.2.104 54523 <-> 24.122.208.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:22.784504 0.197948 udp 10.0.2.104 54523 <-> 202.62.87.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:23.775679 0.136308 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:24.777038 0.049604 udp 10.0.2.104 54523 <-> 88.222.198.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:25.778803 1.255924 udp 10.0.2.104 54523 <-> 89.229.164.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:26.779718 0.297120 udp 10.0.2.104 54523 <-> 27.142.181.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:27.781769 0.266983 udp 10.0.2.104 54523 <-> 124.124.53.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:28.783157 0.241915 udp 10.0.2.104 54523 <-> 183.83.120.224 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:29.774585 0.147985 udp 10.0.2.104 54523 <-> 64.53.138.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:30.775551 0.106705 udp 10.0.2.104 54523 <-> 178.37.145.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:31.436481 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:50:31.777308 0.408452 udp 10.0.2.104 54523 <-> 211.204.70.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:32.778884 0.000000 udp 10.0.2.104 54523 -> 62.57.203.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:33.779774 0.000000 udp 10.0.2.104 54523 -> 78.8.126.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:34.781561 0.302291 udp 10.0.2.104 54523 <-> 120.75.28.213 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:35.783184 3.486087 udp 10.0.2.104 54523 <-> 187.69.91.123 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:36.774713 0.078396 udp 10.0.2.104 54523 <-> 176.8.160.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:37.775794 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:39.778709 0.028710 udp 10.0.2.104 54523 <-> 85.121.1.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:40.779975 0.144515 udp 10.0.2.104 54523 <-> 67.82.210.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:41.781287 0.000000 udp 10.0.2.104 54523 -> 101.63.71.146 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:42.782879 0.000000 udp 10.0.2.104 54523 -> 188.131.27.193 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:43.774705 0.164065 udp 10.0.2.104 54523 <-> 68.185.195.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:44.776120 0.363120 udp 10.0.2.104 54523 <-> 61.231.35.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:45.777029 0.000000 udp 10.0.2.104 54523 -> 70.239.90.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:46.779012 0.291080 udp 10.0.2.104 54523 <-> 120.75.28.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:47.780535 0.164171 udp 10.0.2.104 54523 <-> 76.107.155.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:48.781752 0.350861 udp 10.0.2.104 54523 <-> 62.177.243.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:49.783238 0.000000 udp 10.0.2.104 54523 -> 151.241.62.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:50.774633 0.000000 udp 10.0.2.104 54523 -> 76.117.231.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:50:51.775938 0.165507 udp 10.0.2.104 54523 <-> 173.23.103.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:52.777335 0.149703 udp 10.0.2.104 54523 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:53.778813 0.206213 udp 10.0.2.104 54523 <-> 98.232.131.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:54.780083 0.054276 udp 10.0.2.104 54523 <-> 94.156.106.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:55.782049 0.200179 udp 10.0.2.104 54523 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:56.783025 0.332711 udp 10.0.2.104 54523 <-> 123.110.35.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:57.774913 0.036280 udp 10.0.2.104 54523 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:58.775915 0.066397 udp 10.0.2.104 54523 <-> 95.178.112.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:50:59.777523 0.045476 udp 10.0.2.104 54523 <-> 78.239.42.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:00.778740 0.000000 udp 10.0.2.104 54523 -> 72.181.221.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:01.780798 0.000000 udp 10.0.2.104 54523 -> 115.242.50.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:02.654028 3.001762 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:51:02.782173 0.119369 udp 10.0.2.104 54523 <-> 64.121.253.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:03.783387 0.347611 udp 10.0.2.104 54523 <-> 114.158.112.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:04.774727 0.260417 udp 10.0.2.104 54523 <-> 117.207.24.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:05.776288 0.155905 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:06.777228 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:07.500364 0.000000 udp 10.0.2.104 54523 <- 76.117.231.81 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:07.779147 0.000000 udp 10.0.2.104 54523 -> 37.123.3.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:08.780632 0.000000 udp 10.0.2.104 54523 -> 94.156.106.208 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:09.661817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:51:09.781526 0.069027 udp 10.0.2.104 54523 <-> 46.185.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:10.783181 0.138426 udp 10.0.2.104 54523 <-> 197.206.38.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:11.774711 0.170289 udp 10.0.2.104 54523 <-> 189.218.89.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:12.776148 0.239972 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:13.777295 0.200460 udp 10.0.2.104 54523 <-> 31.181.251.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:14.779088 0.060800 udp 10.0.2.104 54523 <-> 89.40.192.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:15.780315 0.000000 udp 10.0.2.104 54523 -> 114.47.92.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:16.781980 0.186982 udp 10.0.2.104 54523 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:17.663514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:51:17.783163 0.049362 udp 10.0.2.104 54523 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:18.434221 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:51:18.774574 0.147833 udp 10.0.2.104 54523 <-> 70.60.4.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:19.776629 0.000000 udp 10.0.2.104 54523 -> 113.193.164.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:20.797846 1.296442 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:22.800889 0.152451 udp 10.0.2.104 54523 <-> 70.119.17.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:23.802297 0.086938 udp 10.0.2.104 54523 <-> 82.228.128.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:24.803558 0.309757 udp 10.0.2.104 54523 <-> 117.207.24.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:25.794558 1.410877 udp 10.0.2.104 54523 <-> 123.194.225.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:26.796384 0.145100 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:27.798130 0.280561 udp 10.0.2.104 54523 <-> 182.166.242.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:28.799066 0.073573 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:29.801115 0.294215 udp 10.0.2.104 54523 <-> 60.148.85.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:30.801941 0.362942 udp 10.0.2.104 54523 <-> 117.194.87.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:31.803625 0.098147 udp 10.0.2.104 54523 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:32.794874 0.000000 udp 10.0.2.104 54523 -> 151.233.139.192 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:33.686139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:51:33.796612 0.207390 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:34.797792 0.372923 udp 10.0.2.104 54523 <-> 114.27.204.138 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:35.799383 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:36.800825 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:38.803612 0.367995 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:39.795112 0.059470 udp 10.0.2.104 54523 <-> 82.228.128.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:40.796439 0.334358 udp 10.0.2.104 54523 <-> 201.209.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:41.798040 0.308110 udp 10.0.2.104 54523 <-> 49.250.97.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:42.799644 0.209284 udp 10.0.2.104 54523 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:43.801080 4.997272 udp 10.0.2.104 54523 -> 98.25.25.141 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:44.802184 0.130431 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:45.803512 0.000000 udp 10.0.2.104 54523 -> 59.90.129.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:46.794761 0.046512 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:47.796952 0.271875 udp 10.0.2.104 54523 <-> 181.167.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:48.950532 0.000000 udp 10.0.2.104 54523 <- 98.25.25.141 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:49.509080 0.012207 udp 10.0.2.104 54547 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 03:51:49.521543 0.000000 udp 10.0.2.104 54548 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:49.799180 0.349944 udp 10.0.2.104 54523 <-> 182.237.155.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:50.801220 0.051869 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:51.802348 0.000000 udp 10.0.2.104 54523 -> 14.99.151.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:52.804190 0.000000 udp 10.0.2.104 54523 -> 80.4.12.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:53.795145 0.189610 udp 10.0.2.104 54523 <-> 75.135.53.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:54.796561 0.153840 udp 10.0.2.104 54523 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:55.798032 0.136864 udp 10.0.2.104 54523 <-> 68.196.3.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:56.799712 0.086515 udp 10.0.2.104 54523 <-> 90.232.39.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:51:57.800854 0.000000 udp 10.0.2.104 54523 -> 1.23.251.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:58.802624 0.000000 udp 10.0.2.104 54523 -> 117.220.251.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:51:59.804169 0.354073 udp 10.0.2.104 54523 <-> 98.26.209.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:00.795133 0.000000 udp 10.0.2.104 54523 -> 67.172.65.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:01.796593 0.033280 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:02.797753 0.367890 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:03.799229 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:04.800651 0.178850 udp 10.0.2.104 54523 <-> 75.135.210.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:05.462271 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:52:05.692632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:52:05.802770 0.173192 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:06.803834 0.156634 udp 10.0.2.104 54523 <-> 72.131.44.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:07.795327 0.000000 udp 10.0.2.104 54523 -> 186.94.17.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:08.796532 0.169437 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:09.798188 0.216735 udp 10.0.2.104 54523 <-> 124.125.155.36 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:10.799428 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:11.800891 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:12.802855 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:13.804098 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:14.795368 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:14.795420 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:52:15.796731 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:17.800255 0.305311 udp 10.0.2.104 54523 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:18.801110 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:20.803895 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:21.795360 1.248874 udp 10.0.2.104 54523 <-> 219.105.126.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:22.796833 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:23.798394 2.247655 udp 10.0.2.104 54523 <-> 111.242.88.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:24.799957 0.352676 udp 10.0.2.104 54523 <-> 59.102.184.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:25.801235 0.311933 udp 10.0.2.104 54523 <-> 117.195.175.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:26.802679 0.352002 udp 10.0.2.104 54523 <-> 5.234.55.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:27.804401 0.248733 udp 10.0.2.104 54523 <-> 183.83.132.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:28.795636 0.153140 udp 10.0.2.104 54523 <-> 24.236.248.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:29.796784 0.000000 udp 10.0.2.104 54523 -> 124.11.229.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:30.838833 0.169476 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:31.839710 1.275769 udp 10.0.2.104 54523 <-> 62.43.82.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:32.841004 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:33.842939 0.345450 udp 10.0.2.104 54523 <-> 122.100.75.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:34.844279 1.035066 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:36.836924 0.262812 udp 10.0.2.104 54523 <-> 95.81.35.82 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:37.838873 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:38.840164 0.140923 udp 10.0.2.104 54523 <-> 98.103.10.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:39.841502 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:52:40.843132 0.133947 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:41.844644 0.140844 udp 10.0.2.104 54523 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:42.835339 0.254370 udp 10.0.2.104 54523 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:43.837199 0.166010 udp 10.0.2.104 54523 <-> 173.25.161.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:44.838714 1.216092 udp 10.0.2.104 54523 <-> 219.105.126.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:45.840146 0.432880 udp 10.0.2.104 54523 <-> 101.63.183.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:46.841321 0.165041 udp 10.0.2.104 54523 <-> 174.49.49.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:47.842864 0.151240 udp 10.0.2.104 54523 <-> 84.46.244.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:48.844597 0.139427 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:49.836041 0.057915 udp 10.0.2.104 54523 <-> 80.164.97.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:50.837155 0.313545 udp 10.0.2.104 54523 <-> 49.202.178.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:51.838904 0.049846 udp 10.0.2.104 54523 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:52.499453 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:52:52.839887 0.060860 udp 10.0.2.104 54523 <-> 95.46.217.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:53.841669 0.052165 udp 10.0.2.104 54523 <-> 87.188.164.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:54.842775 1.465218 udp 10.0.2.104 54523 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:55.844442 0.149187 udp 10.0.2.104 54523 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:56.835600 0.172628 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:57.837672 1.692896 udp 10.0.2.104 54523 <-> 187.18.249.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:58.838919 0.220579 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:52:59.840210 0.051529 udp 10.0.2.104 54523 <-> 93.152.189.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:00.841203 0.269341 udp 10.0.2.104 54523 <-> 181.18.188.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:01.843120 0.138748 udp 10.0.2.104 54523 <-> 98.103.10.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:02.834303 0.048525 udp 10.0.2.104 54523 <-> 188.173.249.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:03.835748 0.307681 udp 10.0.2.104 54523 <-> 220.116.148.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:04.837379 2.002641 udp 10.0.2.104 54523 -> 98.80.235.18 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:05.838687 0.205798 udp 10.0.2.104 54523 <-> 67.164.82.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:07.841539 0.156335 udp 10.0.2.104 54523 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:08.843314 0.267229 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:09.834571 0.000000 udp 10.0.2.104 54523 -> 78.52.17.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:10.836115 1.014992 udp 10.0.2.104 54523 <-> 117.195.71.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:11.837282 0.260598 udp 10.0.2.104 54523 <-> 124.125.148.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:12.838861 0.122972 udp 10.0.2.104 54523 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:13.850477 0.162845 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:14.852041 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:15.853109 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:16.844444 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:17.846388 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:18.847211 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:19.849092 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:20.850096 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:21.851433 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:22.853220 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:23.844481 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:24.846037 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:25.847168 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:26.849495 3.004049 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:27.850040 0.178140 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:28.852084 0.000130 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:28.852214 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:53:30.845092 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:31.846089 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:32.847429 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:33.849105 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:34.850811 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:35.851866 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:36.853389 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:37.844713 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:39.507268 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:53:39.847462 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:40.929402 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:41.930881 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:42.932087 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:43.933174 2.056080 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:44.924923 0.073030 udp 10.0.2.104 54523 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:46.927937 0.216115 udp 10.0.2.104 54523 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:47.929225 0.390062 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:49.010755 0.118216 udp 10.0.2.104 54523 <-> 2.193.195.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:50.011909 0.181159 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:51.013384 0.295270 udp 10.0.2.104 54523 <-> 1.11.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:52.005056 0.145192 udp 10.0.2.104 54523 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:53.006902 0.069689 udp 10.0.2.104 54523 <-> 78.186.207.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:53:54.007975 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:55.009383 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:56.010842 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:57.012725 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:58.013932 0.034387 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:53:58.048319 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:53:59.005103 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:00.006602 0.174084 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:01.008084 0.061181 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:02.009562 0.028463 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:03.010716 0.000000 udp 10.0.2.104 54523 -> 112.119.100.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:04.032823 0.246426 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:05.034094 3.143771 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:06.025201 0.000000 udp 10.0.2.104 54523 -> 115.244.228.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:07.027054 0.010005 udp 10.0.2.104 54523 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:09.029699 0.259737 udp 10.0.2.104 54523 <-> 116.68.242.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:10.031116 0.045385 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:11.032747 4.996563 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:12.033948 0.218994 udp 10.0.2.104 54523 <-> 190.73.76.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:13.026038 0.000000 udp 10.0.2.104 54523 -> 121.93.46.211 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:14.027073 0.069183 udp 10.0.2.104 54523 <-> 212.92.251.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:15.028706 0.051642 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:16.190071 0.000000 udp 10.0.2.104 54523 <- 98.193.134.246 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:17.031055 0.309773 udp 10.0.2.104 54523 <-> 60.56.88.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:18.032856 0.108970 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:19.033805 2.413522 udp 10.0.2.104 54523 <-> 190.139.224.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:20.025176 0.065461 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:21.026967 0.421839 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:22.028610 0.000000 udp 10.0.2.104 54523 -> 85.86.79.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:23.029543 0.057711 udp 10.0.2.104 54523 <-> 31.176.247.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:24.031203 0.000000 udp 10.0.2.104 54523 -> 175.111.126.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:25.032744 1.154660 udp 10.0.2.104 54523 <-> 173.27.248.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:26.685162 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:54:27.025284 0.041952 udp 10.0.2.104 54523 <-> 147.156.82.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:28.026569 0.199392 udp 10.0.2.104 54523 <-> 190.219.20.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:29.028234 0.000000 udp 10.0.2.104 54523 -> 117.217.195.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:30.029900 0.076863 udp 10.0.2.104 54523 <-> 82.130.204.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:31.031555 0.067697 udp 10.0.2.104 54523 <-> 176.96.230.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:32.032831 0.000000 udp 10.0.2.104 54523 -> 207.250.238.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:33.034117 2.874650 udp 10.0.2.104 54523 <-> 186.23.186.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:34.025954 0.157928 udp 10.0.2.104 54523 <-> 71.74.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:35.027316 4.378513 udp 10.0.2.104 54523 <-> 94.54.214.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:36.028358 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:37.029633 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:39.032751 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:40.033819 0.496128 udp 10.0.2.104 54523 <-> 115.242.101.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:41.025781 0.062984 udp 10.0.2.104 54523 <-> 93.72.126.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:42.027292 0.000000 udp 10.0.2.104 54523 -> 123.19.125.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:43.028287 0.298970 udp 10.0.2.104 54523 <-> 190.75.86.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:44.029827 0.123432 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:45.031592 0.209854 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:46.032909 4.997315 udp 10.0.2.104 54523 -> 79.25.244.31 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:47.034288 0.284758 udp 10.0.2.104 54523 <-> 1.11.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:48.025732 0.304444 udp 10.0.2.104 54523 <-> 61.26.178.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:49.027479 0.078510 udp 10.0.2.104 54523 <-> 188.246.74.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:50.028432 0.125148 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:52.031661 0.260298 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:53.032895 3.281487 udp 10.0.2.104 54523 <-> 1.11.158.62 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:54.034750 0.000000 udp 10.0.2.104 54523 -> 82.59.115.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:55.025537 0.145686 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:57.028835 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:54:58.030059 0.328790 udp 10.0.2.104 54523 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:54:59.031248 0.028867 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:00.032945 0.424432 udp 10.0.2.104 54523 <-> 117.231.164.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:01.034681 0.164124 udp 10.0.2.104 54523 <-> 74.129.116.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:02.025462 2.125872 udp 10.0.2.104 54523 <-> 116.73.39.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:03.027184 0.159646 udp 10.0.2.104 54523 <-> 76.24.95.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:04.028912 0.000000 udp 10.0.2.104 54523 -> 159.146.5.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:05.030019 0.348705 udp 10.0.2.104 54523 <-> 190.48.170.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:06.031340 0.000000 udp 10.0.2.104 54523 -> 190.195.52.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:07.033384 0.000000 udp 10.0.2.104 54523 -> 31.44.194.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:08.034661 4.341607 udp 10.0.2.104 54523 <-> 106.216.37.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:09.025883 0.054138 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:10.027735 0.031609 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:11.028854 0.487878 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:12.030204 0.156175 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:13.032393 0.060364 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:13.692394 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:55:14.032970 0.304142 udp 10.0.2.104 54523 <-> 110.134.145.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:15.034681 0.139555 udp 10.0.2.104 54523 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:16.026251 0.000000 udp 10.0.2.104 54523 -> 111.246.35.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:17.027039 0.109771 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:18.029121 4.997069 udp 10.0.2.104 54523 <-> 124.122.2.115 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:19.030439 0.151363 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:20.031956 0.352417 udp 10.0.2.104 54523 <-> 219.78.101.27 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:21.033148 0.161068 udp 10.0.2.104 54523 <-> 68.200.12.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:22.034453 0.123717 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:23.321968 0.000000 udp 10.0.2.104 54523 <- 124.122.2.115 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:24.027253 0.344781 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:25.028786 0.000000 udp 10.0.2.104 54523 -> 14.96.161.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:26.030168 0.404987 udp 10.0.2.104 54523 <-> 183.109.37.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:27.031518 2.330700 udp 10.0.2.104 54523 <-> 116.73.113.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:28.033255 0.000000 udp 10.0.2.104 54523 -> 218.164.7.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:29.034754 0.179673 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:30.026137 0.000000 udp 10.0.2.104 54523 -> 50.90.85.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:31.027273 0.176419 udp 10.0.2.104 54523 <-> 71.15.136.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:32.029175 0.037158 udp 10.0.2.104 54523 <-> 84.56.163.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:33.030702 0.000000 udp 10.0.2.104 54523 -> 106.216.37.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:34.031533 0.275907 udp 10.0.2.104 54523 <-> 200.126.98.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:35.032992 1.505041 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:36.024932 0.130514 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:37.025966 0.079696 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:38.027504 0.335763 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:39.029388 1.087520 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:39.978464 0.000000 udp 10.0.2.104 54523 <- 106.216.37.2 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:55:40.030345 0.282402 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:41.032258 0.146367 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:42.032961 3.715263 udp 10.0.2.104 54523 <-> 89.110.247.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:43.025055 0.145691 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:44.025823 0.578495 udp 10.0.2.104 54523 <-> 178.35.247.254 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:45.027769 0.153970 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:46.029027 0.170987 udp 10.0.2.104 54523 <-> 68.188.51.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:47.030264 0.326919 udp 10.0.2.104 54523 <-> 219.175.44.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:48.031831 4.258454 udp 10.0.2.104 54523 <-> 181.164.188.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:49.033553 0.349289 udp 10.0.2.104 54523 <-> 111.252.97.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:50.024771 0.141095 udp 10.0.2.104 54523 <-> 62.18.91.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:51.026259 0.073784 udp 10.0.2.104 54523 <-> 95.104.232.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:52.027359 0.525405 udp 10.0.2.104 54523 <-> 187.107.251.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:53.029232 0.203208 udp 10.0.2.104 54523 <-> 190.159.74.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:54.030799 0.430887 udp 10.0.2.104 54523 <-> 101.63.71.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:55.032235 0.335502 udp 10.0.2.104 54523 <-> 201.93.194.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:56.033454 0.230264 udp 10.0.2.104 54523 <-> 177.224.152.106 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:57.024727 0.216843 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:58.026460 0.042275 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:55:59.027540 0.061048 udp 10.0.2.104 54523 <-> 88.161.48.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:00.029256 0.290624 udp 10.0.2.104 54523 <-> 75.213.227.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:00.689932 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:56:01.030284 3.724218 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:02.031912 0.000000 udp 10.0.2.104 54523 -> 94.190.190.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:04.024994 1.056580 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:06.027799 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:07.029272 0.310849 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:08.031061 0.301350 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:09.032495 0.164290 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:10.033388 0.594940 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:11.024838 0.000000 udp 10.0.2.104 54523 -> 189.79.170.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:12.026345 0.128866 udp 10.0.2.104 54523 <-> 62.18.91.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:13.028077 0.242783 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:14.029569 0.320633 udp 10.0.2.104 54523 <-> 122.209.168.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:15.030759 1.171139 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:17.033827 0.408144 udp 10.0.2.104 54523 <-> 115.241.53.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:18.024758 0.115486 udp 10.0.2.104 54523 <-> 78.157.7.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:19.026616 0.000000 udp 10.0.2.104 54523 -> 79.117.214.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:20.027884 0.896663 udp 10.0.2.104 54523 <-> 5.236.230.146 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:21.029399 0.382295 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:22.031047 0.158577 udp 10.0.2.104 54523 <-> 24.140.128.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:23.032161 0.303214 udp 10.0.2.104 54523 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:24.033708 0.046674 udp 10.0.2.104 54523 <-> 89.25.112.106 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:25.024840 0.045068 udp 10.0.2.104 54523 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:26.026414 0.162612 udp 10.0.2.104 54523 <-> 2.181.7.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:27.028276 0.000000 udp 10.0.2.104 54523 -> 14.97.126.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:28.029287 0.000000 udp 10.0.2.104 54523 -> 88.137.162.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:29.031177 0.562194 udp 10.0.2.104 54523 <-> 200.84.252.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:30.032237 0.553783 udp 10.0.2.104 54523 <-> 117.222.42.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:31.033463 2.994427 udp 10.0.2.104 54523 <-> 178.35.247.254 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:32.024866 0.000000 udp 10.0.2.104 54523 -> 105.225.160.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:33.026294 0.051380 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:35.029430 0.077388 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:36.030738 0.013802 udp 10.0.2.104 54523 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:37.032116 0.316156 udp 10.0.2.104 54523 <-> 115.20.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:38.034047 0.145007 udp 10.0.2.104 54523 <-> 174.101.11.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:39.025327 0.044478 udp 10.0.2.104 54523 <-> 193.150.231.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:40.026643 0.000000 udp 10.0.2.104 54523 -> 121.44.93.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:41.027804 0.307119 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:42.029388 0.000000 udp 10.0.2.104 54523 -> 89.253.133.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:43.030900 0.350495 udp 10.0.2.104 54523 <-> 61.227.71.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:44.032698 0.313849 udp 10.0.2.104 54523 <-> 221.121.174.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:45.034039 1.687102 udp 10.0.2.104 54523 <-> 106.79.36.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:46.025592 1.176809 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:47.687786 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:56:48.028359 0.221029 udp 10.0.2.104 54523 <-> 24.247.36.231 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:49.029307 0.330031 udp 10.0.2.104 54523 <-> 108.242.151.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:50.031339 0.095589 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:51.032602 0.000000 udp 10.0.2.104 54523 -> 178.129.93.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:52.033700 4.997759 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:53.025197 0.000000 udp 10.0.2.104 54523 -> 95.85.162.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:54.026660 0.350511 udp 10.0.2.104 54523 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:55.027958 0.191644 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:57.169292 0.000000 udp 10.0.2.104 54523 <- 24.191.81.20 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:56:58.032967 1.105742 udp 10.0.2.104 54523 <-> 95.160.231.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:56:59.033760 0.048688 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:00.025101 0.374587 udp 10.0.2.104 54523 <-> 14.199.234.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:01.026836 0.092826 udp 10.0.2.104 54523 <-> 77.21.184.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:02.028574 0.981475 udp 10.0.2.104 54523 <-> 78.88.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:03.029871 3.032960 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:04.031110 0.000000 udp 10.0.2.104 54523 -> 95.108.60.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:05.032521 0.000000 udp 10.0.2.104 54523 -> 115.242.226.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:07.025635 0.048784 udp 10.0.2.104 54523 <-> 79.118.137.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:08.027219 0.055062 udp 10.0.2.104 54523 <-> 62.21.109.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:09.028102 0.165832 udp 10.0.2.104 54523 <-> 98.253.230.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:10.029507 0.325039 udp 10.0.2.104 54523 <-> 222.110.41.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:11.031670 0.081498 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:12.032990 0.248535 udp 10.0.2.104 54523 <-> 183.83.111.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:13.034398 0.373987 udp 10.0.2.104 54523 <-> 1.168.250.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:14.025587 0.571878 udp 10.0.2.104 54523 <-> 205.164.3.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:15.027015 0.141924 udp 10.0.2.104 54523 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:16.028178 0.101903 udp 10.0.2.104 54523 <-> 84.232.82.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:17.029563 0.000000 udp 10.0.2.104 54523 -> 190.207.151.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:18.031408 0.072983 udp 10.0.2.104 54523 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:19.032849 0.166965 udp 10.0.2.104 54523 <-> 84.224.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:20.034042 0.055110 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:21.025522 0.060856 udp 10.0.2.104 54523 <-> 86.124.224.24 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:22.027155 0.806830 udp 10.0.2.104 54523 <-> 192.95.197.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:23.028410 0.082519 udp 10.0.2.104 54523 <-> 82.250.208.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:24.030215 0.150251 udp 10.0.2.104 54523 <-> 24.31.217.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:25.031714 0.219379 udp 10.0.2.104 54523 <-> 24.21.31.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:26.033006 0.000000 udp 10.0.2.104 54523 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:27.034138 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:29.027166 0.322815 udp 10.0.2.104 54523 <-> 218.149.5.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:30.028605 0.120594 udp 10.0.2.104 54523 <-> 77.106.75.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:31.029731 0.133171 udp 10.0.2.104 54523 <-> 24.147.124.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:32.031607 0.043374 udp 10.0.2.104 54523 <-> 46.175.231.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:33.032966 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:34.034741 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:34.685112 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:57:35.025587 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:36.027065 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:37.028907 4.005847 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:38.030335 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:39.031202 0.041180 udp 10.0.2.104 54523 <-> 212.233.239.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:40.032838 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:42.026015 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:43.027265 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:44.028371 0.126377 udp 10.0.2.104 54523 <-> 87.126.141.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:45.030126 1.117256 udp 10.0.2.104 54523 <-> 217.203.206.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:46.031517 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:47.032933 0.315630 udp 10.0.2.104 54523 <-> 58.68.94.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:48.034128 0.312262 udp 10.0.2.104 54523 <-> 124.100.80.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:49.026334 0.201454 udp 10.0.2.104 54523 <-> 68.145.102.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:50.026980 0.021888 udp 10.0.2.104 54523 <-> 62.44.118.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:51.028971 0.324246 udp 10.0.2.104 54523 <-> 218.110.249.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:52.030031 0.051113 udp 10.0.2.104 54523 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:53.031709 0.210222 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:54.032851 0.043934 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:55.034450 0.161311 udp 10.0.2.104 54523 <-> 24.37.209.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:56.025952 0.000000 udp 10.0.2.104 54523 -> 213.60.233.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:57:57.027277 0.036134 udp 10.0.2.104 54523 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:58.028958 0.045857 udp 10.0.2.104 54523 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:57:59.030225 0.383750 udp 10.0.2.104 54523 <-> 112.197.226.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:00.031458 0.000000 udp 10.0.2.104 54523 -> 49.15.56.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:01.033325 0.130351 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:02.034493 0.000000 udp 10.0.2.104 54523 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:03.025980 0.630645 udp 10.0.2.104 54523 <-> 114.42.85.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:04.027284 0.156522 udp 10.0.2.104 54523 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:05.029103 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:06.030672 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:07.031881 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:07.031944 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:58:08.033470 0.050838 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:09.024310 0.094195 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:09.928913 3.001842 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:58:10.026160 0.145171 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:11.027460 0.049198 udp 10.0.2.104 54523 <-> 176.103.18.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:12.028793 0.144247 udp 10.0.2.104 54523 <-> 216.129.180.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:13.030322 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:14.032025 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:15.033537 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:16.024916 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:16.935913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:58:17.026117 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:18.027780 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:19.028940 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:20.030695 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:21.031788 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:21.693033 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:58:22.033145 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:23.025089 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:24.025867 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:24.937712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:58:25.027332 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:25.027392 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:58:27.030567 0.263181 udp 10.0.2.104 54523 <-> 75.229.66.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:28.031854 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:29.033680 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:30.024582 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:31.026504 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:32.027709 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:33.028858 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:34.030713 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:35.032125 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:36.033764 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:37.025052 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:38.026396 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:39.027739 0.100440 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:39.128179 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:58:40.079558 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:40.990507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:58:41.080992 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:43.084048 2.052499 udp 10.0.2.104 54523 <-> 109.192.70.81 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:44.074686 0.057846 udp 10.0.2.104 54523 <-> 143.225.144.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:46.078271 0.144704 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:47.079132 0.773678 udp 10.0.2.104 54523 <-> 177.80.161.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:48.080597 0.393076 udp 10.0.2.104 54523 <-> 1.36.1.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:49.082280 0.108738 udp 10.0.2.104 54523 <-> 213.238.228.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:50.104074 0.000000 udp 10.0.2.104 54523 -> 151.233.139.192 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:51.095039 1.505814 udp 10.0.2.104 54523 <-> 115.117.158.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:52.096567 0.000000 udp 10.0.2.104 54523 -> 59.94.7.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:53.097996 0.176710 udp 10.0.2.104 54523 <-> 72.9.77.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:54.099889 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:55.100559 3.996263 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:56.102673 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:58:57.103774 0.035237 udp 10.0.2.104 54523 <-> 79.117.54.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:58:58.095353 1.042331 udp 10.0.2.104 54523 <-> 36.235.236.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:00.097851 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:00.097900 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:59:01.099341 0.318862 udp 10.0.2.104 54523 <-> 110.133.17.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:02.101301 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:03.102527 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:04.103588 0.313851 udp 10.0.2.104 54523 <-> 14.42.235.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:05.095351 0.661187 udp 10.0.2.104 54523 <-> 83.180.214.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:06.096732 0.044408 udp 10.0.2.104 54523 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:07.098525 0.164718 udp 10.0.2.104 54523 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:08.099266 0.160727 udp 10.0.2.104 54523 <-> 24.37.209.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:08.760635 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:59:09.101262 0.000000 udp 10.0.2.104 54523 -> 90.232.129.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:10.102558 0.155158 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:11.103888 0.000000 udp 10.0.2.104 54523 -> 116.203.170.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:12.095291 0.000000 udp 10.0.2.104 54523 -> 203.192.243.208 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:13.016657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:59:13.097189 0.217590 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:14.098270 0.035794 udp 10.0.2.104 54523 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:15.099433 0.197483 udp 10.0.2.104 54523 <-> 202.62.87.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:16.101127 0.000000 udp 10.0.2.104 54523 -> 93.134.205.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:17.102449 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:18.104002 0.149913 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:19.095216 0.000000 udp 10.0.2.104 54523 -> 184.12.180.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:20.096807 0.072971 udp 10.0.2.104 54523 <-> 151.66.163.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:21.098303 1.325778 udp 10.0.2.104 54523 <-> 211.124.149.209 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:23.101451 0.041979 udp 10.0.2.104 54523 <-> 95.85.182.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:24.102780 0.051432 udp 10.0.2.104 54523 <-> 86.122.80.11 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:25.104027 0.000000 udp 10.0.2.104 54523 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:26.095198 1.160480 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:28.098457 0.371799 udp 10.0.2.104 54523 <-> 180.94.163.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:29.099780 0.000000 udp 10.0.2.104 54523 -> 151.33.234.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:30.101078 0.319448 udp 10.0.2.104 54523 <-> 101.128.180.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:31.102836 0.059731 udp 10.0.2.104 54523 <-> 86.100.25.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:32.104542 0.086402 udp 10.0.2.104 54523 <-> 85.155.41.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:33.095792 0.126454 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:34.097081 0.107165 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:35.108393 0.066816 udp 10.0.2.104 54523 <-> 85.87.145.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:36.109508 0.178060 udp 10.0.2.104 54523 <-> 183.87.170.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:37.110967 0.149140 udp 10.0.2.104 54523 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:38.112568 0.410235 udp 10.0.2.104 54523 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:39.114376 0.381373 udp 10.0.2.104 54523 <-> 61.227.18.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:40.105438 1.001630 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:42.108402 0.397397 udp 10.0.2.104 54523 <-> 201.93.194.74 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:43.110185 0.170689 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:44.111311 0.058735 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:45.112919 0.158123 udp 10.0.2.104 54523 <-> 68.52.86.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:46.114317 0.270227 udp 10.0.2.104 54523 <-> 187.37.104.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:47.105649 1.106088 udp 10.0.2.104 54523 <-> 89.165.18.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:48.106944 0.263752 udp 10.0.2.104 54523 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:49.108308 0.305553 udp 10.0.2.104 54523 <-> 111.217.235.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:50.109997 0.021574 udp 10.0.2.104 54523 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:51.111601 0.000000 udp 10.0.2.104 54523 -> 14.97.98.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:52.112954 0.000000 udp 10.0.2.104 54523 -> 190.53.90.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 03:59:53.114637 3.854575 udp 10.0.2.104 54523 <-> 111.246.35.241 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:54.105531 0.221130 udp 10.0.2.104 54523 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:55.106937 0.151875 udp 10.0.2.104 54523 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:55.768358 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:59:57.109907 1.023432 udp 10.0.2.104 54523 <-> 46.5.250.53 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 03:59:59.113012 0.160767 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:00.114306 0.199365 udp 10.0.2.104 54523 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:01.105488 0.000000 udp 10.0.2.104 54523 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:02.107304 0.000000 udp 10.0.2.104 54523 -> 37.145.43.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:03.108993 0.352237 udp 10.0.2.104 54523 <-> 180.215.11.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:04.110084 0.375737 udp 10.0.2.104 54523 <-> 111.249.249.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:05.111444 0.478188 udp 10.0.2.104 54523 <-> 96.44.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:06.112880 0.213454 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:07.114456 0.381761 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:08.105888 0.000000 udp 10.0.2.104 54523 -> 173.27.248.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:09.107479 0.418324 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:10.108626 3.375304 udp 10.0.2.104 54523 <-> 201.68.147.35 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:11.110043 0.439851 udp 10.0.2.104 54523 <-> 111.248.97.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:12.111391 3.200922 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:14.114168 0.000000 udp 10.0.2.104 54523 -> 190.73.247.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:16.107258 0.154953 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:17.108485 0.000000 udp 10.0.2.104 54523 -> 72.226.92.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:18.110244 0.158036 udp 10.0.2.104 54523 <-> 97.102.123.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:19.112025 0.142314 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:20.113293 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:21.114773 0.134694 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:22.106109 0.456108 udp 10.0.2.104 54523 <-> 218.227.129.90 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:23.107264 0.173654 udp 10.0.2.104 54523 <-> 103.251.219.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:24.108948 0.418583 udp 10.0.2.104 54523 <-> 219.103.176.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:25.110487 3.995355 udp 10.0.2.104 54523 -> 38.104.1.246 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:26.111795 0.000000 udp 10.0.2.104 54523 -> 62.18.74.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:27.113180 0.156871 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:28.114854 0.000000 udp 10.0.2.104 54523 -> 180.215.92.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:30.107901 1.046353 udp 10.0.2.104 54523 <-> 218.164.207.72 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:31.109225 0.064893 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:32.110552 0.313431 udp 10.0.2.104 54523 <-> 221.121.174.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:33.111983 0.196116 udp 10.0.2.104 54523 <-> 223.191.5.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:34.113180 0.046962 udp 10.0.2.104 54523 <-> 24.132.8.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:35.114708 0.138565 udp 10.0.2.104 54523 <-> 66.189.245.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:36.106444 0.130423 udp 10.0.2.104 54523 <-> 66.225.183.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:37.107218 2.041309 udp 10.0.2.104 54523 <-> 195.70.108.58 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:38.109309 0.137518 udp 10.0.2.104 54523 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:40.111761 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:41.143481 0.346332 udp 10.0.2.104 54523 -> 61.227.181.210 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:41.489813 0.000000 icmp 61.227.181.210 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:00:42.134989 0.252689 udp 10.0.2.104 54523 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:42.795726 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:00:43.136355 0.149988 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:44.137760 0.067375 udp 10.0.2.104 54523 <-> 128.71.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:45.139032 0.126349 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:46.140801 1.346465 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:48.143273 0.142721 udp 10.0.2.104 54523 <-> 96.37.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:49.135186 0.177704 udp 10.0.2.104 54523 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:50.135971 3.004467 udp 10.0.2.104 54523 -> 193.248.41.32 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:51.137696 0.026976 udp 10.0.2.104 54523 <-> 85.130.46.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:52.139410 0.062339 udp 10.0.2.104 54523 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:54.141720 0.000000 udp 10.0.2.104 54523 -> 155.158.53.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:00:55.143220 0.069057 udp 10.0.2.104 54523 <-> 93.105.14.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:56.134769 0.217374 udp 10.0.2.104 54523 <-> 72.47.26.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:57.136536 0.236471 udp 10.0.2.104 54523 <-> 124.123.233.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:58.137503 0.035850 udp 10.0.2.104 54523 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:00:59.139739 0.420913 udp 10.0.2.104 54523 <-> 180.215.34.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:00.140772 1.220406 udp 10.0.2.104 54523 <-> 90.23.92.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:01.142265 0.264548 udp 10.0.2.104 54523 <-> 106.212.1.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:02.143420 0.991688 udp 10.0.2.104 54523 <-> 31.185.113.107 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:04.136129 0.130531 udp 10.0.2.104 54523 <-> 87.17.27.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:05.138032 0.256881 udp 10.0.2.104 54523 <-> 101.221.225.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:06.138957 0.337472 udp 10.0.2.104 54523 <-> 220.136.62.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:07.141043 0.071156 udp 10.0.2.104 54523 <-> 85.87.145.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:08.142406 0.136093 udp 10.0.2.104 54523 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:09.143452 0.046580 udp 10.0.2.104 54523 <-> 86.126.0.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:10.134906 0.000000 udp 10.0.2.104 54523 -> 217.174.48.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:11.136154 0.169123 udp 10.0.2.104 54523 <-> 71.235.186.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:12.137936 0.658675 udp 10.0.2.104 54523 <-> 116.202.174.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:13.139257 0.137204 udp 10.0.2.104 54523 <-> 2.193.195.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:14.141118 0.022518 udp 10.0.2.104 54523 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:15.142407 0.318181 udp 10.0.2.104 54523 <-> 180.15.183.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:16.144145 0.066446 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:17.135227 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:18.136995 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:19.138199 0.169990 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:20.139772 0.150987 udp 10.0.2.104 54523 <-> 50.148.31.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:21.140876 0.170796 udp 10.0.2.104 54523 <-> 103.251.219.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:22.142601 0.051734 udp 10.0.2.104 54523 <-> 82.79.126.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:23.143471 0.198251 udp 10.0.2.104 54523 <-> 208.99.142.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:24.135658 0.173472 udp 10.0.2.104 54523 <-> 173.23.208.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:25.138545 0.060776 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:26.137736 0.152311 udp 10.0.2.104 54523 <-> 174.107.129.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:27.139339 0.000000 udp 10.0.2.104 54523 -> 98.127.236.231 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:28.141104 0.143555 udp 10.0.2.104 54523 <-> 66.39.204.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:29.142169 0.239427 udp 10.0.2.104 54523 <-> 46.48.181.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:29.803156 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:01:30.144128 0.150163 udp 10.0.2.104 54523 <-> 74.58.115.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:31.135451 0.344820 udp 10.0.2.104 54523 <-> 70.189.102.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:32.136517 0.298420 udp 10.0.2.104 54523 <-> 180.199.144.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:33.137898 0.091225 udp 10.0.2.104 54523 <-> 83.136.186.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:34.139247 0.217241 udp 10.0.2.104 54523 <-> 87.3.175.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:35.140789 0.185780 udp 10.0.2.104 54523 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:36.142786 0.864573 udp 10.0.2.104 54523 <-> 138.130.242.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:37.144173 0.324870 udp 10.0.2.104 54523 <-> 111.252.60.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:38.135114 0.400831 udp 10.0.2.104 54523 <-> 117.221.44.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:39.136858 0.165337 udp 10.0.2.104 54523 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:40.137889 0.164265 udp 10.0.2.104 54523 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:41.140062 0.441663 udp 10.0.2.104 54523 <-> 186.93.99.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:42.140770 0.000000 udp 10.0.2.104 54523 -> 75.193.62.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:43.142485 0.409391 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:01:45.135910 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:46.136906 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:46.136975 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:01:47.138492 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:48.139907 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:49.141417 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:50.142219 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:51.143919 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:52.135616 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:53.136706 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:54.138130 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:55.139468 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:56.141048 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:57.142681 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:58.144433 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:01:59.135608 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:00.137339 0.000000 udp 10.0.2.104 54523 -> 24.0.29.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:01.138613 1.370095 udp 10.0.2.104 54523 <-> 190.11.99.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:02.140180 0.048042 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:03.141117 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:05.144099 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:06.135899 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:07.137131 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:08.138300 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:09.139816 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:10.140962 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:11.142876 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:12.143979 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:13.135626 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:14.137107 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:14.137170 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:02:15.138476 4.997355 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:16.140215 0.134957 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:16.800977 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:02:17.141301 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:18.142828 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:19.144481 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:21.137312 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:22.138219 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:23.140266 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:24.141494 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:25.143129 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:26.144620 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:27.135849 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:28.137465 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:29.139028 0.000125 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:29.139153 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:02:30.140383 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:32.143077 1.312390 udp 10.0.2.104 54523 <-> 79.51.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:33.144201 0.256532 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:34.135752 0.219424 udp 10.0.2.104 54523 <-> 79.2.146.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:35.137438 0.054329 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:36.138490 0.000000 udp 10.0.2.104 54523 -> 88.165.10.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:37.140160 0.177485 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:38.141564 1.001457 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:40.144245 0.049801 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:41.135552 4.068853 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:42.137577 0.058701 udp 10.0.2.104 54523 <-> 89.32.153.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:43.138632 0.000000 udp 10.0.2.104 54523 -> 171.98.192.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:44.140014 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:46.143387 0.146494 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:47.144467 0.000000 udp 10.0.2.104 54523 -> 117.239.245.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:48.136430 0.000000 udp 10.0.2.104 54523 -> 141.136.14.36 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:49.137082 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:50.138980 0.177237 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:51.139953 0.046639 udp 10.0.2.104 54523 <-> 88.129.151.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:52.142048 0.043984 udp 10.0.2.104 54523 <-> 194.158.73.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:53.143471 0.042192 udp 10.0.2.104 54523 <-> 147.156.194.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:02:54.144392 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:55.136305 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:56.137249 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:57.139171 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:58.140267 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:02:59.141541 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:01.145019 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:02.135923 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:03.137228 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:03.798425 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:03:04.138660 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:05.140370 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:05.140447 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:03:06.141496 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:07.143737 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:08.144881 0.000000 udp 10.0.2.104 54523 -> 115.242.170.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:09.136035 0.313853 udp 10.0.2.104 54523 <-> 125.4.9.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:03:10.137493 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:11.138807 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:12.140203 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:12.140250 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:03:13.141790 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:14.143598 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:15.135027 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:16.136113 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:17.137755 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:18.139211 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:19.140806 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:20.141749 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:22.135137 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:23.136237 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:24.137791 0.050605 udp 10.0.2.104 54523 <-> 88.216.22.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:03:25.139077 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:26.140480 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:27.141904 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:28.143363 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:29.134892 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:30.136337 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:31.137490 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:31.137572 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:03:32.139366 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:33.140432 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:35.143267 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:36.134749 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:37.136072 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:38.137747 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:39.139551 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:40.140538 0.000000 udp 10.0.2.104 54523 -> 115.242.170.198 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:41.142355 0.024548 udp 10.0.2.104 54523 <-> 89.215.186.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:03:42.143421 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:43.135339 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:44.136454 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:45.137598 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:46.139034 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:47.141049 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:48.142513 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:49.143945 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:50.135059 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:50.795651 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:03:51.136953 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:52.137898 0.000112 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:52.138010 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:03:53.139693 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:54.140756 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:56.143704 0.065282 udp 10.0.2.104 54523 <-> 37.235.189.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:03:57.135165 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:58.136738 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:03:59.138323 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:00.139130 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:01.140852 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:02.142626 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:03.143984 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:03.144065 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:04:04.135304 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:05.136730 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:06.137926 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:07.139436 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:08.141202 4.996813 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:09.142722 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:11.135430 0.047438 udp 10.0.2.104 54523 <-> 46.237.118.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:12.136499 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:14.139422 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:15.140931 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:16.142703 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:17.143963 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:18.135165 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:19.136774 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:20.138527 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:21.139931 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:22.141300 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:24.144188 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:25.135709 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:25.135761 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:04:26.136738 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:27.138278 0.166145 udp 10.0.2.104 54523 <-> 69.169.145.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:28.139944 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:29.141608 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:30.142264 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:32.135318 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:33.137016 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:34.138304 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:35.139875 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:35.139951 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:04:36.140898 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:37.142954 0.046713 udp 10.0.2.104 54523 <-> 46.237.118.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:37.793896 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:04:38.144075 0.000000 udp 10.0.2.104 54523 -> 106.196.133.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:39.136032 0.000000 udp 10.0.2.104 54523 -> 24.51.58.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:40.137248 3.003910 udp 10.0.2.104 54523 -> 190.79.250.42 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:41.138374 0.311548 udp 10.0.2.104 54523 <-> 14.43.147.158 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:42.139862 0.086708 udp 10.0.2.104 54523 <-> 93.134.205.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:44.143079 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:45.143915 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:46.135359 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:47.137322 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:48.138368 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:49.139605 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:51.142615 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:51.142723 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:04:52.144479 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:53.135340 0.029346 udp 10.0.2.104 54523 <-> 188.104.226.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:54.136814 0.310956 udp 10.0.2.104 54523 <-> 14.43.147.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:55.138518 0.043986 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:56.140370 0.000000 udp 10.0.2.104 54523 -> 46.237.64.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:04:57.141591 0.032947 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:58.143007 0.375724 udp 10.0.2.104 54523 <-> 58.141.149.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:04:59.144340 0.000000 udp 10.0.2.104 54523 -> 89.65.83.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:05:00.135921 0.665353 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:01.137490 0.000000 udp 10.0.2.104 54523 -> 201.68.33.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:05:02.138502 0.027708 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:03.139947 0.328357 udp 10.0.2.104 54523 <-> 184.12.180.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:04.141431 0.384374 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:05.142684 0.159668 udp 10.0.2.104 54523 <-> 68.112.143.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:06.144253 3.995758 udp 10.0.2.104 54523 <-> 76.85.171.149 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:07.136268 0.893605 udp 10.0.2.104 54523 <-> 91.240.43.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:09.138363 0.158779 udp 10.0.2.104 54523 <-> 198.251.45.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:11.141663 0.208550 udp 10.0.2.104 54523 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:12.142891 0.146588 udp 10.0.2.104 54523 <-> 76.106.23.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:13.144232 0.138458 udp 10.0.2.104 54523 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:14.136252 0.000000 udp 10.0.2.104 54523 -> 85.96.244.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:05:15.137317 0.109320 udp 10.0.2.104 54523 <-> 79.17.72.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:16.138954 0.000000 udp 10.0.2.104 54523 -> 116.202.126.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:05:17.062007 3.002661 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:05:17.140600 1.050841 udp 10.0.2.104 54523 <-> 217.77.28.90 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:19.143044 0.827043 udp 10.0.2.104 54523 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:20.144838 0.071620 udp 10.0.2.104 54523 <-> 188.32.59.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:21.135708 0.041675 udp 10.0.2.104 54523 <-> 213.119.25.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:22.137363 0.882271 udp 10.0.2.104 54523 <-> 186.89.148.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:23.138942 0.153741 udp 10.0.2.104 54523 <-> 92.126.215.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:24.070521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:05:24.140108 1.064585 udp 10.0.2.104 54523 <-> 92.87.2.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:24.801109 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:05:26.143116 1.208588 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:27.144746 0.047249 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:28.136095 0.214498 udp 10.0.2.104 54523 <-> 113.193.131.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:29.137308 0.220278 udp 10.0.2.104 54523 <-> 75.23.216.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:30.138964 3.004230 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:05:31.140159 0.356880 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:32.071475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:05:32.142075 0.345837 udp 10.0.2.104 54523 <-> 111.253.130.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:34.145063 0.012649 udp 10.0.2.104 54523 <-> 93.99.103.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:35.135783 2.128470 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:36.137647 0.047282 udp 10.0.2.104 54523 <-> 109.87.187.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:38.140517 0.041872 udp 10.0.2.104 54523 <-> 147.156.194.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:39.141483 0.521054 udp 10.0.2.104 54523 <-> 117.221.65.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:40.143126 1.288780 udp 10.0.2.104 54523 <-> 190.193.56.65 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:42.135904 1.209522 udp 10.0.2.104 54523 <-> 5.250.24.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:42.630253 3.822924 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:05:43.137399 0.160570 udp 10.0.2.104 54523 <-> 69.180.126.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:44.138663 2.801340 udp 10.0.2.104 54523 <-> 83.173.151.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:45.140848 0.131915 udp 10.0.2.104 54523 <-> 75.118.87.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:46.141844 0.045397 udp 10.0.2.104 54523 <-> 86.126.120.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:47.143713 4.433627 udp 10.0.2.104 54523 <-> 117.205.247.99 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:48.075009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:05:48.134560 0.000000 udp 10.0.2.104 54523 -> 89.230.111.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:05:49.136108 0.156663 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:50.137642 0.826428 udp 10.0.2.104 54523 <-> 188.115.242.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:52.140453 0.168911 udp 10.0.2.104 54523 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:53.142176 0.000000 udp 10.0.2.104 54523 -> 1.170.254.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:05:54.143476 0.150023 udp 10.0.2.104 54523 <-> 71.79.142.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:55.134513 0.309570 udp 10.0.2.104 54523 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:56.135920 0.046120 udp 10.0.2.104 54523 <-> 77.234.87.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:57.137485 0.345911 udp 10.0.2.104 54523 <-> 1.165.166.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:58.139442 0.142555 udp 10.0.2.104 54523 <-> 69.124.115.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:05:59.140955 0.274052 udp 10.0.2.104 54523 <-> 36.86.100.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:06:01.143953 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:02.135038 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:02.135102 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:06:03.136448 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:04.137434 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:05.139051 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:06.140592 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:07.142461 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:08.143420 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:09.134916 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:10.136440 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:11.137839 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:11.798611 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:06:12.139492 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:13.140944 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:14.142381 3.995536 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:15.143462 1.993380 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:16.134773 0.287375 udp 10.0.2.104 54523 <-> 126.36.45.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:06:19.139329 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:20.080957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:06:20.140988 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:21.142202 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:22.143714 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:23.135295 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:24.136582 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:25.138154 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:26.139653 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:27.141174 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:28.142332 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:29.143354 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:29.143402 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:06:31.136229 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:32.138292 0.229037 udp 10.0.2.104 54523 <-> 117.216.174.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:06:33.139570 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:34.140537 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:35.142688 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:36.144133 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:37.135190 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:38.136608 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:39.138092 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:40.139638 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:41.140837 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:42.142570 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:44.135109 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:44.135185 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:06:45.137065 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:46.138210 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:47.139679 0.333960 udp 10.0.2.104 54523 <-> 1.161.56.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:06:48.140741 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:49.142477 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:49.853267 0.011441 udp 10.0.2.104 54549 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 04:06:49.864995 0.000000 udp 10.0.2.104 54550 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:50.144141 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:51.135329 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:52.136673 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:53.137879 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:54.139752 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:56.142569 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:57.143634 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:58.135215 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:58.796380 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:06:59.137100 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:06:59.137171 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:07:00.138114 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:01.139446 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:02.141001 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:03.142262 0.000000 udp 10.0.2.104 54523 -> 1.165.166.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:04.143990 0.000000 udp 10.0.2.104 54523 -> 115.240.56.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:05.135623 0.135583 udp 10.0.2.104 54523 <-> 24.126.109.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:06.136839 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:07.138459 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:08.139891 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:09.141103 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:10.142728 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:11.144215 0.306000 udp 10.0.2.104 54523 <-> 93.105.14.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:12.136045 2.002683 udp 10.0.2.104 54523 -> 115.241.54.86 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:13.137103 0.346201 udp 10.0.2.104 54523 <-> 1.165.166.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:15.139933 0.057018 udp 10.0.2.104 54523 <-> 109.87.252.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:16.140941 0.000000 udp 10.0.2.104 54523 -> 183.83.74.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:17.143123 0.311961 udp 10.0.2.104 54523 <-> 27.143.12.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:18.143963 0.060805 udp 10.0.2.104 54523 <-> 188.25.126.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:19.135491 0.553449 udp 10.0.2.104 54523 <-> 98.69.141.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:20.137279 0.000000 udp 10.0.2.104 54523 -> 162.210.42.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:21.138517 0.032524 udp 10.0.2.104 54523 <-> 94.231.32.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:22.139569 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:23.141634 0.298311 udp 10.0.2.104 54523 <-> 210.194.128.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:24.142673 0.000000 udp 10.0.2.104 54523 -> 78.96.210.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:25.144593 0.145323 udp 10.0.2.104 54523 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:26.135611 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:27.137136 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:28.138821 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:29.140150 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:30.141348 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:31.142781 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:31.985471 0.000000 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:32.144478 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:33.136049 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:34.136959 0.048368 udp 10.0.2.104 54523 <-> 78.96.210.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:35.138648 0.061075 udp 10.0.2.104 54523 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:36.140311 0.000000 udp 10.0.2.104 54523 -> 89.143.49.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:37.141510 1.299546 udp 10.0.2.104 54523 <-> 210.194.128.76 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:39.144196 0.000000 udp 10.0.2.104 54523 -> 187.10.81.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:40.135758 0.146355 udp 10.0.2.104 54523 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:41.137451 0.099914 udp 10.0.2.104 54523 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:42.138835 0.307529 udp 10.0.2.104 54523 <-> 203.140.191.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:43.140508 0.178400 udp 10.0.2.104 54523 <-> 24.217.52.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:44.142092 0.000000 udp 10.0.2.104 54523 -> 37.45.141.138 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:45.143163 0.290781 udp 10.0.2.104 54523 <-> 186.9.5.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:45.793518 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:07:46.144766 0.271664 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:47.136129 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:49.138966 0.000000 udp 10.0.2.104 54523 -> 151.25.179.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:50.140241 0.000000 udp 10.0.2.104 54523 -> 151.64.199.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:51.141653 0.376815 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:07:52.142710 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:53.144213 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:54.136064 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:55.137253 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:55.137303 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:07:56.138623 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:57.139889 2.003217 udp 10.0.2.104 54523 -> 121.246.147.26 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:07:58.141762 0.136038 udp 10.0.2.104 54523 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:00.144855 0.533964 udp 10.0.2.104 54523 <-> 203.88.154.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:01.136022 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:02.137760 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:03.139065 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:04.140191 0.376712 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:05.141510 1.412107 udp 10.0.2.104 54523 <-> 151.64.199.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:06.142888 0.050841 udp 10.0.2.104 54523 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:07.144686 0.485101 udp 10.0.2.104 54523 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:08.136085 0.057013 udp 10.0.2.104 54523 <-> 109.87.252.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:09.137291 0.000000 udp 10.0.2.104 54523 -> 208.101.81.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:10.138794 0.353818 udp 10.0.2.104 54523 <-> 111.250.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:11.140374 0.000000 udp 10.0.2.104 54523 -> 92.36.49.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:12.141472 0.277281 udp 10.0.2.104 54523 <-> 115.240.75.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:13.143132 0.146412 udp 10.0.2.104 54523 <-> 140.193.57.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:14.144438 0.344040 udp 10.0.2.104 54523 <-> 117.214.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:15.136246 0.000000 udp 10.0.2.104 54523 -> 92.90.17.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:16.137268 0.000000 udp 10.0.2.104 54523 -> 71.192.132.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:17.138792 0.166354 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:18.140711 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:19.141913 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:20.143056 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:21.134959 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:21.135007 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:08:22.136257 0.209285 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:23.137353 0.147865 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:24.138742 0.000000 udp 10.0.2.104 54523 -> 173.159.50.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:25.140551 0.297271 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:26.141834 0.078035 udp 10.0.2.104 54523 <-> 88.177.203.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:27.143190 0.268158 udp 10.0.2.104 54523 <-> 90.23.92.54 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:28.134732 0.734778 udp 10.0.2.104 54523 <-> 117.227.9.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:29.136379 0.000000 udp 10.0.2.104 54523 -> 87.97.204.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:30.137350 0.320981 udp 10.0.2.104 54523 <-> 182.165.97.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:31.139480 0.020767 udp 10.0.2.104 54523 <-> 159.149.85.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:32.140348 0.329877 udp 10.0.2.104 54523 <-> 113.42.119.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:32.801534 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:08:33.142086 0.142710 udp 10.0.2.104 54523 <-> 24.45.174.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:34.143308 0.015646 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:35.135188 0.144805 udp 10.0.2.104 54523 <-> 75.185.186.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:36.136364 0.058471 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:37.137433 0.000000 udp 10.0.2.104 54523 -> 1.175.246.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:38.139731 0.000000 udp 10.0.2.104 54523 -> 176.201.40.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:39.140773 0.055357 udp 10.0.2.104 54523 <-> 79.117.214.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:40.142059 0.043026 udp 10.0.2.104 54523 <-> 85.230.38.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:41.143174 0.025995 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:41.452608 0.000000 udp 10.0.2.104 54523 <- 71.192.132.121 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:42.135261 0.077575 udp 10.0.2.104 54523 <-> 83.213.98.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:43.136399 0.675558 udp 10.0.2.104 54523 <-> 14.99.151.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:44.137731 0.000000 udp 10.0.2.104 54523 -> 176.201.40.242 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:45.139127 0.023809 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:46.140743 0.155433 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:47.142538 0.359727 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:48.143783 0.295044 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:49.134650 0.168068 udp 10.0.2.104 54523 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:50.136365 0.038442 udp 10.0.2.104 54523 <-> 89.253.191.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:51.138246 0.858057 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:52.139048 0.296637 udp 10.0.2.104 54523 <-> 27.127.165.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:53.141192 0.000000 udp 10.0.2.104 54523 -> 151.73.154.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:54.142219 0.232197 udp 10.0.2.104 54523 <-> 190.156.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:55.144167 2.236958 udp 10.0.2.104 54523 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:56.135336 0.197247 udp 10.0.2.104 54523 <-> 190.72.180.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:57.136848 0.000000 udp 10.0.2.104 54523 -> 117.218.93.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:08:58.138249 0.312559 udp 10.0.2.104 54523 <-> 122.50.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:08:59.139189 0.316951 udp 10.0.2.104 54523 <-> 175.202.104.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:00.140726 0.147491 udp 10.0.2.104 54523 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:01.142639 0.294644 udp 10.0.2.104 54523 <-> 101.63.189.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:02.143450 0.022299 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:03.134771 0.127742 udp 10.0.2.104 54523 <-> 37.213.154.110 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:04.136237 0.000000 udp 10.0.2.104 54523 -> 24.246.205.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:05.137945 0.044718 udp 10.0.2.104 54523 <-> 62.163.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:06.139482 1.176172 udp 10.0.2.104 54523 <-> 74.196.176.218 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:08.142084 0.146266 udp 10.0.2.104 54523 <-> 98.102.219.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:09.143621 0.141529 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:10.134968 1.033082 udp 10.0.2.104 54523 <-> 84.26.131.106 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:12.137886 0.068200 udp 10.0.2.104 54523 <-> 94.253.238.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:13.139158 0.049787 udp 10.0.2.104 54523 <-> 82.36.57.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:14.141443 0.950663 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:15.142626 0.420839 udp 10.0.2.104 54523 <-> 118.47.82.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:16.143723 0.325578 udp 10.0.2.104 54523 <-> 14.35.232.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:17.135304 0.181267 udp 10.0.2.104 54523 <-> 184.189.232.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:18.136567 0.121577 udp 10.0.2.104 54523 <-> 158.148.131.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:19.138136 0.396817 udp 10.0.2.104 54523 <-> 59.115.150.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:19.798692 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:09:20.139220 0.170725 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:21.140728 0.638240 udp 10.0.2.104 54523 <-> 203.88.154.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:22.142869 0.038583 udp 10.0.2.104 54523 <-> 144.122.47.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:23.143941 0.309108 udp 10.0.2.104 54523 <-> 201.212.133.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:24.135368 0.171036 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:25.137054 0.029165 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:26.138145 0.087826 udp 10.0.2.104 54523 <-> 82.225.246.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:27.139514 1.001784 udp 10.0.2.104 54523 <-> 124.123.201.98 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:29.142537 0.359423 udp 10.0.2.104 54523 <-> 186.88.95.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:30.144095 0.141704 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:31.135552 0.140252 udp 10.0.2.104 54523 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:32.136903 0.134058 udp 10.0.2.104 54523 <-> 76.116.104.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:33.137972 2.492709 udp 10.0.2.104 54523 <-> 58.64.126.41 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:34.139462 0.191869 udp 10.0.2.104 54523 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:36.142648 1.279273 udp 10.0.2.104 54523 <-> 14.98.206.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:37.144315 0.139597 udp 10.0.2.104 54523 <-> 24.193.122.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:38.135506 0.000000 udp 10.0.2.104 54523 -> 187.70.36.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:39.136987 2.087480 udp 10.0.2.104 54523 <-> 190.49.238.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:40.138363 0.000000 udp 10.0.2.104 54523 -> 192.168.254.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:41.139676 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:42.141558 0.320336 udp 10.0.2.104 54523 <-> 121.152.3.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:43.142578 0.079384 udp 10.0.2.104 54523 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:44.144468 0.322545 udp 10.0.2.104 54523 <-> 61.19.25.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:45.135615 2.158672 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:46.136919 3.081759 udp 10.0.2.104 54523 <-> 79.165.97.68 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:48.139590 0.000000 udp 10.0.2.104 54523 -> 189.68.137.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:50.142955 0.373533 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:51.144219 0.000000 udp 10.0.2.104 54523 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:52.135358 0.162021 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:53.137211 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:54.138174 0.000000 udp 10.0.2.104 54523 -> 109.91.102.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:55.139980 0.164814 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:56.141528 0.000000 udp 10.0.2.104 54523 -> 5.15.140.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:09:57.142526 0.288099 udp 10.0.2.104 54523 <-> 123.0.101.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:58.144407 1.294418 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:09:59.135405 0.259192 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:00.137329 0.373256 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:01.138615 0.065361 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:02.140100 1.626400 udp 10.0.2.104 54523 <-> 95.160.231.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:03.141337 0.000000 udp 10.0.2.104 54523 -> 105.141.41.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:04.143101 0.397757 udp 10.0.2.104 54523 <-> 114.36.213.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:05.144647 0.188117 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:06.136190 0.000000 udp 10.0.2.104 54523 -> 24.244.127.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:06.796837 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:10:07.137078 0.156978 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:08.138363 0.097887 udp 10.0.2.104 54523 <-> 82.225.246.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:09.140274 0.158478 udp 10.0.2.104 54523 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:10.141359 1.002691 udp 10.0.2.104 54523 <-> 88.156.110.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:11.143071 0.298448 udp 10.0.2.104 54523 <-> 124.47.100.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:12.144011 0.178499 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:13.135531 0.154850 udp 10.0.2.104 54523 <-> 174.69.148.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:14.137581 0.354701 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:15.138885 0.159363 udp 10.0.2.104 54523 <-> 98.193.225.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:16.140011 0.299088 udp 10.0.2.104 54523 <-> 27.143.12.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:17.141701 0.070713 udp 10.0.2.104 54523 <-> 213.141.44.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:18.143174 0.140813 udp 10.0.2.104 54523 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:19.144741 0.350398 udp 10.0.2.104 54523 <-> 183.179.24.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:20.136163 0.446895 udp 10.0.2.104 54523 <-> 117.221.44.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:21.137307 0.324436 udp 10.0.2.104 54523 <-> 218.149.5.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:22.138501 0.357500 udp 10.0.2.104 54523 <-> 61.64.24.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:23.140059 0.115932 udp 10.0.2.104 54523 <-> 24.122.251.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:24.141793 0.354410 udp 10.0.2.104 54523 <-> 111.250.238.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:25.142869 0.298393 udp 10.0.2.104 54523 <-> 126.117.114.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:26.144832 0.309329 udp 10.0.2.104 54523 <-> 201.209.173.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:27.136319 0.574603 udp 10.0.2.104 54523 <-> 117.201.119.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:28.137206 0.322158 udp 10.0.2.104 54523 <-> 61.46.55.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:29.138419 0.247626 udp 10.0.2.104 54523 <-> 75.177.1.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:30.140323 0.053705 udp 10.0.2.104 54523 <-> 88.165.10.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:31.141304 3.996457 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:32.142772 0.332494 udp 10.0.2.104 54523 <-> 111.118.28.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:33.144379 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:34.135779 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:36.140420 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:37.140535 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:38.141826 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:39.143025 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:41.136349 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:42.137305 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:43.138970 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:44.140167 4.997091 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:45.141606 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:46.143047 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:46.143106 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:10:47.144346 2.994745 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:48.136089 0.413230 udp 10.0.2.104 54523 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:10:51.140264 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:52.141499 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:53.143424 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:53.794237 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:10:54.135000 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:55.136055 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:56.137249 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:57.138955 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:58.140678 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:10:59.142240 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:00.143357 0.000078 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:00.143435 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:11:01.135128 4.005271 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:02.136567 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:03.137338 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:04.138949 0.338877 udp 10.0.2.104 54523 <-> 61.213.25.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:06.141877 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:07.143272 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:08.135155 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:09.136446 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:10.137419 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:11.138971 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:12.140858 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:13.142249 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:13.142360 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:11:14.143495 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:16.136280 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:17.137488 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:18.139251 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:19.140956 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:20.142172 0.171437 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:21.143374 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:22.134605 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:23.136066 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:24.137539 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:25.139613 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:26.140613 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:27.142263 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:28.143730 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:28.143807 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:11:29.134737 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:30.136228 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:32.139838 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:33.140705 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:34.142530 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:35.143439 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:36.135057 0.179711 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:37.136504 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:38.138337 0.000000 udp 10.0.2.104 54523 -> 88.165.10.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:39.139159 0.534108 udp 10.0.2.104 54523 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:40.140532 1.970384 udp 10.0.2.104 54523 <-> 103.245.106.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:40.801425 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:11:41.142291 0.307639 udp 10.0.2.104 54523 <-> 27.143.12.38 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:42.144026 0.281288 udp 10.0.2.104 54523 <-> 186.15.149.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:43.134942 0.054956 udp 10.0.2.104 54523 <-> 5.12.105.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:44.136941 0.291181 udp 10.0.2.104 54523 <-> 27.140.6.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:45.138342 0.255468 udp 10.0.2.104 54523 <-> 74.61.169.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:46.139206 0.133871 udp 10.0.2.104 54523 <-> 173.81.25.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:47.140970 0.324682 udp 10.0.2.104 54523 <-> 211.105.97.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:48.142019 0.000000 udp 10.0.2.104 54523 -> 172.190.24.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:49.143793 0.000000 udp 10.0.2.104 54523 -> 117.217.5.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:50.135089 0.129102 udp 10.0.2.104 54523 <-> 5.25.135.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:51.136562 0.177459 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:52.138127 0.826476 udp 10.0.2.104 54523 <-> 114.47.107.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:53.139595 0.326693 udp 10.0.2.104 54523 <-> 112.170.227.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:54.140821 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:55.142459 0.235626 udp 10.0.2.104 54523 <-> 96.247.124.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:56.143755 0.157296 udp 10.0.2.104 54523 <-> 184.88.251.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:57.134965 0.049265 udp 10.0.2.104 54523 <-> 188.230.39.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:11:58.136565 0.000000 udp 10.0.2.104 54523 -> 62.68.100.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:11:59.138017 0.332347 udp 10.0.2.104 54523 <-> 180.220.131.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:00.139838 0.000000 udp 10.0.2.104 54523 -> 82.253.240.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:01.141310 0.451440 udp 10.0.2.104 54523 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:02.142183 0.000000 udp 10.0.2.104 54523 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:03.144147 3.057318 udp 10.0.2.104 54523 <-> 89.146.169.221 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:04.135482 0.092275 udp 10.0.2.104 54523 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:05.136714 0.000000 udp 10.0.2.104 54523 -> 2.180.94.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:07.139350 0.865878 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:08.141371 0.408274 udp 10.0.2.104 54523 <-> 27.3.158.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:09.142800 0.152468 udp 10.0.2.104 54523 <-> 71.88.178.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:10.144033 0.037457 udp 10.0.2.104 54523 <-> 81.161.245.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:11.135507 0.503204 udp 10.0.2.104 54523 <-> 117.221.65.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:12.137157 0.325509 udp 10.0.2.104 54523 <-> 202.163.182.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:13.138145 0.338943 udp 10.0.2.104 54523 <-> 219.19.32.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:14.140027 0.000000 udp 10.0.2.104 54523 -> 212.98.191.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:15.141331 2.478588 udp 10.0.2.104 54523 <-> 95.158.96.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:16.142467 0.258067 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:17.144165 0.062814 udp 10.0.2.104 54523 <-> 81.230.67.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:18.135712 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:19.136770 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:20.138295 0.135604 udp 10.0.2.104 54523 <-> 74.88.126.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:21.139934 4.997357 udp 10.0.2.104 54523 -> 24.51.58.197 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:22.141051 0.000000 udp 10.0.2.104 54523 -> 91.105.12.196 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:23.142684 0.294051 udp 10.0.2.104 54523 -> 126.28.116.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:23.436735 0.000000 icmp 126.28.116.194 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:12:24.086254 3.001859 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:12:24.144264 0.000000 udp 10.0.2.104 54523 -> 124.123.172.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:25.135747 0.209427 udp 10.0.2.104 54523 <-> 67.183.71.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:27.138287 0.074156 udp 10.0.2.104 54523 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:27.801707 0.000036 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:12:28.139543 0.073111 udp 10.0.2.104 54523 <-> 82.130.204.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:29.141107 0.144239 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:30.142411 2.449115 udp 10.0.2.104 54523 <-> 94.55.168.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:31.094405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:12:31.143840 0.000000 udp 10.0.2.104 54523 -> 87.66.21.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:32.135404 0.059796 udp 10.0.2.104 54523 <-> 213.37.230.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:33.138302 0.167872 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:34.138203 0.223275 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:35.139792 0.451870 udp 10.0.2.104 54523 <-> 89.126.96.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:36.141166 0.000000 udp 10.0.2.104 54523 -> 188.218.240.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:37.143073 0.156571 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:38.143938 0.042693 udp 10.0.2.104 54523 <-> 89.68.6.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:39.095394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:12:39.135780 0.042839 udp 10.0.2.104 54523 <-> 87.188.164.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:40.137443 0.158331 udp 10.0.2.104 54523 <-> 75.133.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:41.138711 0.000000 udp 10.0.2.104 54523 -> 188.254.207.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:42.139987 0.049892 udp 10.0.2.104 54523 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:43.141727 0.294765 udp 10.0.2.104 54523 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:44.142855 0.000000 udp 10.0.2.104 54523 -> 75.197.131.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:45.144380 0.303675 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:46.135503 0.182519 udp 10.0.2.104 54523 <-> 111.91.64.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:47.136849 0.000000 udp 10.0.2.104 54523 -> 31.18.241.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:48.139010 0.187994 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:49.140186 0.130346 udp 10.0.2.104 54523 <-> 98.204.116.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:50.141374 0.213560 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:51.143306 0.316344 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:52.144673 3.083839 udp 10.0.2.104 54523 <-> 72.59.246.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:53.135903 0.057387 udp 10.0.2.104 54523 <-> 91.210.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:54.137304 0.000000 udp 10.0.2.104 54523 -> 188.2.254.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:55.098343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:12:55.138466 0.612118 udp 10.0.2.104 54523 <-> 113.193.43.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:56.140568 0.000000 udp 10.0.2.104 54523 -> 180.215.222.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:12:57.141900 0.147666 udp 10.0.2.104 54523 <-> 69.244.114.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:58.142886 0.268015 udp 10.0.2.104 54523 <-> 190.18.154.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:12:59.144610 0.000000 udp 10.0.2.104 54523 -> 79.112.79.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:00.136101 0.035835 udp 10.0.2.104 54523 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:01.137309 0.168496 udp 10.0.2.104 54523 <-> 74.192.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:02.138391 0.071124 udp 10.0.2.104 54523 <-> 88.165.10.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:03.140317 0.000000 udp 10.0.2.104 54523 -> 67.184.116.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:04.141998 0.183181 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:05.143083 3.151856 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:06.144500 0.341042 udp 10.0.2.104 54523 <-> 111.252.46.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:07.135639 0.072133 udp 10.0.2.104 54523 <-> 85.86.237.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:09.139162 0.805368 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:10.140237 0.417519 udp 10.0.2.104 54523 <-> 175.215.45.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:11.141736 0.083963 udp 10.0.2.104 54523 <-> 95.86.87.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:12.143083 0.048231 udp 10.0.2.104 54523 <-> 85.196.245.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:13.144875 0.058383 udp 10.0.2.104 54523 <-> 79.118.193.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:14.135718 0.058380 udp 10.0.2.104 54523 <-> 78.154.168.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:14.796783 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:13:15.137323 0.000000 udp 10.0.2.104 54523 -> 89.144.132.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:16.139186 0.293083 udp 10.0.2.104 54523 <-> 181.118.76.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:17.140362 0.225313 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:18.141472 0.000000 udp 10.0.2.104 54523 -> 115.241.239.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:19.143404 0.020994 udp 10.0.2.104 54523 <-> 178.200.244.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:20.144299 0.329607 udp 10.0.2.104 54523 <-> 218.216.247.210 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:21.136282 0.000000 udp 10.0.2.104 54523 -> 99.28.86.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:22.137345 0.388182 udp 10.0.2.104 54523 <-> 211.109.254.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:23.139183 0.185838 udp 10.0.2.104 54523 <-> 207.160.47.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:24.140325 0.000000 udp 10.0.2.104 54523 -> 38.127.146.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:25.141537 0.000000 udp 10.0.2.104 54523 -> 190.16.162.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:26.143075 0.000000 udp 10.0.2.104 54523 -> 190.139.224.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:27.104808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:13:27.134933 0.067535 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:28.135785 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:29.137214 0.000000 udp 10.0.2.104 54523 -> 87.19.151.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:30.139273 0.234136 udp 10.0.2.104 54523 <-> 74.220.242.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:31.140819 0.328931 udp 10.0.2.104 54523 <-> 219.114.23.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:32.142248 0.169413 udp 10.0.2.104 54523 <-> 142.217.34.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:33.143277 0.000000 udp 10.0.2.104 54523 -> 24.151.188.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:34.134859 0.445555 udp 10.0.2.104 54523 <-> 123.248.233.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:35.135892 0.160897 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:36.138120 0.326736 udp 10.0.2.104 54523 <-> 119.47.16.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:37.138967 0.585670 udp 10.0.2.104 54523 <-> 115.241.229.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:38.140398 0.059291 udp 10.0.2.104 54523 <-> 79.118.193.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:39.141610 0.000000 udp 10.0.2.104 54523 -> 67.206.83.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:40.143276 0.053352 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:41.134868 0.311895 udp 10.0.2.104 54523 <-> 190.73.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:42.136615 0.297988 udp 10.0.2.104 54523 <-> 181.118.76.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:43.137604 0.000000 udp 10.0.2.104 54523 -> 201.241.29.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:44.138818 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:45.140541 0.403161 udp 10.0.2.104 54523 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:46.142317 0.053035 udp 10.0.2.104 54523 <-> 88.165.10.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:47.143412 0.000000 udp 10.0.2.104 54523 -> 202.67.43.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:48.134722 0.051594 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:49.136690 0.200950 udp 10.0.2.104 54523 <-> 70.70.162.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:50.137797 0.046959 udp 10.0.2.104 54523 <-> 178.148.187.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:51.139221 0.313884 udp 10.0.2.104 54523 <-> 183.87.72.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:52.140862 0.148296 udp 10.0.2.104 54523 <-> 66.57.113.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:53.142409 0.049731 udp 10.0.2.104 54523 <-> 5.14.212.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:54.143588 0.141346 udp 10.0.2.104 54523 <-> 67.83.216.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:55.134594 0.000000 udp 10.0.2.104 54523 -> 36.233.146.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:13:56.136648 0.410702 udp 10.0.2.104 54523 <-> 180.71.25.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:57.138196 0.358179 udp 10.0.2.104 54523 <-> 49.159.65.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:58.139357 0.172795 udp 10.0.2.104 54523 <-> 23.25.165.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:13:59.140664 0.252085 udp 10.0.2.104 54523 <-> 99.206.80.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:00.142111 0.553597 udp 10.0.2.104 54523 <-> 117.217.187.95 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:01.143805 0.121410 udp 10.0.2.104 54523 <-> 67.197.193.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:01.794579 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:14:02.134987 0.323730 udp 10.0.2.104 54523 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:03.136881 0.363415 udp 10.0.2.104 54523 <-> 1.165.130.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:04.137919 0.040673 udp 10.0.2.104 54523 <-> 62.107.91.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:05.139441 0.000000 udp 10.0.2.104 54523 -> 60.62.114.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:06.140441 0.074477 udp 10.0.2.104 54523 <-> 82.130.204.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:07.142613 0.000000 udp 10.0.2.104 54523 -> 1.172.71.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:08.143729 0.158528 udp 10.0.2.104 54523 <-> 96.20.172.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:09.135125 0.000000 udp 10.0.2.104 54523 -> 115.241.197.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:10.136360 0.166898 udp 10.0.2.104 54523 <-> 87.171.42.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:11.137635 0.284480 udp 10.0.2.104 54523 <-> 27.140.6.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:12.139145 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:13.140837 0.281448 udp 10.0.2.104 54523 <-> 77.120.43.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:14.142279 0.065014 udp 10.0.2.104 54523 <-> 46.57.73.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:15.143836 0.309843 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:16.134783 1.145838 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:17.136954 0.066713 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:18.138083 0.176124 udp 10.0.2.104 54523 <-> 85.15.110.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:19.139715 1.906060 udp 10.0.2.104 54523 <-> 218.252.77.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:20.140747 0.293692 udp 10.0.2.104 54523 <-> 190.47.156.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:21.142102 0.159121 udp 10.0.2.104 54523 <-> 151.73.140.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:22.143441 0.316172 udp 10.0.2.104 54523 <-> 219.106.142.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:23.135435 0.000000 udp 10.0.2.104 54523 -> 94.47.18.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:24.137162 0.160645 udp 10.0.2.104 54523 <-> 98.163.239.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:25.138052 0.000000 udp 10.0.2.104 54523 -> 81.227.139.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:26.139741 0.040840 udp 10.0.2.104 54523 <-> 78.72.229.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:27.141082 0.079938 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:28.142566 0.173588 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:29.144001 0.402523 udp 10.0.2.104 54523 <-> 121.167.236.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:30.135702 0.373205 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:31.136960 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:32.137889 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:33.139379 0.094638 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:34.141225 2.318542 udp 10.0.2.104 54523 <-> 190.75.86.241 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:35.142247 3.455266 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:37.135484 0.000000 udp 10.0.2.104 54523 -> 14.96.36.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:39.138045 0.000000 udp 10.0.2.104 54523 -> 195.174.174.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:40.139696 0.000000 udp 10.0.2.104 54523 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:41.140928 0.823156 udp 10.0.2.104 54523 <-> 14.99.213.24 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:42.142748 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:43.144159 0.000000 udp 10.0.2.104 54523 -> 115.242.153.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:44.135612 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:45.136679 0.063975 udp 10.0.2.104 54523 <-> 94.42.125.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:46.137974 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:47.139711 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:48.141209 0.268019 udp 10.0.2.104 54523 <-> 186.94.17.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:48.801709 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:14:49.142280 0.000000 udp 10.0.2.104 54523 -> 195.145.36.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:50.143915 0.390249 udp 10.0.2.104 54523 <-> 115.242.153.78 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:51.135403 0.319645 udp 10.0.2.104 54523 <-> 75.228.79.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:52.136898 0.000000 udp 10.0.2.104 54523 -> 24.164.171.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:53.138491 1.771466 udp 10.0.2.104 54523 <-> 113.193.84.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:54.139571 0.025971 udp 10.0.2.104 54523 <-> 213.109.121.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:14:55.141155 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:56.142709 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:57.143763 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:58.135178 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:14:59.136732 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:00.138236 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:01.139907 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:02.141454 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:02.141562 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:15:03.142565 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:04.144113 0.406595 udp 10.0.2.104 54523 <-> 27.3.107.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:05.135274 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:06.137152 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:07.138219 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:08.139638 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:09.141527 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:10.142967 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:11.143937 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:11.144000 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:15:12.135975 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:13.137066 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:14.138305 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:15.140181 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:17.142718 0.327749 udp 10.0.2.104 54523 <-> 115.242.153.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:18.144299 0.000000 udp 10.0.2.104 54523 -> 181.167.4.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:19.135425 0.065742 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:20.137039 0.297345 udp 10.0.2.104 54523 <-> 121.103.168.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:21.138702 0.285938 udp 10.0.2.104 54523 <-> 210.1.173.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:22.140094 0.396137 udp 10.0.2.104 54523 <-> 27.3.107.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:23.141365 0.368525 udp 10.0.2.104 54523 <-> 36.232.100.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:24.143270 0.137707 udp 10.0.2.104 54523 <-> 24.91.138.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:25.144144 0.028398 udp 10.0.2.104 54523 <-> 95.111.26.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:26.135756 0.337188 udp 10.0.2.104 54523 <-> 58.115.17.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:27.137328 0.306923 udp 10.0.2.104 54523 <-> 14.36.40.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:28.138754 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:29.140602 0.340921 udp 10.0.2.104 54523 <-> 116.32.104.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:30.141329 0.122647 udp 10.0.2.104 54523 <-> 151.28.138.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:31.143233 0.136942 udp 10.0.2.104 54523 <-> 103.8.164.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:32.144656 0.393584 udp 10.0.2.104 54523 <-> 61.224.55.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:33.135697 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:34.137197 0.172786 udp 10.0.2.104 54523 -> 97.85.164.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:15:34.309983 0.000000 icmp 97.85.164.2 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:15:35.138415 0.040532 udp 10.0.2.104 54523 <-> 195.178.240.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:35.799625 0.000160 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:15:36.139831 0.045682 udp 10.0.2.104 54523 <-> 94.26.34.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:37.141876 0.320911 udp 10.0.2.104 54523 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:38.143146 0.232673 udp 10.0.2.104 54523 <-> 201.211.130.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:39.144551 0.058731 udp 10.0.2.104 54523 <-> 89.40.194.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:40.135860 0.286878 udp 10.0.2.104 54523 <-> 200.171.250.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:41.137004 0.397912 udp 10.0.2.104 54523 <-> 124.187.173.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:42.138673 0.421833 udp 10.0.2.104 54523 <-> 211.209.63.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:43.140430 0.020255 udp 10.0.2.104 54523 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:44.141718 0.205032 udp 10.0.2.104 54523 <-> 46.249.179.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:45.143216 0.204513 udp 10.0.2.104 54523 <-> 98.232.131.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:46.144418 0.036709 udp 10.0.2.104 54523 <-> 81.161.245.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:47.135791 1.221917 udp 10.0.2.104 54523 <-> 113.193.69.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:48.137316 0.381836 udp 10.0.2.104 54523 <-> 111.242.160.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:49.138524 0.097166 udp 10.0.2.104 54523 <-> 151.74.245.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:50.140117 0.347014 udp 10.0.2.104 54523 <-> 122.121.39.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:51.141469 0.153247 udp 10.0.2.104 54523 <-> 24.179.39.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:52.143687 0.344911 udp 10.0.2.104 54523 <-> 114.24.22.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:53.144609 0.047642 udp 10.0.2.104 54523 <-> 5.14.105.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:54.136315 0.071752 udp 10.0.2.104 54523 <-> 178.158.56.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:55.137211 0.152445 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:56.138763 0.316559 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:57.140384 0.180860 udp 10.0.2.104 54523 <-> 76.107.51.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:58.142126 2.056451 udp 10.0.2.104 54523 <-> 188.187.32.216 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:15:59.143459 0.151014 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:01.136251 2.157967 udp 10.0.2.104 54523 <-> 103.245.106.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:02.137262 0.000000 udp 10.0.2.104 54523 -> 5.146.110.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:03.138746 0.272046 udp 10.0.2.104 54523 <-> 201.80.112.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:04.140608 0.204854 udp 10.0.2.104 54523 <-> 142.129.132.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:05.142034 0.148588 udp 10.0.2.104 54523 <-> 76.11.73.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:06.143241 0.107441 udp 10.0.2.104 54523 <-> 178.120.214.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:07.134544 1.159354 udp 10.0.2.104 54523 <-> 1.186.125.198 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:09.137828 0.151244 udp 10.0.2.104 54523 <-> 24.236.248.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:10.138969 0.144385 udp 10.0.2.104 54523 <-> 24.215.93.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:11.140768 2.993815 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:12.141620 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:13.143206 0.420641 udp 10.0.2.104 54523 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:15.136529 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:16.137537 0.185142 udp 10.0.2.104 54523 <-> 65.24.129.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:17.139347 0.000000 udp 10.0.2.104 54523 -> 77.232.161.142 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:18.140235 0.101694 udp 10.0.2.104 54523 <-> 79.109.136.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:19.141860 0.413735 udp 10.0.2.104 54523 <-> 118.219.133.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:20.143110 0.080041 udp 10.0.2.104 54523 <-> 82.61.20.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:21.135224 0.000000 udp 10.0.2.104 54523 -> 207.42.135.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:22.136654 0.149490 udp 10.0.2.104 54523 <-> 188.58.191.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:22.797159 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:16:23.137458 0.000000 udp 10.0.2.104 54523 -> 60.36.54.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:24.139106 0.274554 udp 10.0.2.104 54523 <-> 14.97.60.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:25.140795 0.191028 udp 10.0.2.104 54523 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:26.142266 0.000000 udp 10.0.2.104 54523 -> 123.219.23.196 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:27.143615 0.343962 udp 10.0.2.104 54523 <-> 82.59.56.229 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:28.135082 0.058526 udp 10.0.2.104 54523 <-> 89.32.153.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:29.136015 0.139207 udp 10.0.2.104 54523 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:30.137558 0.321846 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:31.139151 0.153932 udp 10.0.2.104 54523 <-> 24.101.81.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:32.140523 0.421409 udp 10.0.2.104 54523 <-> 211.209.63.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:33.141780 0.153890 udp 10.0.2.104 54523 <-> 216.81.125.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:34.143778 0.482770 udp 10.0.2.104 54523 <-> 187.69.16.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:35.134656 0.309330 udp 10.0.2.104 54523 <-> 72.59.246.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:36.136452 0.461279 udp 10.0.2.104 54523 <-> 98.69.141.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:37.138014 0.000000 udp 10.0.2.104 54523 -> 70.60.118.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:38.139716 0.070485 udp 10.0.2.104 54523 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:39.140985 0.041924 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:40.142349 0.152330 udp 10.0.2.104 54523 <-> 64.53.138.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:41.143491 0.388549 udp 10.0.2.104 54523 <-> 177.29.103.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:42.135609 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:43.136693 0.083894 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:44.137847 0.340410 udp 10.0.2.104 54523 <-> 111.242.143.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:45.139180 0.286207 udp 10.0.2.104 54523 <-> 125.197.194.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:46.140713 0.000000 udp 10.0.2.104 54523 -> 91.191.58.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:47.142474 0.405719 udp 10.0.2.104 54523 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:48.144069 0.083631 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:49.134889 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:50.136283 0.069394 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:51.138402 0.151245 udp 10.0.2.104 54523 <-> 173.24.11.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:52.139334 0.138896 udp 10.0.2.104 54523 <-> 69.206.137.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:53.141002 0.167915 udp 10.0.2.104 54523 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:54.142329 0.000000 udp 10.0.2.104 54523 -> 37.145.43.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:55.143891 0.000000 udp 10.0.2.104 54523 -> 106.206.47.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:16:56.134990 0.299400 udp 10.0.2.104 54523 <-> 14.97.23.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:57.136824 0.339866 udp 10.0.2.104 54523 <-> 177.119.254.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:58.138266 0.334697 udp 10.0.2.104 54523 <-> 112.169.196.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:16:59.139185 0.160410 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:00.141150 0.147751 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:01.142365 0.378272 udp 10.0.2.104 54523 <-> 117.206.117.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:02.143922 0.000000 udp 10.0.2.104 54523 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:17:03.135407 0.357866 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:04.137060 0.215205 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:05.138145 0.287698 udp 10.0.2.104 54523 <-> 187.39.75.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:06.139601 0.223733 udp 10.0.2.104 54523 <-> 68.185.37.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:07.140902 0.816348 udp 10.0.2.104 54523 <-> 27.106.27.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:08.142288 0.137972 udp 10.0.2.104 54523 <-> 79.51.215.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:09.143575 1.808435 udp 10.0.2.104 54523 <-> 183.73.33.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:09.795094 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:17:10.135677 0.043665 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:11.136799 0.399532 udp 10.0.2.104 54523 <-> 218.238.158.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:12.138556 0.000000 udp 10.0.2.104 54523 -> 116.73.113.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:17:13.139620 0.346285 udp 10.0.2.104 54523 <-> 117.216.179.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:14.141529 0.663647 udp 10.0.2.104 54523 <-> 85.84.80.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:15.142540 0.158263 udp 10.0.2.104 54523 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:16.144506 0.990906 udp 10.0.2.104 54523 <-> 97.69.173.196 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:18.137121 0.040403 udp 10.0.2.104 54523 <-> 5.15.140.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:19.138365 0.051667 udp 10.0.2.104 54523 <-> 84.54.174.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:20.139911 2.060917 udp 10.0.2.104 54523 <-> 5.12.105.68 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:21.141248 0.540608 udp 10.0.2.104 54523 <-> 68.35.232.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:23.143992 0.105913 udp 10.0.2.104 54523 <-> 62.57.203.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:24.135979 0.292953 udp 10.0.2.104 54523 <-> 189.68.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:25.136704 0.038017 udp 10.0.2.104 54523 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:26.138298 0.050620 udp 10.0.2.104 54523 <-> 212.83.78.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:27.139434 1.686166 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:28.141075 0.303626 udp 10.0.2.104 54523 <-> 59.146.149.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:29.142935 0.040246 udp 10.0.2.104 54523 <-> 89.215.64.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:30.143904 0.049096 udp 10.0.2.104 54523 <-> 188.230.39.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:31.135607 3.004244 udp 10.0.2.104 54523 -> 14.98.76.75 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:17:32.136788 0.000000 udp 10.0.2.104 54523 -> 31.185.113.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:17:33.138576 0.186441 udp 10.0.2.104 54523 <-> 128.218.187.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:35.141717 0.284261 udp 10.0.2.104 54523 <-> 115.242.50.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:36.142563 0.044624 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:37.144286 0.152851 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:38.135250 0.146826 udp 10.0.2.104 54523 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:39.137353 0.341598 udp 10.0.2.104 54523 <-> 111.254.158.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:40.138225 0.644517 udp 10.0.2.104 54523 <-> 190.142.155.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:41.139732 0.087461 udp 10.0.2.104 54523 <-> 213.231.117.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:42.141558 0.505701 udp 10.0.2.104 54523 <-> 31.147.115.164 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:43.142529 0.288256 udp 10.0.2.104 54523 <-> 177.21.225.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:44.143908 0.313455 udp 10.0.2.104 54523 <-> 121.171.242.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:45.135339 0.000000 udp 10.0.2.104 54523 -> 36.70.191.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:17:46.136772 0.314012 udp 10.0.2.104 54523 <-> 14.36.40.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:47.138488 0.370168 udp 10.0.2.104 54523 <-> 180.94.163.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:48.139789 0.348513 udp 10.0.2.104 54523 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:49.141278 0.275924 udp 10.0.2.104 54523 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:50.142779 0.392322 udp 10.0.2.104 54523 <-> 118.160.212.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:51.144269 0.000000 udp 10.0.2.104 54523 -> 111.254.141.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:17:52.135620 0.000000 udp 10.0.2.104 54523 -> 91.105.12.196 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:17:53.137567 0.150245 udp 10.0.2.104 54523 <-> 27.106.32.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:54.138981 0.311373 udp 10.0.2.104 54523 <-> 27.127.165.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:55.140079 0.000000 udp 10.0.2.104 54523 -> 190.207.157.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:17:56.141675 0.146219 udp 10.0.2.104 54523 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:56.802601 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:17:57.142926 0.073557 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:58.144304 0.147007 udp 10.0.2.104 54523 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:17:59.135437 0.400742 udp 10.0.2.104 54523 <-> 27.6.140.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:00.137611 0.264004 udp 10.0.2.104 54523 <-> 99.206.80.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:01.138588 0.000000 udp 10.0.2.104 54523 -> 197.7.69.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:02.139956 0.328500 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:03.141425 0.214631 udp 10.0.2.104 54523 <-> 124.125.249.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:04.142970 0.078635 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:05.144247 0.331496 udp 10.0.2.104 54523 <-> 112.170.231.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:06.135770 2.282674 udp 10.0.2.104 54523 <-> 177.192.192.191 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:07.137012 0.512858 udp 10.0.2.104 54523 <-> 58.71.93.194 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:09.139805 0.460009 udp 10.0.2.104 54523 <-> 183.73.113.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:10.141404 0.310549 udp 10.0.2.104 54523 <-> 121.171.242.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:11.143058 0.298596 udp 10.0.2.104 54523 <-> 189.47.93.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:12.144426 0.226640 udp 10.0.2.104 54523 <-> 190.73.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:13.135640 0.060345 udp 10.0.2.104 54523 <-> 86.124.224.24 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:14.136986 0.047198 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:15.138607 0.121117 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:16.140268 2.003666 udp 10.0.2.104 54523 <-> 181.208.87.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:17.142019 0.000000 udp 10.0.2.104 54523 -> 178.89.70.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:18.142856 0.082898 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:19.144817 0.047294 udp 10.0.2.104 54523 <-> 79.101.3.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:20.136281 0.191101 udp 10.0.2.104 54523 <-> 174.48.245.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:21.137208 0.050200 udp 10.0.2.104 54523 <-> 95.180.246.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:22.139081 0.414034 udp 10.0.2.104 54523 <-> 61.224.15.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:23.140736 0.167763 udp 10.0.2.104 54523 <-> 67.11.181.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:24.142065 0.158080 udp 10.0.2.104 54523 <-> 66.176.196.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:25.143349 0.047560 udp 10.0.2.104 54523 <-> 80.80.41.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:26.144499 0.048065 udp 10.0.2.104 54523 <-> 178.19.29.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:27.135989 0.089265 udp 10.0.2.104 54523 <-> 188.94.82.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:28.137148 1.469003 udp 10.0.2.104 54523 <-> 84.132.83.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:29.138891 0.285236 udp 10.0.2.104 54523 <-> 60.62.152.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:30.140384 0.051629 udp 10.0.2.104 54523 <-> 188.24.204.178 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:31.141517 0.181391 udp 10.0.2.104 54523 <-> 79.23.235.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:32.143483 0.067591 udp 10.0.2.104 54523 <-> 2.228.29.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:33.134547 1.635562 udp 10.0.2.104 54523 <-> 177.191.57.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:34.136085 0.675002 udp 10.0.2.104 54523 <-> 117.214.218.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:35.137822 0.000000 udp 10.0.2.104 54523 -> 14.97.33.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:36.138743 0.155672 udp 10.0.2.104 54523 <-> 71.205.244.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:37.140556 1.012272 udp 10.0.2.104 54523 <-> 181.29.186.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:38.141685 0.063754 udp 10.0.2.104 54523 <-> 85.66.114.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:39.143380 0.141042 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:40.135005 0.636031 udp 10.0.2.104 54523 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:41.135805 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:42.138057 0.179834 udp 10.0.2.104 54523 <-> 42.201.183.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:43.138995 0.153492 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:43.800200 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:18:44.140846 0.138333 udp 10.0.2.104 54523 <-> 24.149.57.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:45.142004 0.139480 udp 10.0.2.104 54523 <-> 24.193.122.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:46.143020 1.055410 udp 10.0.2.104 54523 <-> 84.55.13.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:48.136155 0.033412 udp 10.0.2.104 54523 <-> 151.100.96.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:49.137310 0.207803 udp 10.0.2.104 54523 <-> 103.18.170.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:50.138763 0.000000 udp 10.0.2.104 54523 -> 180.215.148.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:51.140708 0.000000 udp 10.0.2.104 54523 -> 200.82.169.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:52.141878 0.000000 udp 10.0.2.104 54523 -> 190.206.94.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:53.143599 0.036336 udp 10.0.2.104 54523 <-> 81.226.88.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:54.134712 0.360245 udp 10.0.2.104 54523 <-> 114.41.96.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:55.136517 0.044886 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:56.137593 1.899334 udp 10.0.2.104 54523 <-> 115.240.45.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:18:57.139112 0.000000 udp 10.0.2.104 54523 -> 24.215.75.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:58.140899 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:18:59.141768 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:00.143822 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:01.134727 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:02.136290 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:03.137992 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:04.139554 0.000000 udp 10.0.2.104 54523 -> 115.240.45.11 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:05.140334 0.084029 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:06.141768 0.000150 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:06.141918 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:19:07.143965 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:08.134906 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:09.136424 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:10.137576 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:11.139442 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:12.140529 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:13.142264 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:14.143644 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:15.135248 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:16.136715 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:17.138150 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:18.139732 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:20.142519 4.996848 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:21.143605 3.038949 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:22.134883 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:23.136176 0.199612 udp 10.0.2.104 54523 <-> 178.89.70.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:25.287216 0.000000 udp 10.0.2.104 54523 <- 50.167.134.18 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:26.140836 0.000000 udp 10.0.2.104 54523 -> 24.215.75.81 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:27.142240 0.083843 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:28.144160 0.366810 udp 10.0.2.104 54523 <-> 114.41.96.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:29.135289 0.362374 udp 10.0.2.104 54523 <-> 61.221.222.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:30.136249 0.291322 udp 10.0.2.104 54523 <-> 201.13.188.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:30.798011 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:19:31.111446 3.000679 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:19:31.138193 0.086362 udp 10.0.2.104 54523 <-> 109.53.205.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:32.139620 0.267376 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:33.140577 0.268673 udp 10.0.2.104 54523 <-> 177.182.184.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:34.142259 0.000000 udp 10.0.2.104 54523 -> 195.174.108.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:35.143470 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:36.135283 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:38.118001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:19:38.138070 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:39.139435 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:40.140931 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:41.142339 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:42.143544 0.000128 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:42.143672 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:19:43.135458 0.034367 udp 10.0.2.104 54523 <-> 81.98.10.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:44.136869 0.175128 udp 10.0.2.104 54523 <-> 183.87.170.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:45.138112 0.028918 udp 10.0.2.104 54523 <-> 46.108.106.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:46.119277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:19:46.139344 2.168836 udp 10.0.2.104 54523 <-> 50.129.144.204 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:47.141483 0.312095 udp 10.0.2.104 54523 <-> 60.34.7.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:49.144208 0.368291 udp 10.0.2.104 54523 <-> 190.193.222.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:50.135501 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:51.137088 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:52.138540 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:53.139847 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:54.141378 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:55.142246 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:56.143738 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:57.135693 0.156021 udp 10.0.2.104 54523 <-> 209.33.13.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:19:58.136586 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:19:59.138385 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:00.139726 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:01.140964 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:02.122258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:20:02.142293 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:03.144406 0.823879 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:04.135275 0.295416 udp 10.0.2.104 54523 <-> 180.215.222.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:05.137151 0.000000 udp 10.0.2.104 54523 -> 67.165.135.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:06.138541 0.168504 udp 10.0.2.104 54523 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:08.141337 0.144457 udp 10.0.2.104 54523 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:09.142815 0.131767 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:10.144391 0.071245 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:11.135435 0.000000 udp 10.0.2.104 54523 -> 114.143.58.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:12.137074 0.045202 udp 10.0.2.104 54523 <-> 80.80.41.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:13.138765 0.186396 udp 10.0.2.104 54523 <-> 128.218.187.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:14.140336 0.038351 udp 10.0.2.104 54523 <-> 89.133.113.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:15.141206 0.097300 udp 10.0.2.104 54523 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:16.142590 0.000000 udp 10.0.2.104 54523 -> 130.83.54.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:17.144424 0.535780 udp 10.0.2.104 54523 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:17.795337 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:20:18.135661 0.043987 udp 10.0.2.104 54523 <-> 178.148.139.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:19.137091 0.000000 udp 10.0.2.104 54523 -> 61.231.38.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:20.138403 0.135016 udp 10.0.2.104 54523 <-> 24.75.177.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:21.140165 0.133796 udp 10.0.2.104 54523 <-> 24.147.124.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:22.141313 0.000000 udp 10.0.2.104 54523 -> 24.99.130.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:20:23.142498 0.154522 udp 10.0.2.104 54523 <-> 74.56.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:24.144701 0.344830 udp 10.0.2.104 54523 <-> 123.176.138.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:25.135862 3.064388 udp 10.0.2.104 54523 <-> 188.24.130.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:26.137023 0.348181 udp 10.0.2.104 54523 <-> 183.178.125.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:27.138273 0.060125 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:29.141417 0.742816 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:30.142621 0.154203 udp 10.0.2.104 54523 <-> 70.80.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:31.144706 0.400533 udp 10.0.2.104 54523 <-> 175.193.245.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:32.135998 0.309045 udp 10.0.2.104 54523 <-> 61.24.54.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:33.137146 0.151164 udp 10.0.2.104 54523 <-> 184.162.123.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:34.128597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:20:34.138557 0.138967 udp 10.0.2.104 54523 <-> 97.80.121.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:35.140488 2.002556 udp 10.0.2.104 54523 <-> 186.89.103.114 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:36.141887 0.068176 udp 10.0.2.104 54523 <-> 84.124.226.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:38.144046 0.140693 udp 10.0.2.104 54523 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:39.135684 0.951788 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:40.137096 0.185626 udp 10.0.2.104 54523 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:41.138740 0.160568 udp 10.0.2.104 54523 <-> 180.87.227.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:42.140063 0.158739 udp 10.0.2.104 54523 <-> 69.205.154.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:43.141909 0.253495 udp 10.0.2.104 54523 <-> 189.38.156.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:44.143253 0.342334 udp 10.0.2.104 54523 <-> 111.242.143.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:45.144562 0.049600 udp 10.0.2.104 54523 <-> 78.84.198.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:46.135992 0.176709 udp 10.0.2.104 54523 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:47.137587 0.721674 udp 10.0.2.104 54523 <-> 151.75.32.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:48.138834 3.038487 udp 10.0.2.104 54523 <-> 31.19.152.56 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:49.140076 0.055080 udp 10.0.2.104 54523 <-> 79.118.105.13 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:50.141477 0.145115 udp 10.0.2.104 54523 <-> 71.82.48.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:52.144655 0.150923 udp 10.0.2.104 54523 <-> 173.86.134.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:53.136035 0.305089 udp 10.0.2.104 54523 <-> 126.123.91.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:54.137331 0.048088 udp 10.0.2.104 54523 <-> 78.88.33.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:55.138757 0.150294 udp 10.0.2.104 54523 <-> 24.202.60.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:56.140766 0.159713 udp 10.0.2.104 54523 <-> 69.205.154.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:57.141573 3.022558 udp 10.0.2.104 54523 <-> 131.114.50.195 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:58.142912 0.179235 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:20:59.144539 0.312339 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:01.137325 0.023837 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:02.138698 0.155861 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:03.140716 0.043077 udp 10.0.2.104 54523 <-> 89.65.112.187 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:04.141830 0.060960 udp 10.0.2.104 54523 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:04.802657 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:21:05.143416 1.000845 udp 10.0.2.104 54523 <-> 77.21.184.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:06.134574 0.157638 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:07.136338 0.169402 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:08.137164 0.176732 udp 10.0.2.104 54523 <-> 68.88.77.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:09.139001 0.290171 udp 10.0.2.104 54523 <-> 116.80.242.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:10.140271 0.172552 udp 10.0.2.104 54523 <-> 184.48.243.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:11.142337 0.349025 udp 10.0.2.104 54523 <-> 119.193.20.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:12.143361 0.946633 udp 10.0.2.104 54523 <-> 14.98.237.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:13.135083 0.078775 udp 10.0.2.104 54523 <-> 87.171.42.174 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:14.135790 0.044491 udp 10.0.2.104 54523 <-> 188.25.86.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:15.137289 0.000000 udp 10.0.2.104 54523 -> 84.1.164.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:16.139141 0.000000 udp 10.0.2.104 54523 -> 82.59.115.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:17.140540 4.018546 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:18.141907 0.315090 udp 10.0.2.104 54523 <-> 12.205.55.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:19.143358 0.196696 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:20.135074 1.552364 udp 10.0.2.104 54523 <-> 190.36.115.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:22.137918 0.000000 udp 10.0.2.104 54523 -> 79.118.98.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:23.139300 0.000000 udp 10.0.2.104 54523 -> 217.217.198.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:24.140618 0.155998 udp 10.0.2.104 54523 <-> 65.27.180.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:25.142179 0.000000 udp 10.0.2.104 54523 -> 87.4.181.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:26.143609 0.000000 udp 10.0.2.104 54523 -> 178.35.247.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:27.134456 0.170000 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:28.135936 0.059222 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:29.137810 0.154721 udp 10.0.2.104 54523 <-> 184.91.17.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:30.139428 0.456995 udp 10.0.2.104 54523 <-> 218.227.129.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:31.140556 0.344848 udp 10.0.2.104 54523 <-> 220.246.178.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:32.141818 0.352979 udp 10.0.2.104 54523 <-> 59.102.161.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:33.143433 0.356992 udp 10.0.2.104 54523 <-> 218.35.15.88 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:34.134715 0.648814 udp 10.0.2.104 54523 <-> 221.45.162.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:35.136524 0.313520 udp 10.0.2.104 54523 <-> 119.193.20.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:36.137460 0.146037 udp 10.0.2.104 54523 <-> 98.236.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:37.139372 0.000000 udp 10.0.2.104 54523 -> 46.198.27.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:38.141012 0.421351 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:39.142143 0.175792 udp 10.0.2.104 54523 <-> 103.10.224.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:40.143713 0.048671 udp 10.0.2.104 54523 <-> 188.25.86.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:41.135241 0.000000 udp 10.0.2.104 54523 -> 105.235.44.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:42.136697 3.140709 udp 10.0.2.104 54523 <-> 65.96.181.232 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:43.137536 0.000000 udp 10.0.2.104 54523 -> 186.53.242.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:44.139631 0.438292 udp 10.0.2.104 54523 <-> 120.145.66.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:46.142574 1.294419 udp 10.0.2.104 54523 <-> 95.160.231.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:47.143773 0.049760 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:48.135025 0.136862 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:49.136125 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:49.847390 0.011338 udp 10.0.2.104 54551 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 04:21:49.859007 0.000000 udp 10.0.2.104 54552 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:50.137848 0.000000 udp 10.0.2.104 54523 -> 116.202.174.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:21:51.139373 0.139622 udp 10.0.2.104 54523 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:51.799896 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:21:52.140592 0.121970 udp 10.0.2.104 54523 <-> 24.36.117.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:53.142550 1.074396 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:55.134735 0.329427 udp 10.0.2.104 54523 <-> 153.135.216.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:56.136438 0.155454 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:57.137747 0.066748 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:58.139210 0.847745 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:21:59.141083 0.166690 udp 10.0.2.104 54523 <-> 74.77.171.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:00.142549 0.099433 udp 10.0.2.104 54523 <-> 137.99.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:01.143703 0.132723 udp 10.0.2.104 54523 <-> 75.109.118.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:02.134806 0.060523 udp 10.0.2.104 54523 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:03.136787 0.053869 udp 10.0.2.104 54523 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:04.138422 0.313267 udp 10.0.2.104 54523 <-> 111.184.101.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:05.139479 0.064182 udp 10.0.2.104 54523 <-> 176.101.9.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:06.140953 0.132027 udp 10.0.2.104 54523 <-> 64.53.47.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:07.142255 0.108852 udp 10.0.2.104 54523 <-> 178.122.146.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:08.144053 0.321576 udp 10.0.2.104 54523 <-> 121.84.135.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:09.134882 0.059479 udp 10.0.2.104 54523 <-> 178.172.251.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:10.136936 1.318715 udp 10.0.2.104 54523 <-> 84.132.83.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:11.138270 0.258570 udp 10.0.2.104 54523 <-> 117.197.209.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:12.139292 0.072346 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:13.141257 0.139827 udp 10.0.2.104 54523 <-> 65.189.203.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:14.142276 0.060465 udp 10.0.2.104 54523 <-> 88.72.244.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:15.143609 0.370284 udp 10.0.2.104 54523 <-> 123.195.44.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:16.135525 0.328478 udp 10.0.2.104 54523 <-> 187.15.187.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:17.137101 0.000000 udp 10.0.2.104 54523 -> 192.0.3.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:22:18.137901 0.163013 udp 10.0.2.104 54523 <-> 68.200.12.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:19.139312 0.600287 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:20.141031 0.130870 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:21.142247 0.313767 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:22.143741 0.159503 udp 10.0.2.104 54523 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:23.135387 0.086495 udp 10.0.2.104 54523 <-> 109.53.208.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:24.137148 2.394204 udp 10.0.2.104 54523 <-> 190.206.94.148 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:25.138411 1.688528 udp 10.0.2.104 54523 <-> 113.193.84.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:27.141417 2.002244 udp 10.0.2.104 54523 -> 180.215.92.106 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:22:28.142805 0.099542 udp 10.0.2.104 54523 <-> 137.99.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:30.135680 0.052558 udp 10.0.2.104 54523 <-> 78.60.103.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:31.136978 0.294963 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:32.138687 0.161978 udp 10.0.2.104 54523 <-> 98.163.239.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:33.139810 0.170727 udp 10.0.2.104 54523 <-> 50.123.134.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:34.141476 0.170320 udp 10.0.2.104 54523 <-> 174.59.123.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:35.142705 0.053774 udp 10.0.2.104 54523 <-> 85.187.232.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:36.144128 0.138252 udp 10.0.2.104 54523 <-> 68.197.117.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:37.135485 0.138439 udp 10.0.2.104 54523 <-> 98.103.10.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:38.136595 0.333279 udp 10.0.2.104 54523 <-> 177.107.236.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:38.797614 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:22:39.138633 0.576100 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:40.139779 0.000000 udp 10.0.2.104 54523 -> 123.195.44.85 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:22:41.141061 0.142828 udp 10.0.2.104 54523 <-> 62.18.227.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:42.142674 0.355446 udp 10.0.2.104 54523 <-> 114.158.112.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:43.144310 0.454662 udp 10.0.2.104 54523 <-> 218.37.235.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:44.135175 0.585083 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:45.137362 0.264096 udp 10.0.2.104 54523 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:46.138563 0.167260 udp 10.0.2.104 54523 <-> 108.183.39.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:47.139912 4.997021 udp 10.0.2.104 54523 -> 178.129.93.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:22:48.141037 0.000000 udp 10.0.2.104 54523 -> 178.89.70.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:22:49.142814 0.359188 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:50.144122 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:22:51.135777 0.152003 udp 10.0.2.104 54523 <-> 75.115.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:52.243753 0.000000 udp 10.0.2.104 54523 <- 178.129.93.2 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:22:53.138165 0.000000 udp 10.0.2.104 54523 -> 122.148.125.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:22:54.139657 0.173596 udp 10.0.2.104 54523 <-> 24.203.38.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:55.141410 0.315152 udp 10.0.2.104 54523 <-> 27.143.46.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:56.142796 0.327765 udp 10.0.2.104 54523 <-> 112.105.109.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:57.144048 0.320698 udp 10.0.2.104 54523 <-> 180.2.132.140 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:58.135984 0.413341 udp 10.0.2.104 54523 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:22:59.136995 0.326087 udp 10.0.2.104 54523 <-> 58.114.242.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:00.138709 0.023167 udp 10.0.2.104 54523 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:01.139709 0.000000 udp 10.0.2.104 54523 -> 69.24.115.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:02.141497 2.709492 udp 10.0.2.104 54523 <-> 94.55.168.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:03.143032 0.150579 udp 10.0.2.104 54523 <-> 24.202.240.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:04.144823 0.125476 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:05.135977 0.000000 udp 10.0.2.104 54523 -> 90.7.38.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:06.136850 0.041544 udp 10.0.2.104 54523 <-> 46.55.178.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:07.138515 0.174601 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:08.139884 1.544834 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:10.142618 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:11.144302 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:12.136181 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:13.137381 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:14.138318 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:15.140025 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:16.141231 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:17.142805 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:18.144677 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:19.135649 0.478828 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:20.137312 0.110627 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:21.139014 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:22.140510 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:24.142794 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:25.144826 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:25.795157 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:23:26.135620 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:27.137790 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:28.138974 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:29.140282 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:30.141496 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:31.143684 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:32.144648 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:33.136321 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:33.136385 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:23:34.137804 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:35.138672 0.133727 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:36.140038 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:37.141403 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:38.142973 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:39.134573 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:40.136241 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:41.137785 3.004166 udp 10.0.2.104 54523 -> 125.253.98.5 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:42.139127 1.142749 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:45.142983 0.343238 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:46.134813 0.000000 udp 10.0.2.104 54523 -> 82.239.45.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:47.135789 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:48.137323 0.000000 udp 10.0.2.104 54523 -> 89.143.76.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:49.138657 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:50.140707 0.000000 udp 10.0.2.104 54523 -> 58.9.225.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:51.141528 0.045404 udp 10.0.2.104 54523 <-> 31.176.184.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:52.143232 0.000000 udp 10.0.2.104 54523 -> 110.169.234.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:53.134755 0.052018 udp 10.0.2.104 54523 <-> 89.216.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:54.136402 0.000000 udp 10.0.2.104 54523 -> 24.242.53.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:55.137844 0.155353 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:56.139059 0.030523 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:57.140476 3.995781 udp 10.0.2.104 54523 -> 199.193.171.160 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:23:58.142315 4.996687 udp 10.0.2.104 54523 <-> 88.129.222.153 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:23:59.143306 0.000000 udp 10.0.2.104 54523 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:00.134669 0.000000 udp 10.0.2.104 54523 -> 31.147.115.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:02.137352 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:03.176302 0.000000 udp 10.0.2.104 54523 <- 88.129.222.153 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:04.140803 0.262133 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:05.142282 0.183113 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:06.143757 0.054610 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:07.134881 0.282010 udp 10.0.2.104 54523 <-> 1.23.72.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:08.136461 0.049577 udp 10.0.2.104 54523 -> 94.101.228.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:08.186038 0.000000 icmp 94.101.228.248 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:24:09.137911 0.787282 udp 10.0.2.104 54523 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:10.139137 0.794855 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:11.140737 0.000000 udp 10.0.2.104 54523 -> 173.245.43.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:12.141755 0.059129 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:12.802797 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:24:13.143800 0.170499 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:14.134679 2.003120 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:15.136832 0.274281 udp 10.0.2.104 54523 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:17.139327 0.142667 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:18.141021 0.159505 udp 10.0.2.104 54523 <-> 97.95.93.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:19.142379 0.141865 udp 10.0.2.104 54523 <-> 24.151.86.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:20.143932 0.000000 udp 10.0.2.104 54523 -> 173.163.84.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:21.135387 0.064534 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:22.136556 0.144128 udp 10.0.2.104 54523 <-> 24.154.53.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:23.137796 0.311060 udp 10.0.2.104 54523 <-> 181.75.132.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:24.139665 0.173842 udp 10.0.2.104 54523 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:25.140859 0.000000 udp 10.0.2.104 54523 -> 201.254.97.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:26.141901 0.000000 udp 10.0.2.104 54523 -> 173.163.84.50 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:27.143835 0.192031 udp 10.0.2.104 54523 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:28.134790 2.370847 udp 10.0.2.104 54523 <-> 203.218.113.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:29.136448 0.000000 udp 10.0.2.104 54523 -> 181.165.62.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:30.138012 3.295246 udp 10.0.2.104 54523 <-> 60.237.180.52 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:31.139658 0.313167 udp 10.0.2.104 54523 <-> 181.75.132.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:32.140550 0.343465 udp 10.0.2.104 54523 <-> 114.24.22.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:34.144138 0.000000 udp 10.0.2.104 54523 -> 96.31.10.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:35.135248 0.297828 udp 10.0.2.104 54523 <-> 61.89.179.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:36.137014 0.148243 udp 10.0.2.104 54523 <-> 98.102.219.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:37.138280 0.208602 udp 10.0.2.104 54523 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:38.139212 0.093673 udp 10.0.2.104 54523 <-> 87.17.244.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:39.140830 0.206526 udp 10.0.2.104 54523 <-> 107.2.211.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:40.142535 2.144684 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:41.143984 1.082776 udp 10.0.2.104 54523 <-> 91.240.43.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:43.136405 0.141961 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:44.137715 4.050315 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:45.139512 0.349623 udp 10.0.2.104 54523 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:46.141102 0.137172 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:47.142057 0.000000 udp 10.0.2.104 54523 -> 105.229.138.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:49.135642 0.048070 udp 10.0.2.104 54523 <-> 86.120.153.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:50.136790 0.000000 udp 10.0.2.104 54523 -> 101.63.176.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:51.137968 0.058823 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:52.139722 0.346364 udp 10.0.2.104 54523 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:53.140834 0.121136 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:54.142268 0.993790 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:55.144052 0.354066 udp 10.0.2.104 54523 <-> 122.106.10.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:56.135248 0.042958 udp 10.0.2.104 54523 <-> 77.23.110.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:57.136851 0.066607 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:24:58.138362 0.000000 udp 10.0.2.104 54523 -> 78.51.230.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:59.139671 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:24:59.800855 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:25:00.141208 0.712194 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:01.142354 0.000000 udp 10.0.2.104 54523 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:02.144332 0.054952 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:03.135152 1.146047 udp 10.0.2.104 54523 <-> 75.138.193.217 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:05.138177 0.159000 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:06.139655 0.023214 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:07.140946 0.138780 udp 10.0.2.104 54523 <-> 68.194.253.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:08.142586 0.054060 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:09.144000 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:10.135183 3.080562 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:11.136558 0.549773 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:12.138163 0.000000 udp 10.0.2.104 54523 -> 201.222.176.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:14.141652 0.000000 udp 10.0.2.104 54523 -> 84.224.164.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:15.142432 0.254818 udp 10.0.2.104 54523 <-> 117.200.137.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:16.144134 0.000000 udp 10.0.2.104 54523 -> 192.226.149.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:17.135346 0.088557 udp 10.0.2.104 54523 <-> 151.77.179.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:18.137326 0.470515 udp 10.0.2.104 54523 <-> 201.211.102.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:19.138705 0.149867 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:20.139826 0.050630 udp 10.0.2.104 54523 <-> 5.15.140.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:21.141369 0.169445 udp 10.0.2.104 54523 <-> 184.170.169.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:22.142867 0.358132 udp 10.0.2.104 54523 <-> 181.185.0.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:23.144010 0.178327 udp 10.0.2.104 54523 <-> 115.117.113.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:24.135733 0.163217 udp 10.0.2.104 54523 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:25.137308 0.158454 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:26.138767 0.439693 udp 10.0.2.104 54523 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:27.139808 4.997465 udp 10.0.2.104 54523 <-> 87.252.173.82 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:28.141479 0.000000 udp 10.0.2.104 54523 -> 78.96.183.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:29.142624 0.581483 udp 10.0.2.104 54523 <-> 49.124.119.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:30.144378 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:31.135484 0.112489 udp 10.0.2.104 54523 <-> 94.191.227.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:32.179108 0.000000 udp 10.0.2.104 54523 <- 87.252.173.82 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:33.138457 0.000000 udp 10.0.2.104 54523 -> 192.168.0.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:34.140051 0.000000 udp 10.0.2.104 54523 -> 80.28.193.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:35.141721 0.136352 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:36.142900 0.298313 udp 10.0.2.104 54523 <-> 119.173.155.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:37.144430 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:38.135387 0.141841 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:39.136911 0.212143 udp 10.0.2.104 54523 <-> 76.170.240.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:40.138870 0.070513 udp 10.0.2.104 54523 <-> 80.72.49.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:41.140153 0.045365 udp 10.0.2.104 54523 <-> 212.182.20.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:42.141140 3.093738 udp 10.0.2.104 54523 <-> 202.235.233.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:43.143068 0.000000 udp 10.0.2.104 54523 -> 2.192.204.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:44.144656 0.250357 udp 10.0.2.104 54523 <-> 106.51.203.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:45.136098 0.162984 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:46.136887 0.055657 udp 10.0.2.104 54523 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:46.798480 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:25:47.138317 0.047207 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:48.139884 0.000000 udp 10.0.2.104 54523 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:49.141871 0.000000 udp 10.0.2.104 54523 -> 5.13.90.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:50.142996 0.000000 udp 10.0.2.104 54523 -> 92.99.115.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:51.144538 0.217867 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:52.136207 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:53.137117 0.000000 udp 10.0.2.104 54523 -> 179.199.208.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:54.138692 0.000000 udp 10.0.2.104 54523 -> 84.186.248.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:54.922320 0.000000 udp 10.0.2.104 54523 <- 2.192.204.242 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:55.140149 0.000000 udp 10.0.2.104 54523 -> 49.124.119.120 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:56.141579 0.000000 udp 10.0.2.104 54523 -> 190.207.151.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:25:57.143155 0.361406 udp 10.0.2.104 54523 <-> 113.252.237.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:58.144370 0.140867 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:25:59.136240 4.295635 udp 10.0.2.104 54523 <-> 1.11.158.62 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:00.137329 4.082122 udp 10.0.2.104 54523 <-> 213.60.233.50 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:01.139200 0.140255 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:02.140041 0.000000 udp 10.0.2.104 54523 -> 77.239.79.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:05.144506 0.072898 udp 10.0.2.104 54523 <-> 213.60.233.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:06.136292 2.922515 udp 10.0.2.104 54523 <-> 79.121.110.96 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:07.137599 0.000000 udp 10.0.2.104 54523 -> 62.99.79.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:09.139956 0.049676 udp 10.0.2.104 54523 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:10.141821 0.000000 udp 10.0.2.104 54523 -> 77.239.79.78 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:11.143265 0.153973 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:12.134773 0.291820 udp 10.0.2.104 54523 <-> 1.11.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:13.136200 0.063586 udp 10.0.2.104 54523 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:14.137310 0.798182 udp 10.0.2.104 54523 <-> 79.121.110.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:15.138889 0.000000 udp 10.0.2.104 54523 -> 176.104.145.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:16.140646 0.343835 udp 10.0.2.104 54523 <-> 180.215.97.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:17.141521 0.053945 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:18.142876 0.150610 udp 10.0.2.104 54523 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:19.134595 0.192283 udp 10.0.2.104 54523 <-> 173.17.3.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:20.136204 0.000000 udp 10.0.2.104 54523 -> 27.106.39.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:21.137613 0.265463 udp 10.0.2.104 54523 <-> 49.249.11.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:22.139124 0.030332 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:23.140887 2.666277 udp 10.0.2.104 54523 <-> 186.23.186.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:24.141573 1.190950 udp 10.0.2.104 54523 <-> 68.99.93.186 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:26.134937 0.293351 udp 10.0.2.104 54523 <-> 116.70.168.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:27.136110 0.000000 udp 10.0.2.104 54523 -> 87.1.218.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:28.137444 0.090189 udp 10.0.2.104 54523 <-> 93.74.103.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:29.138879 0.155339 udp 10.0.2.104 54523 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:30.140753 0.000000 udp 10.0.2.104 54523 -> 79.157.64.202 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:31.141952 1.433408 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:32.143303 0.000000 udp 10.0.2.104 54523 -> 114.164.27.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:33.134658 0.000000 udp 10.0.2.104 54523 -> 75.250.95.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:33.795328 0.000286 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:26:34.135932 0.014649 udp 10.0.2.104 54523 <-> 188.230.145.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:35.137415 0.316605 udp 10.0.2.104 54523 <-> 119.150.164.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:36.139446 3.039982 udp 10.0.2.104 54523 <-> 213.119.25.102 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:37.140714 0.026962 udp 10.0.2.104 54523 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:38.133921 3.002263 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:26:38.141683 0.049557 udp 10.0.2.104 54523 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:40.134634 0.697498 udp 10.0.2.104 54523 <-> 186.81.212.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:41.136040 0.000000 udp 10.0.2.104 54523 -> 49.205.62.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:42.137440 0.000000 udp 10.0.2.104 54523 -> 88.149.141.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:43.139084 0.000000 udp 10.0.2.104 54523 -> 186.14.134.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:44.140868 0.057416 udp 10.0.2.104 54523 <-> 188.213.162.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:45.142044 0.350505 udp 10.0.2.104 54523 <-> 190.188.12.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:45.142236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:26:46.143863 0.406571 udp 10.0.2.104 54523 <-> 121.167.236.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:47.135185 1.271573 udp 10.0.2.104 54523 <-> 36.86.158.100 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:49.137509 0.045637 udp 10.0.2.104 54523 <-> 90.230.7.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:50.139268 0.302581 udp 10.0.2.104 54523 <-> 122.50.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:51.141010 0.136066 udp 10.0.2.104 54523 <-> 68.197.117.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:52.142423 0.157956 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:53.143609 0.360261 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:53.143802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:26:54.135268 0.000000 udp 10.0.2.104 54523 -> 79.109.150.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:55.136341 0.000000 udp 10.0.2.104 54523 -> 31.63.129.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:26:56.137800 0.330560 udp 10.0.2.104 54523 <-> 122.134.49.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:57.139357 0.050754 udp 10.0.2.104 54523 <-> 79.114.8.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:58.140899 0.167773 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:26:59.142364 0.360998 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:00.143846 0.136607 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:01.134713 0.169954 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:02.136152 0.000000 udp 10.0.2.104 54523 -> 31.63.129.74 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:03.138195 4.906998 udp 10.0.2.104 54523 <-> 79.109.150.10 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:04.139005 0.082772 udp 10.0.2.104 54523 <-> 37.123.3.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:05.141115 0.813095 udp 10.0.2.104 54523 <-> 91.240.43.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:07.143854 4.324829 udp 10.0.2.104 54523 <-> 122.134.49.223 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:09.136511 0.000000 udp 10.0.2.104 54523 -> 31.63.129.74 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:09.146487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:27:10.138261 0.084665 udp 10.0.2.104 54523 <-> 37.123.3.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:12.141026 2.363016 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:13.142527 1.943384 udp 10.0.2.104 54523 <-> 79.109.150.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:15.135671 0.400371 udp 10.0.2.104 54523 <-> 27.2.203.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:16.136711 0.159955 udp 10.0.2.104 54523 <-> 75.133.46.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:17.138048 0.000000 udp 10.0.2.104 54523 -> 115.242.44.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:18.139175 0.114790 udp 10.0.2.104 54523 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:19.140587 0.154584 udp 10.0.2.104 54523 <-> 71.235.205.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:20.793562 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:27:21.143507 0.000000 udp 10.0.2.104 54523 -> 70.65.73.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:22.135066 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:22.135113 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:27:23.136969 0.069547 udp 10.0.2.104 54523 <-> 93.171.110.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:24.138478 0.301415 udp 10.0.2.104 54523 <-> 211.120.161.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:25.139237 0.059473 udp 10.0.2.104 54523 <-> 77.122.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:26.141295 0.314080 udp 10.0.2.104 54523 <-> 218.47.116.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:27.142509 0.365290 udp 10.0.2.104 54523 <-> 61.228.94.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:28.144109 0.254156 udp 10.0.2.104 54523 <-> 186.94.243.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:29.135117 0.373113 udp 10.0.2.104 54523 <-> 36.230.63.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:30.136607 0.050121 udp 10.0.2.104 54523 <-> 81.253.5.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:31.138035 0.000000 udp 10.0.2.104 54523 -> 117.199.247.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:32.139748 0.563268 udp 10.0.2.104 54523 <-> 110.169.234.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:33.140864 0.051017 udp 10.0.2.104 54523 <-> 86.126.123.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:34.142597 0.176088 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:35.144278 4.996976 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:36.135182 0.137534 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:37.136858 2.315188 udp 10.0.2.104 54523 <-> 165.132.238.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:38.138591 0.380607 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:41.152742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:27:42.144310 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:43.135083 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:44.137248 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:44.137324 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:27:45.138332 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:46.140047 0.868546 udp 10.0.2.104 54523 <-> 190.57.242.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:47.141317 0.031925 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:48.142544 0.000000 udp 10.0.2.104 54523 -> 86.126.123.35 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:49.143921 0.047031 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:50.135562 0.000105 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:50.135667 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:27:51.137141 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:52.138614 0.060855 udp 10.0.2.104 54523 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:53.139808 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:54.141547 0.000000 udp 10.0.2.104 54523 -> 109.67.249.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:55.142858 0.347426 udp 10.0.2.104 54523 <-> 153.135.216.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:56.144051 0.119700 udp 10.0.2.104 54523 <-> 24.235.186.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:57.135870 0.253884 udp 10.0.2.104 54523 <-> 124.123.13.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:27:58.137208 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:27:59.138331 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:00.140176 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:00.140226 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:28:01.141252 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:02.142420 0.000000 udp 10.0.2.104 54523 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:03.144099 0.126892 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:04.136152 0.073132 udp 10.0.2.104 54523 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:05.137074 0.258582 udp 10.0.2.104 54523 <-> 190.73.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:06.138522 0.109652 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:07.140175 0.144003 udp 10.0.2.104 54523 <-> 71.71.254.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:07.800607 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:28:08.141481 0.000000 udp 10.0.2.104 54523 -> 123.236.223.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:09.142993 0.000000 udp 10.0.2.104 54523 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:10.144090 0.044398 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:11.135383 2.349481 udp 10.0.2.104 54523 <-> 189.121.186.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:12.137358 0.400980 udp 10.0.2.104 54523 <-> 61.224.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:13.138300 0.219598 udp 10.0.2.104 54523 <-> 79.50.192.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:14.139839 0.136794 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:15.141250 0.266812 udp 10.0.2.104 54523 <-> 101.58.148.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:16.142661 0.000000 udp 10.0.2.104 54523 -> 50.29.242.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:17.144020 1.167466 udp 10.0.2.104 54523 <-> 98.196.143.186 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:19.137539 0.267337 udp 10.0.2.104 54523 <-> 143.107.215.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:20.138846 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:21.140206 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:22.141798 0.150991 udp 10.0.2.104 54523 <-> 50.30.116.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:23.143304 0.000000 udp 10.0.2.104 54523 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:24.144773 0.000000 udp 10.0.2.104 54523 -> 101.99.38.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:25.135954 0.382216 udp 10.0.2.104 54523 <-> 61.231.38.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:26.137188 0.209877 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:27.138550 0.121329 udp 10.0.2.104 54523 <-> 82.228.64.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:28.140559 0.044885 udp 10.0.2.104 54523 <-> 217.209.140.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:29.141836 1.384903 udp 10.0.2.104 54523 <-> 194.208.95.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:30.143381 0.896527 udp 10.0.2.104 54523 <-> 27.231.199.63 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:31.144757 0.184388 udp 10.0.2.104 54523 <-> 68.98.24.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:32.136078 0.000000 udp 10.0.2.104 54523 -> 101.62.20.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:33.137145 0.762626 udp 10.0.2.104 54523 <-> 192.95.197.82 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:34.138970 0.179653 udp 10.0.2.104 54523 <-> 95.238.31.20 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:35.140002 0.328257 udp 10.0.2.104 54523 <-> 70.251.56.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:36.141988 0.355009 udp 10.0.2.104 54523 <-> 114.44.86.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:37.143068 0.161686 udp 10.0.2.104 54523 <-> 65.24.129.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:38.144916 0.292736 udp 10.0.2.104 54523 <-> 79.184.90.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:39.135822 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:40.137439 0.385640 udp 10.0.2.104 54523 <-> 58.64.126.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:41.138814 0.162029 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:42.140066 0.169816 udp 10.0.2.104 54523 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:43.141842 0.128673 udp 10.0.2.104 54523 <-> 98.204.116.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:44.143421 0.039318 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:45.134241 0.402936 udp 10.0.2.104 54523 <-> 174.47.243.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:46.136255 0.058640 udp 10.0.2.104 54523 <-> 89.32.153.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:47.137304 0.178404 udp 10.0.2.104 54523 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:48.139175 2.899661 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:49.139985 0.461797 udp 10.0.2.104 54523 <-> 177.123.193.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:51.143467 0.000000 udp 10.0.2.104 54523 -> 84.58.92.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:28:52.135144 0.086099 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:53.135979 1.694744 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:54.137651 0.391408 udp 10.0.2.104 54523 <-> 2.184.62.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:54.798197 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:28:55.139143 0.228065 udp 10.0.2.104 54523 <-> 190.73.140.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:56.140729 0.162212 udp 10.0.2.104 54523 <-> 207.180.74.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:57.142037 0.200488 udp 10.0.2.104 54523 <-> 190.219.20.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:58.143368 0.334341 udp 10.0.2.104 54523 <-> 186.10.29.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:28:59.134842 0.061557 udp 10.0.2.104 54523 <-> 93.134.205.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:00.136326 0.261056 udp 10.0.2.104 54523 <-> 181.166.240.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:01.137995 1.173417 udp 10.0.2.104 54523 <-> 75.66.83.78 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:03.140693 0.035417 udp 10.0.2.104 54523 <-> 178.79.33.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:04.142159 1.073785 udp 10.0.2.104 54523 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:05.143078 0.288123 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:06.134738 0.157522 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:07.136168 0.142875 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:08.137376 0.000000 udp 10.0.2.104 54523 -> 89.253.133.12 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:09.139240 0.157687 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:10.140449 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:11.141731 0.029588 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:12.143618 0.159087 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:13.134990 0.145000 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:14.136658 0.000000 udp 10.0.2.104 54523 -> 182.155.14.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:15.137731 1.108798 udp 10.0.2.104 54523 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:16.139271 0.157393 udp 10.0.2.104 54523 <-> 24.202.240.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:17.140892 2.002542 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:18.142091 0.025287 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:20.134910 0.000000 udp 10.0.2.104 54523 -> 81.226.243.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:21.136755 0.079272 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:22.137501 0.153096 udp 10.0.2.104 54523 <-> 92.86.71.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:23.139198 0.157670 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:24.140815 0.000000 udp 10.0.2.104 54523 -> 77.238.195.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:25.142466 0.000000 udp 10.0.2.104 54523 -> 24.51.58.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:26.143821 0.227915 udp 10.0.2.104 54523 <-> 190.73.140.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:27.135156 0.156496 udp 10.0.2.104 54523 <-> 67.198.91.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:28.136718 0.147815 udp 10.0.2.104 54523 <-> 173.86.134.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:29.137800 0.213542 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:30.138985 0.000000 udp 10.0.2.104 54523 -> 117.201.17.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:31.140372 0.047166 udp 10.0.2.104 54523 <-> 79.113.238.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:32.142470 0.000000 udp 10.0.2.104 54523 -> 201.253.169.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:33.143256 0.000000 udp 10.0.2.104 54523 -> 195.174.174.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:34.135464 1.044753 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:36.137842 0.000000 udp 10.0.2.104 54523 -> 79.162.228.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:37.139387 0.053582 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:38.141265 0.557860 udp 10.0.2.104 54523 <-> 213.133.17.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:39.142282 2.338809 udp 10.0.2.104 54523 <-> 200.175.212.99 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:40.143627 0.120010 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:41.796090 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:29:42.136794 0.142692 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:43.138059 0.043582 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:44.139707 0.399935 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:45.141161 0.046866 udp 10.0.2.104 54523 <-> 212.67.155.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:46.141952 2.994547 udp 10.0.2.104 54523 -> 83.165.80.246 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:47.143446 0.000000 udp 10.0.2.104 54523 -> 1.168.250.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:48.134784 0.114482 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:50.137787 0.315597 udp 10.0.2.104 54523 <-> 115.20.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:51.139501 0.087535 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:52.141046 0.185716 udp 10.0.2.104 54523 <-> 166.230.66.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:53.142130 0.345579 udp 10.0.2.104 54523 <-> 36.237.208.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:54.143827 0.037818 udp 10.0.2.104 54523 <-> 84.196.174.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:55.134892 0.232240 udp 10.0.2.104 54523 <-> 79.40.192.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:56.136626 2.018419 udp 10.0.2.104 54523 <-> 190.49.238.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:57.138378 0.344319 udp 10.0.2.104 54523 <-> 111.248.89.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:29:58.139389 0.000000 udp 10.0.2.104 54523 -> 111.246.35.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:29:59.141380 0.037751 udp 10.0.2.104 54523 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:00.142739 0.398414 udp 10.0.2.104 54523 <-> 117.206.117.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:01.144271 0.218525 udp 10.0.2.104 54523 <-> 174.47.243.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:02.135043 0.000000 udp 10.0.2.104 54523 -> 178.94.9.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:03.136613 0.046814 udp 10.0.2.104 54523 <-> 95.87.207.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:04.138264 0.037317 udp 10.0.2.104 54523 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:05.139780 0.302035 udp 10.0.2.104 54523 <-> 200.148.98.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:06.141073 0.196743 udp 10.0.2.104 54523 <-> 49.204.210.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:07.142831 0.000000 udp 10.0.2.104 54523 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:08.143944 0.395352 udp 10.0.2.104 54523 <-> 218.52.136.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:09.135201 0.000000 udp 10.0.2.104 54523 -> 84.1.164.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:10.137083 1.210035 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:11.137888 0.067884 udp 10.0.2.104 54523 <-> 87.121.108.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:12.140044 0.000000 udp 10.0.2.104 54523 -> 79.225.181.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:13.140873 0.316525 udp 10.0.2.104 54523 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:14.142684 0.044455 udp 10.0.2.104 54523 <-> 77.234.87.43 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:15.143647 0.000000 udp 10.0.2.104 54523 -> 189.31.30.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:16.135194 0.052805 udp 10.0.2.104 54523 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:17.136517 0.041797 udp 10.0.2.104 54523 <-> 195.84.248.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:18.138422 1.294104 udp 10.0.2.104 54523 <-> 201.254.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:19.139852 0.000000 udp 10.0.2.104 54523 -> 87.121.108.52 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:20.141623 0.167325 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:21.142928 0.141835 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:22.144367 0.393765 udp 10.0.2.104 54523 <-> 218.52.136.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:23.135153 0.000000 udp 10.0.2.104 54523 -> 84.1.164.249 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:24.137326 0.092023 udp 10.0.2.104 54523 <-> 109.182.129.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:25.138518 0.219352 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:26.139777 0.050482 udp 10.0.2.104 54523 <-> 86.126.123.35 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:27.141246 1.121371 udp 10.0.2.104 54523 <-> 201.254.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:28.142678 0.167398 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:28.793532 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:30:29.144084 3.995477 udp 10.0.2.104 54523 <-> 189.31.30.155 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:30.135929 0.000000 udp 10.0.2.104 54523 -> 82.130.204.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:31.137312 0.127562 udp 10.0.2.104 54523 <-> 158.181.242.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:32.138291 0.000000 udp 10.0.2.104 54523 -> 219.70.156.95 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:34.141583 1.175248 udp 10.0.2.104 54523 <-> 24.233.63.115 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:36.144144 0.153609 udp 10.0.2.104 54523 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:37.135243 0.000000 udp 10.0.2.104 54523 -> 79.225.181.90 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:38.136696 3.569559 udp 10.0.2.104 54523 <-> 202.235.233.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:39.138226 0.757706 udp 10.0.2.104 54523 <-> 189.31.30.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:40.139585 0.191553 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:41.141614 0.000000 udp 10.0.2.104 54523 -> 68.114.151.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:42.142656 0.127962 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:43.144401 0.000000 udp 10.0.2.104 54523 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:44.135702 4.590571 udp 10.0.2.104 54523 <-> 5.238.21.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:45.137366 0.315923 udp 10.0.2.104 54523 <-> 186.94.19.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:46.138432 0.137654 udp 10.0.2.104 54523 <-> 24.45.174.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:47.140342 0.281880 udp 10.0.2.104 54523 <-> 61.26.169.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:48.141799 0.170296 udp 10.0.2.104 54523 <-> 74.77.171.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:49.142948 0.000000 udp 10.0.2.104 54523 -> 50.128.173.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:50.144071 0.149558 udp 10.0.2.104 54523 <-> 98.102.219.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:51.135930 0.310664 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:52.137239 0.153191 udp 10.0.2.104 54523 <-> 65.188.38.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:53.138748 0.049186 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:54.140205 0.145238 udp 10.0.2.104 54523 <-> 24.185.38.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:55.141989 0.000000 udp 10.0.2.104 54523 -> 66.214.232.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:56.143074 0.060272 udp 10.0.2.104 54523 <-> 212.104.169.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:57.144856 0.132819 udp 10.0.2.104 54523 <-> 24.193.122.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:30:58.136203 0.000000 udp 10.0.2.104 54523 -> 5.12.192.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:30:59.137040 0.032129 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:00.139086 0.045546 udp 10.0.2.104 54523 <-> 89.98.118.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:01.140148 0.000000 udp 10.0.2.104 54523 -> 114.79.191.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:02.141267 0.713303 udp 10.0.2.104 54523 <-> 88.187.104.21 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:03.143397 0.000000 udp 10.0.2.104 54523 -> 88.26.196.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:04.144323 0.165388 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:05.135653 0.163219 udp 10.0.2.104 54523 <-> 69.140.208.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:06.137134 0.036565 udp 10.0.2.104 54523 <-> 5.15.59.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:07.138599 0.000000 udp 10.0.2.104 54523 -> 84.110.120.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:08.140135 0.320735 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:09.141920 0.328187 udp 10.0.2.104 54523 <-> 58.115.157.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:10.143331 0.142568 udp 10.0.2.104 54523 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:11.134169 0.696168 udp 10.0.2.104 54523 <-> 216.8.169.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:12.136109 0.240128 udp 10.0.2.104 54523 <-> 37.254.115.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:13.137103 0.161257 udp 10.0.2.104 54523 <-> 124.123.227.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:14.139093 0.125138 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:15.140480 0.156449 udp 10.0.2.104 54523 <-> 65.27.180.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:15.801472 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:31:16.141536 0.046769 udp 10.0.2.104 54523 <-> 62.31.245.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:17.142916 0.265175 udp 10.0.2.104 54523 <-> 181.31.57.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:18.134195 0.666167 udp 10.0.2.104 54523 <-> 189.103.208.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:19.136203 0.000000 udp 10.0.2.104 54523 -> 197.200.160.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:20.137198 0.046777 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:21.138737 0.481586 udp 10.0.2.104 54523 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:22.139994 0.148544 udp 10.0.2.104 54523 <-> 75.99.213.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:23.142049 0.138015 udp 10.0.2.104 54523 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:24.143184 0.271491 udp 10.0.2.104 54523 <-> 14.97.3.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:25.134833 0.285710 udp 10.0.2.104 54523 <-> 50.123.134.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:26.135996 0.164577 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:27.137745 0.116181 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:28.138994 0.252257 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:29.140206 0.305156 udp 10.0.2.104 54523 <-> 118.157.11.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:30.141769 0.412344 udp 10.0.2.104 54523 <-> 58.232.86.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:31.143057 0.070102 udp 10.0.2.104 54523 <-> 85.152.0.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:32.134727 0.157944 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:33.136567 0.208360 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:34.137744 0.143782 udp 10.0.2.104 54523 <-> 37.28.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:35.139334 0.287439 udp 10.0.2.104 54523 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:37.142097 0.033223 udp 10.0.2.104 54523 <-> 31.16.142.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:38.143476 0.000114 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:38.143590 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:31:39.134406 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:40.136522 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:41.137306 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:42.138826 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:43.140407 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:44.142292 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:45.143237 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:46.134715 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:47.136234 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:48.137889 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:49.138850 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:50.140451 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:51.141729 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:52.144055 0.590223 udp 10.0.2.104 54523 <-> 188.2.135.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:31:53.134800 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:54.136207 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:55.137575 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:56.139111 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:57.140380 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:58.141949 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:31:59.143236 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:00.135214 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:01.136548 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:02.137798 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:02.798526 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:32:03.139272 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:04.140358 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:06.143767 0.000114 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:06.143881 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:32:07.135109 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:08.136459 0.148134 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:09.138130 0.319063 udp 10.0.2.104 54523 <-> 218.110.249.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:10.139306 3.047131 udp 10.0.2.104 54523 <-> 46.175.231.82 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:11.140977 0.272593 udp 10.0.2.104 54523 <-> 190.192.68.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:12.142503 0.000000 udp 10.0.2.104 54523 -> 190.124.133.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:14.134729 3.623422 udp 10.0.2.104 54523 <-> 188.2.135.85 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:15.136302 0.304115 udp 10.0.2.104 54523 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:16.138223 0.151018 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:18.140844 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:19.142003 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:20.144068 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:21.135017 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:21.135105 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:32:22.136483 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:23.138228 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:24.139320 0.366566 udp 10.0.2.104 54523 <-> 188.2.135.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:25.140627 0.000000 udp 10.0.2.104 54523 -> 183.83.120.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:26.142077 0.066275 udp 10.0.2.104 54523 <-> 109.182.129.48 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:27.144107 0.156589 udp 10.0.2.104 54523 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:28.135338 0.049055 udp 10.0.2.104 54523 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:29.136819 0.055793 udp 10.0.2.104 54523 <-> 86.122.145.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:30.137735 0.000000 udp 10.0.2.104 54523 -> 218.226.32.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:31.139640 0.429358 udp 10.0.2.104 54523 <-> 177.149.127.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:32.141297 0.479484 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:33.142560 0.038110 udp 10.0.2.104 54523 <-> 5.15.195.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:34.143843 0.106346 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:35.135579 1.141272 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:37.138184 1.057711 udp 10.0.2.104 54523 <-> 86.122.145.68 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:39.140969 0.220612 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:40.142255 4.207270 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:41.144055 0.256953 udp 10.0.2.104 54523 <-> 186.94.17.74 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:42.135199 0.063386 udp 10.0.2.104 54523 <-> 79.112.35.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:43.136710 3.143356 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:45.139738 4.997197 udp 10.0.2.104 54523 <-> 178.233.165.34 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:47.142264 0.000000 udp 10.0.2.104 54523 -> 86.122.145.68 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:48.143651 0.000000 udp 10.0.2.104 54523 -> 92.240.54.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:49.135469 0.230132 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:49.796511 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:32:50.291825 0.000000 udp 10.0.2.104 54523 <- 178.233.165.34 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:51.138626 0.411741 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:52.140103 0.136876 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:53.141201 0.039112 udp 10.0.2.104 54523 <-> 5.15.195.36 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:54.142284 0.525395 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:55.144042 0.157944 udp 10.0.2.104 54523 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:56.135338 0.000000 udp 10.0.2.104 54523 -> 188.217.193.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:32:57.136745 0.356896 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:58.138246 0.281420 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:32:59.140242 0.000000 udp 10.0.2.104 54523 -> 92.240.54.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:00.141139 0.062256 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:01.142288 0.546633 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:02.144369 0.144767 udp 10.0.2.104 54523 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:03.135753 0.137855 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:04.137252 0.000000 udp 10.0.2.104 54523 -> 50.134.240.23 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:05.138582 0.062613 udp 10.0.2.104 54523 <-> 79.112.35.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:06.139501 0.095423 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:07.140935 4.039278 udp 10.0.2.104 54523 <-> 5.15.195.36 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:08.142398 0.276109 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:09.143951 0.223860 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:10.135238 0.000000 udp 10.0.2.104 54523 -> 69.123.197.24 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:12.138233 0.432344 udp 10.0.2.104 54523 <-> 177.149.127.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:13.140292 0.042100 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:14.141014 0.533830 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:15.143153 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:16.144398 0.105529 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:17.135963 0.209401 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:18.137098 0.345970 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:19.138245 0.387362 udp 10.0.2.104 54523 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:20.139705 0.262080 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:21.141123 0.000000 udp 10.0.2.104 54523 -> 80.109.208.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:22.143103 1.992679 udp 10.0.2.104 54523 -> 116.202.19.253 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:23.144288 0.029945 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:25.136820 0.157299 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:26.138329 0.000000 udp 10.0.2.104 54523 -> 188.217.193.25 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:27.139977 0.569553 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:28.141776 0.217979 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:29.143115 0.000000 udp 10.0.2.104 54523 -> 69.123.197.24 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:30.144542 0.056603 udp 10.0.2.104 54523 <-> 86.122.145.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:31.136112 0.321447 udp 10.0.2.104 54523 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:32.137442 0.447959 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:33.138840 0.000000 udp 10.0.2.104 54523 -> 95.169.211.29 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:34.140087 0.000000 udp 10.0.2.104 54523 -> 92.240.54.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:35.141383 4.132441 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:36.143190 0.055903 udp 10.0.2.104 54523 <-> 86.122.145.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:36.793725 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:33:37.144647 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:38.136128 0.501023 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:40.138659 0.000000 udp 10.0.2.104 54523 -> 92.240.54.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:41.140212 0.103370 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:42.141594 0.160283 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:43.143021 0.000000 udp 10.0.2.104 54523 -> 209.152.85.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:44.134488 0.000000 udp 10.0.2.104 54523 -> 2.195.10.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:45.135998 0.041971 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:45.158344 3.001825 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:33:46.137290 0.207777 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:47.138791 0.000000 udp 10.0.2.104 54523 -> 92.240.54.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:48.139900 0.136914 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:49.141475 0.000000 udp 10.0.2.104 54523 -> 124.171.169.86 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:50.143410 0.449243 udp 10.0.2.104 54523 <-> 177.149.127.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:51.134367 0.055875 udp 10.0.2.104 54523 <-> 86.122.145.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:52.136074 0.219154 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:52.165646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:33:53.137378 0.000000 udp 10.0.2.104 54523 -> 95.169.211.29 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:33:54.138613 0.137067 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:55.140647 0.584077 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:56.141594 0.043284 udp 10.0.2.104 54523 <-> 80.97.88.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:57.143423 0.172914 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:58.134786 0.159591 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:33:59.135857 0.056884 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:00.137631 0.042098 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:00.167891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:34:01.138754 0.062823 udp 10.0.2.104 54523 <-> 79.112.35.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:02.140403 0.000000 udp 10.0.2.104 54523 -> 92.240.54.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:03.141523 0.000000 udp 10.0.2.104 54523 -> 177.149.127.27 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:04.143001 0.356372 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:05.134699 0.060167 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:06.135885 0.000000 udp 10.0.2.104 54523 -> 188.217.193.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:07.137175 0.207842 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:08.138654 3.004927 udp 10.0.2.104 54523 -> 116.202.19.253 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:09.140392 0.156264 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:10.141813 0.000000 udp 10.0.2.104 54523 -> 80.99.71.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:12.134507 0.000000 udp 10.0.2.104 54523 -> 79.112.35.88 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:13.135938 0.060252 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:14.137839 2.275552 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:15.138932 0.146864 udp 10.0.2.104 54523 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:16.170857 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:34:17.141889 0.369427 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:18.143095 0.057179 udp 10.0.2.104 54523 <-> 86.122.145.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:19.135088 0.000000 udp 10.0.2.104 54523 -> 92.240.54.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:20.136058 0.136935 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:21.137461 3.004704 udp 10.0.2.104 54523 <-> 5.15.195.36 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:22.138860 0.000000 udp 10.0.2.104 54523 -> 188.217.193.25 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:23.140679 0.677636 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:23.801583 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:34:25.143749 4.997219 udp 10.0.2.104 54523 -> 92.240.54.94 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:26.134553 0.083800 udp 10.0.2.104 54523 <-> 2.195.10.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:27.136310 0.182596 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:28.137503 0.335793 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:29.139036 0.000000 udp 10.0.2.104 54523 -> 69.123.197.24 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:31.142311 0.000000 udp 10.0.2.104 54523 -> 86.122.145.68 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:32.143605 0.146967 udp 10.0.2.104 54523 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:33.134750 0.000000 udp 10.0.2.104 54523 -> 79.112.35.88 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:34.136091 0.000000 udp 10.0.2.104 54523 -> 188.217.193.25 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:35.138274 0.000000 udp 10.0.2.104 54523 -> 177.149.127.27 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:36.139103 0.506274 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:37.140366 0.000000 udp 10.0.2.104 54523 -> 95.169.211.29 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:38.141973 0.000000 udp 10.0.2.104 54523 -> 195.238.118.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:39.143715 0.000000 udp 10.0.2.104 54523 -> 177.181.21.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:40.134855 0.000000 udp 10.0.2.104 54523 -> 209.152.85.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:41.136644 0.042139 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:42.137645 0.043278 udp 10.0.2.104 54523 <-> 80.97.88.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:43.139188 4.997335 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:44.141023 0.724934 udp 10.0.2.104 54523 <-> 201.209.188.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:45.142242 0.056891 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:46.143720 0.161731 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:47.134752 0.000000 udp 10.0.2.104 54523 -> 209.152.85.252 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:48.176715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:34:48.288487 3.049430 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:49.137688 0.000000 udp 10.0.2.104 54523 -> 177.181.21.76 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:50.139197 0.161095 udp 10.0.2.104 54523 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:52.141929 0.056518 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:53.143922 0.000000 udp 10.0.2.104 54523 -> 209.152.85.252 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:34:54.135610 0.043313 udp 10.0.2.104 54523 <-> 80.97.88.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:55.136662 1.134323 udp 10.0.2.104 54523 <-> 2.195.10.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:57.139120 0.254492 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:58.141171 0.696189 udp 10.0.2.104 54523 <-> 201.209.188.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:34:59.142097 0.267619 udp 10.0.2.104 54523 <-> 177.181.21.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:00.143476 2.141307 udp 10.0.2.104 54523 <-> 67.248.70.88 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:01.134864 3.117248 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:03.137732 0.000000 udp 10.0.2.104 54523 -> 177.149.127.27 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:05.141138 0.000000 udp 10.0.2.104 54523 -> 209.152.85.252 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:06.142477 0.000000 udp 10.0.2.104 54523 -> 91.191.58.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:07.143950 0.041963 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:08.135168 4.109045 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:09.137186 0.000000 udp 10.0.2.104 54523 -> 80.109.208.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:10.138184 0.000000 udp 10.0.2.104 54523 -> 116.202.19.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:10.798733 0.000121 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:35:11.139886 0.055734 udp 10.0.2.104 54523 <-> 86.122.145.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:13.142781 0.110103 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:14.144196 0.061840 udp 10.0.2.104 54523 <-> 79.112.35.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:15.135219 0.107915 udp 10.0.2.104 54523 <-> 141.161.10.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:16.136939 0.208984 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:17.138388 0.135067 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:18.139592 0.000000 udp 10.0.2.104 54523 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:19.141335 0.199669 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:20.142338 0.000000 udp 10.0.2.104 54523 -> 76.180.2.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:21.143625 0.000000 udp 10.0.2.104 54523 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:22.135136 0.000000 udp 10.0.2.104 54523 -> 5.55.24.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:23.137117 0.000000 udp 10.0.2.104 54523 -> 12.205.55.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:24.138398 0.000000 udp 10.0.2.104 54523 -> 5.65.164.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:25.139762 0.469945 udp 10.0.2.104 54523 <-> 166.154.87.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:26.141049 0.042006 udp 10.0.2.104 54523 <-> 87.252.173.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:27.142473 0.199126 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:28.144248 0.000000 udp 10.0.2.104 54523 -> 178.26.123.117 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:29.135481 0.000000 udp 10.0.2.104 54523 -> 5.55.24.118 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:30.136729 0.000000 udp 10.0.2.104 54523 -> 113.254.247.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:31.138029 0.000000 udp 10.0.2.104 54523 -> 98.90.30.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:32.139679 0.076224 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:33.141055 0.045276 udp 10.0.2.104 54523 <-> 212.182.20.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:34.143032 0.000000 udp 10.0.2.104 54523 -> 12.205.55.45 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:35.143721 0.000000 udp 10.0.2.104 54523 -> 113.254.247.11 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:36.135343 1.001949 udp 10.0.2.104 54523 <-> 190.185.220.95 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:38.138566 0.157819 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:39.140066 0.215750 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:40.141459 1.392352 udp 10.0.2.104 54523 <-> 78.88.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:41.142458 0.000000 udp 10.0.2.104 54523 -> 212.98.191.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:42.144484 0.437754 udp 10.0.2.104 54523 <-> 2.190.160.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:43.135254 0.000000 udp 10.0.2.104 54523 -> 113.179.250.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:44.137096 0.029328 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:45.138272 0.124581 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:46.139834 0.065170 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:47.141044 0.146506 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:48.142999 1.040920 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:50.135562 0.000000 udp 10.0.2.104 54523 -> 188.37.209.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:51.136858 0.000000 udp 10.0.2.104 54523 -> 187.153.172.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:52.138488 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:53.140482 0.000000 udp 10.0.2.104 54523 -> 77.78.239.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:54.141152 0.443720 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:55.143197 0.000000 udp 10.0.2.104 54523 -> 217.64.138.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:35:56.143998 0.319314 udp 10.0.2.104 54523 <-> 119.14.233.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:57.135832 0.295807 udp 10.0.2.104 54523 <-> 65.15.129.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:57.796863 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:35:58.137543 0.313321 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:35:59.138945 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:00.139745 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:01.141336 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:02.143226 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:03.144316 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:04.135959 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:05.136858 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:06.138452 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:07.139736 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:08.141182 0.116735 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:09.142633 0.351354 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:10.144317 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:12.137021 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:13.138433 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:13.138544 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:36:14.140008 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:15.141501 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:16.143205 0.178860 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:17.134688 0.083882 udp 10.0.2.104 54523 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:18.135978 0.000000 udp 10.0.2.104 54523 -> 69.249.42.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:19.137073 0.316633 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:20.138919 3.995823 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:21.139877 0.000000 udp 10.0.2.104 54523 -> 77.177.52.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:22.141478 0.000000 udp 10.0.2.104 54523 -> 153.130.209.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:23.143220 0.052587 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:25.135909 0.274706 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:26.137410 0.157890 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:27.138798 4.997464 udp 10.0.2.104 54523 -> 173.252.54.128 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:28.140586 4.997003 udp 10.0.2.104 54523 <-> 181.164.143.170 16464 CON 0 0 7 2902 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:31.134647 0.000000 udp 10.0.2.104 54523 -> 99.248.62.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:33.611590 4.090490 udp 10.0.2.104 54523 <-> 181.164.143.170 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:34.138863 1.301208 udp 10.0.2.104 54523 <-> 201.93.194.74 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:36.142081 0.000000 udp 10.0.2.104 54523 -> 173.252.54.128 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:38.134777 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:39.136321 0.093941 udp 10.0.2.104 54523 <-> 89.134.105.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:40.137200 0.164988 udp 10.0.2.104 54523 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:41.138824 0.000000 udp 10.0.2.104 54523 -> 88.117.249.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:42.140047 0.000000 udp 10.0.2.104 54523 -> 178.89.70.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:43.141490 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:44.143551 1.372677 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:44.793831 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:36:45.134787 0.048034 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:46.135986 3.184251 udp 10.0.2.104 54523 <-> 99.140.189.229 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:47.137377 0.157760 udp 10.0.2.104 54523 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:48.138690 0.209214 udp 10.0.2.104 54523 <-> 67.160.130.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:49.851809 0.012429 udp 10.0.2.104 54553 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 04:36:49.864549 0.000000 udp 10.0.2.104 54554 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:50.141910 0.811775 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:51.143039 0.137970 udp 10.0.2.104 54523 <-> 46.154.118.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:52.134476 0.000087 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:52.134563 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:36:53.135875 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:54.137322 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:55.139413 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:56.140442 0.092345 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:57.142112 0.025127 udp 10.0.2.104 54523 <-> 78.35.97.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:36:58.143628 0.000000 udp 10.0.2.104 54523 -> 192.226.164.89 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:36:59.134708 0.270613 udp 10.0.2.104 54523 <-> 179.235.4.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:00.136592 0.000000 udp 10.0.2.104 54523 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:01.137636 0.148176 udp 10.0.2.104 54523 <-> 68.57.136.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:02.138976 0.000000 udp 10.0.2.104 54523 -> 115.242.164.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:03.140353 0.377136 udp 10.0.2.104 54523 <-> 61.62.74.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:04.142374 0.000000 udp 10.0.2.104 54523 -> 200.126.150.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:05.143132 0.054576 udp 10.0.2.104 54523 <-> 78.72.225.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:06.135171 0.384811 udp 10.0.2.104 54523 <-> 27.2.203.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:07.136374 0.260525 udp 10.0.2.104 54523 <-> 190.247.210.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:08.137559 0.166237 udp 10.0.2.104 54523 <-> 66.130.63.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:09.139021 0.211529 udp 10.0.2.104 54523 <-> 50.168.13.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:10.140314 0.416819 udp 10.0.2.104 54523 <-> 74.196.247.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:11.142157 0.057463 udp 10.0.2.104 54523 <-> 84.236.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:12.143860 0.044526 udp 10.0.2.104 54523 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:13.134648 0.000000 udp 10.0.2.104 54523 -> 192.3.78.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:14.136142 1.095018 udp 10.0.2.104 54523 <-> 72.141.22.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:15.138096 0.153263 udp 10.0.2.104 54523 <-> 173.2.97.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:16.138997 0.512209 udp 10.0.2.104 54523 <-> 59.94.122.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:17.140940 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:18.142484 0.000000 udp 10.0.2.104 54523 -> 68.114.146.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:19.143660 0.530500 udp 10.0.2.104 54523 <-> 117.217.187.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:20.135120 0.846917 udp 10.0.2.104 54523 <-> 27.5.180.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:21.136355 0.157245 udp 10.0.2.104 54523 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:22.138230 0.328668 udp 10.0.2.104 54523 <-> 200.171.250.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:23.139765 0.168296 udp 10.0.2.104 54523 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:24.140813 3.116177 udp 10.0.2.104 54523 <-> 96.47.95.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:25.142422 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:26.143998 0.008452 udp 10.0.2.104 54523 <-> 152.66.15.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:27.135177 0.451266 udp 10.0.2.104 54523 <-> 122.199.97.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:28.136214 0.327434 udp 10.0.2.104 54523 <-> 101.0.73.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:29.137668 0.424945 udp 10.0.2.104 54523 <-> 61.227.163.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:30.139661 0.334508 udp 10.0.2.104 54523 <-> 118.33.234.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:31.140539 0.052529 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:31.801393 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:37:32.142285 0.188485 udp 10.0.2.104 54523 <-> 72.251.39.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:33.143976 0.000000 udp 10.0.2.104 54523 -> 78.78.34.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:34.134834 0.121407 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:35.136467 0.331758 udp 10.0.2.104 54523 <-> 49.251.197.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:36.138428 0.346833 udp 10.0.2.104 54523 <-> 112.150.189.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:37.139847 0.446689 udp 10.0.2.104 54523 <-> 122.199.97.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:38.141386 0.154988 udp 10.0.2.104 54523 <-> 124.123.108.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:39.142376 1.712938 udp 10.0.2.104 54523 <-> 68.217.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:40.143846 0.000000 udp 10.0.2.104 54523 -> 87.111.161.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:41.135508 0.157103 udp 10.0.2.104 54523 <-> 50.83.33.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:42.136519 0.183284 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:43.138345 0.115292 udp 10.0.2.104 54523 <-> 5.57.13.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:44.139780 0.000000 udp 10.0.2.104 54523 -> 67.78.29.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:45.140941 0.154137 udp 10.0.2.104 54523 <-> 24.247.93.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:46.142782 0.000000 udp 10.0.2.104 54523 -> 99.24.156.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:47.143641 0.173396 udp 10.0.2.104 54523 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:48.135725 0.000000 udp 10.0.2.104 54523 -> 183.171.176.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:49.136466 0.104537 udp 10.0.2.104 54523 <-> 94.238.118.56 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:50.138387 0.070422 udp 10.0.2.104 54523 <-> 85.84.78.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:51.139301 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:52.141231 0.296020 udp 10.0.2.104 54523 <-> 14.97.231.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:53.142528 0.000000 udp 10.0.2.104 54523 -> 117.203.81.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:37:54.143596 0.036605 udp 10.0.2.104 54523 <-> 109.60.116.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:55.135056 0.207668 udp 10.0.2.104 54523 <-> 98.232.99.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:56.136933 0.411361 udp 10.0.2.104 54523 <-> 175.208.118.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:57.138041 0.221821 udp 10.0.2.104 54523 <-> 72.47.26.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:58.139557 0.345682 udp 10.0.2.104 54523 <-> 190.226.6.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:37:59.141219 0.172282 udp 10.0.2.104 54523 <-> 24.107.139.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:00.142792 0.052252 udp 10.0.2.104 54523 <-> 94.78.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:01.143950 0.192668 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:02.135415 0.130442 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:03.137085 0.150596 udp 10.0.2.104 54523 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:04.138141 0.000000 udp 10.0.2.104 54523 -> 118.161.50.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:05.139753 0.000000 udp 10.0.2.104 54523 -> 78.189.60.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:06.140930 0.052723 udp 10.0.2.104 54523 <-> 94.78.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:07.142636 4.997141 udp 10.0.2.104 54523 <-> 68.48.58.156 16464 CON 0 0 4 504 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:08.144351 0.347589 udp 10.0.2.104 54523 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:10.136797 0.000000 udp 10.0.2.104 54523 -> 106.209.10.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:11.137998 0.087726 udp 10.0.2.104 54523 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:13.141036 0.044939 udp 10.0.2.104 54523 <-> 5.20.68.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:14.142958 0.202299 udp 10.0.2.104 54523 -> 176.221.65.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:14.345257 0.000000 icmp 176.221.65.134 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:38:15.143815 0.000000 udp 10.0.2.104 54523 -> 77.210.37.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:16.135867 0.731474 udp 10.0.2.104 54523 <-> 186.92.116.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:17.137338 0.000000 udp 10.0.2.104 54523 -> 115.241.239.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:18.138822 0.321587 udp 10.0.2.104 54523 <-> 115.242.1.70 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:18.799329 0.000138 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:38:19.140152 0.000000 udp 10.0.2.104 54523 -> 79.112.35.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:20.141015 0.000000 udp 10.0.2.104 54523 -> 65.30.26.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:21.143157 0.158689 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:22.144579 1.048758 udp 10.0.2.104 54523 <-> 186.5.223.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:23.123726 0.000000 udp 10.0.2.104 54523 <- 115.241.239.182 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:23.135877 0.071415 udp 10.0.2.104 54523 <-> 85.87.145.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:24.137088 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:25.138735 1.295318 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:27.141247 0.122255 udp 10.0.2.104 54523 <-> 130.15.154.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:28.142937 0.067741 udp 10.0.2.104 54523 <-> 83.213.98.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:29.144223 0.056294 udp 10.0.2.104 54523 <-> 46.49.86.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:30.135722 0.544702 udp 10.0.2.104 54523 <-> 78.70.27.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:31.137426 0.014191 udp 10.0.2.104 54523 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:32.138414 0.142787 udp 10.0.2.104 54523 <-> 70.80.122.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:33.139991 0.143708 udp 10.0.2.104 54523 <-> 69.124.115.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:34.141093 0.138331 udp 10.0.2.104 54523 <-> 114.79.142.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:35.142970 0.000000 udp 10.0.2.104 54523 -> 123.220.215.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:36.144590 0.264916 udp 10.0.2.104 54523 <-> 181.29.2.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:37.135836 1.208006 udp 10.0.2.104 54523 <-> 76.14.113.163 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:39.138701 0.165763 udp 10.0.2.104 54523 <-> 69.169.145.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:40.140182 2.002465 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:41.141585 0.136057 udp 10.0.2.104 54523 <-> 79.40.192.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:43.144750 1.507847 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:44.136046 0.120886 udp 10.0.2.104 54523 <-> 151.74.213.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:45.137755 0.032674 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:46.139004 0.000000 udp 10.0.2.104 54523 -> 89.229.29.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:47.140419 0.834208 udp 10.0.2.104 54523 <-> 82.135.173.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:48.141604 0.278709 udp 10.0.2.104 54523 <-> 177.35.181.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:49.142672 0.159557 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:50.134114 0.099333 udp 10.0.2.104 54523 <-> 5.139.114.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:51.136102 0.670731 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:52.137344 0.000000 udp 10.0.2.104 54523 -> 94.67.123.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:53.138867 1.080103 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:54.140393 0.000000 udp 10.0.2.104 54523 -> 64.88.4.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:55.141364 0.000000 udp 10.0.2.104 54523 -> 59.190.46.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:56.143017 0.145820 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:57.134225 0.060650 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:38:58.136420 0.000000 udp 10.0.2.104 54523 -> 173.247.187.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:38:59.137235 0.681081 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:00.139146 0.802673 udp 10.0.2.104 54523 <-> 27.4.145.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:01.139916 0.343125 udp 10.0.2.104 54523 <-> 201.250.89.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:02.141481 0.359486 udp 10.0.2.104 54523 <-> 2.184.233.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:03.142855 0.337339 udp 10.0.2.104 54523 <-> 121.149.235.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:04.134616 0.136206 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:05.135683 0.057293 udp 10.0.2.104 54523 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:05.796553 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:39:06.137680 0.163972 udp 10.0.2.104 54523 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:07.138965 0.132770 udp 10.0.2.104 54523 <-> 74.196.59.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:08.140808 0.151709 udp 10.0.2.104 54523 <-> 68.12.124.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:09.141581 0.205449 udp 10.0.2.104 54523 <-> 71.196.205.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:10.143189 0.170861 udp 10.0.2.104 54523 <-> 174.55.3.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:11.134998 2.266901 udp 10.0.2.104 54523 <-> 115.242.156.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:12.136367 0.144137 udp 10.0.2.104 54523 <-> 208.53.245.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:13.137496 0.208563 udp 10.0.2.104 54523 <-> 71.197.77.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:14.138965 0.300850 udp 10.0.2.104 54523 <-> 61.89.21.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:15.140544 0.155450 udp 10.0.2.104 54523 <-> 68.57.213.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:16.141577 0.000000 udp 10.0.2.104 54523 -> 216.59.247.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:17.143546 0.189400 udp 10.0.2.104 54523 <-> 68.7.210.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:18.134836 3.044016 udp 10.0.2.104 54523 <-> 79.114.130.119 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:19.136300 0.000000 udp 10.0.2.104 54523 -> 190.139.224.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:20.137444 0.151285 udp 10.0.2.104 54523 <-> 173.197.148.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:22.140583 2.002890 udp 10.0.2.104 54523 <-> 75.206.212.72 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:23.141769 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:25.134805 0.155373 udp 10.0.2.104 54523 <-> 97.100.98.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:26.136258 0.353842 udp 10.0.2.104 54523 <-> 49.159.65.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:27.137604 0.158279 udp 10.0.2.104 54523 <-> 68.112.135.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:28.139133 0.309849 udp 10.0.2.104 54523 <-> 117.201.99.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:29.140413 3.679012 udp 10.0.2.104 54523 <-> 109.122.75.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:30.142270 0.147036 udp 10.0.2.104 54523 <-> 67.85.183.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:31.143773 0.316639 udp 10.0.2.104 54523 <-> 14.97.63.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:32.134609 0.000000 udp 10.0.2.104 54523 -> 95.232.66.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:33.136041 3.163640 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:34.137360 0.000000 udp 10.0.2.104 54523 -> 58.230.46.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:35.139483 0.164502 udp 10.0.2.104 54523 <-> 98.214.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:37.142337 0.121454 udp 10.0.2.104 54523 <-> 24.122.167.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:38.143352 3.995586 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:39.134520 0.170521 udp 10.0.2.104 54523 <-> 70.113.159.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:40.136651 0.000000 udp 10.0.2.104 54523 -> 24.49.211.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:41.137591 1.169932 udp 10.0.2.104 54523 <-> 187.41.78.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:43.140890 0.176042 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:44.142178 0.227171 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:45.143854 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:46.134900 0.085252 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:47.136033 1.056696 udp 10.0.2.104 54523 <-> 117.242.172.60 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:48.137934 0.310147 udp 10.0.2.104 54523 <-> 110.134.250.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:49.138986 0.000000 udp 10.0.2.104 54523 -> 14.98.76.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:50.141192 0.000000 udp 10.0.2.104 54523 -> 50.128.173.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:51.142122 0.365471 udp 10.0.2.104 54523 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:52.143323 0.131024 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:52.794575 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:39:53.134675 0.145423 udp 10.0.2.104 54523 <-> 47.16.108.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:54.136831 0.327540 udp 10.0.2.104 54523 <-> 115.23.72.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:55.137588 0.000000 udp 10.0.2.104 54523 -> 186.134.228.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:56.139608 0.290482 udp 10.0.2.104 54523 <-> 200.30.233.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:57.140681 0.186148 udp 10.0.2.104 54523 <-> 128.218.187.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:39:58.142292 0.000000 udp 10.0.2.104 54523 -> 190.198.20.161 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:39:59.143878 0.128118 udp 10.0.2.104 54523 <-> 173.218.213.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:00.135302 0.055200 udp 10.0.2.104 54523 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:01.136737 0.252058 udp 10.0.2.104 54523 <-> 190.153.152.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:01.767731 0.000000 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:02.138003 0.554423 udp 10.0.2.104 54523 <-> 65.8.167.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:03.139235 0.166778 udp 10.0.2.104 54523 <-> 183.83.74.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:04.140540 0.145198 udp 10.0.2.104 54523 <-> 67.85.183.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:05.142099 0.168323 udp 10.0.2.104 54523 <-> 87.8.137.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:06.143764 1.171523 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:09.138055 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:10.139284 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:10.139380 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:40:11.140761 0.000000 udp 10.0.2.104 54523 -> 218.214.51.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:12.142699 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:13.143676 0.000000 udp 10.0.2.104 54523 -> 221.28.125.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:14.135188 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:15.136562 0.000000 udp 10.0.2.104 54523 -> 79.189.241.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:16.137728 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:17.139391 0.000000 udp 10.0.2.104 54523 -> 109.53.254.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:18.141060 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:19.142358 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:20.143937 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:21.135765 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:22.137013 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:23.138302 0.000000 udp 10.0.2.104 54523 -> 80.99.71.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:24.139261 0.058486 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:25.141086 0.048993 udp 10.0.2.104 54523 <-> 188.173.249.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:26.142669 0.000000 udp 10.0.2.104 54523 -> 79.189.241.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:27.143786 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:28.135515 0.000000 udp 10.0.2.104 54523 -> 221.28.125.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:29.136524 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:30.138551 0.000000 udp 10.0.2.104 54523 -> 218.214.51.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:31.139961 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:32.141029 1.172612 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:33.142513 0.033928 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:34.144032 0.157826 udp 10.0.2.104 54523 <-> 124.123.242.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:35.135366 1.741510 udp 10.0.2.104 54523 <-> 98.154.166.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:36.137097 0.000000 udp 10.0.2.104 54523 -> 85.84.74.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:37.138075 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:38.140004 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:38.140054 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:40:39.801982 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:40:40.142962 0.000000 udp 10.0.2.104 54523 -> 119.228.193.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:41.144033 0.000000 udp 10.0.2.104 54523 -> 83.28.193.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:42.135511 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:43.137248 0.000000 udp 10.0.2.104 54523 -> 88.14.135.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:44.138454 0.130526 udp 10.0.2.104 54523 <-> 78.228.89.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:45.139795 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:46.140880 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:47.142653 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:48.143993 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:49.135370 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:50.136992 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:50.137071 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:40:51.138068 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:52.139818 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:52.183115 3.000749 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:40:53.141076 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:55.144594 0.641167 udp 10.0.2.104 54523 <-> 85.202.213.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:40:56.135367 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:57.137219 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:58.138821 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:59.140145 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:40:59.190258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:41:00.140998 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:01.142639 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:02.144352 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:03.135330 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:04.136958 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:05.138184 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:06.140238 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:07.141579 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:07.191974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:41:08.142765 0.000132 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:08.142897 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:41:10.135779 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:11.136807 2.181121 udp 10.0.2.104 54523 <-> 173.23.208.199 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:12.138304 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:14.141536 0.000000 udp 10.0.2.104 54523 -> 83.28.193.150 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:15.143072 0.000000 udp 10.0.2.104 54523 -> 88.14.135.229 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:16.144492 0.679299 udp 10.0.2.104 54523 <-> 85.202.213.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:17.136033 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:18.137323 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:19.138576 0.120329 udp 10.0.2.104 54523 <-> 78.228.89.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:20.140194 0.000000 udp 10.0.2.104 54523 -> 31.63.129.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:21.141303 0.142378 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:22.142891 0.000000 udp 10.0.2.104 54523 -> 82.253.240.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:23.134456 0.036192 udp 10.0.2.104 54523 <-> 77.234.87.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:23.194199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:41:24.136207 2.002891 udp 10.0.2.104 54523 -> 199.167.165.34 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:25.137251 0.167483 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:26.799765 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:41:27.140451 1.528913 udp 10.0.2.104 54523 <-> 200.84.252.25 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:29.143077 1.234103 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:30.134800 0.071305 udp 10.0.2.104 54523 <-> 95.180.20.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:31.135856 0.372388 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:32.137117 0.141490 udp 10.0.2.104 54523 <-> 72.240.76.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:33.138982 0.347514 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:34.140303 0.000000 udp 10.0.2.104 54523 -> 81.226.26.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:35.141334 0.000000 udp 10.0.2.104 54523 -> 109.53.254.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:36.143007 0.236371 udp 10.0.2.104 54523 <-> 74.244.8.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:37.135081 0.147239 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:38.135681 0.138687 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:39.137631 0.000000 udp 10.0.2.104 54523 -> 188.2.216.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:40.138864 0.000000 udp 10.0.2.104 54523 -> 116.74.2.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:41.140331 0.029999 udp 10.0.2.104 54523 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:42.141854 0.358918 udp 10.0.2.104 54523 <-> 124.244.148.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:43.143164 0.991331 udp 10.0.2.104 54523 <-> 71.43.117.142 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:45.135936 0.044571 udp 10.0.2.104 54523 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:46.137396 0.015609 udp 10.0.2.104 54523 <-> 94.113.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:47.138875 0.000000 udp 10.0.2.104 54523 -> 109.98.100.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:48.140496 0.047955 udp 10.0.2.104 54523 <-> 95.87.207.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:49.141487 0.161565 udp 10.0.2.104 54523 <-> 65.175.160.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:50.142975 0.358488 udp 10.0.2.104 54523 <-> 111.251.8.157 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:51.134905 0.355628 udp 10.0.2.104 54523 <-> 14.98.65.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:52.136132 0.029837 udp 10.0.2.104 54523 <-> 213.161.6.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:53.137382 0.047962 udp 10.0.2.104 54523 <-> 188.254.253.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:54.139301 0.180628 udp 10.0.2.104 54523 <-> 23.25.165.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:55.140434 0.000000 udp 10.0.2.104 54523 -> 173.187.63.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:55.200805 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:41:56.141842 0.152966 udp 10.0.2.104 54523 <-> 76.24.95.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:57.142981 0.000000 udp 10.0.2.104 54523 -> 117.203.72.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:41:58.134706 0.155229 udp 10.0.2.104 54523 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:41:59.136401 0.298385 udp 10.0.2.104 54523 <-> 186.48.217.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:00.137442 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:01.139172 0.265400 udp 10.0.2.104 54523 <-> 114.109.34.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:02.140274 1.021750 udp 10.0.2.104 54523 <-> 109.90.224.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:04.143112 0.040908 udp 10.0.2.104 54523 <-> 95.76.188.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:05.134555 0.156233 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:06.136489 0.084220 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:07.137321 0.441797 udp 10.0.2.104 54523 <-> 88.187.104.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:08.139057 0.165732 udp 10.0.2.104 54523 <-> 24.160.149.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:09.140499 0.147787 udp 10.0.2.104 54523 <-> 24.114.217.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:10.142250 0.313376 udp 10.0.2.104 54523 <-> 14.97.3.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:11.143403 0.171359 udp 10.0.2.104 54523 <-> 183.82.144.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:12.135211 0.153189 udp 10.0.2.104 54523 <-> 65.188.38.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:13.136170 0.000000 udp 10.0.2.104 54523 -> 180.215.5.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:13.797337 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:42:14.137543 0.000000 udp 10.0.2.104 54523 -> 119.18.179.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:15.139481 0.046772 udp 10.0.2.104 54523 <-> 213.238.228.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:16.140716 0.078576 udp 10.0.2.104 54523 <-> 151.77.132.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:17.141769 0.067770 udp 10.0.2.104 54523 <-> 83.213.126.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:18.143348 0.425976 udp 10.0.2.104 54523 <-> 117.194.199.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:19.134675 0.308241 udp 10.0.2.104 54523 <-> 111.184.101.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:20.136043 0.271837 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:21.137812 0.166929 udp 10.0.2.104 54523 <-> 24.160.149.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:22.139411 0.069487 udp 10.0.2.104 54523 <-> 37.113.123.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:23.140808 0.304982 udp 10.0.2.104 54523 <-> 200.17.234.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:24.141785 2.556758 udp 10.0.2.104 54523 <-> 122.107.150.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:25.143766 0.335477 udp 10.0.2.104 54523 <-> 14.98.80.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:26.135098 0.105519 udp 10.0.2.104 54523 <-> 78.242.194.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:27.136337 0.141183 udp 10.0.2.104 54523 <-> 184.162.123.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:28.138057 2.385269 udp 10.0.2.104 54523 <-> 176.61.165.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:29.139354 0.296216 udp 10.0.2.104 54523 <-> 42.147.6.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:30.141249 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:31.142291 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:32.143572 0.165753 udp 10.0.2.104 54523 <-> 68.58.91.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:33.135142 0.208151 udp 10.0.2.104 54523 <-> 97.93.25.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:34.136372 0.035250 udp 10.0.2.104 54523 <-> 83.215.199.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:35.137915 0.072044 udp 10.0.2.104 54523 <-> 83.213.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:36.139239 0.127202 udp 10.0.2.104 54523 <-> 95.59.36.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:37.141178 0.323003 udp 10.0.2.104 54523 <-> 190.36.162.46 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:38.142342 0.092002 udp 10.0.2.104 54523 <-> 82.65.159.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:39.143616 0.000000 udp 10.0.2.104 54523 -> 75.193.62.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:40.135162 2.383464 udp 10.0.2.104 54523 <-> 122.100.80.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:41.136339 0.032811 udp 10.0.2.104 54523 <-> 78.90.213.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:42.138036 0.662600 udp 10.0.2.104 54523 <-> 14.96.222.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:43.139840 0.000000 udp 10.0.2.104 54523 -> 89.132.14.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:44.140795 0.467431 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:45.142659 0.153831 udp 10.0.2.104 54523 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:46.144228 0.032383 udp 10.0.2.104 54523 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:47.135372 0.000000 udp 10.0.2.104 54523 -> 115.240.232.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:48.137019 0.000000 udp 10.0.2.104 54523 -> 74.216.44.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:49.137979 0.264572 udp 10.0.2.104 54523 <-> 219.107.199.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:50.139401 0.302515 udp 10.0.2.104 54523 <-> 220.96.151.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:51.141298 0.136870 udp 10.0.2.104 54523 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:52.142439 0.045282 udp 10.0.2.104 54523 <-> 94.244.87.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:53.143680 0.371697 udp 10.0.2.104 54523 <-> 218.166.155.66 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:54.135765 0.191194 udp 10.0.2.104 54523 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:55.136457 0.805672 udp 10.0.2.104 54523 <-> 95.59.36.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:56.138026 0.190183 udp 10.0.2.104 54523 <-> 49.205.152.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:57.139428 0.000000 udp 10.0.2.104 54523 -> 190.204.12.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:42:58.140664 0.168336 udp 10.0.2.104 54523 <-> 75.132.170.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:42:59.142476 0.070392 udp 10.0.2.104 54523 <-> 77.91.22.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:00.144063 0.009153 udp 10.0.2.104 54523 <-> 82.209.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:00.794570 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:43:01.135243 0.048829 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:02.136862 0.217393 udp 10.0.2.104 54523 <-> 190.79.214.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:03.138111 0.020425 udp 10.0.2.104 54523 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:04.139730 0.047568 udp 10.0.2.104 54523 <-> 178.250.32.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:05.140958 0.169689 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:06.142406 0.059459 udp 10.0.2.104 54523 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:07.144262 0.305568 udp 10.0.2.104 54523 <-> 223.133.64.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:08.135270 0.375746 udp 10.0.2.104 54523 <-> 118.175.166.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:09.137175 0.053740 udp 10.0.2.104 54523 <-> 94.253.249.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:10.138346 0.344236 udp 10.0.2.104 54523 <-> 1.175.123.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:11.139753 0.160261 udp 10.0.2.104 54523 <-> 173.26.91.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:12.141264 0.045533 udp 10.0.2.104 54523 <-> 94.244.87.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:13.142272 0.166340 udp 10.0.2.104 54523 <-> 24.202.240.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:14.144015 0.155609 udp 10.0.2.104 54523 <-> 69.212.254.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:15.135925 0.327084 udp 10.0.2.104 54523 <-> 201.209.173.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:16.136641 0.050415 udp 10.0.2.104 54523 <-> 84.247.60.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:17.138307 0.384892 udp 10.0.2.104 54523 <-> 114.37.121.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:18.139506 0.000000 udp 10.0.2.104 54523 -> 89.28.48.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:43:19.141490 0.000000 udp 10.0.2.104 54523 -> 61.10.20.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:43:20.142957 2.393514 udp 10.0.2.104 54523 <-> 70.15.231.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:21.143931 0.357730 udp 10.0.2.104 54523 <-> 187.123.172.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:22.135252 0.060627 udp 10.0.2.104 54523 <-> 188.241.156.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:23.137083 0.295587 udp 10.0.2.104 54523 <-> 42.124.159.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:24.138450 0.336798 udp 10.0.2.104 54523 <-> 1.173.229.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:25.139767 0.313544 udp 10.0.2.104 54523 <-> 210.194.128.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:26.141085 0.152374 udp 10.0.2.104 54523 <-> 111.91.119.26 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:27.142638 0.306415 udp 10.0.2.104 54523 <-> 14.43.147.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:28.144529 0.324088 udp 10.0.2.104 54523 <-> 115.179.88.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:29.135337 0.352331 udp 10.0.2.104 54523 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:30.136932 4.005701 udp 10.0.2.104 54523 -> 177.34.126.72 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:43:31.138360 0.045971 udp 10.0.2.104 54523 <-> 178.148.139.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:32.140356 0.149527 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:33.141078 0.427809 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:35.144427 0.326092 udp 10.0.2.104 54523 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:36.135643 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:43:37.137259 0.167177 udp 10.0.2.104 54523 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:38.138534 0.080649 udp 10.0.2.104 54523 <-> 176.8.201.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:39.140121 0.119475 udp 10.0.2.104 54523 <-> 37.239.219.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:40.141077 0.053646 udp 10.0.2.104 54523 <-> 79.116.188.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:41.142770 0.067425 udp 10.0.2.104 54523 <-> 213.141.44.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:42.144288 0.332951 udp 10.0.2.104 54523 <-> 1.164.48.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:43.135647 0.027317 udp 10.0.2.104 54523 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:44.137419 0.037848 udp 10.0.2.104 54523 <-> 89.132.240.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:45.138839 0.101725 udp 10.0.2.104 54523 <-> 37.213.154.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:46.140313 0.383620 udp 10.0.2.104 54523 <-> 114.37.121.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:47.141385 0.046572 udp 10.0.2.104 54523 <-> 188.24.81.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:47.802044 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:43:48.142918 0.347187 udp 10.0.2.104 54523 <-> 175.182.2.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:49.144121 0.420986 udp 10.0.2.104 54523 <-> 183.73.115.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:50.135532 0.308140 udp 10.0.2.104 54523 <-> 114.198.193.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:51.137331 0.047779 udp 10.0.2.104 54523 <-> 178.250.32.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:52.138518 0.000000 udp 10.0.2.104 54523 -> 114.40.25.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:43:53.139880 0.000000 udp 10.0.2.104 54523 -> 59.96.230.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:43:54.141267 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:43:55.142935 0.347966 udp 10.0.2.104 54523 <-> 14.199.234.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:56.134056 0.278889 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:57.135942 0.322892 udp 10.0.2.104 54523 <-> 180.14.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:43:58.137007 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:43:59.138788 0.175908 udp 10.0.2.104 54523 <-> 72.9.77.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:00.140299 0.270812 udp 10.0.2.104 54523 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:01.141461 0.075546 udp 10.0.2.104 54523 <-> 79.42.54.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:02.143063 0.168816 udp 10.0.2.104 54523 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:03.134128 0.047562 udp 10.0.2.104 54523 <-> 89.47.243.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:04.135897 1.690083 udp 10.0.2.104 54523 <-> 98.90.30.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:05.137347 0.042273 udp 10.0.2.104 54523 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:06.138785 0.173149 udp 10.0.2.104 54523 <-> 24.203.38.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:07.140607 0.000000 udp 10.0.2.104 54523 -> 223.236.86.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:08.142026 0.035739 udp 10.0.2.104 54523 <-> 94.253.202.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:09.142902 0.410527 udp 10.0.2.104 54523 <-> 221.158.158.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:10.134678 0.366225 udp 10.0.2.104 54523 <-> 59.161.67.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:11.135874 0.354299 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:12.137292 0.128093 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:13.138940 0.154932 udp 10.0.2.104 54523 <-> 67.198.91.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:14.140437 0.164070 udp 10.0.2.104 54523 <-> 183.83.168.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:15.141652 0.304077 udp 10.0.2.104 54523 <-> 113.37.177.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:16.143072 0.324909 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:17.134683 0.065383 udp 10.0.2.104 54523 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:18.136462 0.312591 udp 10.0.2.104 54523 <-> 180.14.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:19.137367 0.310771 udp 10.0.2.104 54523 <-> 58.11.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:20.139281 0.000000 udp 10.0.2.104 54523 -> 116.94.154.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:21.140035 0.287664 udp 10.0.2.104 54523 <-> 211.7.6.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:22.141746 0.521690 udp 10.0.2.104 54523 <-> 117.206.125.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:23.142865 0.338785 udp 10.0.2.104 54523 <-> 27.105.20.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:24.134722 0.072056 udp 10.0.2.104 54523 <-> 128.71.112.178 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:25.136407 0.000000 udp 10.0.2.104 54523 -> 69.123.197.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:26.137563 1.065469 udp 10.0.2.104 54523 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:27.139251 0.159973 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:28.140233 0.149712 udp 10.0.2.104 54523 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:29.141755 0.000000 udp 10.0.2.104 54523 -> 1.175.35.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:30.143463 0.295730 udp 10.0.2.104 54523 <-> 202.90.212.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:31.134524 0.078762 udp 10.0.2.104 54523 <-> 62.99.108.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:32.136407 0.065991 udp 10.0.2.104 54523 <-> 178.149.49.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:33.137566 0.159054 udp 10.0.2.104 54523 <-> 124.123.201.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:34.139086 0.152719 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:34.800221 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:44:35.140957 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:36.142108 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:37.143659 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:38.134822 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:39.136325 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:40.137712 0.158845 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:41.139335 0.461142 udp 10.0.2.104 54523 <-> 117.212.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:42.140233 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:43.141880 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:45.134762 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:46.136039 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:47.137843 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:48.139241 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:49.140528 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:50.142332 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:51.143389 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:52.134840 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:53.136186 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:54.137735 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:55.139199 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:56.140637 0.278585 udp 10.0.2.104 54523 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:44:57.141885 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:58.143326 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:44:59.134628 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:00.136286 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:01.137563 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:02.139097 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:03.140390 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:04.142033 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:05.143267 0.053708 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:06.134840 0.441808 udp 10.0.2.104 54523 <-> 117.212.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:07.136445 0.523596 udp 10.0.2.104 54523 <-> 189.103.208.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:08.137745 1.001424 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:10.140643 0.157311 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:11.142583 0.000000 udp 10.0.2.104 54523 -> 101.63.222.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:12.143328 0.184963 udp 10.0.2.104 54523 <-> 79.50.192.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:13.135237 2.003130 udp 10.0.2.104 54523 -> 147.143.129.74 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:14.136406 0.046945 udp 10.0.2.104 54523 <-> 78.96.183.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:16.139238 0.294440 udp 10.0.2.104 54523 <-> 181.167.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:17.140863 0.071288 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:18.142179 0.000000 udp 10.0.2.104 54523 -> 14.97.146.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:19.144022 0.000000 udp 10.0.2.104 54523 -> 118.165.202.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:20.135156 0.046933 udp 10.0.2.104 54523 <-> 188.246.74.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:21.136758 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:21.797281 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:45:22.138237 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:23.139835 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:24.141216 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:25.142270 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:26.144033 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:27.135406 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:28.136332 0.000000 udp 10.0.2.104 54523 -> 72.26.130.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:29.138216 0.367444 udp 10.0.2.104 54523 <-> 118.165.202.64 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:30.139338 0.000117 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:30.139455 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:45:32.142210 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:33.143827 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:34.135717 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:35.137022 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:36.138235 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:37.139841 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:38.141100 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:39.142150 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:40.143754 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:41.135527 0.000000 udp 10.0.2.104 54523 -> 83.166.30.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:42.136896 0.000000 udp 10.0.2.104 54523 -> 70.112.193.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:43.138575 0.362551 udp 10.0.2.104 54523 <-> 118.165.202.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:44.139991 0.166052 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:45.140781 1.048769 udp 10.0.2.104 54523 <-> 188.25.55.101 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:47.143840 0.052491 udp 10.0.2.104 54523 <-> 83.166.30.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:48.135418 0.000000 udp 10.0.2.104 54523 -> 14.97.146.77 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:49.136643 0.000000 udp 10.0.2.104 54523 -> 70.112.193.107 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:45:50.137941 0.043338 udp 10.0.2.104 54523 <-> 147.143.129.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:51.139656 0.045840 udp 10.0.2.104 54523 <-> 80.238.103.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:52.140895 2.946096 udp 10.0.2.104 54523 <-> 72.26.130.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:53.142509 0.173218 udp 10.0.2.104 54523 <-> 183.83.91.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:54.143701 0.167293 udp 10.0.2.104 54523 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:55.135155 0.334012 udp 10.0.2.104 54523 <-> 49.250.97.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:56.136736 0.074965 udp 10.0.2.104 54523 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:57.138436 0.023308 udp 10.0.2.104 54523 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:58.139943 0.332055 udp 10.0.2.104 54523 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:45:59.141094 0.153455 udp 10.0.2.104 54523 <-> 124.123.73.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:00.142594 0.327901 udp 10.0.2.104 54523 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:01.144550 1.294279 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:03.137065 0.307386 udp 10.0.2.104 54523 <-> 186.94.17.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:04.138614 0.099500 udp 10.0.2.104 54523 <-> 151.64.60.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:05.140150 0.064129 udp 10.0.2.104 54523 <-> 213.167.1.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:06.141194 2.324332 udp 10.0.2.104 54523 <-> 202.220.251.100 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:07.143122 4.347567 udp 10.0.2.104 54523 <-> 153.130.209.43 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:08.795071 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:46:09.135781 0.342516 udp 10.0.2.104 54523 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:10.136996 0.000000 udp 10.0.2.104 54523 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:12.140191 0.000000 udp 10.0.2.104 54523 -> 190.79.250.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:13.141015 0.000000 udp 10.0.2.104 54523 -> 87.205.140.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:14.142551 0.313589 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:15.144300 0.039361 udp 10.0.2.104 54523 <-> 213.119.25.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:16.135848 0.000000 udp 10.0.2.104 54523 -> 46.50.11.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:17.136787 3.099835 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:18.138516 0.347184 udp 10.0.2.104 54523 <-> 153.130.209.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:19.140230 0.319827 udp 10.0.2.104 54523 <-> 202.220.251.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:21.143151 0.000000 udp 10.0.2.104 54523 -> 190.79.250.42 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:22.144597 1.048580 udp 10.0.2.104 54523 <-> 83.21.115.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:23.135443 0.319126 udp 10.0.2.104 54523 <-> 49.250.97.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:24.137071 0.159408 udp 10.0.2.104 54523 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:25.138520 2.109472 udp 10.0.2.104 54523 <-> 109.182.129.48 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:26.140199 0.176134 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:28.142949 0.000000 udp 10.0.2.104 54523 -> 210.139.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:29.134431 0.177627 udp 10.0.2.104 54523 <-> 75.135.210.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:30.135859 2.306496 udp 10.0.2.104 54523 <-> 31.185.126.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:31.137163 0.111406 udp 10.0.2.104 54523 <-> 95.238.36.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:32.138987 0.157458 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:33.140239 0.311835 udp 10.0.2.104 54523 <-> 121.152.3.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:34.141245 0.000000 udp 10.0.2.104 54523 -> 195.174.174.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:35.143228 0.064496 udp 10.0.2.104 54523 <-> 213.167.1.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:36.134686 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:37.135727 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:38.136970 2.002892 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:39.138898 3.356146 udp 10.0.2.104 54523 <-> 124.244.148.102 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:41.141794 0.000000 udp 10.0.2.104 54523 -> 2.71.31.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:43.134182 0.217250 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:44.136181 4.142882 udp 10.0.2.104 54523 <-> 63.131.171.98 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:45.137332 2.053675 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:46.138640 0.000000 udp 10.0.2.104 54523 -> 94.52.120.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:46:49.143271 0.415172 udp 10.0.2.104 54523 <-> 74.79.65.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:50.134529 0.042267 udp 10.0.2.104 54523 <-> 147.156.194.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:51.135884 0.312110 udp 10.0.2.104 54523 <-> 116.65.204.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:52.137320 0.165153 udp 10.0.2.104 54523 <-> 75.119.124.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:53.138552 0.245948 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:54.140195 0.416692 udp 10.0.2.104 54523 <-> 119.200.155.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:55.141773 4.028335 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:55.802757 0.000140 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:46:56.143399 0.048962 udp 10.0.2.104 54523 <-> 88.222.170.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:46:57.134872 0.007650 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:00.138954 0.046553 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:01.140040 0.000000 udp 10.0.2.104 54523 -> 101.63.169.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:02.142058 0.266773 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:03.142957 0.171826 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:04.134638 0.073070 udp 10.0.2.104 54523 <-> 178.233.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:05.136269 0.073503 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:06.137651 0.172940 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:07.139333 0.042323 udp 10.0.2.104 54523 <-> 5.12.192.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:08.140953 0.273271 udp 10.0.2.104 54523 <-> 190.194.109.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:09.141568 0.149713 udp 10.0.2.104 54523 <-> 24.61.172.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:10.143676 0.064711 udp 10.0.2.104 54523 <-> 80.70.153.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:11.134771 0.078090 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:12.136370 0.000000 udp 10.0.2.104 54523 -> 87.121.108.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:13.137284 0.219561 udp 10.0.2.104 54523 <-> 158.148.136.54 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:14.138766 0.049800 udp 10.0.2.104 54523 <-> 176.97.51.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:15.140649 0.157877 udp 10.0.2.104 54523 <-> 67.248.200.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:16.141919 0.000000 udp 10.0.2.104 54523 -> 186.223.26.89 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:17.143260 0.372556 udp 10.0.2.104 54523 <-> 36.236.22.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:18.134520 0.025247 udp 10.0.2.104 54523 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:19.135956 0.267514 udp 10.0.2.104 54523 <-> 187.123.172.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:20.137469 0.149055 udp 10.0.2.104 54523 <-> 24.149.57.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:21.139287 0.043615 udp 10.0.2.104 54523 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:22.140484 0.000000 udp 10.0.2.104 54523 -> 218.223.122.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:23.142083 0.062829 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:24.143748 0.000000 udp 10.0.2.104 54523 -> 84.118.182.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:25.135252 0.145620 udp 10.0.2.104 54523 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:26.136433 0.219289 udp 10.0.2.104 54523 <-> 186.89.103.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:27.137619 0.000000 udp 10.0.2.104 54523 -> 50.9.2.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:28.139052 0.040990 udp 10.0.2.104 54523 <-> 86.107.198.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:29.140592 0.000000 udp 10.0.2.104 54523 -> 187.111.152.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:30.142089 0.134812 udp 10.0.2.104 54523 <-> 79.13.44.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:31.143440 0.173253 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:32.135143 0.139246 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:33.136806 0.308116 udp 10.0.2.104 54523 <-> 27.140.6.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:34.137578 1.047488 udp 10.0.2.104 54523 <-> 80.238.103.77 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:36.140909 0.000000 udp 10.0.2.104 54523 -> 83.53.133.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:37.142288 0.000000 udp 10.0.2.104 54523 -> 72.238.160.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:38.143311 0.079894 udp 10.0.2.104 54523 <-> 77.27.54.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:39.134793 0.068316 udp 10.0.2.104 54523 <-> 85.87.145.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:40.136790 0.477643 udp 10.0.2.104 54523 -> 117.222.42.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:40.614433 0.000000 icmp 117.222.42.87 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:47:41.137823 1.208823 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:42.800132 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:47:43.141103 0.022852 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:44.141887 0.039810 udp 10.0.2.104 54523 <-> 89.215.37.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:45.143326 0.000000 udp 10.0.2.104 54523 -> 159.146.5.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:46.135335 0.000000 udp 10.0.2.104 54523 -> 24.9.113.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:47:47.136826 0.215160 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:48.138024 0.167065 udp 10.0.2.104 54523 <-> 24.207.212.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:49.139455 0.534436 udp 10.0.2.104 54523 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:50.141171 0.139300 udp 10.0.2.104 54523 <-> 203.192.219.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:51.142520 0.168806 udp 10.0.2.104 54523 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:52.144233 3.500219 udp 10.0.2.104 54523 <-> 186.22.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:53.135264 4.015573 udp 10.0.2.104 54523 <-> 14.97.63.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:54.136985 0.201732 udp 10.0.2.104 54523 <-> 103.24.86.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:55.138367 0.062084 udp 10.0.2.104 54523 <-> 79.116.248.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:56.139311 0.120095 udp 10.0.2.104 54523 <-> 24.235.186.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:57.141103 0.298651 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:58.142473 0.152443 udp 10.0.2.104 54523 <-> 97.95.93.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:59.143718 0.321711 udp 10.0.2.104 54523 <-> 79.16.21.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:47:59.207483 3.000431 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:48:00.135415 0.061202 udp 10.0.2.104 54523 <-> 94.42.125.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:01.136880 0.000000 udp 10.0.2.104 54523 -> 83.57.152.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:02.137848 0.106843 udp 10.0.2.104 54523 <-> 176.238.175.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:03.139724 0.143160 udp 10.0.2.104 54523 <-> 74.90.138.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:04.141365 0.198535 udp 10.0.2.104 54523 <-> 190.204.134.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:05.142331 0.048992 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:06.143788 0.046652 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:06.214253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:48:07.135563 0.312266 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:08.136667 0.315681 udp 10.0.2.104 54523 <-> 189.68.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:09.137911 0.136631 udp 10.0.2.104 54523 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:10.139251 4.733046 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:11.141188 0.130789 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:12.142880 4.996448 udp 10.0.2.104 54523 -> 14.98.76.75 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:13.143762 1.993132 udp 10.0.2.104 54523 -> 61.227.54.62 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:14.215537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:48:16.138530 0.000000 udp 10.0.2.104 54523 -> 58.9.41.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:18.140907 0.428119 udp 10.0.2.104 54523 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:19.142459 0.000000 udp 10.0.2.104 54523 -> 14.96.36.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:20.144170 0.000000 udp 10.0.2.104 54523 -> 189.68.137.88 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:21.135133 0.000000 udp 10.0.2.104 54523 -> 14.98.76.75 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:22.136850 0.053894 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:23.138123 0.000000 udp 10.0.2.104 54523 -> 5.12.192.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:24.139392 1.529159 udp 10.0.2.104 54523 <-> 186.19.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:25.141115 0.165659 udp 10.0.2.104 54523 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:26.142377 0.000000 udp 10.0.2.104 54523 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:27.144098 0.095357 udp 10.0.2.104 54523 <-> 87.17.138.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:28.135590 0.271230 udp 10.0.2.104 54523 <-> 189.34.144.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:29.136964 0.061776 udp 10.0.2.104 54523 <-> 90.23.92.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:29.798184 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:48:30.138102 0.170380 udp 10.0.2.104 54523 <-> 24.207.212.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:30.218620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:48:31.139780 0.253346 udp 10.0.2.104 54523 <-> 123.242.183.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:32.141355 0.272882 udp 10.0.2.104 54523 <-> 14.97.90.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:33.142324 0.151315 udp 10.0.2.104 54523 <-> 173.2.97.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:34.144572 0.276964 udp 10.0.2.104 54523 <-> 187.66.17.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:35.135381 0.111022 udp 10.0.2.104 54523 <-> 79.179.19.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:36.137363 0.140064 udp 10.0.2.104 54523 <-> 75.75.92.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:37.138073 0.064365 udp 10.0.2.104 54523 <-> 95.46.217.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:38.140023 1.001405 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:41.144483 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:42.135429 0.000198 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:42.135627 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:48:43.136750 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:44.138528 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:45.140214 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:46.141243 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:47.143100 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:48.143883 0.061268 udp 10.0.2.104 54523 <-> 81.225.87.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:49.135377 0.569023 udp 10.0.2.104 54523 <-> 187.73.244.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:50.136805 0.041922 udp 10.0.2.104 54523 <-> 188.246.77.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:51.138612 0.168291 udp 10.0.2.104 54523 <-> 24.217.45.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:52.140044 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:53.141878 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:54.142589 3.996100 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:55.144718 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:56.135980 0.160281 udp 10.0.2.104 54523 <-> 108.170.53.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:48:57.137572 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:48:59.140057 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:00.141189 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:01.143120 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:02.134586 0.000000 udp 10.0.2.104 54523 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:02.224418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:49:03.136243 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:04.137005 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:05.138874 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:06.140226 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:07.141368 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:08.142657 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:08.142752 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:49:09.134209 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:11.137385 0.322298 udp 10.0.2.104 54523 <-> 117.200.73.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:13.140267 0.248707 udp 10.0.2.104 54523 <-> 75.248.210.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:14.141412 0.135409 udp 10.0.2.104 54523 <-> 151.74.213.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:15.143067 0.403277 udp 10.0.2.104 54523 <-> 220.86.55.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:16.134331 0.160602 udp 10.0.2.104 54523 <-> 173.19.204.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:17.136272 0.168826 udp 10.0.2.104 54523 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:17.796898 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:49:18.137307 0.047520 udp 10.0.2.104 54523 <-> 5.14.105.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:19.138457 0.000000 udp 10.0.2.104 54523 -> 216.83.68.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:20.140657 0.323372 udp 10.0.2.104 54523 <-> 42.148.35.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:21.141768 0.000000 udp 10.0.2.104 54523 -> 189.31.30.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:22.142978 0.151538 udp 10.0.2.104 54523 <-> 124.123.242.39 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:23.134698 0.134898 udp 10.0.2.104 54523 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:24.135977 0.095418 udp 10.0.2.104 54523 <-> 87.222.107.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:26.138762 0.021033 udp 10.0.2.104 54523 <-> 161.53.166.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:27.140105 4.140223 udp 10.0.2.104 54523 <-> 192.226.151.208 16464 CON 0 0 9 4682 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:28.141523 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:32.137248 0.000000 udp 10.0.2.104 54523 -> 211.105.150.208 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:33.138923 0.311209 udp 10.0.2.104 54523 <-> 68.122.149.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:34.140037 0.162806 udp 10.0.2.104 54523 <-> 69.132.121.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:35.141928 0.321140 udp 10.0.2.104 54523 <-> 218.40.70.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:36.143081 0.000000 udp 10.0.2.104 54523 -> 180.148.49.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:37.134499 0.341853 udp 10.0.2.104 54523 <-> 115.185.26.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:38.136061 0.113597 udp 10.0.2.104 54523 <-> 217.203.44.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:39.137694 0.172743 udp 10.0.2.104 54523 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:40.139087 0.158134 udp 10.0.2.104 54523 <-> 71.56.93.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:41.140511 0.131879 udp 10.0.2.104 54523 <-> 90.129.74.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:42.141525 0.219593 udp 10.0.2.104 54523 <-> 46.249.104.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:44.134644 0.088371 udp 10.0.2.104 54523 <-> 78.251.241.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:45.136205 0.000000 udp 10.0.2.104 54523 -> 76.123.129.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:46.137894 0.332157 udp 10.0.2.104 54523 <-> 201.250.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:47.139295 0.394106 udp 10.0.2.104 54523 <-> 1.232.66.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:48.140370 0.629086 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:49.142007 0.150020 udp 10.0.2.104 54523 <-> 90.129.74.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:50.143426 0.000000 udp 10.0.2.104 54523 -> 198.179.118.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:51.135635 0.273178 udp 10.0.2.104 54523 <-> 187.37.104.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:52.136518 0.175325 udp 10.0.2.104 54523 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:53.137741 0.483632 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:54.139117 0.596867 udp 10.0.2.104 54523 <-> 117.204.208.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:55.140218 0.162571 udp 10.0.2.104 54523 <-> 49.206.137.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:56.142260 0.000125 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:49:56.142385 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:49:57.143363 0.032806 udp 10.0.2.104 54523 <-> 195.211.10.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:58.134679 0.410155 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:49:59.135975 0.218996 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:00.137561 0.037854 udp 10.0.2.104 54523 <-> 89.253.191.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:01.139111 0.073633 udp 10.0.2.104 54523 <-> 95.104.232.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:02.140438 0.327144 udp 10.0.2.104 54523 <-> 125.201.162.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:03.142088 0.399711 udp 10.0.2.104 54523 <-> 60.228.64.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:04.143643 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:04.794648 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:50:05.135302 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:06.136296 0.054990 udp 10.0.2.104 54523 <-> 92.52.156.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:07.137554 0.065548 udp 10.0.2.104 54523 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:08.139366 1.255676 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:09.140733 0.141841 udp 10.0.2.104 54523 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:10.142501 0.161789 udp 10.0.2.104 54523 <-> 50.148.31.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:11.143546 0.071375 udp 10.0.2.104 54523 <-> 2.92.13.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:12.134987 0.000000 udp 10.0.2.104 54523 -> 95.42.5.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:13.136750 0.051015 udp 10.0.2.104 54523 <-> 89.99.86.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:14.137749 0.318248 udp 10.0.2.104 54523 <-> 119.18.179.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:15.139016 0.200783 udp 10.0.2.104 54523 <-> 70.70.162.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:16.140937 0.465585 udp 10.0.2.104 54523 <-> 123.24.179.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:17.142476 0.000000 udp 10.0.2.104 54523 -> 81.165.90.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:18.144053 0.148900 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:19.135067 0.316664 udp 10.0.2.104 54523 <-> 125.4.136.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:20.136402 0.000000 udp 10.0.2.104 54523 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:21.138041 0.271487 udp 10.0.2.104 54523 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:22.139405 0.049152 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:23.141187 0.446449 udp 10.0.2.104 54523 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:24.142477 0.230957 udp 10.0.2.104 54523 <-> 117.197.209.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:25.143481 0.573404 udp 10.0.2.104 54523 <-> 117.234.213.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:26.135435 0.395366 udp 10.0.2.104 54523 <-> 220.220.173.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:27.136670 0.022039 udp 10.0.2.104 54523 <-> 84.118.124.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:28.138189 0.312006 udp 10.0.2.104 54523 <-> 111.217.235.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:29.139345 0.098592 udp 10.0.2.104 54523 <-> 31.47.136.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:30.140782 0.070132 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:31.142447 0.363824 udp 10.0.2.104 54523 <-> 95.81.41.196 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:32.143793 0.961843 udp 10.0.2.104 54523 <-> 173.121.93.1 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:33.134912 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:34.137012 0.169284 udp 10.0.2.104 54523 <-> 76.188.147.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:35.138362 0.000000 udp 10.0.2.104 54523 -> 31.195.15.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:36.139165 0.159773 udp 10.0.2.104 54523 <-> 98.223.142.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:37.140634 0.297508 udp 10.0.2.104 54523 <-> 113.197.17.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:38.142306 0.150913 udp 10.0.2.104 54523 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:39.144155 0.117920 udp 10.0.2.104 54523 <-> 2.192.119.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:40.135266 0.285714 udp 10.0.2.104 54523 <-> 187.66.244.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:41.136889 0.154884 udp 10.0.2.104 54523 <-> 67.61.188.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:42.138269 0.029234 udp 10.0.2.104 54523 <-> 213.161.6.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:43.139790 0.000000 udp 10.0.2.104 54523 -> 72.38.11.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:44.141245 0.446666 udp 10.0.2.104 54523 <-> 61.105.222.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:45.142355 0.977036 udp 10.0.2.104 54523 <-> 101.99.38.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:46.144440 0.120615 udp 10.0.2.104 54523 <-> 24.122.115.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:47.134993 0.050270 udp 10.0.2.104 54523 <-> 86.126.2.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:48.136936 0.282758 udp 10.0.2.104 54523 -> 115.241.149.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:48.419694 0.000000 icmp 115.241.149.80 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:50:49.138467 0.064485 udp 10.0.2.104 54523 <-> 217.175.12.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:50.139297 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:51.141240 0.131700 udp 10.0.2.104 54523 <-> 94.190.82.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:51.802046 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:50:52.142383 0.000000 udp 10.0.2.104 54523 -> 190.204.134.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:50:53.144221 0.389461 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:54.135306 0.243694 udp 10.0.2.104 54523 <-> 71.64.195.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:55.137053 0.281410 udp 10.0.2.104 54523 <-> 46.209.216.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:56.138527 0.441880 udp 10.0.2.104 54523 <-> 115.241.12.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:57.139717 0.156542 udp 10.0.2.104 54523 <-> 97.95.93.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:58.141251 0.311426 udp 10.0.2.104 54523 <-> 117.212.33.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:50:59.142526 0.000000 udp 10.0.2.104 54523 -> 109.167.1.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:00.143924 0.000000 udp 10.0.2.104 54523 -> 213.157.165.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:01.135770 0.140657 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:02.137015 0.161227 udp 10.0.2.104 54523 <-> 98.103.195.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:03.138178 0.133763 udp 10.0.2.104 54523 <-> 174.66.197.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:04.139804 0.040025 udp 10.0.2.104 54523 <-> 46.10.189.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:05.141394 0.039796 udp 10.0.2.104 54523 <-> 79.118.33.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:06.142795 0.000000 udp 10.0.2.104 54523 -> 178.149.14.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:07.144608 0.000000 udp 10.0.2.104 54523 -> 2.231.68.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:08.135841 0.058222 udp 10.0.2.104 54523 <-> 188.2.29.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:09.136957 0.373142 udp 10.0.2.104 54523 <-> 61.227.71.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:10.138443 0.166294 udp 10.0.2.104 54523 <-> 184.160.61.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:11.140229 0.190064 udp 10.0.2.104 54523 <-> 107.9.137.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:12.141268 0.203732 udp 10.0.2.104 54523 <-> 50.26.141.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:13.143060 0.075929 udp 10.0.2.104 54523 <-> 89.99.86.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:14.143820 1.020714 udp 10.0.2.104 54523 <-> 166.159.168.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:15.135786 0.000000 udp 10.0.2.104 54523 -> 79.163.4.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:16.136677 0.000000 udp 10.0.2.104 54523 -> 77.226.75.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:17.138507 0.230671 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:18.140210 0.359150 udp 10.0.2.104 54523 <-> 114.24.190.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:19.141221 0.147773 udp 10.0.2.104 54523 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:20.142623 0.025098 udp 10.0.2.104 54523 <-> 80.219.71.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:21.144194 0.000000 udp 10.0.2.104 54523 -> 83.24.131.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:22.136128 0.240589 udp 10.0.2.104 54523 <-> 76.113.45.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:23.137224 0.150352 udp 10.0.2.104 54523 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:24.138540 0.078347 udp 10.0.2.104 54523 <-> 37.72.21.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:25.139625 0.062927 udp 10.0.2.104 54523 <-> 88.179.198.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:26.141806 0.000000 udp 10.0.2.104 54523 -> 14.99.81.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:27.142704 0.000000 udp 10.0.2.104 54523 -> 182.156.244.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:28.144448 0.150977 udp 10.0.2.104 54523 <-> 24.236.189.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:29.135377 0.584785 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:30.137387 0.398157 udp 10.0.2.104 54523 <-> 175.213.179.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:31.138557 0.411641 udp 10.0.2.104 54523 <-> 201.95.31.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:32.140045 0.032759 udp 10.0.2.104 54523 <-> 195.211.10.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:33.141193 0.423497 udp 10.0.2.104 54523 <-> 61.19.25.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:34.143249 2.046941 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:35.134348 0.061583 udp 10.0.2.104 54523 <-> 84.55.7.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:37.137087 0.370163 udp 10.0.2.104 54523 <-> 106.212.97.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:38.138630 0.038071 udp 10.0.2.104 54523 <-> 5.15.59.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:38.799644 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:51:39.140135 0.140236 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:40.141201 0.142072 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:41.143261 0.080657 udp 10.0.2.104 54523 <-> 109.53.254.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:42.134057 0.000000 udp 10.0.2.104 54523 -> 71.59.124.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:43.135708 0.048423 udp 10.0.2.104 54523 <-> 92.227.206.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:44.137286 0.146674 udp 10.0.2.104 54523 <-> 184.160.62.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:45.138915 0.150945 udp 10.0.2.104 54523 <-> 87.121.154.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:46.139899 0.056178 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:47.141554 0.073176 udp 10.0.2.104 54523 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:48.143091 1.677441 udp 10.0.2.104 54523 <-> 200.91.50.10 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:49.845181 0.011345 udp 10.0.2.104 54555 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 04:51:49.856810 0.000000 udp 10.0.2.104 54556 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:50.135814 0.000000 udp 10.0.2.104 54523 -> 216.188.238.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:51.137305 0.302304 udp 10.0.2.104 54523 <-> 210.128.207.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:52.138959 0.164094 udp 10.0.2.104 54523 <-> 98.243.163.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:53.140203 0.054369 udp 10.0.2.104 54523 <-> 91.219.80.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:54.141531 0.000000 udp 10.0.2.104 54523 -> 217.18.251.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:55.143148 0.060028 udp 10.0.2.104 54523 <-> 151.28.250.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:56.134194 0.000000 udp 10.0.2.104 54523 -> 74.179.189.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:51:57.135713 0.348356 udp 10.0.2.104 54523 <-> 105.227.253.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:58.137712 0.154271 udp 10.0.2.104 54523 <-> 68.117.244.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:51:59.138964 0.171450 udp 10.0.2.104 54523 <-> 93.180.198.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:00.139976 0.000000 udp 10.0.2.104 54523 -> 186.11.225.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:01.141911 0.059607 udp 10.0.2.104 54523 <-> 178.79.38.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:02.143462 0.000000 udp 10.0.2.104 54523 -> 186.195.193.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:03.134263 0.306704 udp 10.0.2.104 54523 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:04.135687 0.126101 udp 10.0.2.104 54523 <-> 68.174.186.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:05.137333 0.000000 udp 10.0.2.104 54523 -> 114.36.221.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:06.138783 0.084748 udp 10.0.2.104 54523 <-> 90.16.144.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:07.140450 0.307309 udp 10.0.2.104 54523 <-> 126.60.193.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:08.142038 0.385239 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:09.143528 0.130201 udp 10.0.2.104 54523 <-> 158.46.108.3 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:10.134568 2.601155 udp 10.0.2.104 54523 <-> 14.99.75.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:11.135864 0.066549 udp 10.0.2.104 54523 <-> 84.120.113.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:12.137572 0.000000 udp 10.0.2.104 54523 -> 212.225.185.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:13.139353 0.939412 udp 10.0.2.104 54523 <-> 72.141.22.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:14.140207 0.944235 udp 10.0.2.104 54523 <-> 14.97.90.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:15.141513 0.858759 udp 10.0.2.104 54523 <-> 179.236.58.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:16.143169 1.660479 udp 10.0.2.104 54523 <-> 112.119.39.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:17.134836 0.306643 udp 10.0.2.104 54523 <-> 41.174.24.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:18.136117 0.294785 udp 10.0.2.104 54523 <-> 177.226.26.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:19.137494 0.000000 udp 10.0.2.104 54523 -> 14.99.43.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:20.139041 0.416847 udp 10.0.2.104 54523 <-> 175.210.26.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:21.140633 0.175404 udp 10.0.2.104 54523 <-> 24.222.116.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:22.142145 0.077451 udp 10.0.2.104 54523 <-> 95.51.31.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:23.143420 0.145597 udp 10.0.2.104 54523 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:24.134984 0.291322 udp 10.0.2.104 54523 <-> 14.97.3.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:25.136047 0.154735 udp 10.0.2.104 54523 <-> 74.89.59.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:25.797323 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:52:26.137772 0.000000 udp 10.0.2.104 54523 -> 36.232.197.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:27.139161 0.377126 udp 10.0.2.104 54523 <-> 218.164.207.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:28.140196 0.467014 udp 10.0.2.104 54523 <-> 180.218.116.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:29.142241 0.404902 udp 10.0.2.104 54523 <-> 112.197.226.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:30.143708 0.858404 udp 10.0.2.104 54523 <-> 1.22.88.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:31.134528 0.023299 udp 10.0.2.104 54523 <-> 83.84.241.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:32.136458 0.303548 udp 10.0.2.104 54523 <-> 124.47.100.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:33.137528 0.010959 udp 10.0.2.104 54523 <-> 78.102.180.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:34.139304 0.160080 udp 10.0.2.104 54523 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:35.140490 0.042476 udp 10.0.2.104 54523 <-> 5.20.165.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:36.141702 0.436180 udp 10.0.2.104 54523 <-> 118.160.95.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:37.143733 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:38.134615 0.174756 udp 10.0.2.104 54523 <-> 120.138.105.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:39.136341 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:39.136404 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:52:40.137672 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:41.138882 0.894064 udp 10.0.2.104 54523 <-> 72.58.36.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:42.140516 0.317896 udp 10.0.2.104 54523 <-> 183.100.139.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:43.142375 0.169560 udp 10.0.2.104 54523 <-> 1.23.151.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:44.143434 0.157798 udp 10.0.2.104 54523 <-> 68.195.175.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:45.134856 0.164954 udp 10.0.2.104 54523 <-> 98.208.189.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:46.136564 0.247063 udp 10.0.2.104 54523 <-> 190.39.135.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:47.137545 0.768894 udp 10.0.2.104 54523 <-> 99.196.156.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:48.138990 0.142544 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:49.140483 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:50.142256 0.638775 udp 10.0.2.104 54523 <-> 85.84.80.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:51.143476 0.166315 udp 10.0.2.104 54523 <-> 65.162.46.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:52.135420 0.429293 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:53.136131 0.785506 udp 10.0.2.104 54523 <-> 200.84.252.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:54.137930 0.000000 udp 10.0.2.104 54523 -> 115.240.107.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:55.139404 0.175499 udp 10.0.2.104 54523 <-> 68.3.157.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:56.140915 0.000000 udp 10.0.2.104 54523 -> 37.58.155.0 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:57.142620 0.000000 udp 10.0.2.104 54523 -> 82.233.157.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:52:58.143706 0.065362 udp 10.0.2.104 54523 <-> 188.25.222.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:52:59.135032 0.000000 udp 10.0.2.104 54523 -> 201.222.176.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:00.136709 0.045598 udp 10.0.2.104 54523 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:53:01.137907 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:02.139976 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:03.140934 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:04.142630 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:05.143557 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:06.135151 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:07.136264 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:08.138322 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:09.139561 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:10.140859 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:11.142390 4.997394 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:12.143575 0.000000 udp 10.0.2.104 54523 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:12.794461 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:53:13.135608 0.576573 udp 10.0.2.104 54523 <-> 200.84.252.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:53:14.136939 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:15.138362 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:17.141386 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:18.142707 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:19.143696 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:20.135404 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:21.137063 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:22.138478 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:23.140043 0.448712 udp 10.0.2.104 54523 <-> 200.84.252.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:53:24.141297 0.029858 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:53:25.142343 0.137753 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:53:26.144131 0.000000 udp 10.0.2.104 54523 -> 75.57.126.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:27.135417 0.035851 udp 10.0.2.104 54523 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:53:28.136640 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:29.138342 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:30.139987 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:31.140896 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:32.142936 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:33.143874 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:33.143926 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:53:35.136725 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:36.137995 0.000000 udp 10.0.2.104 54523 -> 24.0.29.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:37.139384 0.527026 udp 10.0.2.104 54523 <-> 200.84.252.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:53:38.141213 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:39.142791 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:40.143968 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:41.135571 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:42.137069 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:43.138433 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:44.139665 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:45.141221 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:46.142585 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:47.143910 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:48.135693 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:49.137272 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:49.137380 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:53:50.138807 3.004311 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:51.139928 0.144201 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:53:52.141042 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:54.143852 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:55.135553 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:56.137299 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:57.138392 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:58.139946 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:53:59.802065 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:54:00.142841 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:01.144188 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:02.135666 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:03.137483 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:04.139130 0.000053 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:04.139183 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:54:05.140187 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:06.141307 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:07.143103 0.329329 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:08.134070 0.062541 udp 10.0.2.104 54523 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:09.135812 0.601190 udp 10.0.2.104 54523 <-> 200.84.252.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:10.137499 0.000000 udp 10.0.2.104 54523 -> 85.225.6.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:11.138955 4.996629 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:12.139837 1.282539 udp 10.0.2.104 54523 <-> 79.36.252.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:13.141214 0.000000 udp 10.0.2.104 54523 -> 190.206.140.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:14.142625 3.284602 udp 10.0.2.104 54523 <-> 70.30.90.88 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:15.134018 0.665793 udp 10.0.2.104 54523 <-> 217.186.199.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:16.292686 0.000000 udp 10.0.2.104 54523 <- 74.129.39.118 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:18.138920 0.000000 udp 10.0.2.104 54523 -> 190.38.55.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:19.139810 0.152600 udp 10.0.2.104 54523 <-> 107.15.192.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:20.141688 0.000000 udp 10.0.2.104 54523 -> 70.30.90.88 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:21.143072 3.995616 udp 10.0.2.104 54523 -> 82.51.57.203 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:22.134421 0.000000 udp 10.0.2.104 54523 -> 5.15.140.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:23.135833 0.000000 udp 10.0.2.104 54523 -> 79.7.112.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:24.137319 4.997204 udp 10.0.2.104 54523 <-> 125.142.179.162 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:27.141290 0.000000 udp 10.0.2.104 54523 -> 190.38.55.194 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:28.142896 0.261914 udp 10.0.2.104 54523 <-> 76.92.155.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:29.451143 1.001721 udp 10.0.2.104 54523 <-> 125.142.179.162 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:31.137081 0.080725 udp 10.0.2.104 54523 <-> 2.94.11.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:32.138671 0.340355 udp 10.0.2.104 54523 <-> 123.194.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:33.140016 0.287462 udp 10.0.2.104 54523 <-> 189.6.137.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:34.141740 0.317268 udp 10.0.2.104 54523 <-> 122.49.247.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:35.142929 0.156789 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:36.134466 0.320490 udp 10.0.2.104 54523 <-> 116.203.122.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:37.136355 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:38.137326 0.171192 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:39.138896 3.051176 udp 10.0.2.104 54523 <-> 212.67.155.236 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:40.139978 3.995752 udp 10.0.2.104 54523 -> 88.6.250.242 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:41.141560 2.771298 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:45.137322 0.000000 udp 10.0.2.104 54523 -> 111.246.35.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:46.139132 0.051960 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:46.799782 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:54:47.140633 0.764913 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:48.141494 0.237743 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:49.143608 0.147741 udp 10.0.2.104 54523 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:50.134779 0.140643 udp 10.0.2.104 54523 <-> 184.59.170.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:51.136358 0.043025 udp 10.0.2.104 54523 <-> 80.238.103.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:52.137529 0.031309 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:53.139336 0.137630 udp 10.0.2.104 54523 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:54.140102 1.072526 udp 10.0.2.104 54523 <-> 37.215.216.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:55.141776 0.157623 udp 10.0.2.104 54523 <-> 74.192.111.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:56.143146 0.062719 udp 10.0.2.104 54523 <-> 82.160.201.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:57.134407 0.000000 udp 10.0.2.104 54523 -> 217.41.59.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:54:58.136282 0.178937 udp 10.0.2.104 54523 <-> 46.106.94.170 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:54:59.137837 0.129275 udp 10.0.2.104 54523 <-> 70.187.76.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:00.139257 0.177845 udp 10.0.2.104 54523 <-> 123.201.121.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:01.140203 0.301179 udp 10.0.2.104 54523 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:02.142264 0.144344 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:03.143307 0.052797 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:04.135223 0.050630 udp 10.0.2.104 54523 <-> 188.24.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:05.136495 0.160798 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:06.138106 0.158562 udp 10.0.2.104 54523 <-> 113.193.40.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:06.230448 3.001827 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:55:07.139352 0.000000 udp 10.0.2.104 54523 -> 198.57.56.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:08.140431 0.000000 udp 10.0.2.104 54523 -> 201.211.119.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:09.142235 0.316758 udp 10.0.2.104 54523 <-> 27.140.6.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:10.143771 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:11.134581 0.317544 udp 10.0.2.104 54523 <-> 218.149.5.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:12.136434 0.000000 udp 10.0.2.104 54523 -> 112.197.242.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:13.137833 0.063351 udp 10.0.2.104 54523 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:13.237723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:55:14.139279 0.140686 udp 10.0.2.104 54523 <-> 24.151.86.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:15.140738 0.364579 udp 10.0.2.104 54523 <-> 113.254.24.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:16.141943 0.533923 udp 10.0.2.104 54523 <-> 117.234.213.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:17.143288 0.036972 udp 10.0.2.104 54523 <-> 89.65.137.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:18.135275 0.167743 udp 10.0.2.104 54523 <-> 106.51.24.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:19.136269 0.344663 udp 10.0.2.104 54523 <-> 125.224.112.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:20.137784 0.347339 udp 10.0.2.104 54523 <-> 114.51.181.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:21.139361 0.148293 udp 10.0.2.104 54523 <-> 69.249.127.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:21.239735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:55:22.140886 0.161199 udp 10.0.2.104 54523 <-> 113.193.40.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:23.142147 0.080123 udp 10.0.2.104 54523 <-> 88.242.13.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:24.143991 0.086056 udp 10.0.2.104 54523 <-> 84.46.165.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:25.134918 0.104891 udp 10.0.2.104 54523 <-> 85.85.45.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:26.136782 0.203978 udp 10.0.2.104 54523 <-> 50.123.134.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:27.137974 0.375140 udp 10.0.2.104 54523 <-> 117.216.6.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:28.139335 1.441015 udp 10.0.2.104 54523 <-> 190.36.115.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:29.141148 0.249412 udp 10.0.2.104 54523 <-> 99.135.171.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:30.142497 0.000000 udp 10.0.2.104 54523 -> 112.137.92.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:31.143764 0.142955 udp 10.0.2.104 54523 <-> 75.177.1.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:32.135247 0.302937 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:33.136804 0.478987 udp 10.0.2.104 54523 <-> 49.213.47.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:33.797868 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:55:34.138234 0.218978 udp 10.0.2.104 54523 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:35.139095 0.159551 udp 10.0.2.104 54523 <-> 67.242.84.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:36.140555 0.057484 udp 10.0.2.104 54523 <-> 188.2.29.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:37.142069 0.439325 udp 10.0.2.104 54523 <-> 122.100.75.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:37.242595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:55:38.143430 0.205698 udp 10.0.2.104 54523 <-> 172.190.235.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:39.135341 0.071806 udp 10.0.2.104 54523 <-> 93.72.97.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:40.136881 0.000000 udp 10.0.2.104 54523 -> 78.154.168.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:41.137911 0.390661 udp 10.0.2.104 54523 <-> 59.115.150.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:42.139925 0.451145 udp 10.0.2.104 54523 <-> 84.224.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:43.140890 0.484847 udp 10.0.2.104 54523 <-> 61.224.128.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:44.142495 0.379776 udp 10.0.2.104 54523 <-> 99.135.171.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:45.143428 0.076665 udp 10.0.2.104 54523 <-> 213.60.233.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:46.134977 0.092413 udp 10.0.2.104 54523 <-> 78.35.80.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:47.136837 0.711134 udp 10.0.2.104 54523 <-> 117.234.213.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:48.138232 0.000000 udp 10.0.2.104 54523 -> 99.245.223.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:49.139810 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:50.141185 0.051725 udp 10.0.2.104 54523 <-> 91.187.79.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:51.142702 0.000000 udp 10.0.2.104 54523 -> 114.143.57.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:52.143671 0.292859 udp 10.0.2.104 54523 <-> 190.47.200.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:53.134946 0.000000 udp 10.0.2.104 54523 -> 89.139.162.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:55:54.137229 0.127453 udp 10.0.2.104 54523 <-> 68.82.170.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:55.137966 0.133798 udp 10.0.2.104 54523 <-> 24.192.199.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:56.139827 0.050552 udp 10.0.2.104 54523 <-> 188.27.211.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:57.141272 0.145334 udp 10.0.2.104 54523 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:58.142723 0.094168 udp 10.0.2.104 54523 <-> 31.47.136.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:55:59.143913 3.995491 udp 10.0.2.104 54523 -> 114.40.221.71 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:00.135147 4.123284 udp 10.0.2.104 54523 <-> 70.184.172.70 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:01.136671 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:02.137860 0.172583 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:05.142758 0.086193 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:06.143953 3.111789 udp 10.0.2.104 54523 <-> 70.184.172.70 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:07.135074 0.125860 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:08.136769 0.169487 udp 10.0.2.104 54523 <-> 174.64.185.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:09.248711 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:56:10.139412 0.086694 udp 10.0.2.104 54523 <-> 37.215.190.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:11.141541 2.002339 udp 10.0.2.104 54523 -> 116.202.140.224 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:12.142691 0.136979 udp 10.0.2.104 54523 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:14.135695 0.000000 udp 10.0.2.104 54523 -> 115.241.12.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:15.136704 0.060503 udp 10.0.2.104 54523 <-> 79.113.177.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:16.138278 0.039633 udp 10.0.2.104 54523 <-> 77.222.231.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:17.140121 0.282455 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:18.141209 0.336916 udp 10.0.2.104 54523 <-> 190.129.109.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:19.142312 0.038368 udp 10.0.2.104 54523 <-> 89.72.99.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:20.144401 0.353044 udp 10.0.2.104 54523 <-> 105.224.122.139 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:20.794965 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:56:21.135298 0.438462 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:22.136938 0.317732 udp 10.0.2.104 54523 <-> 49.249.26.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:23.138576 0.095902 udp 10.0.2.104 54523 <-> 86.44.130.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:24.140208 0.982423 udp 10.0.2.104 54523 <-> 91.120.105.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:25.141167 0.274710 udp 10.0.2.104 54523 <-> 14.99.4.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:26.143092 0.379637 udp 10.0.2.104 54523 <-> 118.165.202.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:27.143984 0.799761 udp 10.0.2.104 54523 <-> 117.197.251.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:28.135264 0.137497 udp 10.0.2.104 54523 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:29.136923 0.637748 udp 10.0.2.104 54523 <-> 96.49.44.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:30.138290 3.090160 udp 10.0.2.104 54523 <-> 105.133.77.131 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:31.139820 0.159498 udp 10.0.2.104 54523 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:32.141261 0.342005 udp 10.0.2.104 54523 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:33.142736 0.377064 udp 10.0.2.104 54523 <-> 183.179.52.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:34.144080 0.077869 udp 10.0.2.104 54523 <-> 85.202.146.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:35.135756 0.000000 udp 10.0.2.104 54523 -> 72.231.199.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:36.137277 0.000000 udp 10.0.2.104 54523 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:37.138225 0.000000 udp 10.0.2.104 54523 -> 27.4.11.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:38.140399 0.178128 udp 10.0.2.104 54523 <-> 173.216.251.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:39.141252 1.352874 udp 10.0.2.104 54523 <-> 14.97.61.200 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:41.134450 0.430526 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:42.136124 0.078762 udp 10.0.2.104 54523 <-> 176.8.160.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:43.137115 0.148246 udp 10.0.2.104 54523 <-> 31.11.182.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:44.138603 0.000000 udp 10.0.2.104 54523 -> 60.53.178.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:45.140411 0.000000 udp 10.0.2.104 54523 -> 93.88.106.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:46.141259 3.607739 udp 10.0.2.104 54523 <-> 186.15.149.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:47.143271 0.321152 udp 10.0.2.104 54523 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:48.134230 2.156272 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:49.135862 0.000000 udp 10.0.2.104 54523 -> 111.94.11.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:51.139020 0.065174 udp 10.0.2.104 54523 <-> 94.19.17.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:52.140038 0.000000 udp 10.0.2.104 54523 -> 187.24.58.138 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:53.141460 1.029941 udp 10.0.2.104 54523 <-> 84.26.131.106 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:55.134692 0.000000 udp 10.0.2.104 54523 -> 124.11.229.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:56:56.135854 0.044618 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:57.137164 0.154798 udp 10.0.2.104 54523 <-> 67.165.135.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:58.139014 1.005878 udp 10.0.2.104 54523 <-> 84.118.182.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:56:59.140529 0.116489 udp 10.0.2.104 54523 <-> 157.252.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:00.141373 0.498877 udp 10.0.2.104 54523 <-> 14.99.48.65 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:01.143097 2.158645 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:02.134660 0.044390 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:04.137432 0.173238 udp 10.0.2.104 54523 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:05.139160 0.075915 udp 10.0.2.104 54523 <-> 109.74.171.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:06.140024 0.331189 udp 10.0.2.104 54523 <-> 36.231.140.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:07.142025 0.000000 udp 10.0.2.104 54523 -> 50.160.143.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:07.802561 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:57:08.142869 0.066325 udp 10.0.2.104 54523 <-> 79.114.63.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:09.134337 0.932949 udp 10.0.2.104 54523 <-> 117.203.238.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:10.136002 0.000000 udp 10.0.2.104 54523 -> 66.187.64.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:11.137070 0.205781 udp 10.0.2.104 54523 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:12.138594 0.181713 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:13.139971 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:14.141558 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:14.141651 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:57:15.143262 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:16.134505 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:17.136051 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:18.137433 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:19.138954 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:20.140176 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:21.141858 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:22.143771 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:23.134947 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:24.136493 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:25.137219 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:26.138645 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:27.140465 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:28.142192 0.349801 udp 10.0.2.104 54523 <-> 177.130.165.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:29.143259 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:29.143347 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:57:30.134592 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:31.136160 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:32.137271 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:32.983757 0.000000 udp 10.0.2.104 54523 <- 50.160.143.166 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:33.138764 0.000000 udp 10.0.2.104 54523 -> 186.53.206.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:34.140663 0.024260 udp 10.0.2.104 54523 <-> 78.42.45.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:35.142007 0.000000 udp 10.0.2.104 54523 -> 200.101.111.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:36.143360 0.315526 udp 10.0.2.104 54523 <-> 114.159.192.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:37.134750 1.108413 udp 10.0.2.104 54523 <-> 27.231.192.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:38.135885 0.204307 udp 10.0.2.104 54523 <-> 24.55.45.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:39.137418 0.036216 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:40.138938 3.121548 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:41.140748 0.000000 udp 10.0.2.104 54523 -> 1.173.137.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:42.142088 0.227554 udp 10.0.2.104 54523 <-> 184.166.9.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:44.135201 0.015384 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:45.136458 0.051217 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:46.137808 0.130492 udp 10.0.2.104 54523 <-> 212.251.106.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:47.139279 0.977234 udp 10.0.2.104 54523 <-> 200.44.254.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:48.140447 0.141296 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:49.142310 0.342637 udp 10.0.2.104 54523 <-> 126.122.50.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:50.143913 0.172250 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:51.134795 0.186259 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:52.136135 1.240563 udp 10.0.2.104 54523 <-> 186.92.220.158 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:54.139190 0.072900 udp 10.0.2.104 54523 -> 94.185.78.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:54.212090 0.000000 icmp 94.185.78.58 0x0103 -> 10.0.2.104 0x5eb9 URH 192 1 70 flow=Background 1970/01/01 04:57:54.799920 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:57:55.140846 0.057744 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:56.142513 0.350030 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:57.143324 4.063451 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:57:58.134860 0.000000 udp 10.0.2.104 54523 -> 118.6.66.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:57:59.136274 0.261367 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:00.138038 4.066694 udp 10.0.2.104 54523 <-> 85.122.147.74 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:02.140542 0.161864 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:03.141844 0.000000 udp 10.0.2.104 54523 -> 118.6.66.92 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:05.134714 0.000000 udp 10.0.2.104 54523 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:06.136646 0.040474 udp 10.0.2.104 54523 <-> 195.178.240.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:07.137663 0.000000 udp 10.0.2.104 54523 -> 111.253.130.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:08.139167 0.253824 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:09.140475 4.997826 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:10.142058 0.061698 udp 10.0.2.104 54523 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:11.143766 4.055700 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:12.134991 0.068551 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:14.266686 0.000000 udp 10.0.2.104 54523 <- 173.81.172.56 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:16.140716 0.000000 udp 10.0.2.104 54523 -> 2.146.42.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:17.142593 0.044537 udp 10.0.2.104 54523 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:18.144083 0.219820 udp 10.0.2.104 54523 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:19.135433 0.000000 udp 10.0.2.104 54523 -> 121.171.34.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:20.136309 0.274265 udp 10.0.2.104 54523 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:21.138078 0.308409 udp 10.0.2.104 54523 <-> 75.206.212.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:22.139357 0.049554 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:23.141318 0.023222 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:24.142567 0.600801 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:25.143752 0.157143 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:26.135275 0.236094 udp 10.0.2.104 54523 <-> 187.245.107.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:27.137183 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:28.137785 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:29.139835 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:30.141100 0.058128 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:31.142840 0.395530 udp 10.0.2.104 54523 <-> 75.197.101.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:32.144014 0.000000 udp 10.0.2.104 54523 -> 187.162.129.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:33.135287 0.137699 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:34.137078 0.000000 udp 10.0.2.104 54523 -> 187.245.107.235 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:35.138124 0.115413 udp 10.0.2.104 54523 <-> 8.25.227.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:36.139293 0.058280 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:37.140937 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:38.142665 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:39.144115 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:40.135039 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:41.137033 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:41.798111 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:58:42.138279 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:43.139406 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:44.141446 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:45.142771 0.163486 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:46.143956 0.000000 udp 10.0.2.104 54523 -> 177.227.173.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:47.135232 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:48.136683 2.118922 udp 10.0.2.104 54523 <-> 8.25.227.7 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:49.138011 0.000000 udp 10.0.2.104 54523 -> 175.35.78.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:51.141305 0.000000 udp 10.0.2.104 54523 -> 79.27.233.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:52.142895 0.275742 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:53.144233 0.284643 udp 10.0.2.104 54523 <-> 190.151.62.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:54.135793 0.156321 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:55.136943 0.312870 udp 10.0.2.104 54523 <-> 150.162.97.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:56.138141 0.045252 udp 10.0.2.104 54523 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:57.139657 0.000000 udp 10.0.2.104 54523 -> 77.78.227.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:58:58.141213 0.814671 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:58:59.142378 0.113631 udp 10.0.2.104 54523 <-> 84.229.39.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:00.144448 0.161964 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:01.136010 0.163926 udp 10.0.2.104 54523 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:02.136669 0.460215 udp 10.0.2.104 54523 <-> 180.215.207.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:03.138546 1.297444 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:05.141587 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:06.142683 0.171164 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:07.144395 2.994228 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:09.137067 0.000000 udp 10.0.2.104 54523 -> 14.97.48.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:11.140331 0.153375 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:12.141472 3.166943 udp 10.0.2.104 54523 <-> 80.171.186.95 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:13.142519 0.042777 udp 10.0.2.104 54523 <-> 147.156.162.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:14.134436 0.135559 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:16.137207 0.189903 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:17.138614 0.154610 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:18.139950 0.000000 udp 10.0.2.104 54523 -> 14.97.48.95 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:19.141765 0.143464 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:20.143184 0.207722 udp 10.0.2.104 54523 <-> 80.171.186.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:21.133980 0.071354 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:22.135844 3.182005 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:23.137220 0.000000 udp 10.0.2.104 54523 -> 95.18.192.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:24.138926 0.000000 udp 10.0.2.104 54523 -> 217.211.215.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:26.141378 0.078857 udp 10.0.2.104 54523 <-> 213.254.71.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:27.143348 0.114671 udp 10.0.2.104 54523 <-> 8.25.227.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:28.134738 0.072532 udp 10.0.2.104 54523 <-> 88.183.185.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:28.795421 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:59:29.135800 0.312181 udp 10.0.2.104 54523 <-> 112.71.184.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:30.137485 0.053978 udp 10.0.2.104 54523 <-> 82.242.254.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:31.138651 0.210987 udp 10.0.2.104 54523 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:32.140653 0.000000 udp 10.0.2.104 54523 -> 62.68.100.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:33.141251 0.052223 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:34.143336 0.000000 udp 10.0.2.104 54523 -> 201.186.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:35.134738 0.000000 udp 10.0.2.104 54523 -> 218.223.103.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:36.136076 1.316608 udp 10.0.2.104 54523 <-> 222.144.110.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:38.139043 0.356418 udp 10.0.2.104 54523 <-> 113.253.23.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:39.139977 0.308094 udp 10.0.2.104 54523 <-> 219.109.69.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:40.141380 0.162419 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:41.143200 0.307928 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:42.134790 0.024019 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:43.135801 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:44.137194 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:45.138583 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:46.140142 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:47.141864 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:48.143549 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:49.134944 0.314354 udp 10.0.2.104 54523 <-> 219.109.69.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:50.135700 0.166760 udp 10.0.2.104 54523 <-> 24.207.155.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:51.137341 0.279742 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:52.138876 0.174784 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:53.140161 0.207734 udp 10.0.2.104 54523 <-> 98.210.235.8 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:54.142083 0.069056 udp 10.0.2.104 54523 <-> 84.120.113.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:55.143415 0.159702 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:56.134968 0.152384 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:57.136354 0.045314 udp 10.0.2.104 54523 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 04:59:58.137433 0.000000 udp 10.0.2.104 54523 -> 178.25.74.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 04:59:59.138838 0.303687 udp 10.0.2.104 54523 <-> 124.100.80.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:00.140064 1.068428 udp 10.0.2.104 54523 <-> 213.254.71.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:02.143033 1.132214 udp 10.0.2.104 54523 <-> 200.126.150.83 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:03.134882 0.000000 udp 10.0.2.104 54523 -> 81.106.56.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:04.136531 0.000000 udp 10.0.2.104 54523 -> 114.42.213.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:05.137866 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:06.139096 0.000000 udp 10.0.2.104 54523 -> 178.79.32.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:07.140480 0.053934 udp 10.0.2.104 54523 <-> 82.242.254.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:08.142268 0.204585 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:09.143025 0.147028 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:10.135098 0.069000 udp 10.0.2.104 54523 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:11.136399 0.285856 udp 10.0.2.104 54523 <-> 187.107.55.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:12.137967 0.000000 udp 10.0.2.104 54523 -> 187.69.166.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:13.138765 0.000000 udp 10.0.2.104 54523 -> 79.109.169.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:14.140888 0.065428 udp 10.0.2.104 54523 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:15.141793 0.062055 udp 10.0.2.104 54523 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:15.793017 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:00:16.143372 0.065399 udp 10.0.2.104 54523 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:17.134644 0.190252 udp 10.0.2.104 54523 <-> 72.23.74.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:18.136254 0.036177 udp 10.0.2.104 54523 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:19.137376 0.286559 udp 10.0.2.104 54523 <-> 118.237.85.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:20.139657 1.088839 udp 10.0.2.104 54523 <-> 220.143.222.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:21.140971 0.366966 udp 10.0.2.104 54523 <-> 202.71.5.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:22.142307 0.342606 udp 10.0.2.104 54523 <-> 177.137.187.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:23.143834 0.000000 udp 10.0.2.104 54523 -> 95.107.216.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:24.135206 0.000000 udp 10.0.2.104 54523 -> 188.246.77.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:25.136057 0.140387 udp 10.0.2.104 54523 <-> 1.186.124.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:26.137788 0.000000 udp 10.0.2.104 54523 -> 14.97.213.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:27.139486 0.221831 udp 10.0.2.104 54523 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:28.140924 0.000000 udp 10.0.2.104 54523 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:29.141861 0.000000 udp 10.0.2.104 54523 -> 188.246.77.25 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:30.143773 0.000000 udp 10.0.2.104 54523 -> 1.38.25.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:31.135024 0.267532 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:32.136348 0.114774 udp 10.0.2.104 54523 <-> 8.25.227.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:33.137526 0.285205 udp 10.0.2.104 54523 <-> 181.28.105.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:34.138991 0.009046 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:35.140860 0.174589 udp 10.0.2.104 54523 <-> 173.177.19.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:36.142460 3.053706 udp 10.0.2.104 54523 <-> 188.24.130.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:37.143719 0.000000 udp 10.0.2.104 54523 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:38.135372 0.120162 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:40.137833 0.053939 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:41.139233 0.060086 udp 10.0.2.104 54523 <-> 89.253.170.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:42.140551 0.040206 udp 10.0.2.104 54523 <-> 46.10.189.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:43.142437 0.049210 udp 10.0.2.104 54523 <-> 95.158.180.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:44.143329 0.153360 udp 10.0.2.104 54523 <-> 68.188.238.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:45.134760 0.129461 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:46.136915 0.203569 udp 10.0.2.104 54523 <-> 99.102.150.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:47.137660 0.000000 udp 10.0.2.104 54523 -> 92.32.25.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:48.139228 0.000000 udp 10.0.2.104 54523 -> 177.143.131.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:49.140946 0.297271 udp 10.0.2.104 54523 <-> 121.2.96.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:50.142368 0.550915 udp 10.0.2.104 54523 <-> 70.189.102.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:51.143841 0.283977 udp 10.0.2.104 54523 <-> 187.15.59.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:52.135001 0.000000 udp 10.0.2.104 54523 -> 24.220.225.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:53.136544 0.146201 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:54.137793 0.000000 udp 10.0.2.104 54523 -> 85.104.86.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:00:55.139601 0.351299 udp 10.0.2.104 54523 <-> 183.178.121.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:56.141214 0.054162 udp 10.0.2.104 54523 <-> 92.36.150.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:57.142162 3.101429 udp 10.0.2.104 54523 <-> 88.165.10.238 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:58.143763 0.348994 udp 10.0.2.104 54523 <-> 218.164.173.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:00:59.135480 0.585158 udp 10.0.2.104 54523 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:01.138360 0.020992 udp 10.0.2.104 54523 <-> 89.176.72.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:02.139729 0.166472 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:02.800527 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:01:03.140934 3.071223 udp 10.0.2.104 54523 <-> 88.165.10.238 16464 CON 0 0 6 3676 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:04.142235 0.393547 udp 10.0.2.104 54523 <-> 117.212.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:05.143915 0.289566 udp 10.0.2.104 54523 <-> 85.202.213.208 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:07.136573 0.064211 udp 10.0.2.104 54523 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:08.138286 1.041134 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:10.140950 0.163720 udp 10.0.2.104 54523 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:11.142350 0.230410 udp 10.0.2.104 54523 <-> 186.112.163.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:12.144145 0.044193 udp 10.0.2.104 54523 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:13.135428 0.000000 udp 10.0.2.104 54523 -> 189.54.80.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:14.136651 0.224907 udp 10.0.2.104 54523 <-> 115.252.37.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:15.138424 0.156314 udp 10.0.2.104 54523 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:16.139531 4.040541 udp 10.0.2.104 54523 <-> 5.20.68.115 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:17.141322 0.151534 udp 10.0.2.104 54523 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:18.142267 0.366469 udp 10.0.2.104 54523 <-> 190.206.231.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:19.144533 0.000000 udp 10.0.2.104 54523 -> 79.117.63.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:21.137022 0.041278 udp 10.0.2.104 54523 <-> 80.238.103.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:22.138504 0.319514 udp 10.0.2.104 54523 <-> 183.97.104.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:23.140201 3.097082 udp 10.0.2.104 54523 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:24.141267 0.382870 udp 10.0.2.104 54523 <-> 58.124.217.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:25.142693 0.000000 udp 10.0.2.104 54523 -> 116.202.177.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:26.143894 0.042656 udp 10.0.2.104 54523 <-> 80.200.192.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:27.135251 0.397484 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:28.136881 0.187204 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:29.138053 0.000000 udp 10.0.2.104 54523 -> 115.242.27.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:30.139981 0.163369 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:31.141053 0.060463 udp 10.0.2.104 54523 <-> 79.113.177.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:32.142780 3.786082 udp 10.0.2.104 54523 <-> 105.235.44.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:33.144335 0.230481 udp 10.0.2.104 54523 <-> 166.159.109.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:34.135571 0.169326 udp 10.0.2.104 54523 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:35.137131 0.120648 udp 10.0.2.104 54523 <-> 83.26.168.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:36.138727 0.703516 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:37.140122 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:38.141364 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:39.142877 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:40.144312 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:41.135275 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:42.137153 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:43.138727 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:44.140143 0.209982 udp 10.0.2.104 54523 <-> 83.26.168.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:01:45.141503 0.000054 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:45.141557 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:01:46.143006 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:47.133894 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:48.135979 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:49.137023 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:50.138939 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:50.799451 0.000213 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:01:51.139905 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:52.141607 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:53.142933 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:55.135997 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:56.139634 4.994928 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:57.138362 4.997779 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:58.140046 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:01:59.141495 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:00.142971 0.367830 udp 10.0.2.104 54523 <-> 61.62.110.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:03.137336 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:04.138601 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:05.140214 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:06.141733 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:07.143219 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:08.134404 0.038180 udp 10.0.2.104 54523 <-> 84.197.172.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:09.135790 0.284284 udp 10.0.2.104 54523 <-> 49.249.26.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:10.137218 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:11.138530 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:12.139879 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:13.141885 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:13.254070 3.002300 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:02:14.143404 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:14.143480 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:02:16.136075 0.168466 udp 10.0.2.104 54523 <-> 174.55.72.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:17.137231 0.000000 udp 10.0.2.104 54523 -> 190.203.106.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:18.138570 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:19.140018 0.000000 udp 10.0.2.104 54523 -> 201.0.15.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:20.141523 0.000000 udp 10.0.2.104 54523 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:20.262164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:02:21.143382 0.000000 udp 10.0.2.104 54523 -> 206.251.250.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:22.134661 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:23.136033 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:24.137333 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:25.138589 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:26.140243 0.386563 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:27.141846 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:28.143089 1.730757 udp 10.0.2.104 54523 <-> 190.203.106.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:28.263311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:02:30.136549 0.523564 udp 10.0.2.104 54523 <-> 1.186.125.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:31.137373 0.000000 udp 10.0.2.104 54523 -> 111.242.143.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:32.138787 0.234858 udp 10.0.2.104 54523 <-> 200.93.57.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:33.140146 0.161270 udp 10.0.2.104 54523 <-> 24.182.105.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:34.141505 0.000000 udp 10.0.2.104 54523 -> 79.117.106.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:35.143349 1.253866 udp 10.0.2.104 54523 <-> 115.117.83.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:36.135013 0.189706 udp 10.0.2.104 54523 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:37.136467 0.148758 udp 10.0.2.104 54523 <-> 1.186.125.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:37.797153 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:02:38.137791 0.287960 udp 10.0.2.104 54523 <-> 121.2.97.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:39.138716 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:40.140725 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:41.142173 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:42.143390 1.992721 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:42.143490 1.992621 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 05:02:43.135193 0.139103 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:44.266707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:02:45.137316 0.040962 udp 10.0.2.104 54523 <-> 147.143.129.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:46.139139 0.037513 udp 10.0.2.104 54523 <-> 79.136.122.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:47.140986 0.042214 udp 10.0.2.104 54523 <-> 147.156.194.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:48.142108 0.154740 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:49.143857 0.353724 udp 10.0.2.104 54523 <-> 123.110.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:50.134921 0.426988 udp 10.0.2.104 54523 <-> 125.1.93.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:51.136275 0.207852 udp 10.0.2.104 54523 <-> 24.19.205.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:52.137483 0.169630 udp 10.0.2.104 54523 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:53.139608 0.311328 udp 10.0.2.104 54523 <-> 216.21.193.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:54.140633 0.159612 udp 10.0.2.104 54523 <-> 71.195.155.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:55.142189 0.149638 udp 10.0.2.104 54523 <-> 68.192.174.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:56.143167 0.145060 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:57.135004 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:02:58.136234 0.233361 udp 10.0.2.104 54523 <-> 190.74.65.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:02:59.137786 0.155093 udp 10.0.2.104 54523 <-> 67.240.151.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:00.139018 0.048630 udp 10.0.2.104 54523 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:01.140510 0.484475 udp 10.0.2.104 54523 <-> 61.227.20.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:02.142132 0.735514 udp 10.0.2.104 54523 <-> 49.124.248.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:03.143380 0.032835 udp 10.0.2.104 54523 <-> 84.56.163.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:04.135351 0.128993 udp 10.0.2.104 54523 <-> 158.181.168.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:05.136689 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:06.137911 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:07.139453 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:08.140785 0.348869 udp 10.0.2.104 54523 <-> 183.87.66.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:09.142239 0.310398 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:10.143778 0.451273 udp 10.0.2.104 54523 <-> 123.254.196.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:11.135022 0.171832 udp 10.0.2.104 54523 <-> 70.178.163.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:12.136659 0.415471 udp 10.0.2.104 54523 <-> 183.106.185.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:13.137968 0.301627 udp 10.0.2.104 54523 <-> 27.141.56.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:14.139224 0.162540 udp 10.0.2.104 54523 <-> 74.193.110.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:15.140436 0.167058 udp 10.0.2.104 54523 <-> 68.201.88.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:16.142173 0.362503 udp 10.0.2.104 54523 <-> 1.174.35.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:16.272298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:03:17.143750 4.043681 udp 10.0.2.104 54523 <-> 5.14.145.222 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:18.134873 0.000000 udp 10.0.2.104 54523 -> 88.222.170.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:19.136757 0.148968 udp 10.0.2.104 54523 <-> 72.231.172.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:20.138047 0.077394 udp 10.0.2.104 54523 <-> 79.36.189.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:22.140797 0.173832 udp 10.0.2.104 54523 <-> 97.66.100.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:23.142537 0.256812 udp 10.0.2.104 54523 <-> 78.58.198.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:24.143427 0.012950 udp 10.0.2.104 54523 <-> 89.103.128.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:24.794261 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:03:25.134964 0.085927 udp 10.0.2.104 54523 <-> 85.155.41.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:26.136854 0.168715 udp 10.0.2.104 54523 <-> 123.238.129.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:27.138325 0.409124 udp 10.0.2.104 54523 <-> 14.96.29.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:28.139324 0.057636 udp 10.0.2.104 54523 <-> 94.253.254.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:29.141335 0.000000 udp 10.0.2.104 54523 -> 74.79.65.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:30.142033 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:31.143863 0.369220 udp 10.0.2.104 54523 <-> 1.175.200.166 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:32.135471 0.000000 udp 10.0.2.104 54523 -> 78.92.193.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:33.136375 0.000000 udp 10.0.2.104 54523 -> 176.198.179.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:34.138224 0.201862 udp 10.0.2.104 54523 <-> 116.68.86.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:35.139290 0.039367 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:36.141033 0.399064 udp 10.0.2.104 54523 <-> 153.147.70.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:37.142449 0.217884 udp 10.0.2.104 54523 <-> 190.207.251.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:38.143692 0.060460 udp 10.0.2.104 54523 <-> 79.116.213.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:39.135384 0.208466 udp 10.0.2.104 54523 <-> 75.140.19.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:40.136969 2.409282 udp 10.0.2.104 54523 <-> 114.43.138.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:41.137921 0.044787 udp 10.0.2.104 54523 <-> 5.13.26.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:43.141247 0.062902 udp 10.0.2.104 54523 <-> 92.37.126.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:44.142765 0.000000 udp 10.0.2.104 54523 -> 89.136.63.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:45.144236 0.129825 udp 10.0.2.104 54523 <-> 67.193.95.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:46.135120 2.157067 udp 10.0.2.104 54523 <-> 98.212.63.222 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:47.136777 2.802738 udp 10.0.2.104 54523 <-> 101.99.129.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:49.139318 0.048891 udp 10.0.2.104 54523 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:50.141172 0.144762 udp 10.0.2.104 54523 <-> 178.207.87.115 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:51.142925 0.546543 udp 10.0.2.104 54523 <-> 175.177.220.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:52.144403 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:53.135116 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:53.135165 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:03:54.137074 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:03:55.138485 1.264639 udp 10.0.2.104 54523 <-> 190.36.115.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:56.139693 1.069645 udp 10.0.2.104 54523 <-> 188.2.216.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:58.142933 2.002912 udp 10.0.2.104 54523 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:03:59.144088 0.024308 udp 10.0.2.104 54523 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:00.135703 0.092111 udp 10.0.2.104 54523 <-> 79.36.229.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:01.136974 0.051680 udp 10.0.2.104 54523 <-> 95.158.180.37 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:02.138376 0.189931 udp 10.0.2.104 54523 <-> 67.215.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:03.139702 1.088634 udp 10.0.2.104 54523 <-> 181.29.186.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:04.141376 0.060730 udp 10.0.2.104 54523 <-> 188.241.156.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:05.142409 0.313962 udp 10.0.2.104 54523 <-> 219.71.45.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:06.144170 0.058066 udp 10.0.2.104 54523 <-> 93.155.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:07.135396 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:04:08.137236 0.048854 udp 10.0.2.104 54523 <-> 109.235.225.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:09.138623 0.502352 udp 10.0.2.104 54523 <-> 118.95.118.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:10.139826 0.000000 udp 10.0.2.104 54523 -> 141.0.59.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:04:11.141319 1.386200 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:11.802307 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:04:13.144497 0.143469 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:14.135458 0.000000 udp 10.0.2.104 54523 -> 130.83.54.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:04:15.137392 0.197567 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:16.138611 0.069232 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:17.140183 0.134463 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:18.141696 0.288641 udp 10.0.2.104 54523 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:19.142711 1.023234 udp 10.0.2.104 54523 <-> 201.19.246.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:20.134530 0.000000 udp 10.0.2.104 54523 -> 92.250.178.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:04:21.135690 0.032379 udp 10.0.2.104 54523 <-> 151.100.72.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:22.136854 0.276957 udp 10.0.2.104 54523 <-> 187.33.158.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:23.138932 0.040200 udp 10.0.2.104 54523 <-> 46.175.231.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:24.140319 0.223119 udp 10.0.2.104 54523 <-> 190.73.169.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:25.141145 3.159391 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:25.892332 0.000000 udp 10.0.2.104 54523 <- 92.250.178.152 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:04:27.133962 0.328490 udp 10.0.2.104 54523 <-> 61.4.170.48 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:29.137144 0.073070 udp 10.0.2.104 54523 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:30.138739 0.352256 udp 10.0.2.104 54523 <-> 179.57.31.53 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:31.140186 0.356761 udp 10.0.2.104 54523 <-> 125.224.37.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:32.141494 0.181433 udp 10.0.2.104 54523 <-> 184.189.232.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:33.143022 0.262113 udp 10.0.2.104 54523 <-> 181.166.240.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:34.134425 0.788910 udp 10.0.2.104 54523 <-> 88.204.155.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:35.135939 0.072665 udp 10.0.2.104 54523 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:36.137343 0.059323 udp 10.0.2.104 54523 <-> 188.26.225.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:37.138664 0.144792 udp 10.0.2.104 54523 <-> 74.127.151.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:38.140008 1.011965 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:39.141863 0.303493 udp 10.0.2.104 54523 <-> 182.165.97.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:40.142671 1.563220 udp 10.0.2.104 54523 <-> 123.194.225.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:41.134162 0.135731 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:42.136171 3.328323 udp 10.0.2.104 54523 <-> 112.171.24.212 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:43.137062 0.156701 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:44.138944 0.000000 udp 10.0.2.104 54523 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:04:46.141756 0.227975 udp 10.0.2.104 54523 <-> 123.236.82.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:47.143182 0.283905 udp 10.0.2.104 54523 <-> 123.225.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:48.134619 0.049991 udp 10.0.2.104 54523 <-> 188.27.211.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:49.136139 0.161865 udp 10.0.2.104 54523 <-> 76.107.10.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:50.137247 0.679860 udp 10.0.2.104 54523 <-> 74.65.222.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:51.138468 0.069613 udp 10.0.2.104 54523 <-> 93.176.193.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:52.140700 0.000000 udp 10.0.2.104 54523 -> 117.201.99.196 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:04:53.142090 0.115581 udp 10.0.2.104 54523 <-> 79.176.4.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:54.143342 0.292492 udp 10.0.2.104 54523 <-> 117.194.199.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:55.134904 0.140414 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:56.136032 2.050100 udp 10.0.2.104 54523 <-> 78.84.143.174 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:57.137647 0.267234 udp 10.0.2.104 54523 <-> 181.28.105.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:04:58.799450 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:04:59.140694 0.042155 udp 10.0.2.104 54523 <-> 86.126.0.125 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:00.141519 0.055602 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:01.143381 2.838432 udp 10.0.2.104 54523 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:02.134267 0.047319 udp 10.0.2.104 54523 <-> 78.84.143.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:03.136465 0.814968 udp 10.0.2.104 54523 <-> 181.16.55.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:04.137675 0.113187 udp 10.0.2.104 54523 <-> 79.109.248.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:05.139052 0.071341 udp 10.0.2.104 54523 <-> 213.60.233.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:06.140595 0.178392 udp 10.0.2.104 54523 <-> 183.82.213.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:07.141862 0.721351 udp 10.0.2.104 54523 <-> 186.89.60.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:08.142954 0.172318 udp 10.0.2.104 54523 <-> 199.188.251.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:09.135038 0.000000 udp 10.0.2.104 54523 -> 1.160.135.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:10.136303 0.292871 udp 10.0.2.104 54523 <-> 177.193.132.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:11.137397 0.070204 udp 10.0.2.104 54523 <-> 82.225.246.244 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:12.138769 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:13.140517 0.285733 udp 10.0.2.104 54523 <-> 187.107.55.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:14.141994 0.605226 udp 10.0.2.104 54523 <-> 1.23.66.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:15.143415 0.058068 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:16.134490 0.167432 udp 10.0.2.104 54523 <-> 173.17.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:17.136396 0.168459 udp 10.0.2.104 54523 <-> 75.133.46.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:18.137285 0.148026 udp 10.0.2.104 54523 <-> 24.99.130.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:19.139110 0.049684 udp 10.0.2.104 54523 <-> 81.225.87.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:20.140797 0.160298 udp 10.0.2.104 54523 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:21.141742 0.063176 udp 10.0.2.104 54523 <-> 82.239.45.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:22.143443 0.257042 udp 10.0.2.104 54523 <-> 75.246.135.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:23.135122 0.228111 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:24.136250 0.026307 udp 10.0.2.104 54523 <-> 46.108.106.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:25.137473 0.143846 udp 10.0.2.104 54523 <-> 97.69.223.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:26.139633 0.356604 udp 10.0.2.104 54523 <-> 123.110.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:27.140805 0.215715 udp 10.0.2.104 54523 <-> 50.139.105.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:28.142242 0.143554 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:29.143733 0.797361 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:30.135061 0.147403 udp 10.0.2.104 54523 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:31.136495 0.066178 udp 10.0.2.104 54523 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:32.137456 1.157032 udp 10.0.2.104 54523 <-> 76.188.30.171 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:34.141011 3.149727 udp 10.0.2.104 54523 <-> 216.4.105.166 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:35.141924 0.000000 udp 10.0.2.104 54523 -> 71.183.29.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:36.143226 0.165548 udp 10.0.2.104 54523 <-> 98.226.145.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:38.136202 0.053898 udp 10.0.2.104 54523 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:39.138145 0.053752 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:40.139489 0.167343 udp 10.0.2.104 54523 <-> 68.56.82.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:41.140963 0.000000 udp 10.0.2.104 54523 -> 89.106.103.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:42.142499 0.172037 udp 10.0.2.104 54523 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:43.143992 0.395301 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:05:44.134875 0.000133 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:44.135008 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:05:45.136184 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:45.797281 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:05:46.137607 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:47.139247 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:48.140422 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:49.142238 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:51.135432 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:52.136329 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:53.137807 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:54.139097 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:55.141182 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:56.142034 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:57.144119 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:58.135431 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:05:59.136573 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:00.137900 0.000000 udp 10.0.2.104 54523 -> 31.209.34.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:01.139119 0.301561 udp 10.0.2.104 54523 <-> 121.116.16.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:02.141058 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:03.141995 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:04.143982 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:05.134904 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:06.136436 0.000072 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:06.136508 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:06:07.137733 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:08.139870 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:09.141214 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:10.142340 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:11.143599 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:12.135770 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:13.136480 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:14.138170 4.005771 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:15.139274 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:16.141160 0.000000 udp 10.0.2.104 54523 -> 90.10.157.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:17.142701 0.080939 udp 10.0.2.104 54523 <-> 188.2.29.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:19.135189 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:20.136434 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:21.138394 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:22.139871 2.002881 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:23.140976 0.076546 udp 10.0.2.104 54523 <-> 188.2.29.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:25.144170 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:26.135233 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:27.136554 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:28.138503 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:29.139607 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:30.141231 0.302438 udp 10.0.2.104 54523 <-> 121.116.16.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:31.142913 0.073468 udp 10.0.2.104 54523 -> 31.209.34.212 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:31.216381 0.000000 icmp 31.209.34.212 0x0303 -> 10.0.2.104 0x5040 URP 192 1 70 flow=Background 1970/01/01 05:06:32.144334 0.991465 udp 10.0.2.104 54523 <-> 188.2.29.213 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:32.795045 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:06:34.136796 0.057706 udp 10.0.2.104 54523 <-> 86.121.18.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:35.138004 0.214730 udp 10.0.2.104 54523 <-> 50.168.18.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:36.139823 0.302586 udp 10.0.2.104 54523 <-> 182.166.242.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:37.140945 0.368031 udp 10.0.2.104 54523 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:38.143000 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:39.144060 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:40.135814 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:41.136697 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:42.138060 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:43.139547 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:44.141523 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:45.143124 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:47.135375 0.122966 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:48.136967 0.155686 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:49.138609 0.068689 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:49.849920 0.023669 udp 10.0.2.104 54557 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 05:06:49.873891 0.000000 udp 10.0.2.104 54558 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:50.140367 0.087726 udp 10.0.2.104 54523 <-> 85.155.41.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:51.141556 0.041709 udp 10.0.2.104 54523 <-> 83.166.27.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:52.142604 3.407751 udp 10.0.2.104 54523 <-> 41.213.176.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:53.134465 0.297010 udp 10.0.2.104 54523 <-> 223.29.182.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:54.135739 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:55.137162 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:06:56.138362 3.996268 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:57.139667 0.168185 udp 10.0.2.104 54523 <-> 70.81.76.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:58.141189 0.429814 udp 10.0.2.104 54523 <-> 115.241.147.45 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:06:59.142721 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:01.135368 2.365522 udp 10.0.2.104 54523 <-> 116.72.1.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:02.137436 0.000000 udp 10.0.2.104 54523 -> 115.240.64.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:03.138350 0.073579 udp 10.0.2.104 54523 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:04.139934 0.145005 udp 10.0.2.104 54523 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:05.141815 0.567102 udp 10.0.2.104 54523 <-> 211.172.38.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:06.143299 0.326052 udp 10.0.2.104 54523 <-> 124.218.17.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:07.134645 0.323446 udp 10.0.2.104 54523 <-> 110.134.54.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:08.135755 0.168973 udp 10.0.2.104 54523 <-> 70.178.163.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:09.137301 0.031215 udp 10.0.2.104 54523 <-> 78.90.213.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:10.138621 0.000000 udp 10.0.2.104 54523 -> 151.237.7.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:11.140625 0.127161 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:12.141342 0.151801 udp 10.0.2.104 54523 <-> 27.106.32.65 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:13.142625 0.000000 udp 10.0.2.104 54523 -> 183.178.231.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:14.134384 0.309947 udp 10.0.2.104 54523 <-> 118.237.15.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:15.135668 1.115106 udp 10.0.2.104 54523 <-> 183.72.69.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:16.137218 0.111248 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:17.138974 0.196455 udp 10.0.2.104 54523 <-> 128.123.234.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:18.140000 0.000000 udp 10.0.2.104 54523 -> 79.13.209.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:19.141866 0.431531 udp 10.0.2.104 54523 <-> 118.170.181.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:19.802676 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:07:20.143263 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:21.134672 0.000000 udp 10.0.2.104 54523 -> 63.149.19.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:22.135622 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:23.137760 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:24.138719 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:25.140164 0.523200 udp 10.0.2.104 54523 <-> 111.254.48.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:26.141966 0.024458 udp 10.0.2.104 54523 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:27.142765 0.375244 udp 10.0.2.104 54523 <-> 190.36.226.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:28.134656 0.000000 udp 10.0.2.104 54523 -> 187.34.27.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:29.135650 0.467052 udp 10.0.2.104 54523 <-> 36.237.40.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:30.137511 0.523106 udp 10.0.2.104 54523 <-> 75.213.227.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:31.139265 1.045679 udp 10.0.2.104 54523 <-> 5.13.90.52 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:33.141971 0.605247 udp 10.0.2.104 54523 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:34.143286 0.000000 udp 10.0.2.104 54523 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:35.134452 0.159474 udp 10.0.2.104 54523 <-> 209.240.122.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:36.136179 0.330683 udp 10.0.2.104 54523 <-> 180.14.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:37.137580 0.025334 udp 10.0.2.104 54523 <-> 85.130.45.29 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:38.139081 0.167139 udp 10.0.2.104 54523 <-> 68.102.125.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:39.140385 0.159848 udp 10.0.2.104 54523 <-> 183.83.66.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:40.141527 0.312750 udp 10.0.2.104 54523 <-> 218.216.247.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:41.143094 0.227166 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:42.134562 0.337832 udp 10.0.2.104 54523 <-> 58.115.17.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:43.135770 0.201248 udp 10.0.2.104 54523 <-> 24.37.209.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:44.137273 0.182786 udp 10.0.2.104 54523 <-> 182.71.74.18 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:45.139281 0.084920 udp 10.0.2.104 54523 <-> 178.43.207.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:46.140333 0.242059 udp 10.0.2.104 54523 <-> 184.81.168.173 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:47.142144 0.000000 udp 10.0.2.104 54523 -> 74.57.146.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:48.142958 0.136818 udp 10.0.2.104 54523 <-> 178.123.34.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:49.134500 0.179105 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:50.136240 0.162288 udp 10.0.2.104 54523 <-> 183.83.66.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:51.137574 0.044390 udp 10.0.2.104 54523 <-> 188.115.182.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:52.138798 0.211019 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:53.140852 0.079935 udp 10.0.2.104 54523 <-> 31.16.142.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:54.142291 0.368156 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:55.143157 0.134036 udp 10.0.2.104 54523 <-> 79.40.192.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:56.134814 0.000000 udp 10.0.2.104 54523 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:57.136220 0.000000 udp 10.0.2.104 54523 -> 172.243.34.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:07:58.137602 0.560962 udp 10.0.2.104 54523 <-> 117.195.10.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:07:59.139435 0.032292 udp 10.0.2.104 54523 <-> 5.53.170.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:00.140510 0.000000 udp 10.0.2.104 54523 -> 98.103.16.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:01.141791 0.116572 udp 10.0.2.104 54523 <-> 75.109.145.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:02.143234 0.323079 udp 10.0.2.104 54523 <-> 153.178.118.232 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:03.134507 0.014072 udp 10.0.2.104 54523 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:04.136065 0.142446 udp 10.0.2.104 54523 <-> 76.120.220.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:05.137952 0.301685 udp 10.0.2.104 54523 <-> 27.106.39.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:06.139224 0.000000 udp 10.0.2.104 54523 -> 113.216.198.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:06.800234 0.000118 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:08:07.140881 0.202396 udp 10.0.2.104 54523 <-> 109.52.179.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:08.142147 0.348753 udp 10.0.2.104 54523 <-> 123.195.142.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:09.143745 0.048189 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:10.135108 0.339627 udp 10.0.2.104 54523 <-> 123.194.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:11.136316 0.068397 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:12.137562 0.000000 udp 10.0.2.104 54523 -> 37.28.248.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:13.138910 0.493883 udp 10.0.2.104 54523 <-> 190.195.52.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:14.140637 0.273560 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:15.142148 0.538617 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:16.143400 0.055687 udp 10.0.2.104 54523 <-> 77.240.67.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:17.135230 0.047943 udp 10.0.2.104 54523 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:18.136607 0.000000 udp 10.0.2.104 54523 -> 31.147.115.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:19.137694 3.108164 udp 10.0.2.104 54523 <-> 49.249.97.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:20.139267 0.061663 udp 10.0.2.104 54523 <-> 78.227.31.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:21.140560 0.179549 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:22.141976 0.000000 udp 10.0.2.104 54523 -> 86.57.110.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:23.143511 0.328681 udp 10.0.2.104 54523 <-> 219.115.125.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:24.135324 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:25.136308 4.005637 udp 10.0.2.104 54523 -> 69.51.119.78 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:26.138046 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:27.139119 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:28.140921 0.065568 udp 10.0.2.104 54523 <-> 83.195.175.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:30.143436 0.486477 udp 10.0.2.104 54523 <-> 190.204.21.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:31.135284 0.036041 udp 10.0.2.104 54523 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:32.136825 0.044555 udp 10.0.2.104 54523 <-> 5.20.68.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:33.137861 0.000000 udp 10.0.2.104 54523 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:34.139202 0.000000 udp 10.0.2.104 54523 -> 79.140.165.245 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:35.140848 0.239286 udp 10.0.2.104 54523 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:36.142003 0.161246 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:37.144057 0.048919 udp 10.0.2.104 54523 <-> 82.225.246.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:38.134836 0.606629 udp 10.0.2.104 54523 <-> 177.180.213.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:39.136906 0.000000 udp 10.0.2.104 54523 -> 115.52.35.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:40.138145 0.000000 udp 10.0.2.104 54523 -> 223.225.218.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:41.139328 0.388155 udp 10.0.2.104 54523 <-> 189.15.62.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:42.140589 0.372914 udp 10.0.2.104 54523 <-> 101.63.131.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:43.142032 0.042600 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:44.143887 0.140407 udp 10.0.2.104 54523 <-> 204.210.133.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:45.135688 0.088404 udp 10.0.2.104 54523 <-> 92.73.249.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:46.136439 0.166757 udp 10.0.2.104 54523 <-> 68.102.200.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:47.138267 0.050567 udp 10.0.2.104 54523 <-> 5.15.56.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:48.139397 0.064275 udp 10.0.2.104 54523 <-> 83.195.175.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:49.115935 0.000000 udp 10.0.2.104 54523 <- 223.225.218.253 16464 RSP 0 0 1 750 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:49.140913 0.169277 udp 10.0.2.104 54523 <-> 24.207.212.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:50.142124 0.430257 udp 10.0.2.104 54523 <-> 114.38.240.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:51.144236 0.173291 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:52.135209 0.167862 udp 10.0.2.104 54523 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:53.137053 0.000000 udp 10.0.2.104 54523 -> 86.125.61.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:53.797764 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:08:54.138445 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:55.139743 0.401068 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:56.140990 2.413780 udp 10.0.2.104 54523 <-> 58.152.51.132 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:08:57.142274 0.000000 udp 10.0.2.104 54523 -> 61.224.81.128 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:08:59.135378 0.043822 udp 10.0.2.104 54523 <-> 86.125.61.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:00.136982 0.167582 udp 10.0.2.104 54523 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:01.138607 0.349305 udp 10.0.2.104 54523 <-> 58.172.44.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:02.139616 0.117556 udp 10.0.2.104 54523 <-> 176.238.175.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:03.141433 0.189042 udp 10.0.2.104 54523 <-> 209.42.67.95 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:04.142562 0.345390 udp 10.0.2.104 54523 <-> 220.120.63.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:05.144173 0.400555 udp 10.0.2.104 54523 <-> 118.169.9.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:06.135818 0.349739 udp 10.0.2.104 54523 <-> 183.178.125.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:07.136730 0.447869 udp 10.0.2.104 54523 <-> 177.149.35.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:08.138006 0.261578 udp 10.0.2.104 54523 <-> 220.102.23.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:09.139644 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:10.141054 0.000000 udp 10.0.2.104 54523 -> 192.168.99.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:11.142917 0.829032 udp 10.0.2.104 54523 <-> 203.192.241.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:12.143730 0.078071 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:13.135942 0.069761 udp 10.0.2.104 54523 <-> 88.222.170.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:14.136791 0.372398 udp 10.0.2.104 54523 <-> 114.41.96.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:15.138319 0.153476 udp 10.0.2.104 54523 <-> 98.253.230.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:16.139764 0.000000 udp 10.0.2.104 54523 -> 82.227.89.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:17.141070 0.424664 udp 10.0.2.104 54523 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:18.142856 0.151851 udp 10.0.2.104 54523 <-> 74.135.68.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:19.144014 1.993100 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:20.135725 0.158411 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:20.278301 3.002075 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:09:22.138316 3.996186 udp 10.0.2.104 54523 -> 82.227.89.11 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:23.139677 0.311107 udp 10.0.2.104 54523 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:24.140998 0.358179 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:25.142998 1.912965 udp 10.0.2.104 54523 <-> 70.176.12.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:27.135741 0.268647 udp 10.0.2.104 54523 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:27.285523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:09:28.136730 0.435174 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:28.467860 0.008306 udp 10.0.2.104 54523 <- 82.227.89.11 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:29.138182 2.052210 udp 10.0.2.104 54523 <-> 188.173.77.171 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:30.140134 0.228707 udp 10.0.2.104 54523 <-> 76.113.45.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:32.143028 0.471666 udp 10.0.2.104 54523 <-> 114.49.1.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:33.134093 0.150103 udp 10.0.2.104 54523 <-> 24.74.220.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:34.135579 0.072158 udp 10.0.2.104 54523 <-> 128.71.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:35.136800 0.155227 udp 10.0.2.104 54523 <-> 178.72.107.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:35.287233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:09:36.138525 0.041474 udp 10.0.2.104 54523 <-> 5.15.173.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:37.139916 0.557674 udp 10.0.2.104 54523 <-> 79.217.162.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:38.141585 0.149110 udp 10.0.2.104 54523 <-> 114.79.142.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:39.142820 0.348590 udp 10.0.2.104 54523 <-> 14.199.20.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:40.134257 0.437972 udp 10.0.2.104 54523 <-> 114.26.110.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:40.794977 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:09:41.135417 0.162106 udp 10.0.2.104 54523 <-> 74.129.116.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:42.137512 0.168537 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:43.138348 0.000000 udp 10.0.2.104 54523 -> 190.51.157.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:44.140225 0.364816 udp 10.0.2.104 54523 <-> 122.100.81.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:45.141437 0.039292 udp 10.0.2.104 54523 <-> 130.204.197.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:46.142982 0.139087 udp 10.0.2.104 54523 <-> 24.168.107.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:47.134391 0.935190 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:48.136283 0.028059 udp 10.0.2.104 54523 <-> 131.114.50.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:49.137298 0.294696 udp 10.0.2.104 54523 <-> 58.11.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:50.138899 0.267595 udp 10.0.2.104 54523 <-> 49.249.11.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:51.139995 0.000000 udp 10.0.2.104 54523 -> 186.90.110.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:51.290550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:09:52.141341 0.043051 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:53.143144 4.538269 udp 10.0.2.104 54523 <-> 117.195.20.183 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:54.134571 0.000000 udp 10.0.2.104 54523 -> 36.86.100.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:09:55.136227 0.153801 udp 10.0.2.104 54523 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:56.137282 0.293919 udp 10.0.2.104 54523 <-> 222.151.146.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:58.140281 0.309300 udp 10.0.2.104 54523 <-> 187.66.42.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:09:59.141426 0.352650 udp 10.0.2.104 54523 <-> 123.192.142.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:00.142742 0.000000 udp 10.0.2.104 54523 -> 223.184.242.214 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:01.134721 0.061475 udp 10.0.2.104 54523 <-> 93.72.97.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:02.135631 0.170456 udp 10.0.2.104 54523 <-> 68.56.123.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:03.137255 3.442066 udp 10.0.2.104 54523 <-> 24.154.59.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:04.139193 0.335826 udp 10.0.2.104 54523 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:05.140193 0.087064 udp 10.0.2.104 54523 <-> 151.40.31.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:06.141981 0.260821 udp 10.0.2.104 54523 <-> 190.73.247.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:07.143413 0.043748 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:08.134265 0.146608 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:09.136134 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:10.137161 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:11.138790 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:12.140123 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:13.141573 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:14.143297 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:15.134466 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:16.136129 0.000000 udp 10.0.2.104 54523 -> 71.168.249.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:17.137269 0.328367 udp 10.0.2.104 54523 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:18.138860 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:19.140556 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:20.141651 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:21.143442 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:22.134941 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:23.136505 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:23.296161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:10:24.137946 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:25.138955 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:26.141046 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:27.141925 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:27.793137 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:10:29.134945 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:30.136720 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:30.136791 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:10:31.137323 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:32.139239 0.152697 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:33.140764 0.044283 udp 10.0.2.104 54523 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:34.142125 0.382717 udp 10.0.2.104 54523 <-> 219.110.98.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:35.143481 0.399879 udp 10.0.2.104 54523 <-> 181.26.51.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:36.134841 0.058035 udp 10.0.2.104 54523 <-> 94.176.156.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:37.136475 0.296908 udp 10.0.2.104 54523 <-> 58.9.41.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:38.137348 0.047956 udp 10.0.2.104 54523 <-> 31.11.113.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:39.139307 0.172118 udp 10.0.2.104 54523 <-> 74.194.166.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:40.140766 4.148535 udp 10.0.2.104 54523 <-> 124.123.242.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:41.142362 0.000000 udp 10.0.2.104 54523 -> 71.225.111.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:42.143219 0.160831 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:43.135202 0.066459 udp 10.0.2.104 54523 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:45.137893 0.166061 udp 10.0.2.104 54523 <-> 50.162.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:46.139316 0.890052 udp 10.0.2.104 54523 <-> 75.181.151.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:47.141103 0.327663 udp 10.0.2.104 54523 <-> 60.238.117.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:48.142406 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:49.143270 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:49.143326 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:10:50.135099 0.176852 udp 10.0.2.104 54523 <-> 75.81.141.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:10:51.136642 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:52.137870 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:53.139308 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:54.140880 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:55.142231 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:56.143341 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:57.134950 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:58.136515 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:10:59.137948 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:00.139184 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:01.140680 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:02.142362 0.000115 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:02.142477 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:11:03.143817 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:04.134899 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:06.137780 0.138975 udp 10.0.2.104 54523 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:07.139485 4.997466 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:08.141020 0.063514 udp 10.0.2.104 54523 <-> 188.24.154.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:09.142232 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:10.144231 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:11.135480 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:13.138080 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:14.139334 0.135852 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:14.800607 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:11:15.140648 0.284240 udp 10.0.2.104 54523 <-> 96.26.211.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:16.142447 2.994399 udp 10.0.2.104 54523 <-> 195.174.102.48 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:17.143963 0.000000 udp 10.0.2.104 54523 -> 108.132.224.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:18.135426 0.000000 udp 10.0.2.104 54523 -> 180.215.119.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:20.138508 0.000000 udp 10.0.2.104 54523 -> 62.232.32.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:21.139778 0.165648 udp 10.0.2.104 54523 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:22.140887 0.000000 udp 10.0.2.104 54523 -> 115.135.134.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:23.142357 0.169876 udp 10.0.2.104 54523 <-> 72.177.89.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:24.144002 0.042494 udp 10.0.2.104 54523 <-> 77.105.193.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:25.135157 0.454893 udp 10.0.2.104 54523 <-> 36.225.131.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:26.136388 0.058958 udp 10.0.2.104 54523 <-> 84.32.149.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:27.138366 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:28.139328 3.062065 udp 10.0.2.104 54523 <-> 195.238.118.241 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:29.141113 0.042274 udp 10.0.2.104 54523 <-> 89.25.112.106 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:30.142796 0.000000 udp 10.0.2.104 54523 -> 58.9.225.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:32.135457 0.445119 udp 10.0.2.104 54523 <-> 118.168.216.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:33.136907 0.051819 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:34.138502 0.000000 udp 10.0.2.104 54523 -> 217.201.103.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:35.139666 0.054177 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:36.140935 0.211182 udp 10.0.2.104 54523 <-> 201.160.70.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:37.142626 0.787454 udp 10.0.2.104 54523 <-> 219.54.8.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:38.143833 0.104786 udp 10.0.2.104 54523 <-> 78.78.35.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:39.135361 1.156468 udp 10.0.2.104 54523 <-> 66.131.206.141 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:41.138508 0.251063 udp 10.0.2.104 54523 <-> 182.160.7.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:42.139399 0.000000 udp 10.0.2.104 54523 -> 190.174.105.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:43.141454 0.309102 udp 10.0.2.104 54523 <-> 58.11.136.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:44.142528 0.159819 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:45.144055 0.844106 udp 10.0.2.104 54523 <-> 182.237.165.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:46.135228 0.364078 udp 10.0.2.104 54523 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:47.136696 0.056080 udp 10.0.2.104 54523 <-> 212.92.251.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:48.138616 0.145090 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:49.139447 0.000000 udp 10.0.2.104 54523 -> 67.83.135.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:50.141334 0.000000 udp 10.0.2.104 54523 -> 98.235.61.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:11:51.142595 0.146557 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:52.143988 0.208855 udp 10.0.2.104 54523 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:53.135420 0.187152 udp 10.0.2.104 54523 <-> 70.170.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:54.137352 0.044870 udp 10.0.2.104 54523 <-> 193.68.132.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:55.138245 0.151239 udp 10.0.2.104 54523 <-> 79.53.188.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:56.140325 0.025317 udp 10.0.2.104 54523 <-> 84.119.107.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:57.141217 0.165410 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:58.142412 0.199928 udp 10.0.2.104 54523 <-> 46.225.75.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:11:59.134004 3.177012 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:00.135921 0.408784 udp 10.0.2.104 54523 <-> 114.37.121.140 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:01.137159 0.162849 udp 10.0.2.104 54523 <-> 216.168.81.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:01.797797 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:12:03.139869 0.000000 udp 10.0.2.104 54523 -> 91.65.190.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:04.141010 0.314799 udp 10.0.2.104 54523 <-> 161.6.244.22 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:05.142451 0.037543 udp 10.0.2.104 54523 <-> 88.129.222.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:06.134193 0.025714 udp 10.0.2.104 54523 <-> 80.98.70.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:07.135624 0.051669 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:08.137128 0.171277 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:09.138723 0.156989 udp 10.0.2.104 54523 <-> 76.179.191.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:10.139946 0.000000 udp 10.0.2.104 54523 -> 78.171.31.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:11.141404 0.849925 udp 10.0.2.104 54523 <-> 77.253.84.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:12.143062 0.159559 udp 10.0.2.104 54523 <-> 24.39.237.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:13.134304 0.150728 udp 10.0.2.104 54523 <-> 183.177.125.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:14.135814 0.144961 udp 10.0.2.104 54523 <-> 216.168.81.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:15.137458 0.386403 udp 10.0.2.104 54523 <-> 36.238.37.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:16.138731 0.571141 udp 10.0.2.104 54523 <-> 101.63.183.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:17.140287 2.002609 udp 10.0.2.104 54523 -> 70.180.235.218 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:18.141528 0.162273 udp 10.0.2.104 54523 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:20.134103 1.070415 udp 10.0.2.104 54523 <-> 103.240.97.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:21.135789 3.617229 udp 10.0.2.104 54523 <-> 190.228.99.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:22.137556 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:23.138799 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:24.140223 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:25.141242 0.375552 udp 10.0.2.104 54523 <-> 111.243.164.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:26.143095 2.037140 udp 10.0.2.104 54523 <-> 5.13.113.229 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:27.134817 0.092235 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:29.137075 0.094188 udp 10.0.2.104 54523 <-> 85.85.45.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:30.138402 0.537416 udp 10.0.2.104 54523 <-> 79.217.162.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:31.140337 0.000000 udp 10.0.2.104 54523 -> 86.123.54.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:32.141393 0.308681 udp 10.0.2.104 54523 <-> 126.15.243.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:33.142800 0.126390 udp 10.0.2.104 54523 <-> 188.158.197.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:34.134577 0.379016 udp 10.0.2.104 54523 <-> 87.13.172.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:35.136112 0.041693 udp 10.0.2.104 54523 <-> 147.156.162.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:36.137490 0.397716 udp 10.0.2.104 54523 <-> 114.76.142.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:37.138800 0.172549 udp 10.0.2.104 54523 <-> 173.178.26.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:38.140458 0.068324 udp 10.0.2.104 54523 <-> 62.177.243.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:39.141783 0.000000 udp 10.0.2.104 54523 -> 213.231.55.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:40.143256 0.000000 udp 10.0.2.104 54523 -> 98.27.217.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:41.134249 0.420151 udp 10.0.2.104 54523 <-> 112.197.226.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:42.136197 0.033954 udp 10.0.2.104 54523 <-> 89.133.232.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:43.137205 0.199340 udp 10.0.2.104 54523 <-> 103.240.97.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:44.138776 0.162894 udp 10.0.2.104 54523 <-> 98.219.90.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:45.140077 0.414459 udp 10.0.2.104 54523 <-> 187.73.244.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:46.141784 0.000000 udp 10.0.2.104 54523 -> 114.47.107.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:47.142918 0.047949 udp 10.0.2.104 54523 <-> 5.13.214.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:48.134563 0.034672 udp 10.0.2.104 54523 <-> 79.113.29.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:48.795400 0.000241 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:12:49.135823 0.347163 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:50.137405 3.208630 udp 10.0.2.104 54523 <-> 93.151.1.154 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:51.139343 0.044802 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:52.140328 0.038632 udp 10.0.2.104 54523 <-> 95.85.160.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:54.143064 0.598678 udp 10.0.2.104 54523 <-> 75.25.21.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:55.134502 0.052874 udp 10.0.2.104 54523 <-> 62.165.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:56.136289 0.042600 udp 10.0.2.104 54523 <-> 79.133.245.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:57.137898 0.408123 udp 10.0.2.104 54523 <-> 201.14.147.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:12:58.139254 0.000000 udp 10.0.2.104 54523 -> 79.118.105.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:12:59.140873 0.053902 udp 10.0.2.104 54523 <-> 158.49.130.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:00.142008 0.170392 udp 10.0.2.104 54523 <-> 75.129.198.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:01.143739 0.388060 udp 10.0.2.104 54523 <-> 114.47.92.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:02.135070 0.311657 udp 10.0.2.104 54523 <-> 177.194.73.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:03.136174 0.339599 udp 10.0.2.104 54523 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:04.137802 0.000000 udp 10.0.2.104 54523 -> 95.235.20.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:05.138816 0.315399 udp 10.0.2.104 54523 <-> 58.115.157.124 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:06.140871 0.078127 udp 10.0.2.104 54523 <-> 92.231.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:07.141879 0.000000 udp 10.0.2.104 54523 -> 173.187.63.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:08.143520 0.025317 udp 10.0.2.104 54523 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:09.134474 1.866481 udp 10.0.2.104 54523 <-> 93.183.152.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:10.136363 0.163050 udp 10.0.2.104 54523 <-> 66.177.184.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:11.137861 0.036652 udp 10.0.2.104 54523 <-> 79.117.63.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:12.139185 0.324592 udp 10.0.2.104 54523 <-> 60.36.54.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:13.140692 0.845837 udp 10.0.2.104 54523 <-> 117.216.6.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:14.142282 0.145758 udp 10.0.2.104 54523 <-> 107.5.244.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:15.143590 0.000000 udp 10.0.2.104 54523 -> 74.77.183.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:16.134901 0.000000 udp 10.0.2.104 54523 -> 69.180.10.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:17.136019 0.079431 udp 10.0.2.104 54523 <-> 87.110.25.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:18.137578 0.136325 udp 10.0.2.104 54523 <-> 68.197.223.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:19.139130 0.476185 udp 10.0.2.104 54523 <-> 117.242.172.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:20.140599 0.220560 udp 10.0.2.104 54523 <-> 1.22.190.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:21.142248 0.106862 udp 10.0.2.104 54523 <-> 151.33.100.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:22.143393 0.155922 udp 10.0.2.104 54523 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:23.134787 0.024944 udp 10.0.2.104 54523 <-> 84.107.143.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:24.136896 0.000000 udp 10.0.2.104 54523 -> 91.15.138.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:25.137543 0.059415 udp 10.0.2.104 54523 <-> 78.8.65.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:26.139657 0.058103 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:27.140837 0.302321 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:28.142471 0.156952 udp 10.0.2.104 54523 <-> 67.190.245.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:29.143838 0.152518 udp 10.0.2.104 54523 <-> 70.80.122.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:30.135273 0.040799 udp 10.0.2.104 54523 <-> 95.90.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:31.136462 0.122545 udp 10.0.2.104 54523 <-> 31.192.7.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:32.138048 0.137257 udp 10.0.2.104 54523 <-> 37.45.40.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:33.139437 0.258862 udp 10.0.2.104 54523 <-> 14.97.126.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:34.140962 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:35.142597 0.159140 udp 10.0.2.104 54523 <-> 65.25.223.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:35.792801 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:13:36.143342 0.441508 udp 10.0.2.104 54523 <-> 59.104.72.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:37.134852 0.155179 udp 10.0.2.104 54523 <-> 67.247.169.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:38.136844 0.092480 udp 10.0.2.104 54523 <-> 109.251.72.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:39.137982 0.147346 udp 10.0.2.104 54523 <-> 24.151.157.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:40.139519 0.056046 udp 10.0.2.104 54523 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:41.140734 0.332574 udp 10.0.2.104 54523 <-> 187.69.61.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:42.142680 1.289349 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:43.143842 0.452818 udp 10.0.2.104 54523 <-> 203.210.58.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:44.135354 0.186221 udp 10.0.2.104 54523 <-> 24.48.169.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:45.136805 0.315906 udp 10.0.2.104 54523 <-> 49.251.197.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:46.138210 0.131114 udp 10.0.2.104 54523 <-> 192.222.24.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:47.139322 0.159932 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:48.140608 0.000000 udp 10.0.2.104 54523 -> 217.18.251.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:49.142242 0.148509 udp 10.0.2.104 54523 <-> 98.30.8.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:50.143746 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:51.135720 0.288803 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:52.136983 0.168582 udp 10.0.2.104 54523 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:53.138195 0.045426 udp 10.0.2.104 54523 <-> 46.55.137.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:54.139506 0.399693 udp 10.0.2.104 54523 <-> 1.170.44.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:55.141114 0.113651 udp 10.0.2.104 54523 <-> 31.192.7.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:56.142741 0.161465 udp 10.0.2.104 54523 <-> 24.101.81.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:57.143548 0.000000 udp 10.0.2.104 54523 -> 126.15.59.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:13:58.135240 0.400233 udp 10.0.2.104 54523 <-> 1.238.134.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:13:59.136664 0.249073 udp 10.0.2.104 54523 <-> 115.245.98.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:00.137877 0.000000 udp 10.0.2.104 54523 -> 14.96.117.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:01.139560 0.060151 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:02.141010 0.038200 udp 10.0.2.104 54523 <-> 89.71.3.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:03.142619 1.244553 udp 10.0.2.104 54523 <-> 24.246.239.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:04.144021 0.144900 udp 10.0.2.104 54523 <-> 69.122.5.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:05.135381 0.139227 udp 10.0.2.104 54523 <-> 98.24.41.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:06.136720 0.790237 udp 10.0.2.104 54523 <-> 181.164.143.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:07.137900 0.316638 udp 10.0.2.104 54523 <-> 121.159.101.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:08.139348 0.441280 udp 10.0.2.104 54523 <-> 219.175.44.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:09.141219 0.345605 udp 10.0.2.104 54523 <-> 119.193.20.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:10.142851 0.164754 udp 10.0.2.104 54523 <-> 75.138.21.204 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:11.144024 0.000000 udp 10.0.2.104 54523 -> 183.72.69.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:12.135602 0.047360 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:13.136997 0.000000 udp 10.0.2.104 54523 -> 27.6.34.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:14.138520 1.872837 udp 10.0.2.104 54523 <-> 37.250.111.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:15.139500 0.000000 udp 10.0.2.104 54523 -> 89.240.13.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:17.142662 0.000136 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:17.142798 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:14:18.143973 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:19.135218 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:20.137144 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:21.138398 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:22.139777 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:22.800729 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:14:23.141309 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:24.142941 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:25.144231 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:26.135612 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:27.137232 4.996946 udp 10.0.2.104 54523 -> 66.49.46.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:28.138219 0.000000 udp 10.0.2.104 54523 -> 98.217.103.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:29.140196 1.313241 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:30.141357 0.309885 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:31.142909 0.733253 udp 10.0.2.104 54523 <-> 177.180.213.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:34.137235 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:35.138403 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:36.140230 0.000000 udp 10.0.2.104 54523 -> 61.70.234.252 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:37.141336 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:38.142892 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:39.134359 1.153614 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:40.135941 0.156469 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:41.137294 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:42.138883 0.000000 udp 10.0.2.104 54523 -> 192.168.1.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:43.140196 0.258915 udp 10.0.2.104 54523 <-> 36.86.100.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:44.141407 0.000000 udp 10.0.2.104 54523 -> 189.68.137.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:45.142499 4.997551 udp 10.0.2.104 54523 <-> 89.215.42.167 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:46.134401 0.284802 udp 10.0.2.104 54523 <-> 68.48.58.156 16464 CON 0 0 2 388 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:47.135401 0.127178 udp 10.0.2.104 54523 <-> 78.228.89.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:48.136919 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:49.138770 2.262643 udp 10.0.2.104 54523 <-> 36.86.100.163 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:50.180724 0.000000 udp 10.0.2.104 54523 <- 89.215.42.167 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:52.143092 0.000000 udp 10.0.2.104 54523 -> 68.48.58.156 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:53.134064 0.054026 udp 10.0.2.104 54523 <-> 79.113.103.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:54.135649 0.000000 udp 10.0.2.104 54523 -> 216.45.40.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:55.137218 0.353814 udp 10.0.2.104 54523 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:56.138952 0.027548 udp 10.0.2.104 54523 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:57.140509 0.000000 udp 10.0.2.104 54523 -> 74.67.107.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:14:58.141908 0.534336 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:14:59.146620 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:00.134044 0.106080 udp 10.0.2.104 54523 <-> 41.102.69.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:01.135697 0.000000 udp 10.0.2.104 54523 -> 108.70.134.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:02.137484 0.309201 udp 10.0.2.104 54523 <-> 58.115.157.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:03.138760 2.367911 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:04.140433 0.370564 udp 10.0.2.104 54523 <-> 75.213.231.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:06.143410 0.153908 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:07.134330 0.166525 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:08.135781 0.038577 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:09.137216 2.003108 udp 10.0.2.104 54523 -> 109.54.36.5 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:09.798418 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:15:10.138866 0.139081 udp 10.0.2.104 54523 <-> 68.48.58.156 16464 CON 0 0 2 388 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:12.141532 0.083634 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:13.142959 0.162340 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:14.134554 0.086732 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:15.135870 0.051906 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:16.137321 0.214620 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:17.139075 0.000000 udp 10.0.2.104 54523 -> 27.2.138.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:18.140337 0.169134 udp 10.0.2.104 54523 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:19.141422 0.121587 udp 10.0.2.104 54523 <-> 64.121.148.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:20.142949 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:21.134317 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:22.136367 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:23.137371 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:24.138886 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:25.140147 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:26.141620 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:27.142951 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:28.134717 0.134945 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:29.136357 0.000000 udp 10.0.2.104 54523 -> 190.134.44.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:30.137503 0.020279 udp 10.0.2.104 54523 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:31.139168 0.186876 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:32.140695 0.044865 udp 10.0.2.104 54523 <-> 83.250.76.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:33.141634 0.791337 udp 10.0.2.104 54523 <-> 14.97.204.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:34.143743 0.015461 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:35.134764 0.000000 udp 10.0.2.104 54523 -> 201.42.129.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:36.136177 2.236111 udp 10.0.2.104 54523 <-> 116.193.131.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:37.137251 0.000000 udp 10.0.2.104 54523 -> 114.24.22.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:38.138969 0.114130 udp 10.0.2.104 54523 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:39.140153 0.289706 udp 10.0.2.104 54523 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:40.141847 0.132444 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:41.143275 0.069674 udp 10.0.2.104 54523 <-> 79.2.146.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:42.134431 2.894805 udp 10.0.2.104 54523 <-> 189.28.214.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:43.136263 0.138164 udp 10.0.2.104 54523 <-> 68.33.34.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:44.137907 0.833361 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:45.139392 0.315839 udp 10.0.2.104 54523 <-> 218.216.247.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:46.140575 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:47.142257 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:48.143214 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:49.135127 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:50.136579 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:51.138281 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:15:52.138907 0.176478 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:53.140894 0.160483 udp 10.0.2.104 54523 <-> 184.91.17.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:54.142255 0.158393 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:55.143155 0.237757 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:56.135077 1.174822 udp 10.0.2.104 54523 <-> 76.107.65.152 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:56.795758 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:15:58.137477 0.106999 udp 10.0.2.104 54523 <-> 85.84.1.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:15:59.139776 0.061020 udp 10.0.2.104 54523 <-> 88.135.238.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:00.140988 0.046438 udp 10.0.2.104 54523 <-> 212.67.155.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:01.142048 0.031927 udp 10.0.2.104 54523 <-> 89.142.152.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:02.143455 0.000000 udp 10.0.2.104 54523 -> 186.32.215.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:03.135250 1.111862 udp 10.0.2.104 54523 <-> 75.197.101.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:04.136643 0.146112 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:05.137533 0.000000 udp 10.0.2.104 54523 -> 106.212.97.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:06.139070 0.060763 udp 10.0.2.104 54523 <-> 88.135.238.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:07.140959 0.150492 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:08.142530 0.027691 udp 10.0.2.104 54523 <-> 85.130.43.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:09.143508 0.164084 udp 10.0.2.104 54523 <-> 70.178.41.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:10.134827 0.056993 udp 10.0.2.104 54523 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:11.136677 0.405819 udp 10.0.2.104 54523 <-> 219.70.207.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:12.138062 0.158676 udp 10.0.2.104 54523 <-> 75.115.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:13.139286 0.124344 udp 10.0.2.104 54523 <-> 95.85.160.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:14.141165 0.473275 udp 10.0.2.104 54523 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:15.142375 0.000000 udp 10.0.2.104 54523 -> 75.146.119.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:16.143394 0.149706 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:17.134756 0.361163 udp 10.0.2.104 54523 <-> 117.206.124.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:18.136721 0.744691 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:19.138396 0.038312 udp 10.0.2.104 54523 <-> 92.233.16.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:20.139326 0.372046 udp 10.0.2.104 54523 <-> 218.173.235.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:21.141033 0.053705 udp 10.0.2.104 54523 <-> 82.242.254.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:22.142481 0.297907 udp 10.0.2.104 54523 <-> 122.145.189.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:23.143458 0.098705 udp 10.0.2.104 54523 <-> 68.71.52.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:24.135445 4.333437 udp 10.0.2.104 54523 <-> 218.173.176.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:25.136768 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:26.138001 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:27.139682 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:27.302084 3.001966 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:16:29.142039 0.146788 udp 10.0.2.104 54523 <-> 24.99.130.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:30.144172 0.248157 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:31.135114 0.000000 udp 10.0.2.104 54523 -> 174.113.145.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:32.136679 0.000000 udp 10.0.2.104 54523 -> 46.117.12.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:33.138449 0.000000 udp 10.0.2.104 54523 -> 75.152.30.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:34.139411 0.048433 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:34.309664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:16:35.141209 0.000000 udp 10.0.2.104 54523 -> 189.139.77.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:36.142667 0.129463 udp 10.0.2.104 54523 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:37.143949 0.784752 udp 10.0.2.104 54523 <-> 187.52.82.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:38.135337 0.000000 udp 10.0.2.104 54523 -> 79.27.166.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:39.136610 0.666287 udp 10.0.2.104 54523 <-> 187.105.100.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:40.138174 2.268940 udp 10.0.2.104 54523 <-> 201.211.132.107 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:41.139993 0.059949 udp 10.0.2.104 54523 <-> 82.242.254.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:42.311167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:16:43.142148 0.000000 udp 10.0.2.104 54523 -> 79.27.166.246 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:43.793383 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:16:44.143859 0.261351 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:45.135701 0.201136 udp 10.0.2.104 54523 <-> 50.26.141.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:46.136596 0.412819 udp 10.0.2.104 54523 <-> 14.32.249.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:47.138113 0.910130 udp 10.0.2.104 54523 <-> 14.97.93.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:48.139509 0.146768 udp 10.0.2.104 54523 <-> 65.27.168.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:49.141109 0.213865 udp 10.0.2.104 54523 <-> 173.16.216.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:50.142771 0.138006 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:51.144077 0.312748 udp 10.0.2.104 54523 <-> 220.156.8.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:52.135666 0.192709 udp 10.0.2.104 54523 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:53.136913 0.000000 udp 10.0.2.104 54523 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:54.138491 1.317114 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:55.139807 0.000000 udp 10.0.2.104 54523 -> 189.111.16.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:16:56.140935 0.323188 udp 10.0.2.104 54523 <-> 79.222.166.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:57.142984 0.364123 udp 10.0.2.104 54523 <-> 220.137.148.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:58.143983 0.038169 udp 10.0.2.104 54523 <-> 95.89.124.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:16:58.314371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:16:59.135606 0.092093 udp 10.0.2.104 54523 <-> 79.3.85.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:00.137154 0.278344 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:01.138077 0.190050 udp 10.0.2.104 54523 <-> 72.199.208.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:02.139822 0.158276 udp 10.0.2.104 54523 <-> 71.195.155.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:03.141346 0.178046 udp 10.0.2.104 54523 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:04.143025 0.395467 udp 10.0.2.104 54523 <-> 1.168.96.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:05.134481 0.121968 udp 10.0.2.104 54523 <-> 85.86.73.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:06.135871 0.155488 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:07.137294 0.142786 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:08.138605 1.065207 udp 10.0.2.104 54523 <-> 89.36.248.251 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:10.141191 4.029203 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:11.143066 0.014897 udp 10.0.2.104 54523 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:12.133976 0.157934 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:13.135590 0.615771 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:15.138509 0.402700 udp 10.0.2.104 54523 <-> 175.35.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:16.140397 0.119623 udp 10.0.2.104 54523 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:17.142037 0.467163 udp 10.0.2.104 54523 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:18.142819 0.000000 udp 10.0.2.104 54523 -> 189.130.236.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:19.134013 0.809916 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:20.135862 0.032367 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:21.137137 0.499723 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:22.138254 0.156056 udp 10.0.2.104 54523 <-> 75.109.199.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:23.140459 2.993893 udp 10.0.2.104 54523 <-> 210.238.7.75 16464 CON 0 0 4 1064 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:25.143225 0.210677 udp 10.0.2.104 54523 <-> 98.247.242.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:27.136233 0.000000 udp 10.0.2.104 54523 -> 212.231.254.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:28.137144 0.172257 udp 10.0.2.104 54523 <-> 79.52.138.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:29.139008 0.000000 udp 10.0.2.104 54523 -> 176.58.84.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:30.139934 0.176669 udp 10.0.2.104 54523 <-> 103.250.151.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:30.320928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:17:30.801283 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:17:31.141503 0.387566 udp 10.0.2.104 54523 <-> 219.77.79.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:32.143359 0.098652 udp 10.0.2.104 54523 <-> 128.143.29.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:33.134027 0.789534 udp 10.0.2.104 54523 <-> 49.128.161.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:34.136001 0.038282 udp 10.0.2.104 54523 <-> 84.197.172.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:35.137141 0.236807 udp 10.0.2.104 54523 <-> 72.47.26.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:36.138944 0.100972 udp 10.0.2.104 54523 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:37.140176 0.096294 udp 10.0.2.104 54523 <-> 178.167.99.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:38.141408 0.000000 udp 10.0.2.104 54523 -> 117.254.118.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:39.142771 1.260169 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:40.134921 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:41.135881 0.421716 udp 10.0.2.104 54523 <-> 59.146.149.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:42.137410 0.000000 udp 10.0.2.104 54523 -> 84.132.129.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:43.138693 1.664389 udp 10.0.2.104 54523 <-> 112.119.39.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:44.140365 0.713647 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:45.141554 0.307072 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:46.143161 0.146204 udp 10.0.2.104 54523 <-> 24.154.53.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:47.134310 0.299032 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:48.136212 0.000000 udp 10.0.2.104 54523 -> 87.205.140.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:49.137660 0.166234 udp 10.0.2.104 54523 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:50.138759 0.053056 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:51.140230 0.000000 udp 10.0.2.104 54523 -> 69.14.223.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:52.141382 0.000000 udp 10.0.2.104 54523 -> 186.36.70.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:17:53.143333 0.144944 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:54.134937 2.475786 udp 10.0.2.104 54523 <-> 105.229.138.31 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:55.135821 0.473673 udp 10.0.2.104 54523 <-> 37.250.111.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:57.139027 0.145646 udp 10.0.2.104 54523 <-> 76.181.153.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:58.140044 2.293432 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:17:59.141633 0.000000 udp 10.0.2.104 54523 -> 98.67.186.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:01.134630 0.169398 udp 10.0.2.104 54523 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:02.136125 0.000000 udp 10.0.2.104 54523 -> 84.118.201.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:03.137320 0.333253 udp 10.0.2.104 54523 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:04.138744 0.383591 udp 10.0.2.104 54523 <-> 177.191.152.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:05.140449 1.001453 udp 10.0.2.104 54523 <-> 85.130.45.29 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:07.143760 4.086154 udp 10.0.2.104 54523 <-> 171.79.146.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:08.134426 0.121598 udp 10.0.2.104 54523 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:09.135867 0.438946 udp 10.0.2.104 54523 <-> 219.169.100.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:10.137333 4.094187 udp 10.0.2.104 54523 <-> 181.164.188.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:11.139113 0.275254 udp 10.0.2.104 54523 <-> 117.196.253.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:12.140773 0.773074 udp 10.0.2.104 54523 <-> 113.61.156.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:13.142137 0.162527 udp 10.0.2.104 54523 <-> 97.69.173.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:14.143629 0.000000 udp 10.0.2.104 54523 -> 179.83.245.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:15.134839 0.000000 udp 10.0.2.104 54523 -> 162.207.146.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:16.136555 3.333070 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:17.137986 0.379835 udp 10.0.2.104 54523 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:17.798403 0.000139 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:18:18.139413 0.000000 udp 10.0.2.104 54523 -> 31.22.230.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:20.142105 0.158964 udp 10.0.2.104 54523 <-> 66.168.73.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:21.143428 3.150245 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:22.134613 0.000000 udp 10.0.2.104 54523 -> 77.78.227.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:23.135969 0.044267 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:25.139127 1.290364 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:27.142224 0.168863 udp 10.0.2.104 54523 <-> 75.138.21.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:28.143790 0.292795 udp 10.0.2.104 54523 <-> 186.136.153.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:29.134784 0.000000 udp 10.0.2.104 54523 -> 190.38.55.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:30.136741 0.055497 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:31.138070 0.059403 udp 10.0.2.104 54523 <-> 217.10.134.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:32.138890 0.000000 udp 10.0.2.104 54523 -> 201.95.53.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:33.140368 0.040022 udp 10.0.2.104 54523 <-> 85.229.135.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:34.142489 0.983819 udp 10.0.2.104 54523 <-> 59.94.88.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:35.143603 0.000000 udp 10.0.2.104 54523 -> 71.230.176.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:36.135196 0.372774 udp 10.0.2.104 54523 <-> 115.241.80.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:37.136465 0.047053 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:38.138222 0.128077 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:39.139137 0.384868 udp 10.0.2.104 54523 <-> 93.184.81.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:40.140405 0.000000 udp 10.0.2.104 54523 -> 62.57.201.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:41.142178 0.127715 udp 10.0.2.104 54523 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:42.143483 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:43.134946 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:44.136625 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:45.138222 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:46.139121 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:47.141202 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:48.142251 0.296477 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:18:50.135018 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:51.136475 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:52.138007 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:53.139806 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:54.140517 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:55.142433 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:56.144070 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:57.135293 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:58.136625 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:18:59.137899 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:00.139214 0.000107 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:00.139321 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:19:01.141118 4.996791 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:02.142263 0.023092 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:03.143459 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:04.136100 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:05.136702 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:05.797213 0.000126 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:19:07.139327 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:08.141343 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:09.142208 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:10.143737 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:11.135480 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:12.136520 2.045537 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:13.137915 0.047756 udp 10.0.2.104 54523 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:15.141201 0.174587 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:16.142216 1.402369 udp 10.0.2.104 54523 <-> 177.106.37.76 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:18.134994 0.015860 udp 10.0.2.104 54523 <-> 164.8.214.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:19.137190 0.000000 udp 10.0.2.104 54523 -> 89.34.99.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:20.138237 0.060788 udp 10.0.2.104 54523 <-> 79.113.177.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:21.139963 0.077902 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:22.140967 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:23.142460 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:24.144013 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:25.135741 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:26.137031 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:27.138073 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:28.139437 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:29.141127 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:30.142337 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:30.142418 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:19:32.135726 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:33.137014 0.286147 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:34.138030 0.163876 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:35.139722 0.138297 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:36.141233 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:37.142889 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:38.134519 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:39.135205 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:40.136895 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:42.140004 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:43.141428 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:44.142893 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:45.134091 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:46.135525 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:47.136956 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:47.137033 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:19:48.138543 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:49.140334 0.285096 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:50.141351 0.038616 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:51.142950 0.052245 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:19:52.795238 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:19:53.135836 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:53.135883 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:19:54.137064 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:55.138696 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:56.140482 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:57.141097 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:58.142830 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:19:59.133954 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:00.135740 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:01.137092 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:02.138781 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:03.139727 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:04.141444 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:05.143190 0.286427 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:06.134255 0.060645 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:07.135582 0.031861 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:08.137052 0.140437 udp 10.0.2.104 54523 <-> 95.59.36.14 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:09.138888 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:10.140273 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:11.141455 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:12.143194 0.000101 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:12.143295 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:20:13.134335 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:15.137224 0.286229 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:16.138782 0.035097 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:17.140178 0.464732 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:18.141600 0.000000 udp 10.0.2.104 54523 -> 124.123.227.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:19.143080 0.991492 udp 10.0.2.104 54523 <-> 178.129.93.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:21.136280 0.468122 udp 10.0.2.104 54523 <-> 220.53.176.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:22.137649 0.015024 udp 10.0.2.104 54523 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:23.139052 2.173950 udp 10.0.2.104 54523 <-> 184.170.169.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:24.140221 0.000000 udp 10.0.2.104 54523 -> 111.253.65.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:26.142855 0.051612 udp 10.0.2.104 54523 <-> 93.79.173.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:27.134831 0.134155 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:28.136010 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:29.137076 4.006070 udp 10.0.2.104 54523 -> 190.73.186.63 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:30.139021 0.147573 udp 10.0.2.104 54523 <-> 74.135.68.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:31.140009 4.042176 udp 10.0.2.104 54523 <-> 5.13.94.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:32.141602 0.133713 udp 10.0.2.104 54523 <-> 90.42.85.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:34.134522 0.152002 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:36.137367 0.175627 udp 10.0.2.104 54523 <-> 117.239.29.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:37.138639 0.293393 udp 10.0.2.104 54523 <-> 201.208.192.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:38.140506 0.148769 udp 10.0.2.104 54523 <-> 72.198.87.227 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:39.141795 0.377453 udp 10.0.2.104 54523 <-> 92.36.202.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:39.792917 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:20:40.143112 0.434809 udp 10.0.2.104 54523 <-> 116.124.142.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:41.135010 0.043999 udp 10.0.2.104 54523 <-> 86.126.2.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:42.136468 0.162214 udp 10.0.2.104 54523 <-> 98.212.63.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:43.137889 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:44.138796 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:45.140789 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:46.141925 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:47.143052 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:48.134484 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:49.135982 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:50.137274 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:51.138955 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:52.140448 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:53.142416 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:54.147248 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:55.134669 0.063814 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:56.135997 0.335062 udp 10.0.2.104 54523 <-> 117.214.129.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:57.138006 0.000000 udp 10.0.2.104 54523 -> 5.14.212.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:20:58.139426 0.120611 udp 10.0.2.104 54523 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:20:59.140851 0.059256 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:00.142266 0.162700 udp 10.0.2.104 54523 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:01.143679 0.292039 udp 10.0.2.104 54523 <-> 186.136.207.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:02.135235 0.158380 udp 10.0.2.104 54523 <-> 98.214.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:03.136250 1.209506 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:04.137883 0.623703 udp 10.0.2.104 54523 <-> 109.52.183.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:05.139419 0.160547 udp 10.0.2.104 54523 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:06.140809 0.000000 udp 10.0.2.104 54523 -> 116.202.177.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:07.142028 0.115481 udp 10.0.2.104 54523 <-> 79.134.239.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:08.143685 0.049410 udp 10.0.2.104 54523 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:09.135292 0.364202 udp 10.0.2.104 54523 <-> 111.252.181.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:10.136218 0.246348 udp 10.0.2.104 54523 <-> 62.87.129.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:11.137842 0.062089 udp 10.0.2.104 54523 <-> 91.65.190.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:12.139053 0.135177 udp 10.0.2.104 54523 <-> 76.116.161.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:13.140391 0.075689 udp 10.0.2.104 54523 <-> 78.189.224.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:14.142154 0.474450 udp 10.0.2.104 54523 <-> 203.210.40.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:15.143845 3.054262 udp 10.0.2.104 54523 <-> 92.87.69.43 16464 CON 0 0 6 3676 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:16.135093 0.000000 udp 10.0.2.104 54523 -> 79.9.117.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:17.136669 0.301242 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:19.139171 0.146161 udp 10.0.2.104 54523 <-> 50.167.216.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:20.140791 0.358651 udp 10.0.2.104 54523 <-> 1.163.90.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:21.142524 0.146193 udp 10.0.2.104 54523 <-> 67.85.183.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:22.144190 2.319590 udp 10.0.2.104 54523 <-> 125.142.179.162 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:23.135091 0.593873 udp 10.0.2.104 54523 <-> 187.2.231.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:25.138013 0.050073 udp 10.0.2.104 54523 <-> 188.254.253.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:26.139337 0.380886 udp 10.0.2.104 54523 <-> 117.213.217.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:26.800387 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:21:27.141201 0.254409 udp 10.0.2.104 54523 <-> 207.34.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:28.141958 0.424790 udp 10.0.2.104 54523 <-> 200.30.233.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:29.144109 0.066044 udp 10.0.2.104 54523 <-> 78.235.244.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:30.135030 0.078236 udp 10.0.2.104 54523 <-> 84.90.96.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:31.136369 0.161476 udp 10.0.2.104 54523 <-> 69.136.170.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:32.138019 0.423550 udp 10.0.2.104 54523 <-> 117.194.7.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:33.139116 0.156955 udp 10.0.2.104 54523 <-> 74.192.111.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:34.141197 0.000000 udp 10.0.2.104 54523 -> 181.55.88.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:35.142291 0.310831 udp 10.0.2.104 54523 <-> 121.171.34.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:36.143694 0.394784 udp 10.0.2.104 54523 <-> 218.45.34.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:37.135543 0.363050 udp 10.0.2.104 54523 <-> 124.11.140.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:38.136861 0.129279 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:39.138051 0.018417 udp 10.0.2.104 54523 <-> 78.45.198.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:40.139487 1.083370 udp 10.0.2.104 54523 <-> 200.63.39.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:41.141453 0.054856 udp 10.0.2.104 54523 <-> 86.122.145.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:42.142691 0.000000 udp 10.0.2.104 54523 -> 24.215.121.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:43.144238 0.059714 udp 10.0.2.104 54523 <-> 217.10.134.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:44.135124 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:45.136997 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:46.137936 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:47.139758 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:48.140815 0.141743 udp 10.0.2.104 54523 <-> 98.192.242.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:49.142591 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:49.734802 0.000000 udp 10.0.2.104 54523 <- 24.215.121.6 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:49.843847 0.011967 udp 10.0.2.104 54559 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 05:21:49.856062 0.000000 udp 10.0.2.104 54560 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:50.143893 0.284663 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:51.135672 0.352876 udp 10.0.2.104 54523 <-> 1.36.190.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:52.136848 0.062487 udp 10.0.2.104 54523 <-> 188.27.202.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:53.137873 0.167233 udp 10.0.2.104 54523 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:54.139802 0.335200 udp 10.0.2.104 54523 <-> 125.224.17.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:55.141088 0.000000 udp 10.0.2.104 54523 -> 46.57.73.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:56.142330 0.076547 udp 10.0.2.104 54523 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:21:57.144132 0.000000 udp 10.0.2.104 54523 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:58.135508 0.000000 udp 10.0.2.104 54523 -> 174.108.74.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:21:59.136727 0.427040 udp 10.0.2.104 54523 <-> 202.22.222.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:00.138085 0.212550 udp 10.0.2.104 54523 <-> 190.72.54.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:01.139427 0.159865 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:02.141458 0.155125 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:03.142931 0.047163 udp 10.0.2.104 54523 <-> 81.162.231.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:04.144303 0.456288 udp 10.0.2.104 54523 <-> 79.222.166.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:05.135378 0.449768 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:06.137326 0.299407 udp 10.0.2.104 54523 <-> 190.208.103.70 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:07.137986 0.370608 udp 10.0.2.104 54523 <-> 49.159.145.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:08.139969 0.224751 udp 10.0.2.104 54523 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:09.140875 0.821865 udp 10.0.2.104 54523 <-> 59.94.19.33 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:10.142301 0.209543 udp 10.0.2.104 54523 <-> 76.172.91.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:11.134129 0.403720 udp 10.0.2.104 54523 <-> 125.230.129.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:12.135812 0.000000 udp 10.0.2.104 54523 -> 111.254.38.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:13.136793 0.349699 udp 10.0.2.104 54523 <-> 59.102.184.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:13.798199 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:22:14.138471 0.290985 udp 10.0.2.104 54523 <-> 115.242.226.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:15.140127 0.326178 udp 10.0.2.104 54523 <-> 119.14.233.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:16.141179 0.042415 udp 10.0.2.104 54523 <-> 89.98.118.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:17.143001 0.057526 udp 10.0.2.104 54523 <-> 85.66.114.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:18.134060 0.266729 udp 10.0.2.104 54523 <-> 181.28.105.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:19.135586 0.052871 udp 10.0.2.104 54523 <-> 94.78.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:20.137029 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:21.138339 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:22.140040 0.201347 udp 10.0.2.104 54523 <-> 103.24.86.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:23.140998 0.137717 udp 10.0.2.104 54523 <-> 69.119.241.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:24.142731 0.392283 udp 10.0.2.104 54523 <-> 200.175.127.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:25.134568 0.019133 udp 10.0.2.104 54523 <-> 78.45.198.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:26.135817 0.025043 udp 10.0.2.104 54523 <-> 86.106.46.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:27.136872 1.001995 udp 10.0.2.104 54523 <-> 24.229.141.132 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:29.140283 0.137296 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:30.141139 0.151661 udp 10.0.2.104 54523 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:31.142903 0.000000 udp 10.0.2.104 54523 -> 62.42.133.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:32.134089 0.150042 udp 10.0.2.104 54523 <-> 24.225.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:33.135367 0.548999 udp 10.0.2.104 54523 <-> 186.89.201.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:34.137357 0.314134 udp 10.0.2.104 54523 <-> 59.94.19.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:35.138383 0.143463 udp 10.0.2.104 54523 <-> 65.185.171.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:36.139762 0.059473 udp 10.0.2.104 54523 <-> 77.244.39.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:37.141824 0.232210 udp 10.0.2.104 54523 <-> 117.212.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:38.142890 0.000000 udp 10.0.2.104 54523 -> 2.191.181.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:39.134272 0.304525 udp 10.0.2.104 54523 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:40.136007 0.878163 udp 10.0.2.104 54523 <-> 183.179.52.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:41.137111 0.227415 udp 10.0.2.104 54523 <-> 71.80.148.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:42.138769 1.815963 udp 10.0.2.104 54523 <-> 190.203.106.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:43.140424 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:44.141638 2.994352 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 4 1064 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:45.143393 0.319447 udp 10.0.2.104 54523 <-> 207.190.82.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:48.137604 0.000000 udp 10.0.2.104 54523 -> 85.192.126.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:49.139099 0.454929 udp 10.0.2.104 54523 <-> 201.208.192.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:50.140668 0.163528 udp 10.0.2.104 54523 <-> 68.54.38.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:22:51.142023 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:52.142923 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:53.134153 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:54.136315 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:55.137533 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:56.138803 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:57.140212 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:58.141992 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:22:59.142843 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:00.134471 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:00.795732 0.000143 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:23:01.135742 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:02.137408 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:03.139290 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:04.140198 0.154047 udp 10.0.2.104 54523 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:05.141612 0.029394 udp 10.0.2.104 54523 <-> 46.238.15.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:06.142949 4.997583 udp 10.0.2.104 54523 -> 74.56.6.140 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:07.134483 3.063825 udp 10.0.2.104 54523 <-> 188.254.253.101 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:08.136035 0.048998 udp 10.0.2.104 54523 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:09.137332 1.046085 udp 10.0.2.104 54523 <-> 181.29.186.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:12.141793 0.000000 udp 10.0.2.104 54523 -> 85.192.126.1 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:13.143650 0.224355 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:14.134337 0.000000 udp 10.0.2.104 54523 -> 79.50.192.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:15.136257 0.000000 udp 10.0.2.104 54523 -> 114.40.25.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:16.137510 0.139559 udp 10.0.2.104 54523 <-> 203.192.243.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:17.138811 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:18.140547 2.994454 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:20.143262 0.384808 udp 10.0.2.104 54523 <-> 114.47.152.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:22.135966 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:23.137543 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:24.138716 0.000128 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:24.138844 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:23:25.140159 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:26.142011 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:27.144090 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:28.135020 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:30.137359 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:31.139207 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:32.140637 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:33.142242 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:34.143774 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:34.326312 3.001417 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:23:35.135128 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:36.136680 1.153784 udp 10.0.2.104 54523 <-> 71.43.117.142 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:38.139144 0.164004 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:39.140456 0.063065 udp 10.0.2.104 54523 <-> 37.203.83.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:40.141715 0.000000 udp 10.0.2.104 54523 -> 201.81.192.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:41.143619 0.151229 udp 10.0.2.104 54523 <-> 95.57.252.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:41.333927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:23:42.135083 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:43.136473 0.148085 udp 10.0.2.104 54523 <-> 87.237.237.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:23:44.137477 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:45.139654 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:46.140348 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:47.142559 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:47.793078 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:23:48.143257 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:49.134706 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:49.335146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:23:50.136638 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:51.137560 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:52.139325 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:53.140924 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:54.141833 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:55.143699 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:56.135409 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:57.136877 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:58.138299 4.005739 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:23:58.138427 4.005611 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 05:23:59.139107 0.508716 udp 10.0.2.104 54523 <-> 75.213.231.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:00.140778 0.151504 udp 10.0.2.104 54523 <-> 87.237.237.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:01.141906 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:03.134858 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:04.136780 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:05.137830 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:05.338012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:24:06.139432 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:07.140684 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:08.141989 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:09.143495 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:10.135362 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:11.136909 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:12.137815 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:13.139179 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:14.140964 0.000000 udp 10.0.2.104 54523 -> 186.36.70.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:15.142168 0.000000 udp 10.0.2.104 54523 -> 189.245.128.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:16.143894 0.118257 udp 10.0.2.104 54523 <-> 37.28.248.33 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:17.135383 0.077439 udp 10.0.2.104 54523 <-> 37.203.83.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:18.136578 0.000000 udp 10.0.2.104 54523 -> 114.47.152.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:19.138219 0.000000 udp 10.0.2.104 54523 -> 201.81.192.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:20.139724 0.000000 udp 10.0.2.104 54523 -> 202.78.81.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:21.141218 0.000000 udp 10.0.2.104 54523 -> 186.36.70.90 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:22.142550 0.305024 udp 10.0.2.104 54523 <-> 118.157.11.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:23.143804 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:24.134996 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:25.137056 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:26.137876 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:27.139893 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:28.141177 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:29.142623 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:30.143698 0.295706 udp 10.0.2.104 54523 <-> 75.213.231.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:31.135113 0.151437 udp 10.0.2.104 54523 <-> 95.57.252.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:32.136614 0.000000 udp 10.0.2.104 54523 -> 201.81.192.158 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:33.138403 0.000000 udp 10.0.2.104 54523 -> 189.245.128.226 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:34.139932 0.328001 udp 10.0.2.104 54523 <-> 202.78.81.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:34.800769 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:24:35.141319 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:36.142249 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:37.133855 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:37.344563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:24:38.135553 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:39.136878 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:40.138252 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:41.139778 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:42.141399 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:43.142760 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:44.134323 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:45.135805 3.004143 udp 10.0.2.104 54523 -> 114.47.152.145 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:46.136816 0.134913 udp 10.0.2.104 54523 <-> 24.190.212.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:47.138385 0.000000 udp 10.0.2.104 54523 -> 115.241.95.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:49.141187 0.183885 udp 10.0.2.104 54523 <-> 76.30.230.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:50.142570 0.000000 udp 10.0.2.104 54523 -> 189.245.128.226 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:51.134301 0.000000 udp 10.0.2.104 54523 -> 37.28.248.33 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:52.135566 0.157974 udp 10.0.2.104 54523 <-> 216.4.105.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:53.136885 0.000000 udp 10.0.2.104 54523 -> 110.3.111.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:54.138591 0.134431 udp 10.0.2.104 54523 <-> 24.190.212.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:55.139902 0.000000 udp 10.0.2.104 54523 -> 201.81.192.158 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:56.141403 0.000000 udp 10.0.2.104 54523 -> 37.203.83.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:24:57.142742 0.304913 udp 10.0.2.104 54523 <-> 118.157.11.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:58.133967 0.632769 udp 10.0.2.104 54523 <-> 75.213.231.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:24:59.135555 0.178871 udp 10.0.2.104 54523 <-> 76.30.230.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:00.136954 0.134994 udp 10.0.2.104 54523 <-> 24.190.212.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:01.138537 0.000000 udp 10.0.2.104 54523 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:02.140298 0.000000 udp 10.0.2.104 54523 -> 179.117.195.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:03.141188 0.152515 udp 10.0.2.104 54523 <-> 24.74.220.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:04.143234 0.225846 udp 10.0.2.104 54523 <-> 216.4.105.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:05.134375 0.000000 udp 10.0.2.104 54523 -> 189.245.128.226 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:06.135795 0.559496 udp 10.0.2.104 54523 <-> 186.36.70.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:07.137224 0.120380 udp 10.0.2.104 54523 <-> 37.28.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:08.138207 0.645456 udp 10.0.2.104 54523 <-> 201.81.192.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:09.140150 0.131753 udp 10.0.2.104 54523 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:10.141775 0.170788 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:11.142906 0.000000 udp 10.0.2.104 54523 -> 186.57.44.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:12.134419 0.212766 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:13.135555 0.231735 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:14.136872 0.126430 udp 10.0.2.104 54523 <-> 147.143.129.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:15.138886 0.641660 udp 10.0.2.104 54523 <-> 183.72.69.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:16.140336 0.056695 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:17.141508 0.130484 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:18.143207 0.056667 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:19.134321 0.000000 udp 10.0.2.104 54523 -> 114.26.249.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:20.135572 0.000000 udp 10.0.2.104 54523 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:21.137713 0.000000 udp 10.0.2.104 54523 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:21.798020 0.000137 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:25:22.138902 0.161587 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:23.140535 0.335995 udp 10.0.2.104 54523 <-> 180.220.131.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:24.141243 0.322395 udp 10.0.2.104 54523 <-> 112.170.227.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:25.142844 0.314106 udp 10.0.2.104 54523 <-> 117.213.217.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:26.134124 0.310396 udp 10.0.2.104 54523 <-> 121.171.34.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:27.135882 0.191039 udp 10.0.2.104 54523 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:28.137611 0.000000 udp 10.0.2.104 54523 -> 75.137.254.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:29.139072 0.000000 udp 10.0.2.104 54523 -> 98.229.185.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:30.139957 0.739211 udp 10.0.2.104 54523 <-> 79.46.54.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:31.141838 3.995310 udp 10.0.2.104 54523 -> 115.242.195.112 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:32.142871 0.210165 udp 10.0.2.104 54523 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:33.134723 0.000000 udp 10.0.2.104 54523 -> 189.79.170.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:34.135653 0.387056 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:36.139224 0.000000 udp 10.0.2.104 54523 -> 178.239.112.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:37.139994 0.000000 udp 10.0.2.104 54523 -> 58.8.45.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:38.141607 0.321900 udp 10.0.2.104 54523 <-> 189.79.170.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:39.143102 0.320515 udp 10.0.2.104 54523 <-> 58.114.74.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:40.134790 0.045786 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:41.136070 0.000000 udp 10.0.2.104 54523 -> 177.35.181.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:42.137376 0.431646 udp 10.0.2.104 54523 <-> 219.175.44.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:43.139239 3.113148 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:44.140211 0.183500 udp 10.0.2.104 54523 <-> 50.27.25.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:45.141648 3.206748 udp 10.0.2.104 54523 <-> 71.196.186.70 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:47.134761 2.002428 udp 10.0.2.104 54523 -> 220.142.70.108 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:25:50.139119 0.156606 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:51.140680 0.137810 udp 10.0.2.104 54523 <-> 75.177.8.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:52.142100 0.180898 udp 10.0.2.104 54523 <-> 50.27.25.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:53.143421 0.024466 udp 10.0.2.104 54523 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:54.134981 1.049314 udp 10.0.2.104 54523 <-> 82.225.246.244 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:56.137521 0.357803 udp 10.0.2.104 54523 <-> 111.249.141.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:57.138812 2.139215 udp 10.0.2.104 54523 <-> 24.190.212.213 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:25:58.140530 0.000000 udp 10.0.2.104 54523 -> 157.14.178.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:00.143223 0.820618 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:01.134577 0.164438 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:02.136371 0.245824 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:03.137653 0.431088 udp 10.0.2.104 54523 <-> 75.197.101.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:04.138850 0.162900 udp 10.0.2.104 54523 <-> 68.56.21.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:05.140512 0.094325 udp 10.0.2.104 54523 -> 79.158.91.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:05.234837 0.000000 icmp 79.158.91.149 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 05:26:06.141740 0.047393 udp 10.0.2.104 54523 <-> 78.88.33.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:07.143370 0.278114 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:08.134791 0.039563 udp 10.0.2.104 54523 <-> 89.215.42.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:08.795815 0.000123 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:26:09.136233 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:10.137504 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:11.139346 0.154752 udp 10.0.2.104 54523 <-> 65.188.38.194 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:12.140530 0.146259 udp 10.0.2.104 54523 <-> 47.23.94.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:13.142410 0.401412 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:14.143386 0.394673 udp 10.0.2.104 54523 <-> 114.47.7.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:15.135257 0.000000 udp 10.0.2.104 54523 -> 87.205.140.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:16.135989 0.378297 udp 10.0.2.104 54523 <-> 1.164.153.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:17.137490 0.000000 udp 10.0.2.104 54523 -> 173.176.177.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:18.139684 0.038398 udp 10.0.2.104 54523 <-> 84.52.157.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:19.140924 0.319552 udp 10.0.2.104 54523 <-> 121.152.3.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:20.142190 0.145197 udp 10.0.2.104 54523 <-> 58.146.127.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:21.143547 0.000000 udp 10.0.2.104 54523 -> 5.20.72.89 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:22.135291 0.000000 udp 10.0.2.104 54523 -> 186.32.215.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:23.136691 0.336782 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:24.137687 0.041623 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:25.139432 0.000000 udp 10.0.2.104 54523 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:26.141008 0.301141 udp 10.0.2.104 54523 <-> 189.25.78.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:27.142241 0.000000 udp 10.0.2.104 54523 -> 77.78.246.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:28.143289 0.033292 udp 10.0.2.104 54523 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:29.135405 0.000000 udp 10.0.2.104 54523 -> 186.32.215.34 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:30.136310 0.043831 udp 10.0.2.104 54523 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:31.138149 0.354601 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:32.139190 0.140433 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:33.140701 0.095882 udp 10.0.2.104 54523 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:34.142446 1.063965 udp 10.0.2.104 54523 <-> 82.239.45.91 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:36.134762 0.000000 udp 10.0.2.104 54523 -> 1.34.204.71 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:37.136550 0.389021 udp 10.0.2.104 54523 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:38.137962 0.168868 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:39.139459 0.043891 udp 10.0.2.104 54523 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:40.140761 0.063701 udp 10.0.2.104 54523 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:41.142052 0.059939 udp 10.0.2.104 54523 <-> 77.78.246.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:42.143594 3.103928 udp 10.0.2.104 54523 <-> 95.107.216.55 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:43.134878 0.336822 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:44.136298 3.360841 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:46.139304 4.997740 udp 10.0.2.104 54523 <-> 89.230.111.41 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:49.144233 0.000000 udp 10.0.2.104 54523 -> 1.172.59.34 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:50.134925 0.044104 udp 10.0.2.104 54523 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:51.190563 0.000000 udp 10.0.2.104 54523 <- 89.230.111.41 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:52.138235 0.994866 udp 10.0.2.104 54523 <-> 186.32.215.34 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:53.139842 0.299902 udp 10.0.2.104 54523 <-> 115.87.51.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:54.140678 0.205499 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:55.142841 0.046539 udp 10.0.2.104 54523 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:55.793219 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:26:56.144035 0.172359 udp 10.0.2.104 54523 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:57.135248 0.175468 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:26:58.137142 0.000000 udp 10.0.2.104 54523 -> 116.193.141.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:26:59.138176 0.384323 udp 10.0.2.104 54523 <-> 61.228.158.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:00.139920 0.069340 udp 10.0.2.104 54523 <-> 178.120.86.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:01.141264 0.409326 udp 10.0.2.104 54523 <-> 121.166.87.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:02.142362 0.000000 udp 10.0.2.104 54523 -> 2.184.17.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:03.144306 0.302980 udp 10.0.2.104 54523 <-> 114.162.153.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:04.135500 0.143143 udp 10.0.2.104 54523 <-> 69.124.254.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:05.136964 0.260937 udp 10.0.2.104 54523 <-> 190.202.252.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:06.137955 0.060215 udp 10.0.2.104 54523 <-> 86.124.228.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:07.140052 0.000000 udp 10.0.2.104 54523 -> 31.59.37.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:08.141215 0.090307 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:09.142482 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:10.134171 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:11.135132 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:12.137045 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:13.138547 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:14.139940 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:15.141518 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:16.143000 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:17.133686 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:18.135440 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:19.136899 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:20.138325 0.082968 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:21.140118 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:22.141313 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:23.142751 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:24.133958 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:25.135919 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:26.136624 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:27.138382 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:28.140039 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:29.141578 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:30.142841 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:31.133885 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:33.137418 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:34.138695 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:35.140137 0.144968 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:36.141061 0.000132 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:36.141193 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:27:37.143044 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:38.134403 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:39.135816 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:40.137525 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:41.138234 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:42.140399 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:42.801160 0.000134 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:27:43.141563 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:44.143308 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:45.134146 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:47.137045 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:48.138788 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:49.139928 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:50.141564 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:27:51.142888 0.110096 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:52.134260 0.265823 udp 10.0.2.104 54523 <-> 190.247.148.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:53.135565 0.060654 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:54.137345 0.142583 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:55.138409 0.063004 udp 10.0.2.104 54523 <-> 86.127.19.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:56.139815 0.178089 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:57.141703 1.360499 udp 10.0.2.104 54523 <-> 122.100.81.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:27:59.134144 0.238398 udp 10.0.2.104 54523 <-> 88.37.113.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:00.135913 0.189110 udp 10.0.2.104 54523 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:01.137153 0.055069 udp 10.0.2.104 54523 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:02.138419 0.000000 udp 10.0.2.104 54523 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:03.139857 0.135388 udp 10.0.2.104 54523 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:04.141390 0.106122 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:05.143430 0.050257 udp 10.0.2.104 54523 <-> 89.34.99.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:06.134711 0.000000 udp 10.0.2.104 54523 -> 84.40.72.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:07.135973 0.153049 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:08.137717 2.231961 udp 10.0.2.104 54523 <-> 88.37.113.50 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:09.139118 0.142575 udp 10.0.2.104 54523 <-> 95.85.160.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:11.142076 0.151969 udp 10.0.2.104 54523 <-> 49.207.105.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:12.143058 0.023948 udp 10.0.2.104 54523 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:13.134515 0.158436 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:14.136047 0.172563 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:15.137549 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:16.139067 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:17.140264 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:18.141671 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:19.143618 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:20.134558 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:21.136297 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:22.137678 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:23.139242 1.385510 udp 10.0.2.104 54523 <-> 92.227.202.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:24.140037 2.652442 udp 10.0.2.104 54523 <-> 115.242.132.13 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:25.142184 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:27.134620 4.006134 udp 10.0.2.104 54523 <-> 2.195.10.19 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:28.135859 0.053208 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:29.137419 0.000000 udp 10.0.2.104 54523 -> 111.250.115.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:29.798405 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:28:30.139361 0.352953 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:32.141971 0.296848 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:33.143287 0.000000 udp 10.0.2.104 54523 -> 2.195.10.19 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:34.134940 0.247245 udp 10.0.2.104 54523 <-> 59.90.194.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:35.135961 0.068050 udp 10.0.2.104 54523 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:36.137565 0.000000 udp 10.0.2.104 54523 -> 14.97.213.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:37.139110 0.144829 udp 10.0.2.104 54523 <-> 24.215.93.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:38.140423 0.000000 udp 10.0.2.104 54523 -> 64.219.232.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:39.142029 0.061464 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:40.143351 0.000000 udp 10.0.2.104 54523 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:41.134542 0.159046 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:42.136657 0.000000 udp 10.0.2.104 54523 -> 175.35.78.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:43.137362 0.360088 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:44.139206 0.082207 udp 10.0.2.104 54523 <-> 95.21.75.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:45.140347 0.051748 udp 10.0.2.104 54523 <-> 88.135.143.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:46.141691 0.056472 udp 10.0.2.104 54523 <-> 86.127.163.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:47.143173 0.000000 udp 10.0.2.104 54523 -> 219.114.23.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:48.135244 0.133091 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:49.136809 0.059782 udp 10.0.2.104 54523 <-> 151.15.141.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:50.138255 4.997028 udp 10.0.2.104 54523 -> 221.170.163.60 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:51.139575 0.000000 udp 10.0.2.104 54523 -> 188.124.216.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:52.140502 0.000000 udp 10.0.2.104 54523 -> 78.84.198.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:53.142408 0.000000 udp 10.0.2.104 54523 -> 115.241.141.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:28:54.143632 0.285742 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:56.136269 0.256515 udp 10.0.2.104 54523 <-> 187.1.104.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:57.137750 0.356559 udp 10.0.2.104 54523 <-> 74.197.79.252 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:58.139020 0.162261 udp 10.0.2.104 54523 <-> 68.102.16.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:28:59.140792 0.251910 udp 10.0.2.104 54523 <-> 31.223.219.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:00.142108 0.051875 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:01.143304 0.000000 udp 10.0.2.104 54523 -> 111.240.96.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:02.135415 0.089244 udp 10.0.2.104 54523 <-> 94.41.113.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:03.136239 0.466013 udp 10.0.2.104 54523 <-> 117.214.188.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:04.138053 0.132222 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:05.139000 0.411918 udp 10.0.2.104 54523 <-> 118.44.234.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:06.140865 0.196905 udp 10.0.2.104 54523 <-> 71.92.82.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:07.142306 0.000000 udp 10.0.2.104 54523 -> 208.122.67.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:08.143884 0.177251 udp 10.0.2.104 54523 <-> 65.24.129.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:09.134727 1.180073 udp 10.0.2.104 54523 <-> 24.37.209.130 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:11.138010 0.061778 udp 10.0.2.104 54523 <-> 188.173.201.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:12.139308 0.151822 udp 10.0.2.104 54523 <-> 216.36.28.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:13.140582 0.156129 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:14.142027 0.000000 udp 10.0.2.104 54523 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:15.143890 0.000000 udp 10.0.2.104 54523 -> 109.54.36.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:16.135321 0.041724 udp 10.0.2.104 54523 <-> 5.12.93.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:16.796103 0.000123 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:29:17.136520 0.176086 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:18.138387 0.181076 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:19.139760 0.298126 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:20.140702 1.080533 udp 10.0.2.104 54523 <-> 181.16.28.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:21.142629 0.282527 udp 10.0.2.104 54523 <-> 126.4.241.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:22.143797 0.852334 udp 10.0.2.104 54523 <-> 84.132.83.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:23.135264 0.370170 udp 10.0.2.104 54523 <-> 36.229.51.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:24.137071 0.187604 udp 10.0.2.104 54523 <-> 24.49.203.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:25.138476 0.111176 udp 10.0.2.104 54523 <-> 217.201.60.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:26.139687 0.834744 udp 10.0.2.104 54523 <-> 109.54.130.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:27.141355 0.000000 udp 10.0.2.104 54523 -> 80.46.212.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:28.142535 0.221389 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:29.144067 0.327046 udp 10.0.2.104 54523 <-> 219.114.23.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:30.134928 0.014203 udp 10.0.2.104 54523 <-> 188.230.145.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:31.136721 0.063259 udp 10.0.2.104 54523 <-> 89.40.192.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:32.138278 0.162262 udp 10.0.2.104 54523 <-> 98.215.30.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:33.139507 0.123464 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:34.141295 1.045065 udp 10.0.2.104 54523 <-> 80.97.88.220 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:36.144253 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:37.135642 1.917160 udp 10.0.2.104 54523 <-> 190.203.106.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:38.137107 0.000000 udp 10.0.2.104 54523 -> 49.202.66.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:39.138418 0.068861 udp 10.0.2.104 54523 <-> 90.229.251.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:40.139400 0.215273 udp 10.0.2.104 54523 <-> 173.16.136.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:41.140915 2.049556 udp 10.0.2.104 54523 <-> 79.117.162.220 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:42.142641 0.000000 udp 10.0.2.104 54523 -> 37.215.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:44.135496 0.000000 udp 10.0.2.104 54523 -> 190.110.186.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:45.136601 0.027668 udp 10.0.2.104 54523 <-> 131.114.121.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:46.138585 0.412210 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:47.140007 0.337811 udp 10.0.2.104 54523 <-> 218.216.247.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:48.141505 0.000000 udp 10.0.2.104 54523 -> 111.103.148.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:49.142277 0.301343 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:50.133731 0.125521 udp 10.0.2.104 54523 <-> 74.72.172.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:51.135665 0.836150 udp 10.0.2.104 54523 <-> 117.212.119.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:52.137212 0.164558 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:53.138677 0.168285 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:54.139749 0.355344 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:55.141332 0.367361 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:56.142357 0.235715 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:57.133787 0.000000 udp 10.0.2.104 54523 -> 46.248.74.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:29:58.135727 0.142415 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:29:59.136653 0.000000 udp 10.0.2.104 54523 -> 50.81.76.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:00.138324 0.986735 udp 10.0.2.104 54523 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:01.139526 0.136793 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:02.141204 0.000000 udp 10.0.2.104 54523 -> 78.90.170.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:03.142373 0.149622 udp 10.0.2.104 54523 <-> 174.101.11.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:03.793740 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:30:04.134020 0.052298 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:05.135317 0.560918 udp 10.0.2.104 54523 <-> 184.229.182.181 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:06.137000 0.044859 udp 10.0.2.104 54523 <-> 5.15.59.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:07.138776 0.255380 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:08.139837 0.000000 udp 10.0.2.104 54523 -> 93.63.109.5 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:09.141614 0.000000 udp 10.0.2.104 54523 -> 115.241.120.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:10.142448 1.400877 udp 10.0.2.104 54523 <-> 92.227.202.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:11.134080 0.144341 udp 10.0.2.104 54523 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:12.135309 0.057187 udp 10.0.2.104 54523 <-> 178.217.201.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:13.137311 0.511762 udp 10.0.2.104 54523 <-> 123.254.196.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:14.139817 0.043445 udp 10.0.2.104 54523 <-> 87.252.173.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:15.140185 0.000000 udp 10.0.2.104 54523 -> 65.27.116.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:16.141479 0.161149 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:17.142947 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:18.133949 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:19.135738 0.314809 udp 10.0.2.104 54523 <-> 125.15.7.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:20.137422 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:21.138900 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:21.791384 0.027803 udp 10.0.2.104 54523 <- 115.241.120.5 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:22.140047 0.155359 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:23.141444 0.000000 udp 10.0.2.104 54523 -> 183.83.152.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:24.143159 0.000000 udp 10.0.2.104 54523 -> 124.8.86.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:25.134309 0.050147 udp 10.0.2.104 54523 <-> 78.61.121.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:26.136161 0.307413 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:27.137578 0.188020 udp 10.0.2.104 54523 <-> 192.252.239.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:28.138777 0.049132 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:29.139972 0.000000 udp 10.0.2.104 54523 -> 202.71.28.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:30.141617 0.407163 udp 10.0.2.104 54523 <-> 111.254.146.115 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:31.143125 0.347951 udp 10.0.2.104 54523 <-> 115.165.242.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:32.134335 0.320312 udp 10.0.2.104 54523 <-> 113.39.129.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:33.135710 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:34.136981 0.171277 udp 10.0.2.104 54523 <-> 24.37.209.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:35.139092 0.000000 udp 10.0.2.104 54523 -> 88.72.192.21 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:36.140013 0.030955 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:37.141707 0.060416 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:38.142966 0.271465 udp 10.0.2.104 54523 <-> 190.206.187.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:39.134511 0.000000 udp 10.0.2.104 54523 -> 36.230.63.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:40.135790 3.004646 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:41.137256 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:41.349894 3.001947 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:30:42.138458 0.000000 udp 10.0.2.104 54523 -> 217.165.234.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:44.141852 0.000000 udp 10.0.2.104 54523 -> 36.230.63.122 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:45.143145 0.060605 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:46.134313 0.030863 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:47.135791 0.156214 udp 10.0.2.104 54523 <-> 98.30.8.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:48.137678 0.503692 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:48.357656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:30:49.139113 0.000000 udp 10.0.2.104 54523 -> 79.118.190.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:50.140237 0.632775 udp 10.0.2.104 54523 <-> 201.208.23.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:50.801250 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:30:51.141558 0.000000 udp 10.0.2.104 54523 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:52.142925 0.803533 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:53.134630 0.162835 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:54.136001 0.000000 udp 10.0.2.104 54523 -> 75.83.103.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:55.137222 0.000000 udp 10.0.2.104 54523 -> 79.118.190.205 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:30:56.138583 0.032484 udp 10.0.2.104 54523 <-> 85.186.104.81 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:56.359229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:30:57.140598 0.062726 udp 10.0.2.104 54523 <-> 83.195.175.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:58.141755 0.121384 udp 10.0.2.104 54523 <-> 109.163.161.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:30:59.143276 1.162315 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:01.136484 0.000000 udp 10.0.2.104 54523 -> 72.181.16.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:02.137461 0.000000 udp 10.0.2.104 54523 -> 59.184.123.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:03.139305 0.153650 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:04.140614 0.188712 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:05.142119 0.000000 udp 10.0.2.104 54523 -> 24.57.55.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:06.143419 0.350387 udp 10.0.2.104 54523 <-> 179.174.243.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:07.135114 0.405520 udp 10.0.2.104 54523 <-> 61.80.247.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:08.136123 0.000000 udp 10.0.2.104 54523 -> 89.247.115.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:09.137419 0.160262 udp 10.0.2.104 54523 <-> 78.203.12.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:10.138929 0.000000 udp 10.0.2.104 54523 -> 115.241.37.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:11.140436 0.110138 udp 10.0.2.104 54523 <-> 82.19.125.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:12.141944 1.178565 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:12.362524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:31:14.135118 0.000000 udp 10.0.2.104 54523 -> 202.140.211.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:15.136342 0.000000 udp 10.0.2.104 54523 -> 177.41.178.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:16.137438 0.155970 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:17.139373 0.342962 udp 10.0.2.104 54523 <-> 2.187.80.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:18.140764 0.212295 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:19.141975 0.153660 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:21.134975 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:22.136207 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:22.136269 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:31:23.137882 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:24.138950 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:25.140955 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:26.142360 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:27.143355 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:28.134592 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:29.136164 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:30.137693 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:31.139445 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:32.140918 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:33.142003 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:34.143401 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:35.135123 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:36.136863 0.185018 udp 10.0.2.104 54523 <-> 183.82.201.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:37.137667 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:37.799035 0.000116 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:31:38.139690 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:39.141009 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:41.143880 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:42.135423 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:43.136626 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:44.138044 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:44.368332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:31:45.139452 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:46.140693 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:47.142044 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:48.144075 4.997296 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:48.144214 4.997157 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 05:31:49.135264 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:50.136899 0.373491 udp 10.0.2.104 54523 <-> 61.231.15.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:52.139289 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:54.142053 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:55.144193 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:56.135170 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:31:57.136967 0.219357 udp 10.0.2.104 54523 <-> 184.166.9.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:58.138359 0.077523 udp 10.0.2.104 54523 <-> 62.42.133.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:31:59.139840 0.465848 udp 10.0.2.104 54523 <-> 114.48.45.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:00.141212 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:01.142442 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:02.143943 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:03.135350 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:04.136446 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:05.137900 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:06.139847 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:07.140675 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:08.142179 0.147892 udp 10.0.2.104 54523 <-> 24.159.3.63 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:09.144151 0.238438 udp 10.0.2.104 54523 <-> 186.92.240.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:10.135077 0.169284 udp 10.0.2.104 54523 <-> 24.222.116.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:11.136732 0.398696 udp 10.0.2.104 54523 <-> 1.170.254.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:12.137969 3.145861 udp 10.0.2.104 54523 <-> 75.102.177.126 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:13.139564 0.000000 udp 10.0.2.104 54523 -> 60.237.180.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:14.141320 0.325781 udp 10.0.2.104 54523 <-> 190.110.186.148 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:16.134004 0.000000 udp 10.0.2.104 54523 -> 114.40.25.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:17.135413 0.000000 udp 10.0.2.104 54523 -> 79.27.233.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:18.136656 0.224270 udp 10.0.2.104 54523 <-> 117.212.94.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:19.138568 0.000123 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:19.138691 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:32:20.139844 0.156562 udp 10.0.2.104 54523 <-> 72.188.185.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:21.141594 0.482817 udp 10.0.2.104 54523 <-> 61.3.8.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:22.142493 0.000000 udp 10.0.2.104 54523 -> 27.248.226.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:23.133697 0.141871 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:24.135456 0.000000 udp 10.0.2.104 54523 -> 190.110.186.148 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:24.796354 0.000035 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:32:25.136853 0.732905 udp 10.0.2.104 54523 <-> 208.1.38.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:26.138534 0.139464 udp 10.0.2.104 54523 <-> 69.115.113.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:27.139713 2.763504 udp 10.0.2.104 54523 <-> 187.37.207.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:28.140879 0.576664 udp 10.0.2.104 54523 <-> 2.40.214.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:29.142865 0.750255 udp 10.0.2.104 54523 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:30.133863 0.000000 udp 10.0.2.104 54523 -> 79.171.124.173 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:31.135425 0.000000 udp 10.0.2.104 54523 -> 217.72.209.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:32.137217 0.274149 udp 10.0.2.104 54523 <-> 187.1.104.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:33.138326 0.142532 udp 10.0.2.104 54523 <-> 24.191.109.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:34.139609 0.000000 udp 10.0.2.104 54523 -> 115.240.19.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:35.141642 1.158469 udp 10.0.2.104 54523 <-> 91.240.43.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:36.142760 3.033966 udp 10.0.2.104 54523 <-> 79.171.124.173 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:37.133900 0.031697 udp 10.0.2.104 54523 <-> 78.42.252.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:38.135919 0.291860 udp 10.0.2.104 54523 <-> 187.1.104.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:40.138573 0.934539 udp 10.0.2.104 54523 <-> 217.72.209.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:41.139862 0.049852 udp 10.0.2.104 54523 <-> 188.25.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:42.141171 0.455124 udp 10.0.2.104 54523 <-> 221.39.55.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:43.142403 0.465060 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:44.134511 0.000000 udp 10.0.2.104 54523 -> 179.83.245.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:45.135308 0.082420 udp 10.0.2.104 54523 <-> 212.92.232.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:46.136814 0.000000 udp 10.0.2.104 54523 -> 24.244.127.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:47.138489 0.000000 udp 10.0.2.104 54523 -> 98.127.236.231 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:48.139792 0.327555 udp 10.0.2.104 54523 <-> 211.105.97.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:49.141071 0.410720 udp 10.0.2.104 54523 <-> 175.199.55.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:50.142598 0.184322 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:51.133912 0.000110 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:32:51.134022 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:32:52.135368 0.161279 udp 10.0.2.104 54523 <-> 50.142.111.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:53.137352 0.316500 udp 10.0.2.104 54523 <-> 122.145.189.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:54.138487 0.190353 udp 10.0.2.104 54523 <-> 176.239.248.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:55.140080 0.078845 udp 10.0.2.104 54523 <-> 91.83.23.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:56.141356 0.185826 udp 10.0.2.104 54523 <-> 24.113.136.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:57.142939 0.044698 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:58.134277 0.058153 udp 10.0.2.104 54523 <-> 78.251.241.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:32:59.135519 0.048251 udp 10.0.2.104 54523 <-> 82.225.246.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:00.137318 0.037283 udp 10.0.2.104 54523 <-> 130.204.143.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:01.138373 0.148182 udp 10.0.2.104 54523 <-> 65.27.248.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:02.140500 0.400634 udp 10.0.2.104 54523 <-> 114.45.53.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:03.141225 0.016992 udp 10.0.2.104 54523 <-> 94.113.109.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:04.142889 0.154897 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:05.134298 0.170018 udp 10.0.2.104 54523 <-> 24.160.149.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:06.136354 0.302607 udp 10.0.2.104 54523 <-> 188.2.105.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:07.137528 1.298980 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:08.702149 0.000000 udp 10.0.2.104 54523 <- 98.127.236.231 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:09.140282 0.385189 udp 10.0.2.104 54523 <-> 190.207.39.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:10.141540 0.140538 udp 10.0.2.104 54523 <-> 68.63.114.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:11.142887 0.015590 udp 10.0.2.104 54523 <-> 164.8.214.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:11.793817 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:33:12.134403 0.155518 udp 10.0.2.104 54523 <-> 67.240.151.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:13.136228 0.678828 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:14.137336 0.000000 udp 10.0.2.104 54523 -> 77.239.80.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:15.138671 0.279494 udp 10.0.2.104 54523 <-> 179.216.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:16.140425 0.019342 udp 10.0.2.104 54523 <-> 161.53.202.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:17.141991 0.060503 udp 10.0.2.104 54523 <-> 95.90.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:18.142795 0.000000 udp 10.0.2.104 54523 -> 1.23.252.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:19.134555 0.077503 udp 10.0.2.104 54523 <-> 212.119.157.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:20.135942 0.028683 udp 10.0.2.104 54523 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:21.137491 0.160907 udp 10.0.2.104 54523 <-> 124.123.242.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:22.138814 0.257892 udp 10.0.2.104 54523 <-> 114.79.142.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:23.140236 0.109880 udp 10.0.2.104 54523 <-> 93.74.103.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:24.141906 0.066284 udp 10.0.2.104 54523 <-> 85.202.146.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:25.143281 0.155455 udp 10.0.2.104 54523 <-> 173.217.236.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:26.134263 0.058431 udp 10.0.2.104 54523 <-> 79.118.192.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:27.136482 0.149704 udp 10.0.2.104 54523 <-> 96.20.172.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:28.137408 0.073095 udp 10.0.2.104 54523 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:29.138828 3.004463 udp 10.0.2.104 54523 -> 70.65.132.85 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:30.140623 0.159282 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:31.141862 1.325871 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:33.135026 0.000000 udp 10.0.2.104 54523 -> 186.73.202.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:34.136428 0.398841 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:35.137632 0.051793 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:36.138976 0.377384 udp 10.0.2.104 54523 <-> 111.249.249.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:37.140595 0.313338 udp 10.0.2.104 54523 <-> 182.235.179.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:38.142050 0.048070 udp 10.0.2.104 54523 <-> 87.247.70.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:39.143546 0.314248 udp 10.0.2.104 54523 <-> 125.4.22.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:40.134719 0.000000 udp 10.0.2.104 54523 -> 95.239.116.210 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:41.136392 0.028612 udp 10.0.2.104 54523 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:42.137385 0.061543 udp 10.0.2.104 54523 <-> 194.140.132.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:43.139390 0.317756 udp 10.0.2.104 54523 <-> 177.55.204.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:44.140201 0.438201 udp 10.0.2.104 54523 <-> 88.236.237.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:45.142101 0.000000 udp 10.0.2.104 54523 -> 50.80.122.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:46.143632 0.050670 udp 10.0.2.104 54523 <-> 86.106.28.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:47.134822 0.335441 udp 10.0.2.104 54523 <-> 220.158.39.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:48.136096 0.072682 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:49.137575 0.050405 udp 10.0.2.104 54523 <-> 89.228.148.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:50.138776 0.158642 udp 10.0.2.104 54523 <-> 71.56.93.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:51.140742 0.058863 udp 10.0.2.104 54523 <-> 85.66.114.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:52.141831 0.329569 udp 10.0.2.104 54523 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:53.143422 0.000000 udp 10.0.2.104 54523 -> 79.118.190.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:54.135675 0.296784 udp 10.0.2.104 54523 <-> 190.204.102.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:55.136392 0.000000 udp 10.0.2.104 54523 -> 14.99.36.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:56.137400 0.000000 udp 10.0.2.104 54523 -> 50.128.173.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:57.139350 0.000000 udp 10.0.2.104 54523 -> 186.14.134.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:33:58.140252 0.047393 udp 10.0.2.104 54523 <-> 212.67.155.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:33:58.801189 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:33:59.141917 4.022499 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:00.143775 0.065482 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:01.134764 0.000000 udp 10.0.2.104 54523 -> 2.232.65.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:02.136249 2.431926 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:05.140434 0.000000 udp 10.0.2.104 54523 -> 115.242.100.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:05.945909 0.000000 udp 10.0.2.104 54523 <- 14.99.36.94 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:06.142179 0.369709 udp 10.0.2.104 54523 <-> 1.173.229.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:07.143745 1.159236 udp 10.0.2.104 54523 <-> 67.246.131.126 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:09.136856 0.205970 udp 10.0.2.104 54523 <-> 98.210.235.8 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:10.137581 0.398881 udp 10.0.2.104 54523 <-> 114.27.204.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:10.448917 0.000000 udp 10.0.2.104 54523 <- 115.242.100.251 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:11.139090 0.000000 udp 10.0.2.104 54523 -> 89.16.139.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:12.140787 0.243554 udp 10.0.2.104 54523 <-> 105.137.56.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:13.142466 0.351809 udp 10.0.2.104 54523 <-> 117.198.234.192 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:14.143320 0.364790 udp 10.0.2.104 54523 <-> 49.159.227.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:15.134857 0.281257 udp 10.0.2.104 54523 <-> 201.82.240.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:16.136710 0.163718 udp 10.0.2.104 54523 <-> 176.237.169.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:17.137561 0.000000 udp 10.0.2.104 54523 -> 178.129.93.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:18.139479 0.056844 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:19.141195 0.161393 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:20.142606 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:21.143527 0.405428 udp 10.0.2.104 54523 <-> 1.238.134.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:22.135398 0.000000 udp 10.0.2.104 54523 -> 14.97.213.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:23.136927 0.326823 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:24.138210 0.359017 udp 10.0.2.104 54523 <-> 111.118.28.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:25.139218 0.026808 udp 10.0.2.104 54523 <-> 80.218.193.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:26.140864 0.215212 udp 10.0.2.104 54523 <-> 50.168.13.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:27.142268 0.323183 udp 10.0.2.104 54523 <-> 122.209.168.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:28.143727 0.135510 udp 10.0.2.104 54523 <-> 76.11.8.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:29.135020 0.051533 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:30.136953 0.070019 udp 10.0.2.104 54523 <-> 85.152.0.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:31.137738 0.000000 udp 10.0.2.104 54523 -> 197.249.77.202 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:32.139286 0.157080 udp 10.0.2.104 54523 <-> 24.224.21.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:33.140998 0.146988 udp 10.0.2.104 54523 <-> 24.154.41.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:34.142779 1.001268 udp 10.0.2.104 54523 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:35.143834 1.330444 udp 10.0.2.104 54523 <-> 201.248.60.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:36.135763 0.279890 udp 10.0.2.104 54523 <-> 201.210.91.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:37.136341 0.348521 udp 10.0.2.104 54523 <-> 1.173.229.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:38.138286 0.051272 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:39.139575 0.122499 udp 10.0.2.104 54523 <-> 24.122.115.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:40.140692 0.450579 udp 10.0.2.104 54523 <-> 93.105.253.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:41.142407 0.000000 udp 10.0.2.104 54523 -> 188.27.165.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:42.143863 0.000000 udp 10.0.2.104 54523 -> 72.214.248.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:43.135507 0.171105 udp 10.0.2.104 54523 <-> 67.11.253.92 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:44.137079 0.364171 udp 10.0.2.104 54523 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:45.138447 0.165208 udp 10.0.2.104 54523 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:45.799438 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:34:46.139413 0.000000 udp 10.0.2.104 54523 -> 84.46.165.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:47.141320 0.368023 udp 10.0.2.104 54523 <-> 14.102.133.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:48.142143 1.230395 udp 10.0.2.104 54523 <-> 190.36.193.153 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:50.135028 4.248607 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:51.136916 0.000000 udp 10.0.2.104 54523 -> 14.207.67.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:52.138272 0.000000 udp 10.0.2.104 54523 -> 220.107.98.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:34:53.140105 0.051623 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:55.142486 0.154277 udp 10.0.2.104 54523 <-> 64.233.158.20 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:56.133629 0.353373 udp 10.0.2.104 54523 <-> 123.194.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:57.135760 0.116182 udp 10.0.2.104 54523 <-> 24.150.162.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:58.136524 0.959458 udp 10.0.2.104 54523 <-> 173.217.236.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:34:59.137974 0.042200 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:00.140125 0.134497 udp 10.0.2.104 54523 <-> 24.222.116.201 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:01.140829 0.140340 udp 10.0.2.104 54523 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:02.143002 0.371537 udp 10.0.2.104 54523 <-> 36.239.210.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:03.133800 0.357886 udp 10.0.2.104 54523 <-> 219.64.181.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:04.135645 0.231692 udp 10.0.2.104 54523 <-> 178.205.27.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:05.136746 0.158982 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:06.138473 0.297545 udp 10.0.2.104 54523 <-> 42.147.68.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:07.139909 0.318284 udp 10.0.2.104 54523 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:08.141359 0.366024 udp 10.0.2.104 54523 <-> 114.24.190.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:09.143052 0.267186 udp 10.0.2.104 54523 <-> 180.148.54.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:10.134366 0.077219 udp 10.0.2.104 54523 <-> 85.136.180.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:11.135433 0.153476 udp 10.0.2.104 54523 <-> 65.28.245.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:12.137139 0.021917 udp 10.0.2.104 54523 <-> 46.150.39.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:13.138557 0.000000 udp 10.0.2.104 54523 -> 139.195.232.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:14.140102 0.438756 udp 10.0.2.104 54523 <-> 58.124.217.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:15.140995 0.000000 udp 10.0.2.104 54523 -> 85.204.248.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:16.142411 0.641144 udp 10.0.2.104 54523 <-> 2.190.160.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:17.134357 0.276108 udp 10.0.2.104 54523 <-> 187.39.132.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:18.136005 0.051259 udp 10.0.2.104 54523 <-> 85.202.146.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:19.137104 0.316231 udp 10.0.2.104 54523 <-> 219.71.217.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:20.138499 0.000000 udp 10.0.2.104 54523 -> 75.158.248.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:21.139965 0.341533 udp 10.0.2.104 54523 <-> 14.97.61.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:22.141046 3.184202 udp 10.0.2.104 54523 <-> 50.27.25.86 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:23.034314 0.000000 udp 10.0.2.104 54523 <- 139.195.232.148 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:23.142975 1.276165 udp 10.0.2.104 54523 <-> 174.47.243.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:26.137272 0.139871 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:27.138371 0.284647 udp 10.0.2.104 54523 <-> 123.238.178.181 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:28.140192 0.370190 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:29.141567 0.326604 udp 10.0.2.104 54523 <-> 79.46.54.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:30.143107 0.141695 udp 10.0.2.104 54523 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:31.134728 0.208292 udp 10.0.2.104 54523 -> 66.171.8.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:31.343020 0.000000 icmp 66.171.8.245 0x0303 -> 10.0.2.104 0x5040 URP 192 1 70 flow=Background 1970/01/01 05:35:32.135550 0.157619 udp 10.0.2.104 54523 <-> 97.101.194.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:32.796532 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:35:33.137399 0.000000 udp 10.0.2.104 54523 -> 49.107.6.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:34.138709 0.048078 udp 10.0.2.104 54523 <-> 89.99.62.111 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:35.139987 0.407118 udp 10.0.2.104 54523 <-> 201.26.213.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:36.141405 0.000000 udp 10.0.2.104 54523 -> 106.207.199.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:37.143036 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:38.134596 0.000000 udp 10.0.2.104 54523 -> 1.164.153.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:39.136291 0.364847 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:40.137425 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:41.138331 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:42.140327 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:43.141378 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:44.143216 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:45.134394 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:46.135518 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:47.137274 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:48.138561 0.551418 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:49.140538 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:50.141833 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:51.143272 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:52.404838 0.055401 udp 10.0.2.104 54523 <-> 37.1.3.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:35:53.406001 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:53.406097 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:35:54.408062 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:55.409424 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:56.410818 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:57.412578 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:58.413326 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:35:59.404787 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:00.406361 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:01.408027 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:02.409398 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:04.412482 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:05.413913 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:06.405019 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:07.406376 0.055360 udp 10.0.2.104 54523 <-> 37.1.3.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:08.407647 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:09.409082 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:10.410962 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:11.412111 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:12.413819 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:13.404963 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:14.406377 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:15.408003 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:16.409367 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:16.409444 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:36:18.411932 0.211330 udp 10.0.2.104 54523 <-> 50.174.107.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:19.413793 0.000000 udp 10.0.2.104 54523 -> 1.164.153.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:20.064482 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:36:20.405257 0.055082 udp 10.0.2.104 54523 <-> 37.1.3.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:21.406582 0.117608 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:22.408141 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:22.408210 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:36:23.409556 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:24.410666 0.193020 udp 10.0.2.104 54523 <-> 81.147.68.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:25.412011 0.152114 udp 10.0.2.104 54523 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:26.413544 0.061345 udp 10.0.2.104 54523 <-> 84.232.15.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:27.405640 0.324213 udp 10.0.2.104 54523 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:28.406905 4.005172 udp 10.0.2.104 54523 <-> 186.222.59.71 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:29.408005 0.000000 udp 10.0.2.104 54523 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:30.409875 0.000000 udp 10.0.2.104 54523 -> 5.12.98.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:31.410949 4.997557 udp 10.0.2.104 54523 <-> 24.231.152.202 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:33.414212 4.053899 udp 10.0.2.104 54523 <-> 89.40.194.89 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:34.405508 0.000000 udp 10.0.2.104 54523 -> 189.68.134.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:35.406661 0.049043 udp 10.0.2.104 54523 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:36.562050 0.000000 udp 10.0.2.104 54523 <- 24.231.152.202 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:38.410973 1.191487 udp 10.0.2.104 54523 <-> 68.109.145.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:40.413582 0.005297 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:41.405266 0.047248 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:42.406750 0.164230 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:43.408585 0.136147 udp 10.0.2.104 54523 <-> 5.25.132.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:44.410017 0.000000 udp 10.0.2.104 54523 -> 189.68.134.233 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:45.411406 0.131906 udp 10.0.2.104 54523 <-> 82.61.165.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:46.412811 0.136179 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:47.414296 0.210628 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:48.405291 0.048123 udp 10.0.2.104 54523 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:49.406494 4.050943 udp 10.0.2.104 54523 <-> 190.49.238.6 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:50.117966 0.012682 udp 10.0.2.104 54561 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 05:36:50.130896 0.000000 udp 10.0.2.104 54562 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:50.408374 0.042241 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:52.410926 0.360846 udp 10.0.2.104 54523 <-> 111.252.204.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:53.412897 0.033884 udp 10.0.2.104 54523 <-> 77.236.190.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:54.413877 0.179397 udp 10.0.2.104 54523 <-> 174.47.243.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:55.405601 0.000000 udp 10.0.2.104 54523 -> 72.252.170.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:56.407011 0.000000 udp 10.0.2.104 54523 -> 77.77.31.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:36:57.408309 2.084834 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:36:58.409624 0.154602 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:00.412769 0.000000 udp 10.0.2.104 54523 -> 101.63.173.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:01.414003 0.000000 udp 10.0.2.104 54523 -> 122.177.227.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:02.405421 0.000000 udp 10.0.2.104 54523 -> 151.233.218.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:03.407069 1.245237 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:04.408440 0.047732 udp 10.0.2.104 54523 <-> 5.13.94.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:05.409516 0.258385 udp 10.0.2.104 54523 <-> 187.38.64.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:06.411653 0.677930 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:07.072342 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:37:07.412653 0.015474 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:08.414066 0.622495 udp 10.0.2.104 54523 <-> 202.29.179.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:09.405861 0.510242 udp 10.0.2.104 54523 <-> 210.199.112.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:10.407278 0.158786 udp 10.0.2.104 54523 <-> 74.77.40.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:11.408452 0.205346 udp 10.0.2.104 54523 <-> 71.197.165.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:12.409905 4.996873 udp 10.0.2.104 54523 -> 79.132.169.53 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:13.411404 0.000000 udp 10.0.2.104 54523 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:14.412442 4.284153 udp 10.0.2.104 54523 <-> 49.249.82.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:15.413881 0.172719 udp 10.0.2.104 54523 <-> 68.206.66.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:16.405366 0.000000 udp 10.0.2.104 54523 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:19.410250 0.158534 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:20.411286 0.134616 udp 10.0.2.104 54523 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:21.412909 2.617607 udp 10.0.2.104 54523 <-> 5.22.23.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:22.404037 0.000000 udp 10.0.2.104 54523 -> 83.30.202.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:23.405541 0.000000 udp 10.0.2.104 54523 -> 83.166.192.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:24.407409 0.031498 udp 10.0.2.104 54523 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:25.409138 0.087105 udp 10.0.2.104 54523 <-> 212.92.251.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:26.410281 0.148675 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:27.411729 0.175940 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:28.412638 0.200810 udp 10.0.2.104 54523 <-> 186.92.109.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:29.404207 2.626431 udp 10.0.2.104 54523 <-> 5.22.23.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:30.405876 0.539363 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:31.407358 0.015628 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:32.408432 1.162205 udp 10.0.2.104 54523 <-> 182.237.169.236 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:34.411799 0.396578 udp 10.0.2.104 54523 <-> 114.36.89.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:35.413263 0.091306 udp 10.0.2.104 54523 <-> 31.176.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:36.404337 0.075146 udp 10.0.2.104 54523 <-> 85.87.15.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:37.405801 0.083771 udp 10.0.2.104 54523 <-> 46.161.106.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:38.406979 0.153296 udp 10.0.2.104 54523 <-> 76.188.30.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:39.409030 0.731687 udp 10.0.2.104 54523 <-> 177.149.100.205 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:40.410236 0.372523 udp 10.0.2.104 54523 <-> 36.229.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:41.411464 1.178851 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:42.412905 0.119342 udp 10.0.2.104 54523 <-> 46.161.106.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:43.404537 1.064467 udp 10.0.2.104 54523 <-> 84.126.54.216 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:45.407252 2.783657 udp 10.0.2.104 54523 <-> 177.180.213.254 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:46.409016 0.136927 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:48.411665 0.563306 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:48.644155 3.002021 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:37:49.413341 0.047957 udp 10.0.2.104 54523 <-> 79.113.238.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:50.404399 0.056746 udp 10.0.2.104 54523 <-> 188.26.31.157 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:51.406000 0.000000 udp 10.0.2.104 54523 -> 207.134.187.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:52.407794 0.785854 udp 10.0.2.104 54523 <-> 192.95.192.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:53.409240 0.730619 udp 10.0.2.104 54523 <-> 203.73.103.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:54.069562 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:37:54.409965 0.175534 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:55.411919 1.992428 udp 10.0.2.104 54523 -> 82.157.134.30 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:37:55.651737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:37:56.412995 0.168529 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:58.406296 0.267066 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:37:59.407148 0.164805 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:00.409066 0.060481 udp 10.0.2.104 54523 <-> 78.58.24.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:01.410723 0.359612 udp 10.0.2.104 54523 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:02.411947 0.000000 udp 10.0.2.104 54523 -> 98.67.186.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:03.413557 0.000000 udp 10.0.2.104 54523 -> 71.189.238.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:03.653330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:38:04.404805 0.205990 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:05.406522 0.134520 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:06.407837 1.178809 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:07.409121 0.000000 udp 10.0.2.104 54523 -> 175.35.78.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:08.410554 0.595664 udp 10.0.2.104 54523 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:09.411870 0.163289 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:10.413000 0.025157 udp 10.0.2.104 54523 <-> 83.84.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:11.405122 0.161368 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:12.406333 0.000000 udp 10.0.2.104 54523 -> 77.239.80.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:13.407693 0.000000 udp 10.0.2.104 54523 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:14.409300 0.576793 udp 10.0.2.104 54523 <-> 14.96.139.201 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:15.410699 0.000000 udp 10.0.2.104 54523 -> 50.128.173.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:16.411618 0.315978 udp 10.0.2.104 54523 <-> 186.10.29.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:17.413140 0.000000 udp 10.0.2.104 54523 -> 1.168.250.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:18.404840 0.061516 udp 10.0.2.104 54523 <-> 91.90.16.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:19.406588 0.316427 udp 10.0.2.104 54523 <-> 119.230.147.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:19.656705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:38:20.407336 3.286307 udp 10.0.2.104 54523 <-> 190.188.203.135 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:21.409142 0.146449 udp 10.0.2.104 54523 <-> 98.102.132.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:22.410690 0.000000 udp 10.0.2.104 54523 -> 83.45.161.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:24.413192 3.071903 udp 10.0.2.104 54523 <-> 107.42.209.194 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:25.404559 0.047050 udp 10.0.2.104 54523 <-> 46.187.182.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:27.407399 3.563864 udp 10.0.2.104 54523 <-> 117.227.23.136 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:28.408962 0.000000 udp 10.0.2.104 54523 -> 178.148.77.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:29.410286 0.145234 udp 10.0.2.104 54523 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:31.413520 0.352351 udp 10.0.2.104 54523 <-> 118.33.234.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:32.404943 1.744134 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:33.406040 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:34.407840 0.000000 udp 10.0.2.104 54523 -> 87.176.147.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:35.408922 0.238491 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:36.410938 0.361297 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:37.412489 0.664393 udp 10.0.2.104 54523 <-> 96.44.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:38.413859 0.148356 udp 10.0.2.104 54523 <-> 96.20.104.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:39.405262 0.360133 udp 10.0.2.104 54523 <-> 190.78.25.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:40.406563 0.042227 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:41.067181 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:38:41.407900 0.000000 udp 10.0.2.104 54523 -> 41.214.223.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:42.408962 0.000000 udp 10.0.2.104 54523 -> 101.63.83.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:43.410703 0.000000 udp 10.0.2.104 54523 -> 186.92.193.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:44.412243 0.000000 udp 10.0.2.104 54523 -> 99.232.10.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:45.413435 0.201419 udp 10.0.2.104 54523 <-> 78.203.12.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:46.405318 0.181656 udp 10.0.2.104 54523 <-> 50.27.25.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:47.406843 0.168104 udp 10.0.2.104 54523 <-> 124.123.39.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:48.408343 0.377884 udp 10.0.2.104 54523 <-> 114.41.132.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:49.409467 0.068675 udp 10.0.2.104 54523 <-> 91.90.2.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:50.410468 0.152873 udp 10.0.2.104 54523 <-> 216.81.125.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:51.412114 0.166360 udp 10.0.2.104 54523 <-> 49.204.144.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:51.662747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:38:52.413805 0.398010 udp 10.0.2.104 54523 <-> 96.43.54.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:53.404902 0.152187 udp 10.0.2.104 54523 <-> 50.152.72.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:54.406665 0.032586 udp 10.0.2.104 54523 <-> 93.114.171.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:55.407867 0.141303 udp 10.0.2.104 54523 <-> 184.57.25.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:56.409088 0.000000 udp 10.0.2.104 54523 -> 93.183.136.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:38:57.411170 0.137050 udp 10.0.2.104 54523 <-> 69.124.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:58.412155 1.024579 udp 10.0.2.104 54523 <-> 49.249.82.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:38:59.413545 0.147000 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:00.405232 0.080421 udp 10.0.2.104 54523 <-> 82.249.56.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:01.406295 0.000000 udp 10.0.2.104 54523 -> 184.74.92.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:02.408280 0.000000 udp 10.0.2.104 54523 -> 14.96.144.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:03.409156 0.000000 udp 10.0.2.104 54523 -> 50.81.76.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:04.411014 0.223248 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:05.412079 0.396212 udp 10.0.2.104 54523 <-> 114.42.212.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:06.413750 0.141393 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:07.405082 0.239797 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:08.407030 0.346226 udp 10.0.2.104 54523 <-> 190.48.77.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:09.408303 0.854928 udp 10.0.2.104 54523 <-> 14.96.161.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:10.409604 0.054667 udp 10.0.2.104 54523 <-> 78.154.168.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:11.410694 0.145147 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:12.412662 0.417993 udp 10.0.2.104 54523 <-> 202.163.182.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:13.413885 0.152194 udp 10.0.2.104 54523 <-> 216.168.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:14.405503 0.000000 udp 10.0.2.104 54523 -> 86.100.215.192 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:15.407069 0.074413 udp 10.0.2.104 54523 <-> 95.104.232.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:16.408704 0.151213 udp 10.0.2.104 54523 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:17.409320 0.056209 udp 10.0.2.104 54523 <-> 95.77.141.217 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:18.411264 0.401720 udp 10.0.2.104 54523 <-> 59.147.239.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:19.412366 0.379456 udp 10.0.2.104 54523 <-> 114.36.128.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:20.413788 0.062754 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:21.405612 0.105254 udp 10.0.2.104 54523 <-> 206.71.247.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:22.406792 0.243758 udp 10.0.2.104 54523 <-> 186.89.100.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:23.408452 0.062350 udp 10.0.2.104 54523 <-> 80.72.49.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:24.409377 0.071472 udp 10.0.2.104 54523 <-> 188.32.59.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:25.410820 0.000000 udp 10.0.2.104 54523 -> 86.214.192.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:26.412261 0.032173 udp 10.0.2.104 54523 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:27.414205 0.000000 udp 10.0.2.104 54523 -> 188.24.154.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:28.064897 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:39:28.405384 0.364559 udp 10.0.2.104 54523 <-> 114.26.249.21 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:29.406945 0.000000 udp 10.0.2.104 54523 -> 71.162.5.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:30.408134 0.000000 udp 10.0.2.104 54523 -> 77.91.50.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:31.410105 0.000000 udp 10.0.2.104 54523 -> 117.254.252.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:32.410939 0.025297 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:33.412585 0.000000 udp 10.0.2.104 54523 -> 114.42.212.244 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:34.414402 0.000000 udp 10.0.2.104 54523 -> 114.26.249.21 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:35.405459 0.034812 udp 10.0.2.104 54523 <-> 78.137.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:36.406836 0.164717 udp 10.0.2.104 54523 <-> 76.180.169.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:37.408216 0.145908 udp 10.0.2.104 54523 <-> 216.186.178.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:38.409500 0.290226 udp 10.0.2.104 54523 <-> 125.14.96.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:39.411818 0.069279 udp 10.0.2.104 54523 <-> 46.37.71.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:40.412627 0.000000 udp 10.0.2.104 54523 -> 93.184.90.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:41.413801 0.000000 udp 10.0.2.104 54523 -> 216.49.23.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:42.405908 0.156322 udp 10.0.2.104 54523 <-> 98.212.63.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:43.407176 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:44.408702 4.925245 udp 10.0.2.104 54523 <-> 66.187.64.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:45.410066 0.154475 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:46.411707 1.159444 udp 10.0.2.104 54523 <-> 117.197.245.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:47.412617 0.101307 udp 10.0.2.104 54523 <-> 151.54.11.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:48.414336 0.000000 udp 10.0.2.104 54523 -> 101.175.212.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:49.405393 0.000000 udp 10.0.2.104 54523 -> 88.241.238.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:50.407211 0.267562 udp 10.0.2.104 54523 <-> 143.107.215.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:51.408783 0.230870 udp 10.0.2.104 54523 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:52.409614 0.000000 udp 10.0.2.104 54523 -> 195.62.0.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:53.411264 0.000000 udp 10.0.2.104 54523 -> 88.37.113.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:54.412757 0.000000 udp 10.0.2.104 54523 -> 178.172.245.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:55.404111 0.000000 udp 10.0.2.104 54523 -> 71.87.107.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:56.405415 0.037518 udp 10.0.2.104 54523 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:39:57.406987 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:58.408964 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:39:59.410291 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:00.411709 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:01.412761 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:02.404424 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:03.405836 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:04.406986 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:05.408405 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:06.410043 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:07.411664 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:08.413308 0.037807 udp 10.0.2.104 54523 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:09.404549 0.068628 udp 10.0.2.104 54523 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:10.406110 1.272385 udp 10.0.2.104 54523 <-> 88.37.113.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:12.408598 0.000000 udp 10.0.2.104 54523 -> 71.87.107.37 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:13.409964 0.445827 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:14.411824 2.030618 udp 10.0.2.104 54523 <-> 188.254.170.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:15.072825 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:40:15.413517 2.238814 udp 10.0.2.104 54523 <-> 88.37.113.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:18.407065 0.000000 udp 10.0.2.104 54523 -> 108.132.191.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:19.408600 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:20.410027 0.225711 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:22.413055 0.160996 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:23.405099 0.291499 udp 10.0.2.104 54523 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:24.406089 0.201766 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:25.407747 0.000000 udp 10.0.2.104 54523 -> 14.97.213.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:26.409167 0.173898 udp 10.0.2.104 54523 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:27.410397 0.442882 udp 10.0.2.104 54523 <-> 177.149.127.27 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:28.411897 0.000000 udp 10.0.2.104 54523 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:29.413601 0.214119 udp 10.0.2.104 54523 <-> 50.131.239.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:30.404503 0.065904 udp 10.0.2.104 54523 <-> 109.182.129.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:31.405879 1.375453 udp 10.0.2.104 54523 <-> 114.45.238.212 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:33.409225 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:34.409987 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:35.411450 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:36.413664 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:36.413727 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:40:37.404573 0.000000 udp 10.0.2.104 54523 -> 82.132.101.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:39.407241 0.000000 udp 10.0.2.104 54523 -> 117.222.42.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:40.409091 0.144378 udp 10.0.2.104 54523 <-> 70.63.221.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:41.410699 0.037408 udp 10.0.2.104 54523 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:42.412341 0.134499 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:43.413262 0.433884 udp 10.0.2.104 54523 <-> 182.233.71.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:44.405169 1.082618 udp 10.0.2.104 54523 <-> 78.58.198.90 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:46.407874 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:47.409079 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:48.410668 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:49.412344 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:50.413296 0.169420 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:51.404938 0.076482 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:52.406095 0.000000 udp 10.0.2.104 54523 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:53.407668 4.997372 udp 10.0.2.104 54523 -> 96.22.131.104 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:54.409283 0.303545 udp 10.0.2.104 54523 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:40:55.410676 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:56.412078 0.000000 udp 10.0.2.104 54523 -> 84.118.6.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:57.413222 0.000000 udp 10.0.2.104 54523 -> 31.63.154.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:58.554457 0.000000 udp 10.0.2.104 54523 <- 96.22.131.104 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:40:59.406515 0.194367 udp 10.0.2.104 54523 <-> 103.24.86.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:00.407776 0.166727 udp 10.0.2.104 54523 <-> 66.130.63.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:01.409293 0.057785 udp 10.0.2.104 54523 <-> 94.156.74.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:02.070091 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:41:02.410779 0.240332 udp 10.0.2.104 54523 <-> 182.156.174.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:03.411997 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:04.413417 0.322258 udp 10.0.2.104 54523 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:05.405193 0.170739 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:06.406198 0.000000 udp 10.0.2.104 54523 -> 85.85.71.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:07.407852 0.181722 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:08.409203 0.053929 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:09.410910 0.214853 udp 10.0.2.104 54523 <-> 50.174.107.28 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:10.412089 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:11.413712 0.168078 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:12.404759 0.176843 udp 10.0.2.104 54523 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:13.406221 0.136473 udp 10.0.2.104 54523 <-> 24.3.193.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:14.407638 0.149203 udp 10.0.2.104 54523 <-> 96.32.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:15.409550 0.000000 udp 10.0.2.104 54523 -> 151.237.7.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:16.410747 0.000000 udp 10.0.2.104 54523 -> 50.82.72.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:17.411840 0.000000 udp 10.0.2.104 54523 -> 87.252.173.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:18.413519 1.939469 udp 10.0.2.104 54523 <-> 72.242.83.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:19.405329 0.172104 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:20.406349 0.164275 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:21.407599 0.027048 udp 10.0.2.104 54523 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:22.409312 0.185909 udp 10.0.2.104 54523 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:23.411028 0.057287 udp 10.0.2.104 54523 <-> 91.210.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:24.412751 0.151536 udp 10.0.2.104 54523 <-> 204.116.75.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:25.413395 0.310612 udp 10.0.2.104 54523 <-> 201.13.95.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:26.405322 0.000000 udp 10.0.2.104 54523 -> 89.123.79.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:27.406659 0.202822 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:28.408125 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:29.409413 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:30.410751 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:31.411956 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:32.413391 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:33.405293 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:34.406254 0.136239 udp 10.0.2.104 54523 <-> 69.115.88.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:35.407836 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:36.409490 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:37.410841 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:38.412247 0.148438 udp 10.0.2.104 54523 <-> 96.32.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:39.414332 1.128932 udp 10.0.2.104 54523 <-> 24.48.173.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:40.405077 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:41.406442 0.000000 udp 10.0.2.104 54523 -> 2.191.181.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:42.407836 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:43.410014 0.046817 udp 10.0.2.104 54523 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:44.411200 0.407354 udp 10.0.2.104 54523 <-> 189.0.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:45.412620 0.000000 udp 10.0.2.104 54523 -> 103.8.164.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:46.414277 0.696151 udp 10.0.2.104 54523 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:47.405092 0.403892 udp 10.0.2.104 54523 <-> 59.105.111.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:48.406653 0.219926 udp 10.0.2.104 54523 <-> 68.93.156.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:49.067287 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:41:49.408299 0.288725 udp 10.0.2.104 54523 <-> 190.190.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:50.409413 1.154183 udp 10.0.2.104 54523 <-> 74.59.191.167 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:52.412628 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:53.413855 0.426627 udp 10.0.2.104 54523 <-> 219.77.79.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:54.405448 0.169703 udp 10.0.2.104 54523 <-> 24.182.105.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:55.406951 0.000000 udp 10.0.2.104 54523 -> 151.238.138.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:41:56.408515 0.228866 udp 10.0.2.104 54523 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:57.409338 0.156530 udp 10.0.2.104 54523 <-> 74.59.191.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:58.411234 0.154633 udp 10.0.2.104 54523 <-> 71.61.202.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:41:59.412805 0.023933 udp 10.0.2.104 54523 <-> 89.134.105.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:00.413859 0.363975 udp 10.0.2.104 54523 <-> 211.14.251.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:01.405302 0.072196 udp 10.0.2.104 54523 <-> 85.86.237.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:02.406840 0.284294 udp 10.0.2.104 54523 <-> 1.11.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:03.408556 0.000000 udp 10.0.2.104 54523 -> 75.206.212.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:04.409715 0.096230 udp 10.0.2.104 54523 <-> 82.61.45.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:05.411410 0.000000 udp 10.0.2.104 54523 -> 75.132.208.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:06.412855 0.000000 udp 10.0.2.104 54523 -> 187.111.152.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:07.414410 0.289101 udp 10.0.2.104 54523 <-> 1.11.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:08.405169 0.058484 udp 10.0.2.104 54523 <-> 212.142.84.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:08.944045 0.000000 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:09.406794 0.160022 udp 10.0.2.104 54523 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:10.408653 0.042274 udp 10.0.2.104 54523 <-> 87.252.173.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:11.409544 4.165753 udp 10.0.2.104 54523 <-> 65.35.3.143 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:12.411064 2.002873 udp 10.0.2.104 54523 <-> 79.121.110.96 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:13.412387 0.013633 udp 10.0.2.104 54523 <-> 89.103.128.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:16.407070 0.356508 udp 10.0.2.104 54523 <-> 49.158.21.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:17.408647 2.002616 udp 10.0.2.104 54523 -> 5.158.63.46 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:18.409806 0.360059 udp 10.0.2.104 54523 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:20.412944 0.000000 udp 10.0.2.104 54523 -> 98.89.100.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:21.414124 0.800131 udp 10.0.2.104 54523 <-> 96.44.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:22.405296 0.062484 udp 10.0.2.104 54523 <-> 212.104.169.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:23.406950 0.000000 udp 10.0.2.104 54523 -> 181.16.7.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:24.408168 0.557844 udp 10.0.2.104 54523 <-> 76.202.129.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:25.409846 0.040961 udp 10.0.2.104 54523 <-> 188.127.30.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:26.411040 0.204203 udp 10.0.2.104 54523 <-> 186.92.109.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:27.314057 0.000000 udp 10.0.2.104 54523 <- 98.89.100.53 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:27.412629 0.239024 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:28.403899 0.023031 udp 10.0.2.104 54523 <-> 78.42.78.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:29.405447 2.576959 udp 10.0.2.104 54523 <-> 176.17.56.130 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:30.407008 0.303973 udp 10.0.2.104 54523 <-> 157.14.178.157 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:31.408740 0.134087 udp 10.0.2.104 54523 <-> 69.116.245.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:32.409678 0.030016 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:33.411794 0.014745 udp 10.0.2.104 54523 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:34.413074 0.290767 udp 10.0.2.104 54523 <-> 210.228.32.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:35.404462 0.059299 udp 10.0.2.104 54523 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:36.065476 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:42:36.406122 0.209548 udp 10.0.2.104 54523 <-> 46.48.147.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:37.407178 0.006020 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:38.408414 0.000000 udp 10.0.2.104 54523 -> 117.206.120.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:39.410409 0.448373 udp 10.0.2.104 54523 <-> 219.171.36.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:40.411589 0.104727 udp 10.0.2.104 54523 <-> 178.122.72.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:41.412751 0.226912 udp 10.0.2.104 54523 <-> 187.79.34.127 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:42.404222 0.031955 udp 10.0.2.104 54523 <-> 151.100.92.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:43.405528 0.000000 udp 10.0.2.104 54523 -> 46.10.153.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:44.407109 0.096517 udp 10.0.2.104 54523 <-> 83.61.241.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:45.408726 0.000000 udp 10.0.2.104 54523 -> 115.241.238.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:46.410385 0.137693 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:47.411331 0.154640 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:48.412900 0.143689 udp 10.0.2.104 54523 <-> 24.209.73.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:49.404347 0.085412 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:50.406168 0.062026 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:51.407517 0.157107 udp 10.0.2.104 54523 <-> 216.196.163.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:52.408542 0.181903 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:53.409868 0.000000 udp 10.0.2.104 54523 -> 98.245.249.183 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:54.412137 0.000000 udp 10.0.2.104 54523 -> 98.28.102.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:42:55.412743 0.298517 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:56.404580 0.044520 udp 10.0.2.104 54523 <-> 151.237.7.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:57.405792 0.164377 udp 10.0.2.104 54523 <-> 49.205.21.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:58.407867 0.335002 udp 10.0.2.104 54523 <-> 122.121.39.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:42:59.408765 0.374745 udp 10.0.2.104 54523 <-> 1.164.153.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:00.410551 0.000000 udp 10.0.2.104 54523 -> 67.6.98.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:43:01.412018 1.048013 udp 10.0.2.104 54523 <-> 5.12.93.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:03.404516 0.000000 udp 10.0.2.104 54523 -> 209.50.152.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:43:04.405972 2.163575 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:05.407410 1.087434 udp 10.0.2.104 54523 <-> 117.246.180.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:07.410465 0.045937 udp 10.0.2.104 54523 <-> 5.13.94.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:08.411800 0.263068 udp 10.0.2.104 54523 <-> 187.121.67.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:09.413506 0.042153 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:10.404668 0.213922 udp 10.0.2.104 54523 <-> 50.174.107.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:11.405764 0.188616 udp 10.0.2.104 54523 <-> 206.74.136.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:12.407604 0.000000 udp 10.0.2.104 54523 -> 218.164.173.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:43:13.408901 0.053943 udp 10.0.2.104 54523 <-> 91.219.80.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:14.410398 0.000000 udp 10.0.2.104 54523 -> 111.250.144.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:43:15.411918 0.161961 udp 10.0.2.104 54523 <-> 223.239.201.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:16.413251 0.219711 udp 10.0.2.104 54523 <-> 190.78.168.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:17.404484 0.154415 udp 10.0.2.104 54523 <-> 96.30.149.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:18.406046 0.153401 udp 10.0.2.104 54523 <-> 98.250.16.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:19.407707 0.389610 udp 10.0.2.104 54523 <-> 218.102.238.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:20.409195 0.604693 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:21.410458 0.147978 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:22.411840 3.505532 udp 10.0.2.104 54523 <-> 186.19.88.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:23.072669 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:43:23.413111 0.000000 udp 10.0.2.104 54523 -> 24.147.226.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:43:24.404699 0.095296 udp 10.0.2.104 54523 <-> 2.195.10.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:25.406468 0.055977 udp 10.0.2.104 54523 <-> 82.230.115.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:26.407330 0.055375 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:27.409329 0.000000 udp 10.0.2.104 54523 -> 92.229.124.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:43:28.410732 1.376585 udp 10.0.2.104 54523 <-> 115.240.70.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:29.412322 0.051061 udp 10.0.2.104 54523 <-> 95.158.97.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:30.413601 1.565312 udp 10.0.2.104 54523 <-> 190.203.106.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:31.404492 0.030055 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:32.406358 0.590727 udp 10.0.2.104 54523 <-> 117.195.195.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:33.407399 0.166013 udp 10.0.2.104 54523 <-> 49.204.104.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:34.409241 0.314813 udp 10.0.2.104 54523 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:35.410244 1.028106 udp 10.0.2.104 54523 <-> 85.130.46.105 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:37.413409 0.071202 udp 10.0.2.104 54523 <-> 78.235.244.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:38.405032 0.140518 udp 10.0.2.104 54523 <-> 1.186.124.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:39.406379 0.403591 udp 10.0.2.104 54523 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:40.407824 1.719776 udp 10.0.2.104 54523 <-> 14.97.183.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:41.409389 0.058847 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:42.410452 0.204909 udp 10.0.2.104 54523 <-> 98.232.99.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:43.412443 0.172094 udp 10.0.2.104 54523 <-> 207.134.178.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:44.413502 1.420816 udp 10.0.2.104 54523 <-> 112.163.143.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:46.406609 0.000000 udp 10.0.2.104 54523 -> 114.42.212.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:43:47.407791 0.879276 udp 10.0.2.104 54523 <-> 72.199.208.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:48.409233 0.156355 udp 10.0.2.104 54523 <-> 98.103.195.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:49.410414 0.000000 udp 10.0.2.104 54523 -> 125.193.177.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:43:50.411800 0.015796 udp 10.0.2.104 54523 <-> 164.8.214.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:51.413757 0.499695 udp 10.0.2.104 54523 <-> 187.67.29.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:52.405138 1.776908 udp 10.0.2.104 54523 <-> 187.39.132.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:53.406218 0.139664 udp 10.0.2.104 54523 <-> 58.146.97.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:54.407873 0.048134 udp 10.0.2.104 54523 <-> 212.117.27.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:55.409504 0.168321 udp 10.0.2.104 54523 <-> 124.123.108.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:56.410529 0.114469 udp 10.0.2.104 54523 <-> 24.122.251.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:57.412252 0.315281 udp 10.0.2.104 54523 <-> 42.148.171.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:58.413595 0.155679 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:43:59.405198 0.166911 udp 10.0.2.104 54523 <-> 24.171.57.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:00.406832 0.000000 udp 10.0.2.104 54523 -> 75.214.219.192 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:01.408472 0.542061 udp 10.0.2.104 54523 <-> 205.164.3.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:02.409168 2.003352 udp 10.0.2.104 54523 -> 123.254.196.3 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:03.410736 3.135506 udp 10.0.2.104 54523 <-> 68.174.204.111 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:05.413379 0.140276 udp 10.0.2.104 54523 <-> 24.190.212.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:07.406692 0.159147 udp 10.0.2.104 54523 <-> 50.142.78.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:09.409421 0.322411 udp 10.0.2.104 54523 <-> 218.47.116.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:10.070254 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:44:10.410686 0.294558 udp 10.0.2.104 54523 <-> 61.89.179.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:11.412234 0.000000 udp 10.0.2.104 54523 -> 24.236.189.173 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:12.414134 0.000000 udp 10.0.2.104 54523 -> 118.165.157.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:13.405570 0.156988 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:14.406664 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:15.408387 0.158169 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:16.409467 0.224904 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:17.411236 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:18.412379 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:19.413898 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:20.405326 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:21.406683 0.083781 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:22.408259 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:23.409900 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:24.411230 4.267326 udp 10.0.2.104 54523 <-> 46.35.110.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:25.412753 0.135340 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:27.405121 0.181134 udp 10.0.2.104 54523 <-> 183.83.120.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:28.406787 0.224564 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:29.408238 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:30.409440 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:31.411363 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:32.412797 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:33.413687 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:34.405369 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:35.407079 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:36.407962 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:37.409786 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:37.409881 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:44:39.413044 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:40.414297 0.000000 udp 10.0.2.104 54523 -> 46.35.110.44 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:41.405288 0.133940 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:42.406598 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:43.408310 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:44.409478 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:45.410871 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:46.412688 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:47.413942 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:48.405296 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:49.407155 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:50.408487 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:51.409520 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:52.411218 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:53.412749 0.000070 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:53.412819 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:44:54.414614 0.005250 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:54.419864 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.104 0x9efe URN 192 1 110 flow=Background 1970/01/01 05:44:55.405326 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:44:55.669038 3.001657 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:44:56.406829 4.141536 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:44:57.067835 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:44:59.411007 0.109029 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:01.404362 2.727594 udp 10.0.2.104 54523 <-> 46.35.110.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:02.405369 0.034059 udp 10.0.2.104 54523 <-> 143.225.144.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:02.675712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:45:03.406776 0.178965 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:04.408690 0.050826 udp 10.0.2.104 54523 <-> 85.67.22.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:05.409975 0.050778 udp 10.0.2.104 54523 <-> 95.158.97.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:06.411281 4.046004 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:07.412789 0.257225 udp 10.0.2.104 54523 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:08.404736 0.000000 udp 10.0.2.104 54523 -> 95.75.166.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:09.405987 0.179418 udp 10.0.2.104 54523 <-> 207.134.187.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:10.677865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:45:11.408285 0.232634 udp 10.0.2.104 54523 <-> 95.158.97.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:12.410173 0.054579 udp 10.0.2.104 54523 <-> 85.67.22.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:13.411472 3.317755 udp 10.0.2.104 54523 <-> 174.47.243.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:14.413209 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:15.404016 0.000000 udp 10.0.2.104 54523 -> 69.137.77.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:17.407127 0.441266 udp 10.0.2.104 54523 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:18.408582 0.267248 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:19.410333 4.023398 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:21.412837 0.489874 udp 10.0.2.104 54523 <-> 174.47.243.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:22.404561 0.130634 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:24.407355 0.288202 udp 10.0.2.104 54523 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:25.408866 0.140378 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:26.410452 0.055482 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:26.681044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:45:27.411271 2.994562 udp 10.0.2.104 54523 -> 213.151.61.233 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:28.412717 0.150002 udp 10.0.2.104 54523 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:29.404909 0.173922 udp 10.0.2.104 54523 <-> 207.134.187.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:31.407634 0.000000 udp 10.0.2.104 54523 -> 77.23.138.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:32.408900 0.074003 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:33.410226 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:34.411807 0.000000 udp 10.0.2.104 54523 -> 213.151.61.233 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:35.412902 0.153023 udp 10.0.2.104 54523 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:36.404868 0.179385 udp 10.0.2.104 54523 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:37.406112 0.207118 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:38.407260 0.000000 udp 10.0.2.104 54523 -> 68.96.178.199 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:39.408765 0.160678 udp 10.0.2.104 54523 <-> 71.205.161.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:40.410398 0.379766 udp 10.0.2.104 54523 <-> 125.224.33.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:41.411409 0.034725 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:42.413013 0.215411 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:43.404303 0.222643 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:44.065345 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:45:44.405870 0.036400 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:45.407331 0.384848 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:46.409191 0.813971 udp 10.0.2.104 54523 <-> 190.57.242.34 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:47.410558 0.208584 udp 10.0.2.104 54523 <-> 161.6.244.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:48.412083 0.294909 udp 10.0.2.104 54523 <-> 114.198.193.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:49.413089 0.393073 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:50.405029 0.161366 udp 10.0.2.104 54523 <-> 66.130.254.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:51.406247 3.287868 udp 10.0.2.104 54523 <-> 201.160.70.249 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:52.407363 0.097641 udp 10.0.2.104 54523 <-> 85.86.73.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:53.409148 0.402726 udp 10.0.2.104 54523 <-> 190.206.231.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:55.412083 0.000000 udp 10.0.2.104 54523 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:56.412996 1.703524 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:57.404547 0.000000 udp 10.0.2.104 54523 -> 64.132.169.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:45:58.406306 0.154381 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:45:58.686908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:45:59.407474 0.153869 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:00.409246 0.313221 udp 10.0.2.104 54523 <-> 218.226.208.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:01.410346 0.000000 udp 10.0.2.104 54523 -> 151.19.200.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:02.411792 0.211486 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:03.413148 0.154156 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:04.404620 0.000000 udp 10.0.2.104 54523 -> 79.118.190.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:05.406403 0.072020 udp 10.0.2.104 54523 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:06.407427 0.906284 udp 10.0.2.104 54523 <-> 217.72.209.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:07.409574 0.037362 udp 10.0.2.104 54523 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:08.410223 0.314603 udp 10.0.2.104 54523 <-> 114.159.192.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:09.412325 0.202635 udp 10.0.2.104 54523 <-> 37.209.66.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:10.413253 0.138995 udp 10.0.2.104 54523 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:11.405233 3.047777 udp 10.0.2.104 54523 <-> 5.20.66.155 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:12.406275 0.000000 udp 10.0.2.104 54523 -> 199.192.212.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:13.407703 0.183059 udp 10.0.2.104 54523 <-> 67.242.78.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:15.410566 0.000000 udp 10.0.2.104 54523 -> 67.167.170.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:16.412324 0.000000 udp 10.0.2.104 54523 -> 151.64.50.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:17.413250 0.165187 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:18.405034 0.370463 udp 10.0.2.104 54523 <-> 112.170.227.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:19.406219 0.647530 udp 10.0.2.104 54523 <-> 117.238.232.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:20.407952 0.268176 udp 10.0.2.104 54523 <-> 123.237.188.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:21.408908 1.041699 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:23.412291 0.180627 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:24.414030 0.043945 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:25.404705 0.399397 udp 10.0.2.104 54523 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:26.406540 0.153817 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:27.407859 0.000000 udp 10.0.2.104 54523 -> 5.15.56.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:28.409665 0.039323 udp 10.0.2.104 54523 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:29.410429 0.302190 udp 10.0.2.104 54523 <-> 101.62.82.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:30.412047 0.000000 udp 10.0.2.104 54523 -> 36.76.99.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:31.063173 0.000150 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:46:31.413318 0.000000 udp 10.0.2.104 54523 -> 90.8.175.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:32.405316 0.000000 udp 10.0.2.104 54523 -> 98.150.22.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:33.406426 0.142036 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:34.408302 3.545978 udp 10.0.2.104 54523 <-> 14.97.40.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:35.409040 0.121587 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:36.410501 0.143915 udp 10.0.2.104 54523 <-> 74.69.234.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:37.411963 0.058714 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:38.413837 0.141444 udp 10.0.2.104 54523 <-> 85.86.73.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:39.405474 0.086483 udp 10.0.2.104 54523 <-> 85.84.89.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:40.406896 0.384146 udp 10.0.2.104 54523 <-> 177.180.213.254 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:41.407811 0.380140 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:42.409809 0.140822 udp 10.0.2.104 54523 <-> 70.60.118.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:43.410681 0.306021 udp 10.0.2.104 54523 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:44.412116 0.497832 udp 10.0.2.104 54523 <-> 117.212.33.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:45.413674 0.211473 udp 10.0.2.104 54523 <-> 190.78.21.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:46.405175 0.125757 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:47.406878 0.312719 udp 10.0.2.104 54523 <-> 124.36.64.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:48.408362 0.349648 udp 10.0.2.104 54523 <-> 111.252.28.181 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:49.409461 2.002897 udp 10.0.2.104 54523 <-> 50.26.127.53 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:50.411319 0.408320 udp 10.0.2.104 54523 <-> 41.174.11.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:52.413793 0.000000 udp 10.0.2.104 54523 -> 80.149.237.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:53.405410 0.728094 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:54.406422 0.280280 udp 10.0.2.104 54523 <-> 190.73.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:55.408297 3.098458 udp 10.0.2.104 54523 <-> 41.33.182.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:46:56.409499 0.000000 udp 10.0.2.104 54523 -> 95.57.52.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:57.411178 0.000000 udp 10.0.2.104 54523 -> 1.186.109.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:46:59.413740 0.000000 udp 10.0.2.104 54523 -> 186.222.59.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:00.405180 2.379543 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:01.406934 0.361863 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:03.409458 0.000000 udp 10.0.2.104 54523 -> 188.246.77.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:04.411039 0.055227 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:05.412373 0.181975 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:06.414154 0.189569 udp 10.0.2.104 54523 <-> 189.218.89.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:07.405473 0.204803 udp 10.0.2.104 54523 <-> 99.194.178.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:08.406614 0.049345 udp 10.0.2.104 54523 <-> 89.190.126.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:09.407925 0.000000 udp 10.0.2.104 54523 -> 85.185.188.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:10.409988 0.314859 udp 10.0.2.104 54523 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:11.411418 0.145861 udp 10.0.2.104 54523 <-> 74.69.234.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:12.412368 0.207026 udp 10.0.2.104 54523 <-> 74.61.169.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:13.414004 0.120775 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:14.405797 0.390567 udp 10.0.2.104 54523 <-> 220.142.10.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:15.406760 0.051005 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:16.408635 0.456052 udp 10.0.2.104 54523 <-> 14.98.182.240 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:17.409500 0.000000 udp 10.0.2.104 54523 -> 74.69.234.235 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:18.070727 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:47:18.411110 0.000000 udp 10.0.2.104 54523 -> 41.143.35.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:19.412303 2.181396 udp 10.0.2.104 54523 <-> 203.218.77.246 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:20.414502 0.138055 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:21.405335 0.029371 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:22.406787 0.143355 udp 10.0.2.104 54523 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:23.408106 0.064738 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:24.409832 0.164146 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:25.411422 0.161081 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:26.412574 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:27.413844 0.152882 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:28.405455 0.214077 udp 10.0.2.104 54523 <-> 74.61.169.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:29.407244 0.307296 udp 10.0.2.104 54523 <-> 190.151.62.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:30.408144 0.000000 udp 10.0.2.104 54523 -> 14.96.28.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:31.409747 3.908344 udp 10.0.2.104 54523 <-> 14.96.86.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:32.411573 0.000000 udp 10.0.2.104 54523 -> 14.97.146.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:33.413033 0.087712 udp 10.0.2.104 54523 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:34.404119 0.052408 udp 10.0.2.104 54523 <-> 89.136.63.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:35.405940 0.359133 udp 10.0.2.104 54523 <-> 125.142.179.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:36.406963 0.312793 udp 10.0.2.104 54523 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:37.408515 0.050392 udp 10.0.2.104 54523 <-> 212.3.13.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:38.410266 0.171353 udp 10.0.2.104 54523 <-> 27.116.55.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:39.411394 0.000000 udp 10.0.2.104 54523 -> 99.253.176.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:40.412914 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:41.404568 0.000000 udp 10.0.2.104 54523 -> 217.203.61.177 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:42.178111 0.000000 udp 10.0.2.104 54523 <- 14.97.146.77 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:42.405646 0.065555 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:43.407159 0.000000 udp 10.0.2.104 54523 -> 79.27.166.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:44.408349 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:45.409795 0.000000 udp 10.0.2.104 54523 -> 99.253.176.141 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:46.411820 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:47.413217 0.190543 udp 10.0.2.104 54523 <-> 174.68.99.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:48.404650 0.117496 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:49.405757 0.042298 udp 10.0.2.104 54523 <-> 79.133.245.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:50.407531 0.305597 udp 10.0.2.104 54523 <-> 189.110.71.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:51.408441 0.656119 udp 10.0.2.104 54523 <-> 122.107.150.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:52.410028 0.000000 udp 10.0.2.104 54523 -> 111.253.34.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:53.411722 0.256282 udp 10.0.2.104 54523 <-> 75.224.32.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:54.413217 0.774774 udp 10.0.2.104 54523 <-> 192.95.192.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:55.404174 1.049895 udp 10.0.2.104 54523 <-> 221.171.99.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:56.405641 0.048468 udp 10.0.2.104 54523 <-> 82.225.207.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:57.406990 0.071784 udp 10.0.2.104 54523 <-> 85.84.161.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:47:58.408495 0.000000 udp 10.0.2.104 54523 -> 14.99.166.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:47:59.410158 0.170778 udp 10.0.2.104 54523 <-> 24.60.218.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:00.411878 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:01.412981 0.384029 udp 10.0.2.104 54523 <-> 61.224.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:02.404535 0.017976 udp 10.0.2.104 54523 <-> 94.112.175.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:03.406076 0.122523 udp 10.0.2.104 54523 <-> 67.197.193.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:04.407868 0.178252 udp 10.0.2.104 54523 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:05.068474 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:48:05.408955 0.035492 udp 10.0.2.104 54523 <-> 79.113.29.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:06.410558 0.062059 udp 10.0.2.104 54523 <-> 213.164.122.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:07.412007 0.000000 udp 10.0.2.104 54523 -> 87.205.140.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:08.412779 0.000000 udp 10.0.2.104 54523 -> 78.90.253.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:09.404555 4.922333 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:10.405853 0.000000 udp 10.0.2.104 54523 -> 92.239.15.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:11.407645 1.143489 udp 10.0.2.104 54523 <-> 24.45.223.115 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:14.411815 0.069212 udp 10.0.2.104 54523 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:15.413312 0.058808 udp 10.0.2.104 54523 <-> 89.40.194.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:16.404921 1.010031 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:17.406407 0.042412 udp 10.0.2.104 54523 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:18.407235 0.000000 udp 10.0.2.104 54523 -> 92.239.15.106 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:19.409282 0.000000 udp 10.0.2.104 54523 -> 88.57.184.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:20.410470 0.041920 udp 10.0.2.104 54523 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:21.411881 0.000000 udp 10.0.2.104 54523 -> 14.98.193.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:22.412893 0.108547 udp 10.0.2.104 54523 <-> 88.179.235.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:23.404539 0.058389 udp 10.0.2.104 54523 <-> 89.40.194.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:25.407889 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:26.409134 0.000090 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:26.409224 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:48:27.410620 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:28.411744 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:29.412954 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:30.405013 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:31.406082 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:32.407255 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:33.408706 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:34.410344 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:35.412441 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:36.413118 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:37.404714 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:38.405960 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:39.407322 3.004455 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:40.409271 0.051115 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:41.410225 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:44.405220 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:45.406019 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:46.407763 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:47.409550 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:48.410265 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:49.412125 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:50.413558 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:51.405109 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:52.065821 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:48:52.406639 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:53.408031 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:54.409273 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:54.409347 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:48:55.410746 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:56.411873 1.180058 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:48:57.413397 0.000000 udp 10.0.2.104 54523 -> 186.91.102.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:48:58.404975 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:00.408087 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:01.409740 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:02.411001 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:03.412323 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:04.413500 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:04.413562 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:49:05.404739 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:06.406304 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:07.407714 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:08.409479 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:09.410684 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:10.412474 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:11.413727 4.650264 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:12.407699 1.446684 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:14.407800 1.113450 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:16.410952 0.146247 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:17.412292 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:18.413691 0.050855 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:19.404945 0.163426 udp 10.0.2.104 54523 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:20.406731 0.090512 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:21.407921 0.490400 udp 10.0.2.104 54523 <-> 36.76.99.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:22.409489 0.000000 udp 10.0.2.104 54523 -> 81.227.139.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:23.411315 0.000000 udp 10.0.2.104 54523 -> 180.215.92.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:24.412741 0.027731 udp 10.0.2.104 54523 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:25.413612 0.221226 udp 10.0.2.104 54523 <-> 81.191.116.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:26.405119 0.256772 udp 10.0.2.104 54523 <-> 81.172.41.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:27.406430 0.176967 udp 10.0.2.104 54523 <-> 75.65.7.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:28.408212 0.584747 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:29.409736 0.037965 udp 10.0.2.104 54523 <-> 77.20.18.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:30.410650 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:31.412725 0.166249 udp 10.0.2.104 54523 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:32.414152 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:33.405217 0.132300 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:34.406406 0.563639 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:35.408548 0.000000 udp 10.0.2.104 54523 -> 202.78.234.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:36.409922 0.000000 udp 10.0.2.104 54523 -> 50.128.173.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:37.411301 1.242200 udp 10.0.2.104 54523 <-> 179.236.58.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:38.412167 0.227891 udp 10.0.2.104 54523 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:39.063336 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:49:39.414253 0.060476 udp 10.0.2.104 54523 <-> 95.46.217.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:40.405296 0.139874 udp 10.0.2.104 54523 <-> 75.178.77.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:41.407137 2.002561 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:42.408406 0.336868 udp 10.0.2.104 54523 <-> 1.174.35.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:44.411540 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:45.412909 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:46.413895 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:47.405300 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:48.407223 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:49.408301 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:50.409564 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:51.410992 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:52.412708 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:53.414257 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:54.405180 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:49:54.405242 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:49:56.408509 2.209503 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:57.409773 0.149062 udp 10.0.2.104 54523 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:49:59.412803 0.165021 udp 10.0.2.104 54523 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:00.413958 0.051566 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:01.405932 0.000000 udp 10.0.2.104 54523 -> 70.82.157.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:02.407189 0.126606 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:03.408277 0.278363 udp 10.0.2.104 54523 <-> 36.2.202.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:04.409748 4.997150 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:05.411111 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:06.413124 0.065507 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:07.404531 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:08.405307 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:09.839778 0.000000 udp 10.0.2.104 54523 <- 121.124.80.2 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:10.408411 0.037226 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:11.410114 0.000000 udp 10.0.2.104 54523 -> 79.40.117.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:12.411119 0.000000 udp 10.0.2.104 54523 -> 74.77.183.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:13.412874 0.311490 udp 10.0.2.104 54523 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:14.404284 0.000000 udp 10.0.2.104 54523 -> 118.11.112.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:15.405365 3.192054 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:16.407327 0.290378 udp 10.0.2.104 54523 <-> 200.122.70.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:17.408818 0.000000 udp 10.0.2.104 54523 -> 217.203.54.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:19.411230 0.129221 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:20.412942 0.138502 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:21.404109 0.142997 udp 10.0.2.104 54523 <-> 5.25.132.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:22.405903 0.158851 udp 10.0.2.104 54523 <-> 97.100.98.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:23.406958 0.470926 udp 10.0.2.104 54523 <-> 117.230.180.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:24.408454 0.138768 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:25.410331 0.397933 udp 10.0.2.104 54523 <-> 186.11.25.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:26.070856 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:50:26.411289 0.303425 udp 10.0.2.104 54523 <-> 210.131.97.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:27.412851 0.000000 udp 10.0.2.104 54523 -> 220.142.10.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:28.404069 0.000000 udp 10.0.2.104 54523 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:29.405840 0.029885 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:30.407236 0.000000 udp 10.0.2.104 54523 -> 24.147.226.5 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:31.408859 0.000000 udp 10.0.2.104 54523 -> 85.232.150.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:32.410075 0.186590 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:33.411917 0.053793 udp 10.0.2.104 54523 <-> 213.231.137.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:34.412676 1.539189 udp 10.0.2.104 54523 <-> 186.11.25.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:35.404399 0.000000 udp 10.0.2.104 54523 -> 179.168.12.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:36.405883 0.055409 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:37.407725 0.384104 udp 10.0.2.104 54523 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:38.408429 0.354350 udp 10.0.2.104 54523 <-> 59.102.184.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:39.410086 0.157141 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:40.411608 0.000000 udp 10.0.2.104 54523 -> 75.244.136.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:41.412866 0.205808 udp 10.0.2.104 54523 <-> 95.76.48.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:42.404773 3.140193 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:43.406056 0.163474 udp 10.0.2.104 54523 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:44.407313 0.000000 udp 10.0.2.104 54523 -> 87.97.204.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:46.410173 0.058183 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:47.411364 0.000000 udp 10.0.2.104 54523 -> 125.160.79.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:48.413457 3.995603 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:49.404421 0.167035 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:50.406344 1.370311 udp 10.0.2.104 54523 <-> 95.76.48.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:53.410402 0.000000 udp 10.0.2.104 54523 -> 87.97.204.26 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:54.411757 0.138392 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:55.412929 0.163363 udp 10.0.2.104 54523 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:56.404929 0.000000 udp 10.0.2.104 54523 -> 85.64.72.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:57.406119 0.141135 udp 10.0.2.104 54523 <-> 76.120.220.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:50:58.407264 0.000000 udp 10.0.2.104 54523 -> 24.254.138.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:50:59.408815 0.125618 udp 10.0.2.104 54523 <-> 188.158.208.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:00.410136 0.158087 udp 10.0.2.104 54523 <-> 72.192.107.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:01.412083 0.241801 udp 10.0.2.104 54523 <-> 118.97.174.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:02.413258 0.005435 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:03.404386 0.135780 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:04.406509 0.000000 udp 10.0.2.104 54523 -> 46.191.214.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:05.407422 0.000000 udp 10.0.2.104 54523 -> 62.68.106.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:06.408743 0.171549 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:07.410388 0.161260 udp 10.0.2.104 54523 <-> 50.83.216.241 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:08.411580 0.204294 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:09.413754 0.330550 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:10.404739 0.005280 udp 10.0.2.104 54523 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:11.405921 0.032186 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:12.407635 0.000000 udp 10.0.2.104 54523 -> 49.249.82.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:13.068507 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:51:13.409078 0.325729 udp 10.0.2.104 54523 <-> 88.236.237.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:14.410650 0.107880 udp 10.0.2.104 54523 <-> 79.179.19.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:15.411724 0.000000 udp 10.0.2.104 54523 -> 64.121.4.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:16.413592 0.278310 udp 10.0.2.104 54523 <-> 190.190.125.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:17.404834 0.147334 udp 10.0.2.104 54523 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:18.406642 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:19.407436 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:20.408818 0.046856 udp 10.0.2.104 54523 <-> 212.67.155.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:21.410812 4.151531 udp 10.0.2.104 54523 <-> 123.194.225.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:22.411871 1.993218 udp 10.0.2.104 54523 -> 62.42.15.233 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:25.405984 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:26.408087 0.415713 udp 10.0.2.104 54523 <-> 75.211.48.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:27.409379 3.995869 udp 10.0.2.104 54523 <-> 85.130.45.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:28.410758 0.000000 udp 10.0.2.104 54523 -> 92.227.202.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:29.412084 0.000000 udp 10.0.2.104 54523 -> 174.108.65.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:30.413332 0.152611 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:32.406379 2.956583 udp 10.0.2.104 54523 <-> 166.159.168.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:33.407896 0.000000 udp 10.0.2.104 54523 -> 95.158.97.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:34.409350 0.114187 udp 10.0.2.104 54523 <-> 109.55.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:35.410356 0.363414 udp 10.0.2.104 54523 <-> 190.203.75.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:36.411953 0.144973 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:37.405446 0.000000 udp 10.0.2.104 54523 <- 174.108.65.168 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:37.413312 1.251785 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:38.404932 0.000000 udp 10.0.2.104 54523 -> 92.227.202.24 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:39.406419 2.055113 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:42.410978 0.000000 udp 10.0.2.104 54523 -> 77.44.96.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:43.412193 0.312798 udp 10.0.2.104 54523 <-> 5.234.92.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:44.413534 0.000000 udp 10.0.2.104 54523 -> 107.42.209.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:45.404755 0.022831 udp 10.0.2.104 54523 <-> 83.84.241.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:46.406394 0.000000 udp 10.0.2.104 54523 -> 180.151.28.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:47.407996 0.055000 udp 10.0.2.104 54523 <-> 188.26.31.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:48.409263 0.113080 udp 10.0.2.104 54523 <-> 178.122.80.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:49.410787 0.168126 udp 10.0.2.104 54523 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:50.122037 0.012128 udp 10.0.2.104 54563 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 05:51:50.134427 0.000000 udp 10.0.2.104 54564 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:50.412442 0.000000 udp 10.0.2.104 54523 -> 24.193.20.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:51.414258 0.000000 udp 10.0.2.104 54523 -> 178.79.25.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:51.422901 0.000000 udp 10.0.2.104 54523 <- 180.151.28.155 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:52.405411 0.342439 udp 10.0.2.104 54523 <-> 61.38.0.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:53.406850 0.000000 udp 10.0.2.104 54523 -> 88.242.161.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:51:54.408291 0.084065 udp 10.0.2.104 54523 <-> 82.249.156.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:55.409516 0.340954 udp 10.0.2.104 54523 <-> 115.242.105.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:56.411029 0.376606 udp 10.0.2.104 54523 <-> 14.199.136.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:57.412691 0.341012 udp 10.0.2.104 54523 <-> 50.4.187.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:58.413471 0.359382 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:51:59.405583 0.487197 udp 10.0.2.104 54523 <-> 200.37.182.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:00.066150 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:52:00.407018 0.158734 udp 10.0.2.104 54523 <-> 173.26.91.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:01.408674 0.206092 udp 10.0.2.104 54523 <-> 24.8.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:02.409655 0.268163 udp 10.0.2.104 54523 <-> 201.80.112.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:02.692011 3.002054 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:52:03.410915 0.226986 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:04.412964 0.000000 udp 10.0.2.104 54523 -> 70.82.157.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:05.413653 0.054189 udp 10.0.2.104 54523 <-> 79.173.34.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:06.405511 0.040351 udp 10.0.2.104 54523 <-> 188.26.225.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:07.406585 0.059778 udp 10.0.2.104 54523 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:08.408227 0.358660 udp 10.0.2.104 54523 <-> 183.179.24.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:09.409268 0.156047 udp 10.0.2.104 54523 <-> 98.223.142.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:09.700210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:52:10.411022 0.409705 udp 10.0.2.104 54523 <-> 177.106.47.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:11.412741 0.142301 udp 10.0.2.104 54523 <-> 82.19.125.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:12.453767 0.165346 udp 10.0.2.104 54523 <-> 72.152.79.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:13.445373 1.672331 udp 10.0.2.104 54523 <-> 190.203.106.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:14.447119 0.053940 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:15.448221 0.301740 udp 10.0.2.104 54523 <-> 118.15.72.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:16.449818 0.000000 udp 10.0.2.104 54523 -> 24.191.81.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:17.451219 0.000000 udp 10.0.2.104 54523 -> 67.210.195.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:17.741347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:52:18.452645 0.178668 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:19.454407 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:20.445797 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:21.446846 0.142230 udp 10.0.2.104 54523 <-> 67.81.98.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:22.448432 0.000000 udp 10.0.2.104 54523 -> 2.185.101.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:23.449791 0.028604 udp 10.0.2.104 54523 <-> 158.181.66.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:24.451372 0.034437 udp 10.0.2.104 54523 <-> 84.194.58.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:25.452754 0.180190 udp 10.0.2.104 54523 <-> 173.17.3.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:26.453843 0.090520 udp 10.0.2.104 54523 <-> 82.58.194.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:27.445406 4.161265 udp 10.0.2.104 54523 <-> 68.11.235.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:28.447317 2.002801 udp 10.0.2.104 54523 -> 172.21.200.18 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:29.448209 0.137571 udp 10.0.2.104 54523 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:32.452611 1.509196 udp 10.0.2.104 54523 <-> 200.127.30.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:33.744901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:52:34.445547 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:35.447297 0.192117 udp 10.0.2.104 54523 <-> 27.106.20.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:36.448949 0.164172 udp 10.0.2.104 54523 <-> 49.143.252.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:37.449907 0.217542 udp 10.0.2.104 54523 <-> 190.32.174.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:38.451033 0.171247 udp 10.0.2.104 54523 <-> 67.148.202.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:39.452625 0.000000 udp 10.0.2.104 54523 -> 68.108.189.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:40.444629 0.603414 udp 10.0.2.104 54523 <-> 111.188.17.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:41.445522 2.392630 udp 10.0.2.104 54523 <-> 1.162.152.133 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:42.447154 0.047014 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:44.449880 0.000000 udp 10.0.2.104 54523 -> 173.23.163.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:45.451573 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:46.452594 0.188207 udp 10.0.2.104 54523 -> 202.133.54.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:46.640801 0.000000 icmp 202.133.54.3 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 05:52:47.103855 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:52:47.444390 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:48.445447 0.224083 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:49.447429 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:50.448410 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:51.449921 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:52.451437 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:53.452859 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:54.444204 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:55.445564 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:56.447545 0.396793 udp 10.0.2.104 54523 <-> 1.162.152.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:52:57.448558 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:58.449768 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:52:59.451829 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:00.452850 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:01.444576 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:02.445938 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:03.447291 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:03.447364 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:53:04.448430 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:05.450052 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:05.750694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:53:06.451340 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:07.453125 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:08.444542 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:09.445769 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:10.447465 4.996735 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:12.449968 0.000000 udp 10.0.2.104 54523 -> 118.166.237.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:13.451392 0.305126 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:53:14.453544 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:16.445697 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:17.447199 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:18.449065 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:19.449995 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:20.452097 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:21.453104 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:23.445763 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:24.447436 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:25.448938 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:26.450333 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:27.452010 3.995698 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:28.452963 0.000000 udp 10.0.2.104 54523 -> 118.166.237.112 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:29.444738 0.306345 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:53:30.445770 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:32.448850 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:33.450389 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:34.111011 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:53:34.451548 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:36.444777 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:37.445952 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:38.447544 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:39.449405 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:40.450730 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:41.452069 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:41.452114 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:53:42.453580 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:43.444781 0.278815 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:53:44.446189 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:45.447697 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:46.449006 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:47.450429 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:48.452057 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:49.453438 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:50.445143 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:51.446463 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:52.447454 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:53.448831 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:54.450576 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:55.451886 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:56.453578 0.305057 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:53:57.444588 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:58.446601 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:59.447530 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:53:59.447578 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:54:00.449446 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:01.450846 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:02.452149 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:03.453357 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:04.444909 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:05.446569 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:06.447843 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:07.449148 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:08.450797 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:09.451989 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:10.453284 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:11.445201 0.000000 udp 10.0.2.104 54523 -> 118.166.237.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:12.446474 0.000000 udp 10.0.2.104 54523 -> 109.67.249.137 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:13.447898 0.000000 udp 10.0.2.104 54523 -> 202.133.54.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:14.449034 0.000000 udp 10.0.2.104 54523 -> 173.23.163.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:15.451095 0.425502 udp 10.0.2.104 54523 <-> 14.53.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:54:16.452367 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:17.453374 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:18.445006 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:19.446746 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:20.447844 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:21.109229 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:54:21.449435 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:22.451131 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:23.452214 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:24.453575 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:25.445087 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:26.446287 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:27.448120 0.288166 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:54:28.449158 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:29.451104 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:30.452369 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:31.454055 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:32.445283 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:33.446835 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:34.448307 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:35.449290 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:36.451222 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:37.452717 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:38.453778 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:39.445228 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:40.447066 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:40.447114 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:54:41.447838 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:42.449692 0.403060 udp 10.0.2.104 54523 <-> 118.166.237.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:54:43.451021 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:44.452364 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:45.453758 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:46.445492 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:47.446837 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:48.448504 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:49.449412 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:50.451328 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:51.452601 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:51.452680 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:54:52.454135 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:53.445393 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:54.446802 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:55.448487 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:56.450104 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:57.451212 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:58.452589 0.000000 udp 10.0.2.104 54523 -> 109.67.249.137 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:54:59.453904 0.088574 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:00.445351 0.000000 udp 10.0.2.104 54523 -> 173.23.163.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:01.447229 0.000000 udp 10.0.2.104 54523 -> 202.133.54.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:02.448308 0.367032 udp 10.0.2.104 54523 <-> 203.185.38.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:03.450213 0.144832 udp 10.0.2.104 54523 <-> 24.96.86.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:04.450951 0.000000 udp 10.0.2.104 54523 -> 118.168.126.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:05.452792 0.062628 udp 10.0.2.104 54523 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:06.454184 4.997462 udp 10.0.2.104 54523 <-> 86.125.61.76 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:07.445587 0.000000 udp 10.0.2.104 54523 -> 5.20.145.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:08.106310 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:55:08.446987 0.015506 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:09.448608 0.026562 udp 10.0.2.104 54523 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:10.449921 4.394529 udp 10.0.2.104 54523 <-> 118.168.126.14 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:11.499086 0.000000 udp 10.0.2.104 54523 <- 86.125.61.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:12.453056 0.000000 udp 10.0.2.104 54523 -> 219.109.128.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:13.444700 0.056691 udp 10.0.2.104 54523 <-> 86.124.222.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:15.447312 4.996636 udp 10.0.2.104 54523 -> 5.20.145.20 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:16.448719 0.059478 udp 10.0.2.104 54523 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:17.450135 0.058165 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:18.451719 0.138502 udp 10.0.2.104 54523 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:19.453329 0.000000 udp 10.0.2.104 54523 -> 46.191.214.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:20.488936 0.000036 udp 10.0.2.104 54523 <- 5.20.145.20 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:21.445537 0.480060 udp 10.0.2.104 54523 <-> 118.161.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:22.447165 1.061798 udp 10.0.2.104 54523 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:23.448761 0.389677 udp 10.0.2.104 54523 <-> 122.121.38.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:24.450005 0.440918 udp 10.0.2.104 54523 <-> 61.105.222.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:25.451423 0.000000 udp 10.0.2.104 54523 -> 177.179.38.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:26.453437 0.168788 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:27.444266 0.060219 udp 10.0.2.104 54523 <-> 89.39.161.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:28.445694 0.153264 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:29.447608 0.222548 udp 10.0.2.104 54523 <-> 71.9.136.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:30.448561 0.124505 udp 10.0.2.104 54523 <-> 66.117.244.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:31.449754 1.330568 udp 10.0.2.104 54523 <-> 218.157.141.206 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:33.453211 0.142504 udp 10.0.2.104 54523 <-> 96.30.149.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:34.444790 0.192205 udp 10.0.2.104 54523 <-> 107.213.251.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:35.445845 0.215191 udp 10.0.2.104 54523 <-> 98.242.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:36.447157 4.017064 udp 10.0.2.104 54523 <-> 212.59.229.78 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:37.448425 0.241013 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:39.451955 2.993940 udp 10.0.2.104 54523 <-> 219.77.79.83 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:41.444556 0.000000 udp 10.0.2.104 54523 -> 173.18.114.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:43.447632 0.060397 udp 10.0.2.104 54523 <-> 78.58.24.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:44.448453 0.011554 udp 10.0.2.104 54523 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:45.449889 1.146785 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:46.451309 0.000000 udp 10.0.2.104 54523 -> 79.115.60.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:47.453350 0.000000 udp 10.0.2.104 54523 -> 91.116.202.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:48.444730 1.202038 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:50.447279 0.203335 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:51.448731 0.030919 udp 10.0.2.104 54523 <-> 89.67.108.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:52.449964 0.059131 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:53.452117 0.047991 udp 10.0.2.104 54523 <-> 82.225.207.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:54.453027 0.937991 udp 10.0.2.104 54523 <-> 200.90.98.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:55.104438 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:55:55.444781 0.000000 udp 10.0.2.104 54523 -> 216.115.131.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:55:56.445717 1.449325 udp 10.0.2.104 54523 <-> 84.41.31.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:57.447338 0.036362 udp 10.0.2.104 54523 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:58.448596 0.137204 udp 10.0.2.104 54523 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:55:59.450680 0.145698 udp 10.0.2.104 54523 <-> 216.129.180.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:00.452015 0.347818 udp 10.0.2.104 54523 <-> 220.246.178.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:01.452892 0.000000 udp 10.0.2.104 54523 -> 182.237.165.0 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:56:02.444956 0.197755 udp 10.0.2.104 54523 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:03.446047 0.043525 udp 10.0.2.104 54523 <-> 83.249.231.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:04.447269 0.912297 udp 10.0.2.104 54523 <-> 173.197.240.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:05.448820 0.162831 udp 10.0.2.104 54523 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:06.450275 0.000000 udp 10.0.2.104 54523 -> 114.26.249.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:56:07.451542 1.086644 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:08.453466 0.161627 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:09.445038 0.254686 udp 10.0.2.104 54523 <-> 189.60.246.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:10.445819 0.136976 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:11.447351 0.163684 udp 10.0.2.104 54523 <-> 173.178.26.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:12.448827 0.000000 udp 10.0.2.104 54523 -> 179.57.31.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:56:13.450500 0.156685 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:14.452388 0.000000 udp 10.0.2.104 54523 -> 14.96.163.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:56:15.453083 0.227272 udp 10.0.2.104 54523 <-> 186.89.152.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:16.445003 0.293140 udp 10.0.2.104 54523 <-> 124.120.124.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:17.446583 0.318184 udp 10.0.2.104 54523 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:18.447703 0.018489 udp 10.0.2.104 54523 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:19.449073 0.172395 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:20.450683 0.139045 udp 10.0.2.104 54523 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:21.451806 0.139581 udp 10.0.2.104 54523 <-> 75.109.133.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:22.453109 0.150522 udp 10.0.2.104 54523 <-> 216.129.180.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:23.444868 0.143261 udp 10.0.2.104 54523 <-> 184.57.25.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:24.446182 0.198129 udp 10.0.2.104 54523 <-> 99.135.171.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:25.447472 0.170551 udp 10.0.2.104 54523 <-> 106.51.31.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:26.449543 0.616812 udp 10.0.2.104 54523 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:27.450502 0.104353 udp 10.0.2.104 54523 <-> 89.245.86.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:28.452139 0.124992 udp 10.0.2.104 54523 <-> 66.108.161.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:29.453576 0.054825 udp 10.0.2.104 54523 <-> 62.182.69.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:30.444792 3.004842 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:31.446118 4.187387 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:32.447446 0.507209 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:35.452626 0.093556 udp 10.0.2.104 54523 <-> 87.19.96.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:36.453770 0.000000 udp 10.0.2.104 54523 -> 75.244.136.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:56:37.445053 3.146281 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:38.446774 0.360664 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:39.447855 0.207564 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:41.450740 0.046663 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:42.111651 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:56:42.452094 0.162575 udp 10.0.2.104 54523 <-> 71.74.77.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:43.453935 0.305116 udp 10.0.2.104 54523 <-> 116.80.240.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:44.444738 0.337767 udp 10.0.2.104 54523 <-> 187.10.81.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:45.446129 0.163270 udp 10.0.2.104 54523 <-> 74.193.210.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:46.448240 0.399925 udp 10.0.2.104 54523 <-> 183.106.185.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:47.449510 0.793086 udp 10.0.2.104 54523 <-> 117.212.119.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:48.450478 0.305876 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:49.452211 0.052597 udp 10.0.2.104 54523 <-> 77.77.31.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:50.453477 0.180422 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:51.445275 3.064740 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:52.446307 0.177534 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:53.447865 0.044472 udp 10.0.2.104 54523 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:55.451093 0.272686 udp 10.0.2.104 54523 <-> 190.72.3.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:56.452421 0.143827 udp 10.0.2.104 54523 <-> 75.185.241.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:57.453780 0.061858 udp 10.0.2.104 54523 <-> 194.79.12.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:58.445288 0.167523 udp 10.0.2.104 54523 <-> 76.112.187.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:56:59.446384 0.427187 udp 10.0.2.104 54523 <-> 115.242.132.13 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:00.448143 0.066064 udp 10.0.2.104 54523 <-> 188.26.188.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:01.449624 0.053168 udp 10.0.2.104 54523 <-> 89.228.148.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:02.451190 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:03.452032 0.350070 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:04.454152 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:05.444986 0.167739 udp 10.0.2.104 54523 <-> 76.108.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:06.446819 0.000098 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:06.446917 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:57:07.448513 0.246658 udp 10.0.2.104 54523 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:08.449894 0.000000 udp 10.0.2.104 54523 -> 218.102.238.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:09.450931 0.048402 udp 10.0.2.104 54523 <-> 5.13.132.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:10.452791 0.215304 udp 10.0.2.104 54523 <-> 79.27.166.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:11.454232 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:12.445347 0.031796 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:13.446773 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:14.448189 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:15.449814 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:16.450709 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:17.452488 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:18.454143 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:19.445415 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:20.446678 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:21.448532 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:22.450145 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:23.451203 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:24.452771 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:25.453684 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:25.453740 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:57:26.445372 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:27.446510 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:28.448622 0.124577 udp 10.0.2.104 54523 <-> 5.25.132.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:29.109170 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:57:29.449931 3.995970 udp 10.0.2.104 54523 -> 201.13.95.251 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:30.450944 0.617864 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:31.452775 0.291597 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:32.454175 0.000000 udp 10.0.2.104 54523 -> 75.192.243.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:34.446700 0.198186 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:35.448566 0.405696 udp 10.0.2.104 54523 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:36.450159 0.000000 udp 10.0.2.104 54523 -> 89.25.112.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:37.451474 0.053612 udp 10.0.2.104 54523 <-> 194.123.75.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:38.453033 0.185330 udp 10.0.2.104 54523 <-> 190.39.192.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:39.454134 0.037782 udp 10.0.2.104 54523 <-> 78.72.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:40.445817 0.293447 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:41.446997 0.286611 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:42.448398 0.185874 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:43.449542 0.133932 udp 10.0.2.104 54523 <-> 68.42.12.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:44.451221 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:45.452999 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:46.444348 0.027441 udp 10.0.2.104 54523 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:47.445376 0.028906 udp 10.0.2.104 54523 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:48.447220 0.000000 udp 10.0.2.104 54523 -> 37.14.175.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:49.448825 0.170980 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:50.450207 1.212216 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:51.451524 0.165074 udp 10.0.2.104 54523 <-> 50.82.72.64 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:52.452606 0.027627 udp 10.0.2.104 54523 <-> 151.237.7.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:53.444159 0.433279 udp 10.0.2.104 54523 <-> 59.94.19.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:54.445363 0.415853 udp 10.0.2.104 54523 <-> 177.29.103.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:55.447312 0.147364 udp 10.0.2.104 54523 <-> 31.17.213.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:56.448705 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:57.450147 0.184496 udp 10.0.2.104 54523 <-> 174.109.218.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:57:58.451233 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:57:59.453274 3.036488 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:00.443994 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:01.445759 0.366651 udp 10.0.2.104 54523 <-> 186.10.9.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:03.448739 0.000000 udp 10.0.2.104 54523 -> 61.62.74.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:04.450134 0.092596 udp 10.0.2.104 54523 <-> 77.121.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:05.451693 0.040590 udp 10.0.2.104 54523 <-> 86.120.85.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:06.452625 0.285689 udp 10.0.2.104 54523 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:07.444566 0.000000 udp 10.0.2.104 54523 -> 78.96.230.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:08.445787 0.000000 udp 10.0.2.104 54523 -> 2.176.167.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:09.447145 0.059931 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:10.448632 2.168751 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:11.450240 0.000000 udp 10.0.2.104 54523 -> 77.230.253.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:13.452696 0.149735 udp 10.0.2.104 54523 <-> 1.186.125.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:14.444222 0.362015 udp 10.0.2.104 54523 <-> 61.61.228.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:15.445912 0.045942 udp 10.0.2.104 54523 <-> 130.204.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:16.106967 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:58:16.447044 0.381203 udp 10.0.2.104 54523 <-> 114.76.142.179 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:17.448447 0.340788 udp 10.0.2.104 54523 <-> 116.32.104.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:18.450295 1.819597 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:19.451330 0.269647 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:20.452953 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:21.444609 1.089926 udp 10.0.2.104 54523 <-> 84.125.195.170 16464 CON 0 0 4 1616 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:23.447171 0.169162 udp 10.0.2.104 54523 <-> 68.53.137.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:24.449307 0.000000 udp 10.0.2.104 54523 -> 14.96.192.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:25.450227 0.367532 udp 10.0.2.104 54523 <-> 61.61.228.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:26.451371 0.264305 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:27.453497 0.316059 udp 10.0.2.104 54523 <-> 111.107.89.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:28.444806 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:29.446103 0.000102 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:29.446205 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:58:30.447717 0.297033 udp 10.0.2.104 54523 <-> 115.253.254.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:30.499705 0.000000 udp 10.0.2.104 54523 <- 14.96.192.111 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:31.449187 0.082708 udp 10.0.2.104 54523 <-> 82.241.35.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:32.450459 2.940712 udp 10.0.2.104 54523 <-> 190.142.155.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:33.451521 0.000000 udp 10.0.2.104 54523 -> 27.53.184.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:35.444376 0.043996 udp 10.0.2.104 54523 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:36.446367 0.449118 udp 10.0.2.104 54523 <-> 189.68.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:37.527493 0.280329 udp 10.0.2.104 54523 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:38.529609 0.308677 udp 10.0.2.104 54523 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:39.530153 0.539191 udp 10.0.2.104 54523 <-> 181.185.0.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:40.532129 0.362505 udp 10.0.2.104 54523 <-> 220.246.178.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:41.533409 0.275492 udp 10.0.2.104 54523 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:42.525008 1.251081 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:44.527880 3.541383 udp 10.0.2.104 54523 <-> 46.120.207.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:45.528982 0.063448 udp 10.0.2.104 54523 <-> 81.233.18.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:46.530613 0.134877 udp 10.0.2.104 54523 <-> 81.147.68.37 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:47.531714 0.201519 udp 10.0.2.104 54523 <-> 72.177.89.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:48.533760 0.049359 udp 10.0.2.104 54523 <-> 78.232.212.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:49.524703 0.152321 udp 10.0.2.104 54523 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:50.526212 0.000000 udp 10.0.2.104 54523 -> 94.21.66.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:51.527441 0.144114 udp 10.0.2.104 54523 <-> 69.125.68.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:52.529007 0.059159 udp 10.0.2.104 54523 <-> 85.187.232.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:53.530306 0.302169 udp 10.0.2.104 54523 <-> 61.26.169.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:54.532176 0.000000 udp 10.0.2.104 54523 -> 201.211.132.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:55.533180 0.000000 udp 10.0.2.104 54523 -> 190.178.187.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:56.524823 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:58:57.526422 0.043942 udp 10.0.2.104 54523 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:58.528148 0.344853 udp 10.0.2.104 54523 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:58:59.528944 0.045231 udp 10.0.2.104 54523 <-> 89.99.62.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:00.530424 0.000000 udp 10.0.2.104 54523 -> 95.75.166.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:01.532226 0.439472 udp 10.0.2.104 54523 <-> 117.194.240.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:02.533988 0.255278 udp 10.0.2.104 54523 <-> 190.206.147.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:03.184289 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:59:03.525072 0.439533 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:04.526150 2.131905 udp 10.0.2.104 54523 <-> 111.92.96.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:05.528055 0.287247 udp 10.0.2.104 54523 <-> 117.222.36.68 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:06.528987 0.351350 udp 10.0.2.104 54523 <-> 123.195.215.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:07.530491 0.162159 udp 10.0.2.104 54523 <-> 74.142.131.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:08.532137 0.082285 udp 10.0.2.104 54523 <-> 93.72.6.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:09.533457 0.000000 udp 10.0.2.104 54523 -> 31.59.37.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:09.836709 3.001370 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:59:10.524852 0.000000 udp 10.0.2.104 54523 -> 68.145.86.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:11.526518 2.818531 udp 10.0.2.104 54523 <-> 89.29.148.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:12.527806 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:13.529517 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:14.530529 0.023773 udp 10.0.2.104 54523 <-> 91.89.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:15.531919 0.000000 udp 10.0.2.104 54523 -> 111.242.58.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:16.533387 0.000000 udp 10.0.2.104 54523 -> 202.71.28.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:16.844294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:59:17.525398 0.664242 udp 10.0.2.104 54523 <-> 190.206.146.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:18.526852 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:19.528364 0.000125 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:19.528489 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:59:20.529182 0.017392 udp 10.0.2.104 54523 <-> 94.112.175.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:21.531077 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:22.532006 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:23.533433 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:24.525292 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:24.845800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:59:25.526947 3.938895 udp 10.0.2.104 54523 <-> 117.254.144.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:26.528498 0.000000 udp 10.0.2.104 54523 -> 79.118.170.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:27.529833 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:28.531009 0.099071 udp 10.0.2.104 54523 <-> 176.200.210.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:29.532575 0.118046 udp 10.0.2.104 54523 <-> 86.107.40.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:30.533605 0.459707 udp 10.0.2.104 54523 <-> 117.230.163.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:31.525347 0.143549 udp 10.0.2.104 54523 <-> 76.11.73.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:32.526989 1.344698 udp 10.0.2.104 54523 <-> 201.222.178.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:33.528497 0.220895 udp 10.0.2.104 54523 <-> 69.244.60.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:34.530047 0.273588 udp 10.0.2.104 54523 <-> 186.90.31.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:35.530686 0.000000 udp 10.0.2.104 54523 -> 89.103.142.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:36.532336 0.000000 udp 10.0.2.104 54523 -> 87.17.229.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:37.533790 0.058099 udp 10.0.2.104 54523 <-> 88.180.120.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:38.525501 0.194349 udp 10.0.2.104 54523 <-> 217.22.82.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:39.526733 0.075054 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:40.528382 0.726016 udp 10.0.2.104 54523 <-> 101.63.86.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:40.848595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:59:41.529342 0.299977 udp 10.0.2.104 54523 <-> 189.19.128.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:42.531089 0.342648 udp 10.0.2.104 54523 <-> 125.128.173.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:43.532736 0.144052 udp 10.0.2.104 54523 <-> 208.157.167.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:44.533636 0.137011 udp 10.0.2.104 54523 <-> 24.47.139.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:45.525687 0.376743 udp 10.0.2.104 54523 <-> 101.111.149.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:46.526979 0.154555 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:47.528316 0.346708 udp 10.0.2.104 54523 <-> 122.121.230.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:48.529883 0.156225 udp 10.0.2.104 54523 <-> 65.28.245.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:49.531459 1.373445 udp 10.0.2.104 54523 <-> 190.221.127.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:50.192414 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:59:50.532631 0.392784 udp 10.0.2.104 54523 <-> 201.250.89.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:51.534211 1.282979 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:53.526732 0.305669 udp 10.0.2.104 54523 <-> 187.2.231.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:54.528579 0.046991 udp 10.0.2.104 54523 <-> 89.229.150.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:55.529963 0.060468 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:56.530880 0.257185 udp 10.0.2.104 54523 <-> 197.204.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 05:59:57.533172 0.000000 udp 10.0.2.104 54523 -> 75.158.248.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 05:59:58.534178 3.234652 udp 10.0.2.104 54523 <-> 71.92.68.157 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:00.526644 0.258880 udp 10.0.2.104 54523 <-> 187.38.64.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:02.529807 0.188191 udp 10.0.2.104 54523 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:03.531600 0.327112 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:04.532825 0.000000 udp 10.0.2.104 54523 -> 202.95.61.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:05.533895 0.142727 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:06.525826 0.055697 udp 10.0.2.104 54523 <-> 81.190.173.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:07.527104 0.072826 udp 10.0.2.104 54523 <-> 213.66.213.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:08.528544 0.292928 udp 10.0.2.104 54523 <-> 87.16.14.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:09.530233 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:10.531302 0.221028 udp 10.0.2.104 54523 <-> 125.62.101.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:11.532559 0.144650 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:12.534518 0.159655 udp 10.0.2.104 54523 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:12.854938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:00:13.525860 0.056008 udp 10.0.2.104 54523 <-> 193.238.38.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:14.526834 0.000000 udp 10.0.2.104 54523 -> 91.65.196.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:15.528662 0.095169 udp 10.0.2.104 54523 <-> 82.249.156.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:16.530352 0.000000 udp 10.0.2.104 54523 -> 84.118.201.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:17.531087 0.062884 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:18.532838 2.109776 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:19.523946 0.119792 udp 10.0.2.104 54523 <-> 72.218.201.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:21.527551 0.166244 udp 10.0.2.104 54523 <-> 70.112.106.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:22.528537 0.061360 udp 10.0.2.104 54523 <-> 80.72.53.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:23.530200 0.146603 udp 10.0.2.104 54523 <-> 2.180.77.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:24.531843 0.015588 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:25.533200 0.202079 udp 10.0.2.104 54523 <-> 71.95.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:26.524363 0.000000 udp 10.0.2.104 54523 -> 117.217.41.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:27.525588 0.000000 udp 10.0.2.104 54523 -> 62.83.219.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:28.526975 0.164538 udp 10.0.2.104 54523 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:29.528999 0.063654 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:30.530434 0.015858 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:31.531206 0.000000 udp 10.0.2.104 54523 -> 79.6.214.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:32.532895 0.348983 udp 10.0.2.104 54523 <-> 177.22.237.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:33.524056 0.044642 udp 10.0.2.104 54523 <-> 193.150.231.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:34.526138 0.200577 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:35.526996 0.150720 udp 10.0.2.104 54523 <-> 71.82.74.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:36.528426 0.276255 udp 10.0.2.104 54523 <-> 177.143.165.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:37.189831 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:00:37.530002 0.156622 udp 10.0.2.104 54523 <-> 96.28.219.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:38.531892 0.394335 udp 10.0.2.104 54523 <-> 111.250.238.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:39.533225 4.997248 udp 10.0.2.104 54523 -> 69.141.16.214 16464 INT 0 3 174 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:40.524749 3.385998 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:41.526276 0.203113 udp 10.0.2.104 54523 <-> 190.75.98.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:45.532008 0.208830 udp 10.0.2.104 54523 <-> 98.230.212.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:46.532770 0.129683 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:47.524298 0.268198 udp 10.0.2.104 54523 <-> 79.52.155.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:48.525640 0.138579 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:49.527319 0.363348 udp 10.0.2.104 54523 <-> 14.99.207.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:50.528713 0.086304 udp 10.0.2.104 54523 <-> 78.177.216.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:51.530634 0.529362 udp 10.0.2.104 54523 <-> 117.201.113.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:52.531742 0.227266 udp 10.0.2.104 54523 <-> 82.57.66.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:53.533253 0.282277 udp 10.0.2.104 54523 <-> 64.148.59.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:54.524548 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:00:55.526352 0.407276 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:56.527268 0.032666 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:57.528909 0.071544 udp 10.0.2.104 54523 <-> 85.84.89.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:58.530107 0.167152 udp 10.0.2.104 54523 <-> 66.69.203.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:00:59.531462 0.314836 udp 10.0.2.104 54523 <-> 14.99.137.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:00.533285 0.005278 udp 10.0.2.104 54523 <-> 92.240.171.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:01.524327 0.046917 udp 10.0.2.104 54523 <-> 212.67.155.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:02.526353 0.321505 udp 10.0.2.104 54523 <-> 60.36.54.83 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:03.527213 0.000000 udp 10.0.2.104 54523 -> 88.163.39.243 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:04.529193 0.145672 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:05.530067 0.048977 udp 10.0.2.104 54523 <-> 95.77.177.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:06.532086 0.000000 udp 10.0.2.104 54523 -> 85.224.201.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:07.533326 0.377985 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:08.525163 0.139560 udp 10.0.2.104 54523 <-> 24.0.79.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:09.526344 0.177747 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:10.527762 1.137887 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:13.531880 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:13.531946 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:01:14.533465 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:15.524772 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:16.525944 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:17.527413 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:18.529113 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:19.530905 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:20.531888 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:21.533313 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:22.524513 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:23.526056 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:24.186931 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:01:24.527549 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:25.528906 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:26.530541 3.995479 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:27.531829 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:28.533517 1.217467 udp 10.0.2.104 54523 <-> 64.147.42.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:29.524705 0.212412 udp 10.0.2.104 54523 <-> 72.42.160.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:31.528151 0.000000 udp 10.0.2.104 54523 -> 115.241.218.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:32.528970 0.167324 udp 10.0.2.104 54523 <-> 216.168.81.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:33.530577 3.996137 udp 10.0.2.104 54523 <-> 50.27.216.208 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:34.531889 0.389777 udp 10.0.2.104 54523 <-> 58.11.136.43 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:35.533487 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:36.524894 0.000000 udp 10.0.2.104 54523 -> 75.192.243.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:38.527634 0.000000 udp 10.0.2.104 54523 -> 145.236.188.183 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:39.529285 0.317694 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:39.866714 0.000000 udp 10.0.2.104 54523 <- 50.27.216.208 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:40.530592 0.332449 udp 10.0.2.104 54523 <-> 219.69.30.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:41.532180 0.311577 udp 10.0.2.104 54523 <-> 117.207.63.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:42.534166 0.000097 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:42.534263 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:01:43.524909 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:44.526981 0.223067 udp 10.0.2.104 54523 <-> 173.196.58.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:01:45.528040 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:46.529608 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:47.531043 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:48.532674 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:49.533389 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:51.526258 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:52.528471 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:53.529111 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:54.531140 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:55.532066 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:56.533409 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:57.525448 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:58.526904 0.000044 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:01:58.526948 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:01:59.527756 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:00.529724 0.217459 udp 10.0.2.104 54523 <-> 173.196.58.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:02:01.530840 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:02.532264 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:03.533783 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:04.524902 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:05.526685 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:06.528432 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:07.529989 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:08.531225 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:09.532807 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:10.533857 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:11.184923 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:02:12.526934 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:13.528410 0.000070 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:13.528480 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:02:14.529747 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:15.531199 3.996010 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:16.532703 0.281788 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:02:17.533755 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:18.525374 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:20.528620 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:21.529763 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:23.532721 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:24.534046 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:25.525216 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:26.526923 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:27.528259 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:28.529984 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:29.530927 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:30.532521 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:30.532587 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:02:31.533923 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:32.525434 0.287308 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:02:33.526881 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:34.528830 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:35.529825 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:36.530952 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:37.532375 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:38.533781 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:40.527337 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:41.528601 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:42.529855 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:43.531018 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:43.531063 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:02:44.533000 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:45.534546 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:46.525584 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:47.526909 0.317209 udp 10.0.2.104 54523 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:02:48.528206 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:49.529737 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:50.531585 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:51.533177 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:52.524251 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:53.525924 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:54.526911 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:55.528258 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:56.530225 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:57.531733 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:58.192798 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:02:58.533135 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:02:59.524575 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:00.525398 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:01.527729 0.000087 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:01.527816 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:03:02.528382 3.995786 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:03.529724 0.281481 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:03:04.531669 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:05.533378 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:07.525498 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:08.527330 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:09.528912 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:11.531886 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:12.532916 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:13.524261 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:14.525784 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:15.527610 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:16.528807 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:16.528858 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:03:17.530380 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:18.531983 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:19.533528 0.339270 udp 10.0.2.104 54523 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:03:20.524944 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:21.525626 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:22.527866 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:23.528853 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:24.530611 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:25.531412 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:26.532907 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:27.524288 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:29.527260 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:30.529225 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:31.530369 0.000127 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:31.530496 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:03:32.531922 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:33.533319 4.996768 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:34.524596 0.281090 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:03:35.525901 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:36.527272 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:37.529052 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:39.532058 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:40.533169 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:41.524454 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:42.525806 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:43.527927 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:44.529036 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:45.189966 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:03:45.530832 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:47.533463 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:47.533526 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:03:48.524635 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:49.526157 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:50.527943 0.279815 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:03:51.529493 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:52.530507 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:53.532197 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:54.533413 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:55.524927 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:56.526482 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:57.527362 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:03:58.528949 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:00.532550 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:01.533581 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:02.524558 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:03.526596 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:04.527744 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:04.527805 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:05.528911 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:06.530714 0.331285 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:04:07.532020 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:08.533390 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:09.525178 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:10.526479 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:11.527887 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:12.529310 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:13.530552 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:14.532091 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:15.533617 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:16.525272 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:17.526747 0.000119 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:17.526866 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:18.527933 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:19.529196 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:20.530605 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:22.533315 0.283509 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:04:23.525265 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:24.526568 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:25.528480 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:26.529383 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:27.530779 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:28.531939 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:29.533415 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:30.525064 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:31.526962 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:32.187803 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:04:32.528180 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:33.529137 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:34.531138 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:34.531231 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:35.532535 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:37.525410 0.327482 udp 10.0.2.104 54523 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:04:38.526610 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:39.528382 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:40.529963 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:41.531093 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:42.532406 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:43.534230 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:44.525301 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:45.526720 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:46.528320 0.000039 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:46.528359 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:47.529446 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:48.531074 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:49.532442 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:51.525333 0.000000 udp 10.0.2.104 54523 -> 187.56.212.106 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:52.527038 0.277523 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:04:53.528498 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:54.529914 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:55.531004 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:56.532692 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:57.533688 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:58.525795 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:04:59.526679 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:00.528289 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:02.531040 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:03.532584 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:04.534429 0.000065 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:04.534494 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:05:05.525606 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:06.526963 0.277607 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:07.528351 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:08.530155 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:09.531435 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:10.532353 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:11.534065 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:12.525551 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:13.527110 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:14.528642 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:15.530197 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:16.531080 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:17.532946 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:18.534546 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:19.184743 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:05:19.525714 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:20.526982 0.000000 udp 10.0.2.104 54523 -> 187.56.212.106 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:21.528715 0.277985 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:23.531413 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:24.532811 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:25.523963 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:25.524024 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:05:26.525602 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:27.526993 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:28.528559 0.075128 udp 10.0.2.104 54523 <-> 80.80.40.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:29.529800 0.159872 udp 10.0.2.104 54523 <-> 67.177.97.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:30.531425 0.157655 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:31.532550 0.214831 udp 10.0.2.104 54523 <-> 174.45.179.206 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:32.524331 0.151391 udp 10.0.2.104 54523 <-> 24.158.131.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:33.525543 0.135533 udp 10.0.2.104 54523 <-> 2.195.10.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:34.527374 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:35.528273 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:36.530260 0.040378 udp 10.0.2.104 54523 <-> 79.118.190.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:37.531811 0.000000 udp 10.0.2.104 54523 -> 86.123.54.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:38.532748 0.337844 udp 10.0.2.104 54523 <-> 109.55.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:39.524014 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:40.525862 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:41.527313 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:42.528989 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:43.530334 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:44.531729 0.059955 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:45.533301 0.295245 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:46.524331 0.205190 udp 10.0.2.104 54523 <-> 109.55.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:47.525615 0.116177 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:48.527443 0.277655 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:49.529193 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:50.530405 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:51.531856 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:52.533044 0.136785 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:53.524856 0.058839 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:54.525606 0.324719 udp 10.0.2.104 54523 <-> 109.55.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:55.527389 0.000000 udp 10.0.2.104 54523 -> 5.13.132.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:56.528882 1.301070 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:57.529912 0.050443 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:05:58.531871 0.000000 udp 10.0.2.104 54523 -> 77.70.120.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:05:59.533146 4.997339 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:00.524825 0.059811 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:01.526369 0.000000 udp 10.0.2.104 54523 -> 177.227.173.10 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:02.527286 4.997559 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:03.528812 0.125733 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:05.531991 0.049478 udp 10.0.2.104 54523 <-> 5.13.132.4 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:06.192482 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:06:06.533547 0.246462 udp 10.0.2.104 54523 <-> 109.55.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:07.644744 3.005513 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:09.527165 0.042224 udp 10.0.2.104 54523 <-> 213.231.137.6 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:11.530645 0.000000 udp 10.0.2.104 54523 -> 50.80.122.6 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:12.532182 1.049477 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 8 5456 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:14.524816 0.000000 udp 10.0.2.104 54523 -> 86.123.54.53 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:15.525965 1.154911 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:16.860006 3.002690 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:06:17.528882 1.254562 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:19.531776 0.047227 udp 10.0.2.104 54523 <-> 79.118.190.28 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:20.533177 0.296815 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:21.524685 0.000000 udp 10.0.2.104 54523 -> 189.106.108.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:22.526207 0.049835 udp 10.0.2.104 54523 <-> 5.13.132.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:23.527800 0.030810 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:23.887816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:06:24.529479 1.180600 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:25.530341 0.191092 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:26.532174 0.123853 udp 10.0.2.104 54523 <-> 79.126.189.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:27.533141 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:28.524552 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:29.526517 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:30.527590 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:31.529525 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:31.889870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:06:32.530614 0.185355 udp 10.0.2.104 54523 <-> 76.92.155.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:33.532107 0.141565 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:34.533148 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:35.525171 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:36.526071 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:37.528089 0.000116 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:37.528205 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:06:38.528976 0.162075 udp 10.0.2.104 54523 <-> 24.182.105.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:39.530290 0.000000 udp 10.0.2.104 54523 -> 177.224.174.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:40.532003 0.389349 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:41.533579 0.141444 udp 10.0.2.104 54523 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:42.525073 0.380384 udp 10.0.2.104 54523 <-> 101.111.149.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:43.526173 0.156609 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:44.528064 0.053933 udp 10.0.2.104 54523 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:45.528970 0.207032 udp 10.0.2.104 54523 <-> 67.248.200.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:46.530869 0.125116 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:47.532189 4.997335 udp 10.0.2.104 54523 -> 61.227.54.62 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:47.892309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:06:48.533523 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:49.524902 4.005833 udp 10.0.2.104 54523 -> 189.68.134.233 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:50.235923 0.011799 udp 10.0.2.104 54565 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 06:06:50.247981 0.000000 udp 10.0.2.104 54566 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:50.526262 4.215096 udp 10.0.2.104 54523 <-> 186.92.139.114 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:51.528302 0.000000 udp 10.0.2.104 54523 -> 190.57.242.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:53.190474 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:06:55.533290 3.035751 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:56.525532 0.043569 udp 10.0.2.104 54523 <-> 5.12.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:06:57.526863 0.000000 udp 10.0.2.104 54523 -> 193.106.25.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:06:59.529610 4.071122 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:00.531024 0.000000 udp 10.0.2.104 54523 -> 190.57.242.34 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:01.532207 0.152787 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:02.533979 0.033966 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:04.526912 0.000000 udp 10.0.2.104 54523 -> 193.106.25.43 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:05.527917 0.043125 udp 10.0.2.104 54523 <-> 5.12.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:06.529168 0.000000 udp 10.0.2.104 54523 -> 75.192.243.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:07.530657 0.062240 udp 10.0.2.104 54523 <-> 79.116.225.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:08.532620 0.158287 udp 10.0.2.104 54523 <-> 67.248.200.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:09.533774 0.160672 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:10.525552 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:11.526823 1.819067 udp 10.0.2.104 54523 <-> 46.35.110.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:12.528004 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:13.529248 2.003476 udp 10.0.2.104 54523 <-> 186.93.166.249 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:14.530881 0.317743 udp 10.0.2.104 54523 <-> 201.208.192.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:16.534236 0.845464 udp 10.0.2.104 54523 <-> 181.16.7.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:17.525455 0.163065 udp 10.0.2.104 54523 <-> 174.64.185.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:18.526967 2.032160 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:19.528616 0.230245 udp 10.0.2.104 54523 <-> 109.55.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:19.898850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:07:21.531188 0.170230 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:22.532656 0.000000 udp 10.0.2.104 54523 -> 190.141.220.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:23.533790 0.262284 udp 10.0.2.104 54523 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:24.525373 4.162735 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:25.526711 0.212296 udp 10.0.2.104 54523 <-> 187.247.181.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:26.527900 0.000000 udp 10.0.2.104 54523 -> 201.241.29.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:27.529431 0.157388 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:29.532694 0.175682 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:30.533629 2.153564 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:33.528113 0.171141 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:34.530011 0.068082 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:35.531348 0.318825 udp 10.0.2.104 54523 <-> 218.47.116.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:36.532399 0.056648 udp 10.0.2.104 54523 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:37.534065 0.000000 udp 10.0.2.104 54523 -> 90.30.99.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:38.525714 0.061441 udp 10.0.2.104 54523 <-> 84.55.13.19 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:39.526935 0.088968 udp 10.0.2.104 54523 <-> 95.86.74.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:40.187982 0.000148 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:07:40.528338 0.000000 udp 10.0.2.104 54523 -> 190.124.133.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:41.529524 0.539596 udp 10.0.2.104 54523 <-> 189.79.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:42.531115 0.000000 udp 10.0.2.104 54523 -> 95.7.85.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:43.532533 0.000000 udp 10.0.2.104 54523 -> 95.240.176.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:44.533969 0.000000 udp 10.0.2.104 54523 -> 97.94.101.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:45.525566 0.000000 udp 10.0.2.104 54523 -> 174.97.209.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:46.527094 0.191547 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:47.528052 0.000000 udp 10.0.2.104 54523 -> 71.77.141.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:48.530112 0.015551 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:49.531523 0.000000 udp 10.0.2.104 54523 -> 89.132.14.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:50.532834 4.289028 udp 10.0.2.104 54523 <-> 190.193.56.65 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:52.525931 0.000000 udp 10.0.2.104 54523 -> 95.7.85.117 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:53.526936 0.000000 udp 10.0.2.104 54523 -> 95.240.176.15 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:55.530372 0.123728 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:56.531148 0.348462 udp 10.0.2.104 54523 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:57.552481 0.000000 udp 10.0.2.104 54523 -> 79.11.198.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:07:58.543917 0.171529 udp 10.0.2.104 54523 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:07:59.545521 0.043123 udp 10.0.2.104 54523 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:00.547232 0.183970 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:01.548364 0.000000 udp 10.0.2.104 54523 -> 95.7.85.117 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:02.549983 0.039178 udp 10.0.2.104 54523 <-> 31.16.142.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:03.551239 0.000000 udp 10.0.2.104 54523 -> 95.240.176.15 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:04.552827 0.160995 udp 10.0.2.104 54523 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:05.544534 0.311940 udp 10.0.2.104 54523 <-> 186.11.18.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:06.546117 0.142036 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:07.547562 0.015572 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:08.548467 0.000000 udp 10.0.2.104 54523 -> 97.94.101.139 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:09.550428 0.312838 udp 10.0.2.104 54523 <-> 60.237.180.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:10.551895 1.992753 udp 10.0.2.104 54523 -> 79.11.198.65 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:11.553082 0.178343 udp 10.0.2.104 54523 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:13.545913 0.407421 udp 10.0.2.104 54523 <-> 76.202.180.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:14.547047 0.042816 udp 10.0.2.104 54523 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:15.549014 0.203182 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:16.550367 0.000000 udp 10.0.2.104 54523 -> 60.237.180.52 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:17.551342 0.153851 udp 10.0.2.104 54523 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:18.553333 0.142022 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:19.544355 0.033634 udp 10.0.2.104 54523 <-> 89.253.159.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:20.545569 0.000000 udp 10.0.2.104 54523 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:21.547650 0.000000 udp 10.0.2.104 54523 -> 79.126.189.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:22.548557 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:23.550550 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:24.551308 0.392128 udp 10.0.2.104 54523 <-> 176.237.169.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:25.553036 0.104203 udp 10.0.2.104 54523 <-> 84.122.212.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:26.544373 0.039807 udp 10.0.2.104 54523 <-> 89.71.3.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:27.205154 0.000154 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:08:27.545611 0.193603 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:28.547046 0.224218 udp 10.0.2.104 54523 <-> 177.224.174.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:29.548778 0.127408 udp 10.0.2.104 54523 <-> 24.224.154.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:30.550125 0.173520 udp 10.0.2.104 54523 <-> 72.178.159.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:31.551996 0.607213 udp 10.0.2.104 54523 <-> 190.72.55.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:32.553132 0.018233 udp 10.0.2.104 54523 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:33.545027 0.211410 udp 10.0.2.104 54523 <-> 187.247.181.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:34.545963 0.068403 udp 10.0.2.104 54523 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:35.547277 0.000000 udp 10.0.2.104 54523 -> 86.149.184.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:36.549024 1.320407 udp 10.0.2.104 54523 <-> 103.251.81.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:37.550137 0.316001 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:38.551620 0.000000 udp 10.0.2.104 54523 -> 142.166.235.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:39.553164 0.081988 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:40.544797 0.208985 udp 10.0.2.104 54523 <-> 50.174.107.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:41.546329 0.211890 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:42.547339 0.077162 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:43.549208 0.709959 udp 10.0.2.104 54523 <-> 116.203.128.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:44.550061 0.173962 udp 10.0.2.104 54523 <-> 27.106.39.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:45.551897 1.148803 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:47.545022 0.026003 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:48.546264 0.161533 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:49.547483 0.160808 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:50.549189 0.200837 udp 10.0.2.104 54523 <-> 71.197.165.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:51.550301 0.000000 udp 10.0.2.104 54523 -> 24.101.248.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:52.552153 0.069532 udp 10.0.2.104 54523 <-> 82.236.101.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:53.553451 0.065232 udp 10.0.2.104 54523 <-> 94.19.17.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:54.544751 1.759036 udp 10.0.2.104 54523 <-> 186.188.24.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:55.546422 0.000000 udp 10.0.2.104 54523 -> 84.246.5.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:56.547413 0.063627 udp 10.0.2.104 54523 <-> 79.124.45.16 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:57.549364 0.143608 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:08:58.550712 0.000000 udp 10.0.2.104 54523 -> 94.50.41.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:08:59.552312 0.156452 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:00.553538 0.000000 udp 10.0.2.104 54523 -> 96.231.39.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:01.545125 0.026607 udp 10.0.2.104 54523 <-> 46.151.234.22 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:02.545913 0.142490 udp 10.0.2.104 54523 <-> 24.89.222.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:03.547363 0.293306 udp 10.0.2.104 54523 <-> 105.225.179.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:04.549444 0.139884 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:05.550268 0.156029 udp 10.0.2.104 54523 <-> 24.118.222.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:06.551894 0.092709 udp 10.0.2.104 54523 <-> 89.176.64.207 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:07.573337 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:08.565179 0.000000 udp 10.0.2.104 54523 -> 69.127.65.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:09.566435 0.144320 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:10.568029 0.245296 udp 10.0.2.104 54523 <-> 68.235.158.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:11.569399 0.054328 udp 10.0.2.104 54523 <-> 94.78.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:12.571013 0.065448 udp 10.0.2.104 54523 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:13.571784 0.425573 udp 10.0.2.104 54523 <-> 112.163.143.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:14.223241 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:09:14.573433 0.369907 udp 10.0.2.104 54523 <-> 36.224.152.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:15.564789 0.059742 udp 10.0.2.104 54523 <-> 79.116.213.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:16.566244 0.156446 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:17.567949 0.000000 udp 10.0.2.104 54523 -> 115.240.7.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:18.569196 0.000000 udp 10.0.2.104 54523 -> 190.97.63.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:19.571056 0.157832 udp 10.0.2.104 54523 <-> 184.160.61.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:20.572118 0.026904 udp 10.0.2.104 54523 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:21.573290 2.127605 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:24.568117 0.048601 udp 10.0.2.104 54523 <-> 79.113.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:25.569033 0.413523 udp 10.0.2.104 54523 <-> 110.169.234.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:26.570776 0.000000 udp 10.0.2.104 54523 -> 14.99.56.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:27.572546 0.161755 udp 10.0.2.104 54523 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:28.573522 0.283559 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:29.564825 0.451767 udp 10.0.2.104 54523 <-> 61.223.170.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:30.566757 1.144146 udp 10.0.2.104 54523 <-> 24.201.226.137 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:32.569755 0.000000 udp 10.0.2.104 54523 -> 209.140.74.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:33.369253 0.000000 udp 10.0.2.104 54523 <- 14.99.56.113 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:33.570818 0.039512 udp 10.0.2.104 54523 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:34.571969 0.363214 udp 10.0.2.104 54523 <-> 36.229.51.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:35.573866 0.274515 udp 10.0.2.104 54523 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:36.565141 0.143687 udp 10.0.2.104 54523 <-> 192.226.151.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:37.566445 0.314765 udp 10.0.2.104 54523 <-> 121.83.108.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:38.568413 0.021096 udp 10.0.2.104 54523 <-> 178.48.83.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:39.569441 0.381844 udp 10.0.2.104 54523 <-> 189.13.77.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:40.570656 0.363048 udp 10.0.2.104 54523 <-> 218.173.235.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:41.572733 0.162250 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:42.574120 0.078953 udp 10.0.2.104 54523 <-> 176.194.213.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:43.565182 0.336223 udp 10.0.2.104 54523 <-> 2.184.233.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:45.568203 1.071564 udp 10.0.2.104 54523 <-> 84.232.82.149 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:47.571153 0.578022 udp 10.0.2.104 54523 <-> 116.75.22.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:48.572126 3.098781 udp 10.0.2.104 54523 <-> 178.137.200.129 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:49.574215 0.991001 udp 10.0.2.104 54523 <-> 146.83.193.130 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:52.567929 0.161574 udp 10.0.2.104 54523 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:53.569816 4.173432 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:54.570927 4.997579 udp 10.0.2.104 54523 <-> 212.67.155.236 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:55.572466 0.000000 udp 10.0.2.104 54523 -> 68.114.151.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:56.574079 0.000000 udp 10.0.2.104 54523 -> 86.188.201.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:09:58.566513 4.046166 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 7 4566 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:09:59.615076 0.000000 udp 10.0.2.104 54523 <- 212.67.155.236 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:00.569471 0.326542 udp 10.0.2.104 54523 <-> 175.204.146.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:01.230862 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:10:01.571266 0.096554 udp 10.0.2.104 54523 <-> 85.86.73.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:03.574058 0.225194 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:04.565749 0.000000 udp 10.0.2.104 54523 -> 151.75.170.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:05.567162 0.250666 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:06.568286 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:07.569817 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:08.571699 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:09.572487 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:11.565479 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:12.567173 0.000042 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:12.567215 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:10:13.568235 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:14.570113 0.326921 udp 10.0.2.104 54523 <-> 175.204.146.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:15.571048 0.000000 udp 10.0.2.104 54523 -> 77.70.120.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:16.573017 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:17.574106 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:18.565568 0.000090 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:18.565658 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:10:19.567279 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:20.568146 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:21.569631 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:22.571604 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:23.572803 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:24.573904 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:25.565713 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:26.567201 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:28.570168 0.179723 udp 10.0.2.104 54523 <-> 77.236.190.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:29.571340 0.176361 udp 10.0.2.104 54523 <-> 106.51.24.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:30.572719 0.272966 udp 10.0.2.104 54523 <-> 2.71.156.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:31.564610 1.962983 udp 10.0.2.104 54523 <-> 190.49.221.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:32.565410 1.417619 udp 10.0.2.104 54523 <-> 186.92.193.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:33.567621 0.000000 udp 10.0.2.104 54523 -> 77.52.55.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:34.568698 0.222636 udp 10.0.2.104 54523 <-> 186.92.139.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:35.569836 0.214439 udp 10.0.2.104 54523 <-> 76.87.85.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:36.571445 0.000000 udp 10.0.2.104 54523 -> 193.106.25.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:37.572916 0.000000 udp 10.0.2.104 54523 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:38.564074 0.311716 udp 10.0.2.104 54523 <-> 114.162.153.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:39.565814 0.165582 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:40.567630 0.162627 udp 10.0.2.104 54523 <-> 108.183.69.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:41.568561 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:42.569933 0.074562 udp 10.0.2.104 54523 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:43.571339 0.000000 udp 10.0.2.104 54523 -> 14.198.30.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:44.572799 0.048062 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:45.564059 0.161374 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:46.565594 0.000000 udp 10.0.2.104 54523 -> 24.164.171.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:47.567028 0.325949 udp 10.0.2.104 54523 <-> 62.77.248.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:48.228348 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:10:48.568899 0.814787 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:49.569842 1.044202 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:51.572987 0.154519 udp 10.0.2.104 54523 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:52.564353 0.048031 udp 10.0.2.104 54523 <-> 78.157.78.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:53.565897 0.198133 udp 10.0.2.104 54523 <-> 72.11.176.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:54.567325 0.176180 udp 10.0.2.104 54523 <-> 67.248.200.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:55.568852 0.000000 udp 10.0.2.104 54523 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:10:56.569850 0.145223 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:57.571472 0.122062 udp 10.0.2.104 54523 <-> 80.180.82.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:58.572729 0.211404 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:10:59.564396 0.000000 udp 10.0.2.104 54523 -> 88.129.222.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:00.566057 0.152639 udp 10.0.2.104 54523 <-> 68.188.238.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:01.567678 0.152986 udp 10.0.2.104 54523 <-> 192.222.24.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:02.568989 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:03.570093 0.164855 udp 10.0.2.104 54523 <-> 71.86.94.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:04.571568 4.128275 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:05.572996 0.000000 udp 10.0.2.104 54523 -> 98.203.127.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:06.564964 0.034092 udp 10.0.2.104 54523 <-> 95.76.68.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:07.565706 0.137057 udp 10.0.2.104 54523 <-> 74.64.73.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:09.568799 0.071589 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:10.570316 1.851968 udp 10.0.2.104 54523 <-> 27.5.185.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:11.571908 0.375750 udp 10.0.2.104 54523 <-> 177.104.237.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:12.573169 0.057454 udp 10.0.2.104 54523 <-> 82.211.182.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:13.564754 0.028850 udp 10.0.2.104 54523 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:14.566131 0.461849 udp 10.0.2.104 54523 <-> 24.246.239.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:15.567356 0.000000 udp 10.0.2.104 54523 -> 200.84.42.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:16.568921 0.132566 udp 10.0.2.104 54523 <-> 87.13.151.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:17.570058 1.278078 udp 10.0.2.104 54523 <-> 101.63.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:18.571891 0.221944 udp 10.0.2.104 54523 <-> 190.72.55.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:19.573422 0.617987 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:20.564587 1.028302 udp 10.0.2.104 54523 <-> 181.177.5.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:21.566375 0.147602 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:22.567310 0.070835 udp 10.0.2.104 54523 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:23.569389 0.170857 udp 10.0.2.104 54523 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:24.570226 0.150547 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:25.572324 0.304450 udp 10.0.2.104 54523 <-> 122.209.168.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:26.573359 0.145279 udp 10.0.2.104 54523 <-> 216.20.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:27.564707 0.137616 udp 10.0.2.104 54523 <-> 67.81.98.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:28.566458 0.332509 udp 10.0.2.104 54523 <-> 190.72.55.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:29.567417 0.337856 udp 10.0.2.104 54523 <-> 186.11.18.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:30.569370 2.072794 udp 10.0.2.104 54523 <-> 217.22.82.61 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:31.570751 0.000000 udp 10.0.2.104 54523 -> 50.11.51.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:33.573504 0.000000 udp 10.0.2.104 54523 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:34.565079 0.050570 udp 10.0.2.104 54523 <-> 89.137.77.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:35.225606 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:11:35.566640 0.000000 udp 10.0.2.104 54523 -> 178.77.18.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:36.567644 1.001463 udp 10.0.2.104 54523 <-> 93.102.3.116 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:38.570511 0.313323 udp 10.0.2.104 54523 <-> 186.11.18.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:39.571762 0.056692 udp 10.0.2.104 54523 <-> 31.176.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:40.573129 0.355144 udp 10.0.2.104 54523 <-> 190.195.52.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:41.565286 0.152051 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:42.566495 0.000000 udp 10.0.2.104 54523 -> 190.171.198.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:43.568165 0.434599 udp 10.0.2.104 54523 <-> 27.105.0.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:44.569047 0.053502 udp 10.0.2.104 54523 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:45.570589 0.026569 udp 10.0.2.104 54523 <-> 93.114.171.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:46.572030 0.120516 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:47.573388 0.071769 udp 10.0.2.104 54523 <-> 151.64.32.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:48.564654 0.033751 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:49.566159 0.048887 udp 10.0.2.104 54523 <-> 86.122.216.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:50.568084 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:51.569773 0.000000 udp 10.0.2.104 54523 -> 24.180.138.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:52.570896 0.144570 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:53.571973 0.173234 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:54.573492 0.049475 udp 10.0.2.104 54523 <-> 5.13.132.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:55.564972 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:56.566135 0.000000 udp 10.0.2.104 54523 -> 152.66.219.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:11:57.568115 0.031687 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:58.569446 0.093243 udp 10.0.2.104 54523 <-> 77.40.71.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:11:59.570900 0.081730 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:00.572506 0.524328 udp 10.0.2.104 54523 <-> 190.38.124.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:01.573887 0.060078 udp 10.0.2.104 54523 <-> 89.32.157.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:02.565131 0.000000 udp 10.0.2.104 54523 -> 114.27.218.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:03.566963 0.171978 udp 10.0.2.104 54523 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:04.567677 0.412567 udp 10.0.2.104 54523 <-> 118.165.158.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:05.569447 0.074312 udp 10.0.2.104 54523 <-> 82.247.203.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:06.570731 0.169731 udp 10.0.2.104 54523 <-> 69.180.126.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:07.572721 0.000000 udp 10.0.2.104 54523 -> 209.165.242.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:08.573410 0.238298 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:09.564966 0.823673 udp 10.0.2.104 54523 <-> 111.125.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:10.566796 0.435049 udp 10.0.2.104 54523 <-> 211.125.248.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:11.568320 0.036972 udp 10.0.2.104 54523 <-> 87.207.149.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:13.570587 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:14.572458 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:15.573891 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:16.565176 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:17.567008 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:18.568494 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:19.569207 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:20.571000 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:21.572800 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:22.223473 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:12:22.573539 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:23.565133 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:24.567151 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:25.567870 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:26.569732 0.330872 udp 10.0.2.104 54523 <-> 82.57.89.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:27.570960 0.000000 udp 10.0.2.104 54523 -> 216.118.134.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:28.572343 0.228654 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:29.573767 0.230769 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:30.565549 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:31.566501 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:32.568251 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:33.569860 0.000131 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:33.569991 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:12:35.572676 0.031733 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:36.574213 0.757913 udp 10.0.2.104 54523 <-> 186.11.25.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:37.565738 0.166012 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:38.566645 0.000000 udp 10.0.2.104 54523 -> 88.231.30.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:39.568345 0.051152 udp 10.0.2.104 54523 <-> 87.207.149.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:40.569691 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:41.571014 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:42.572969 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:43.574371 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:43.574451 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:12:44.565748 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:45.567063 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:46.568268 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:47.569819 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:48.571262 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:49.572860 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:51.565507 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:52.567299 0.318965 udp 10.0.2.104 54523 <-> 60.238.176.138 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:53.568181 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:54.570335 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:55.571189 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:56.573032 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:12:57.573858 0.424745 udp 10.0.2.104 54523 <-> 211.125.248.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:58.565550 0.410639 udp 10.0.2.104 54523 <-> 116.202.79.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:12:59.567105 0.000000 udp 10.0.2.104 54523 -> 81.179.41.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:00.568410 0.146835 udp 10.0.2.104 54523 <-> 71.238.117.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:01.570218 1.233316 udp 10.0.2.104 54523 <-> 179.236.58.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:02.571462 1.001366 udp 10.0.2.104 54523 <-> 157.14.178.157 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:04.564258 0.000000 udp 10.0.2.104 54523 -> 190.206.94.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:05.565398 0.000000 udp 10.0.2.104 54523 -> 125.230.96.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:06.567389 0.141228 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:07.568828 0.350041 udp 10.0.2.104 54523 <-> 118.130.233.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:08.570159 0.077935 udp 10.0.2.104 54523 <-> 151.15.141.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:09.230885 0.000143 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:13:09.571271 0.297742 udp 10.0.2.104 54523 <-> 186.89.252.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:10.573204 0.156601 udp 10.0.2.104 54523 <-> 69.143.197.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:11.564505 0.169578 udp 10.0.2.104 54523 <-> 183.83.74.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:12.565478 0.000000 udp 10.0.2.104 54523 -> 2.134.181.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:13.567375 2.049294 udp 10.0.2.104 54523 <-> 83.250.76.130 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:14.568539 0.126274 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:16.571828 0.157573 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:17.572902 0.334183 udp 10.0.2.104 54523 <-> 2.134.181.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:18.564594 0.163083 udp 10.0.2.104 54523 <-> 98.238.78.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:19.566269 0.052940 udp 10.0.2.104 54523 <-> 178.117.121.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:20.567458 0.041622 udp 10.0.2.104 54523 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:21.569001 0.000000 udp 10.0.2.104 54523 -> 65.188.38.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:22.570355 0.000000 udp 10.0.2.104 54523 -> 82.130.134.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:23.571714 0.000000 udp 10.0.2.104 54523 -> 1.168.39.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:23.946545 3.000326 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:13:24.572997 0.043951 udp 10.0.2.104 54523 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:25.564466 0.166595 udp 10.0.2.104 54523 <-> 76.217.58.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:26.565533 0.230354 udp 10.0.2.104 54523 <-> 71.80.148.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:27.567374 0.302030 udp 10.0.2.104 54523 <-> 180.199.67.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:28.568726 0.190549 udp 10.0.2.104 54523 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:29.569837 0.000000 udp 10.0.2.104 54523 -> 82.241.35.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:30.571671 1.134666 udp 10.0.2.104 54523 <-> 50.157.214.135 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:30.952242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:13:32.564180 0.154962 udp 10.0.2.104 54523 <-> 24.224.21.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:33.565588 0.327478 udp 10.0.2.104 54523 <-> 202.78.81.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:34.567710 0.212662 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:35.568582 0.207127 udp 10.0.2.104 54523 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:36.570722 0.000000 udp 10.0.2.104 54523 -> 108.183.176.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:37.571695 0.000000 udp 10.0.2.104 54523 -> 139.0.146.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:38.572873 0.194475 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:38.953375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:13:39.564458 0.176367 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:40.565836 0.046452 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:41.567282 0.000000 udp 10.0.2.104 54523 -> 172.190.24.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:42.568915 0.294418 udp 10.0.2.104 54523 <-> 190.244.206.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:43.570545 0.287262 udp 10.0.2.104 54523 <-> 98.155.248.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:44.571809 0.321277 udp 10.0.2.104 54523 <-> 117.207.56.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:45.573137 1.053362 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:47.565872 0.000000 udp 10.0.2.104 54523 -> 181.118.76.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:13:48.567859 1.065934 udp 10.0.2.104 54523 <-> 84.119.41.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:50.570140 0.134009 udp 10.0.2.104 54523 <-> 24.126.109.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:51.571578 0.155881 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:52.573237 0.053920 udp 10.0.2.104 54523 <-> 158.49.130.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:53.565022 0.156930 udp 10.0.2.104 54523 <-> 69.143.197.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:54.566122 0.342971 udp 10.0.2.104 54523 <-> 218.173.72.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:54.956963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:13:55.567971 0.041795 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:56.228534 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:13:56.568696 0.061027 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:57.570254 0.060712 udp 10.0.2.104 54523 <-> 193.41.250.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:58.571604 0.304691 udp 10.0.2.104 54523 <-> 201.214.43.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:13:59.573276 0.136638 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:01.566245 1.155404 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:03.569368 0.420609 udp 10.0.2.104 54523 <-> 187.39.132.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:04.570666 0.249304 udp 10.0.2.104 54523 <-> 117.195.68.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:05.572309 0.153624 udp 10.0.2.104 54523 <-> 69.14.90.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:06.573165 0.322070 udp 10.0.2.104 54523 <-> 95.244.151.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:07.565225 1.404738 udp 10.0.2.104 54523 <-> 69.208.5.133 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:09.567859 0.325170 udp 10.0.2.104 54523 <-> 211.105.97.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:10.568855 0.187161 udp 10.0.2.104 54523 <-> 24.210.74.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:11.570237 0.404209 udp 10.0.2.104 54523 <-> 101.1.197.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:12.572047 3.996027 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:13.573419 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:14.564793 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:15.566266 2.346558 udp 10.0.2.104 54523 <-> 101.63.192.68 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:18.570759 0.307720 udp 10.0.2.104 54523 <-> 200.207.61.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:19.571996 0.181820 udp 10.0.2.104 54523 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:20.573619 0.318098 udp 10.0.2.104 54523 <-> 201.1.80.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:21.564640 0.000000 udp 10.0.2.104 54523 -> 14.97.146.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:22.566281 0.158201 udp 10.0.2.104 54523 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:23.567556 0.144700 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:24.569332 0.000000 udp 10.0.2.104 54523 -> 109.61.91.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:25.570738 0.224993 udp 10.0.2.104 54523 <-> 189.197.164.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:26.572264 0.366508 udp 10.0.2.104 54523 <-> 218.227.129.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:26.962755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:14:27.573615 0.543626 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:28.565400 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:29.566734 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:30.567823 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:31.569017 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:32.570414 0.144876 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:33.572150 0.000000 udp 10.0.2.104 54523 -> 86.58.36.89 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:34.573332 0.000000 udp 10.0.2.104 54523 -> 218.227.129.90 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:35.564765 0.359568 udp 10.0.2.104 54523 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:36.566505 0.000000 udp 10.0.2.104 54523 -> 78.52.190.227 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:37.567991 4.157014 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:38.569348 0.000000 udp 10.0.2.104 54523 -> 190.41.35.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:39.571029 0.046982 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:40.572323 2.001137 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:43.226351 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:14:43.566630 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:44.568369 0.395320 udp 10.0.2.104 54523 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:45.569819 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:46.570678 1.121926 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:48.574037 0.000000 udp 10.0.2.104 54523 -> 201.235.247.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:49.565649 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:50.567034 0.055324 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:51.568616 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:52.569644 0.180205 udp 10.0.2.104 54523 <-> 98.177.241.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:53.571361 2.002312 udp 10.0.2.104 54523 -> 75.244.136.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:54.572914 0.186744 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:56.565410 0.153116 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:14:57.566880 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:58.567804 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:14:59.569739 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:00.570808 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:01.572713 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:02.574283 0.000107 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:02.574390 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:15:03.564977 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:04.566571 0.457873 udp 10.0.2.104 54523 <-> 178.25.104.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:05.568363 0.145728 udp 10.0.2.104 54523 <-> 115.117.83.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:06.569705 0.000000 udp 10.0.2.104 54523 -> 24.155.98.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:07.571451 0.454081 udp 10.0.2.104 54523 <-> 180.74.44.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:08.572311 0.000000 udp 10.0.2.104 54523 -> 148.204.134.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:09.573630 0.796204 udp 10.0.2.104 54523 <-> 111.249.25.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:10.565420 0.000000 udp 10.0.2.104 54523 -> 178.167.99.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:11.566520 0.000000 udp 10.0.2.104 54523 -> 142.166.77.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:12.568332 0.201248 udp 10.0.2.104 54523 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:13.569873 2.603340 udp 10.0.2.104 54523 <-> 111.92.96.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:14.570997 0.000000 udp 10.0.2.104 54523 -> 109.182.129.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:15.572833 1.277619 udp 10.0.2.104 54523 <-> 201.210.213.118 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:16.574303 0.819185 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:17.565200 0.050294 udp 10.0.2.104 54523 <-> 24.132.151.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:18.566724 0.054300 udp 10.0.2.104 54523 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:19.568428 2.144933 udp 10.0.2.104 54523 <-> 74.67.25.65 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:20.569980 0.343354 udp 10.0.2.104 54523 <-> 190.110.186.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:22.572483 0.319857 udp 10.0.2.104 54523 <-> 182.234.226.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:23.573904 0.505126 udp 10.0.2.104 54523 <-> 189.103.208.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:24.565697 0.062455 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:25.567263 0.148636 udp 10.0.2.104 54523 <-> 95.74.47.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:26.568390 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:27.570028 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:28.570969 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:29.573171 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:30.223336 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:15:30.564261 0.000000 udp 10.0.2.104 54523 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:31.565601 0.000000 udp 10.0.2.104 54523 -> 190.247.155.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:32.567045 4.997257 udp 10.0.2.104 54523 -> 62.42.109.171 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:33.568606 3.049462 udp 10.0.2.104 54523 <-> 5.13.113.229 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:34.569888 0.042029 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:35.571796 0.437981 udp 10.0.2.104 54523 <-> 118.216.142.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:38.565749 1.465935 udp 10.0.2.104 54523 <-> 14.98.99.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:39.567366 0.000000 udp 10.0.2.104 54523 -> 109.94.111.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:40.568968 1.349914 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:41.569973 0.000000 udp 10.0.2.104 54523 -> 98.203.127.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:42.571523 0.000000 udp 10.0.2.104 54523 -> 37.104.198.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:43.573161 0.335973 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:44.564353 3.004597 udp 10.0.2.104 54523 -> 79.135.107.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:45.565382 0.312105 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:46.566984 0.000000 udp 10.0.2.104 54523 -> 2.180.96.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:48.569772 0.180375 udp 10.0.2.104 54523 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:49.571574 0.000000 udp 10.0.2.104 54523 -> 79.135.107.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:50.573165 0.406123 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:51.564519 2.277716 udp 10.0.2.104 54523 <-> 62.68.106.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:52.565630 0.000000 udp 10.0.2.104 54523 -> 37.104.198.98 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:53.567395 0.278951 udp 10.0.2.104 54523 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:15:54.569156 0.000000 udp 10.0.2.104 54523 -> 61.70.234.252 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:55.569763 0.000000 udp 10.0.2.104 54523 -> 220.142.70.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:56.571765 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:57.573305 1.992197 udp 10.0.2.104 54523 -> 79.135.107.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:15:58.564357 0.048993 udp 10.0.2.104 54523 <-> 212.45.82.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:00.567061 3.434762 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:01.568550 0.000000 udp 10.0.2.104 54523 -> 61.70.234.252 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:03.571282 0.329142 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:04.573364 0.147414 udp 10.0.2.104 54523 <-> 96.22.131.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:05.564729 0.000000 udp 10.0.2.104 54523 -> 190.195.127.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:06.566311 0.099124 udp 10.0.2.104 54523 <-> 79.33.141.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:07.567328 0.036249 udp 10.0.2.104 54523 <-> 83.221.72.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:08.568623 0.000000 udp 10.0.2.104 54523 -> 123.201.88.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:09.570057 0.637270 udp 10.0.2.104 54523 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:10.571373 0.018188 udp 10.0.2.104 54523 <-> 78.45.198.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:11.573406 0.155584 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:12.564563 0.509304 udp 10.0.2.104 54523 <-> 68.122.149.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:13.566123 0.292114 udp 10.0.2.104 54523 <-> 189.46.99.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:14.567427 0.070614 udp 10.0.2.104 54523 <-> 82.249.56.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:15.569081 0.409112 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:16.570006 2.169764 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:17.231192 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:16:17.572106 0.392285 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:19.564933 3.185965 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:20.566180 0.000000 udp 10.0.2.104 54523 -> 75.244.136.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:21.567823 0.000000 udp 10.0.2.104 54523 -> 117.220.246.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:23.570562 0.082772 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:24.571729 0.135116 udp 10.0.2.104 54523 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:25.573134 0.146679 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:26.564756 0.415503 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:27.566058 0.000000 udp 10.0.2.104 54523 -> 106.206.31.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:28.567191 0.216365 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:29.568916 0.068696 udp 10.0.2.104 54523 <-> 84.125.117.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:30.570331 0.143638 udp 10.0.2.104 54523 <-> 67.103.179.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:31.572007 0.066317 udp 10.0.2.104 54523 <-> 2.105.183.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:32.573244 0.249026 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:33.564870 0.136443 udp 10.0.2.104 54523 <-> 71.225.111.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:34.566464 0.058979 udp 10.0.2.104 54523 <-> 176.223.35.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:35.567867 0.162353 udp 10.0.2.104 54523 <-> 183.82.95.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:36.569549 0.067979 udp 10.0.2.104 54523 <-> 46.35.97.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:37.570301 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:39.573025 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:40.565042 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:41.566303 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:42.567346 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:43.569254 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:44.570929 0.000103 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:44.571032 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:16:45.572109 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:46.573278 0.388071 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:47.565262 0.128510 udp 10.0.2.104 54523 <-> 83.145.147.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:48.565954 0.000000 udp 10.0.2.104 54523 -> 79.69.233.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:49.567702 4.005868 udp 10.0.2.104 54523 -> 201.223.239.153 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:50.569458 0.366409 udp 10.0.2.104 54523 <-> 1.172.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:51.570888 0.042451 udp 10.0.2.104 54523 <-> 176.10.236.188 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:52.571898 0.144000 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:54.565069 0.164489 udp 10.0.2.104 54523 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:55.566155 0.000000 udp 10.0.2.104 54523 -> 190.203.195.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:56.567529 0.000000 udp 10.0.2.104 54523 -> 24.147.226.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:57.569341 0.000000 udp 10.0.2.104 54523 -> 79.69.233.97 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:16:58.570373 4.313283 udp 10.0.2.104 54523 <-> 201.223.239.153 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:16:59.572359 0.000000 udp 10.0.2.104 54523 -> 89.123.104.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:00.573528 0.024060 udp 10.0.2.104 54523 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:01.564810 0.415890 udp 10.0.2.104 54523 <-> 121.103.202.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:03.568071 0.030344 udp 10.0.2.104 54523 <-> 212.37.176.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:04.228653 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:17:04.569591 0.000000 udp 10.0.2.104 54523 -> 24.164.171.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:05.571075 0.163837 udp 10.0.2.104 54523 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:06.572457 0.296600 udp 10.0.2.104 54523 <-> 124.122.2.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:07.573266 0.000000 udp 10.0.2.104 54523 -> 201.223.239.153 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:08.565073 0.000000 udp 10.0.2.104 54523 -> 95.95.199.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:09.566482 0.048550 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:10.567943 0.170618 udp 10.0.2.104 54523 <-> 66.169.209.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:11.569370 0.055840 udp 10.0.2.104 54523 <-> 178.174.226.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:12.571047 0.000000 udp 10.0.2.104 54523 -> 41.143.35.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:13.572581 0.255268 udp 10.0.2.104 54523 <-> 187.20.177.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:14.573715 0.314684 udp 10.0.2.104 54523 <-> 221.117.56.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:15.564892 0.075305 udp 10.0.2.104 54523 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:16.566639 0.000000 udp 10.0.2.104 54523 -> 119.154.152.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:17.568383 0.349481 udp 10.0.2.104 54523 <-> 190.173.109.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:18.569768 0.000000 udp 10.0.2.104 54523 -> 187.40.60.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:19.570847 0.046141 udp 10.0.2.104 54523 <-> 78.97.7.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:20.572368 0.333037 udp 10.0.2.104 54523 <-> 219.116.87.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:21.573407 0.113202 udp 10.0.2.104 54523 <-> 79.25.61.86 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:22.565606 0.172000 udp 10.0.2.104 54523 <-> 75.133.46.80 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:23.566862 0.000000 udp 10.0.2.104 54523 -> 1.164.169.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:24.568373 0.048143 udp 10.0.2.104 54523 <-> 85.196.245.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:25.569505 0.157889 udp 10.0.2.104 54523 <-> 124.123.225.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:26.571120 0.189515 udp 10.0.2.104 54523 <-> 24.220.225.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:27.572427 0.299719 udp 10.0.2.104 54523 <-> 59.91.88.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:28.573828 0.030008 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:29.565188 0.402450 udp 10.0.2.104 54523 <-> 121.103.202.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:30.566846 0.066801 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:31.568395 0.290575 udp 10.0.2.104 54523 <-> 190.47.200.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:32.569253 0.000000 udp 10.0.2.104 54523 -> 134.95.83.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:33.571349 0.212487 udp 10.0.2.104 54523 <-> 67.168.219.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:34.572314 0.000000 udp 10.0.2.104 54523 -> 89.155.192.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:35.574322 0.154676 udp 10.0.2.104 54523 <-> 216.4.105.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:36.564971 0.156946 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:37.566509 0.294284 udp 10.0.2.104 54523 <-> 61.192.59.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:38.568246 0.000000 udp 10.0.2.104 54523 -> 151.237.11.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:39.569920 0.092193 udp 10.0.2.104 54523 <-> 77.40.71.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:40.571195 0.137022 udp 10.0.2.104 54523 <-> 75.183.102.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:41.573020 0.159092 udp 10.0.2.104 54523 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:42.574236 0.144884 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:43.565604 0.139626 udp 10.0.2.104 54523 <-> 24.3.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:44.566689 0.060911 udp 10.0.2.104 54523 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:45.568589 0.175127 udp 10.0.2.104 54523 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:46.569337 0.046822 udp 10.0.2.104 54523 <-> 5.15.135.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:47.571070 0.000000 udp 10.0.2.104 54523 -> 171.51.148.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:48.572668 3.926003 udp 10.0.2.104 54523 <-> 190.221.41.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:49.574076 4.059448 udp 10.0.2.104 54523 <-> 79.112.193.201 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:50.565333 0.166353 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:51.226444 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:17:51.566804 0.124855 udp 10.0.2.104 54523 <-> 178.156.117.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:52.578057 0.211549 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:54.581266 0.022731 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:17:55.582361 0.000000 udp 10.0.2.104 54523 -> 98.203.127.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:56.583863 0.000000 udp 10.0.2.104 54523 -> 171.51.148.78 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:57.575338 0.000000 udp 10.0.2.104 54523 -> 5.43.93.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:58.576654 0.000000 udp 10.0.2.104 54523 -> 62.68.106.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:17:59.578717 0.125026 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:00.579976 0.251618 udp 10.0.2.104 54523 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:01.581077 0.065716 udp 10.0.2.104 54523 <-> 178.156.117.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:02.583052 0.000000 udp 10.0.2.104 54523 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:03.574069 0.383534 udp 10.0.2.104 54523 <-> 186.54.122.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:04.575288 0.341975 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:05.577091 0.277090 udp 10.0.2.104 54523 <-> 223.188.162.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:06.578101 0.126594 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:07.579590 0.329799 udp 10.0.2.104 54523 <-> 190.110.186.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:08.581445 0.048385 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:09.582989 0.000000 udp 10.0.2.104 54523 -> 190.221.41.21 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:10.573919 1.001707 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:12.577385 1.332452 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:14.580249 1.174356 udp 10.0.2.104 54523 <-> 75.66.83.78 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:17.574129 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:17.574180 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:18:18.575428 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:19.576930 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:20.578815 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:21.580209 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:22.581572 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:23.582729 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:24.574712 0.446963 udp 10.0.2.104 54523 <-> 14.97.135.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:25.576146 0.218663 udp 10.0.2.104 54523 <-> 87.16.178.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:26.577128 0.345399 udp 10.0.2.104 54523 <-> 101.63.147.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:27.579041 0.055225 udp 10.0.2.104 54523 <-> 46.238.69.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:28.580040 0.400439 udp 10.0.2.104 54523 <-> 125.231.154.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:29.581291 0.297258 udp 10.0.2.104 54523 <-> 122.210.119.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:30.582754 0.498620 udp 10.0.2.104 54523 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:31.574755 1.267062 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:32.576111 0.000000 udp 10.0.2.104 54523 -> 5.12.105.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:33.577410 0.136831 udp 10.0.2.104 54523 <-> 103.8.164.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:34.578738 0.150692 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:35.580437 0.029124 udp 10.0.2.104 54523 <-> 78.42.78.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:36.581625 0.367870 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:37.583094 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:38.234321 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:18:38.574555 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:39.575882 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:40.577203 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:41.579101 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:42.580214 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:43.581574 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:44.583138 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:45.574242 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:46.576162 0.000085 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:46.576247 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:18:47.577611 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:48.578804 0.140464 udp 10.0.2.104 54523 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:49.580357 0.024841 udp 10.0.2.104 54523 <-> 78.42.78.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:18:50.581385 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:51.583174 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:52.574256 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:53.576255 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:54.577402 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:55.579268 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:56.580679 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:57.581678 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:58.583145 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:18:59.575037 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:00.576440 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:02.578801 0.000102 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:02.578903 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:19:03.580791 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:04.581728 0.142929 udp 10.0.2.104 54523 <-> 24.228.169.252 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:05.583344 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:06.574367 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:07.576464 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:08.577262 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:09.579131 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:10.580513 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:11.581767 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:12.583069 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:13.574432 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:14.576033 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:15.577897 0.000086 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:15.577983 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:19:16.579113 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:17.580189 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:19.583343 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:20.574772 3.043431 udp 10.0.2.104 54523 <-> 213.231.136.212 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:21.575954 0.000000 udp 10.0.2.104 54523 -> 219.91.185.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:22.578157 0.196213 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:24.581059 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:25.241618 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:19:25.582354 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:26.583162 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:27.575102 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:28.576247 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:29.578052 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:30.579352 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:31.580389 0.000112 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:31.580501 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:19:32.582156 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:33.583732 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:34.575145 0.000000 udp 10.0.2.104 54523 -> 31.140.117.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:35.576751 0.000000 udp 10.0.2.104 54523 -> 187.109.37.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:36.577506 0.120551 udp 10.0.2.104 54523 <-> 206.253.172.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:37.579171 0.054958 udp 10.0.2.104 54523 <-> 91.90.76.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:38.580498 0.083297 udp 10.0.2.104 54523 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:39.582581 0.225347 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:40.583328 0.233274 udp 10.0.2.104 54523 <-> 181.53.197.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:41.575247 0.000000 udp 10.0.2.104 54523 -> 187.109.37.195 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:42.576550 0.585313 udp 10.0.2.104 54523 <-> 117.201.119.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:43.577581 3.076424 udp 10.0.2.104 54523 <-> 109.60.31.97 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:44.579030 0.113456 udp 10.0.2.104 54523 <-> 2.193.239.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:45.581055 0.068098 udp 10.0.2.104 54523 <-> 85.87.142.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:47.584082 0.000000 udp 10.0.2.104 54523 -> 193.30.248.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:19:48.575427 0.153175 udp 10.0.2.104 54523 <-> 173.29.162.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:49.577076 0.218668 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:50.577771 0.420950 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:51.579706 0.137552 udp 10.0.2.104 54523 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:52.580820 4.142031 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:53.582586 0.345337 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:54.583502 0.153446 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:55.574870 0.082967 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:57.578387 0.046994 udp 10.0.2.104 54523 <-> 5.12.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:58.579192 0.179204 udp 10.0.2.104 54523 <-> 24.48.169.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:19:59.580947 0.115222 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:00.582686 1.174034 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:02.575246 0.458943 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:03.576608 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:04.577839 0.060238 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:05.579254 0.494091 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:06.581397 0.674965 udp 10.0.2.104 54523 <-> 200.181.39.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:07.582137 0.042001 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:08.583823 1.511320 udp 10.0.2.104 54523 <-> 195.174.174.8 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:09.575342 0.000000 udp 10.0.2.104 54523 -> 66.25.88.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:10.576970 0.075852 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:11.578280 0.462765 udp 10.0.2.104 54523 <-> 190.179.130.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:12.239284 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:20:12.579305 0.052944 udp 10.0.2.104 54523 <-> 5.15.14.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:13.580855 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:14.582469 0.384658 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:15.584213 0.370274 udp 10.0.2.104 54523 <-> 111.253.130.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:16.575296 0.140080 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:17.576560 0.183294 udp 10.0.2.104 54523 <-> 75.87.91.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:18.578077 0.000000 udp 10.0.2.104 54523 -> 118.106.151.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:19.579988 0.000000 udp 10.0.2.104 54523 -> 220.142.10.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:20.581460 0.000000 udp 10.0.2.104 54523 -> 111.250.219.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:21.582456 0.000000 udp 10.0.2.104 54523 -> 201.141.130.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:22.584090 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:23.575876 0.061414 udp 10.0.2.104 54523 <-> 82.229.19.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:24.577085 0.119361 udp 10.0.2.104 54523 <-> 86.38.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:25.578408 0.149681 udp 10.0.2.104 54523 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:26.579441 0.252878 udp 10.0.2.104 54523 <-> 187.1.104.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:27.581510 0.071544 udp 10.0.2.104 54523 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:28.582827 0.000000 udp 10.0.2.104 54523 -> 79.64.15.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:29.583912 4.997127 udp 10.0.2.104 54523 -> 87.120.215.67 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:30.575446 1.012792 udp 10.0.2.104 54523 <-> 212.59.229.78 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:30.978892 3.001739 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:20:32.578213 0.162729 udp 10.0.2.104 54523 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:33.580034 0.085805 udp 10.0.2.104 54523 <-> 78.157.15.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:34.660376 0.000000 udp 10.0.2.104 54523 <- 87.120.215.67 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:35.583104 0.547321 udp 10.0.2.104 54523 <-> 124.197.200.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:36.574043 2.096226 udp 10.0.2.104 54523 <-> 41.33.182.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:37.576063 0.000000 udp 10.0.2.104 54523 -> 88.226.194.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:37.986679 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:20:39.578347 0.000000 udp 10.0.2.104 54523 -> 89.231.222.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:40.580164 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:41.581043 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:42.582793 0.000000 udp 10.0.2.104 54523 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:43.574028 0.328208 udp 10.0.2.104 54523 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:44.576147 0.000000 udp 10.0.2.104 54523 -> 84.118.201.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:45.577480 2.002744 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:45.987829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:20:46.578156 0.000000 udp 10.0.2.104 54523 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:48.581219 0.159137 udp 10.0.2.104 54523 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:49.582864 0.000000 udp 10.0.2.104 54523 -> 89.231.222.51 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:50.574221 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:51.575772 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:52.576813 0.254957 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:53.578964 0.051676 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:54.579836 0.000000 udp 10.0.2.104 54523 -> 88.226.194.141 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:55.581470 0.000000 udp 10.0.2.104 54523 -> 109.53.207.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:56.582908 0.000000 udp 10.0.2.104 54523 -> 77.78.227.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:57.574415 0.000000 udp 10.0.2.104 54523 -> 177.141.225.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:20:58.576154 0.125293 udp 10.0.2.104 54523 <-> 46.50.53.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:20:59.236524 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:20:59.577055 1.571866 udp 10.0.2.104 54523 <-> 190.208.103.70 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:00.578989 1.145719 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:01.990636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:21:02.581455 0.380093 udp 10.0.2.104 54523 <-> 122.100.81.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:03.582884 0.264744 udp 10.0.2.104 54523 <-> 46.50.53.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:04.574282 0.000000 udp 10.0.2.104 54523 -> 177.141.225.48 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:05.575923 0.000000 udp 10.0.2.104 54523 -> 77.78.227.24 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:06.577117 0.000000 udp 10.0.2.104 54523 -> 109.53.207.47 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:07.578901 0.082244 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:08.580153 0.000000 udp 10.0.2.104 54523 -> 88.226.194.141 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:09.581763 0.155143 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:10.582708 0.000000 udp 10.0.2.104 54523 -> 89.231.222.51 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:11.574264 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:12.576181 0.000000 udp 10.0.2.104 54523 -> 79.64.15.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:13.577725 0.562112 udp 10.0.2.104 54523 <-> 124.197.200.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:14.578778 1.052333 udp 10.0.2.104 54523 <-> 78.8.126.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:15.580495 4.050146 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 4 1064 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:16.581384 0.000000 udp 10.0.2.104 54523 -> 122.100.81.50 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:18.574418 0.310786 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:20.577640 0.089593 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:21.579234 0.000000 udp 10.0.2.104 54523 -> 190.208.103.70 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:22.580624 2.002636 udp 10.0.2.104 54523 <-> 46.50.53.45 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:23.581789 0.107132 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:25.574414 0.102961 udp 10.0.2.104 54523 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:26.575957 0.365004 udp 10.0.2.104 54523 <-> 122.100.81.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:27.577376 0.086510 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:28.579361 2.175730 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:29.580298 0.000000 udp 10.0.2.104 54523 -> 95.243.172.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:31.583475 3.435246 udp 10.0.2.104 54523 <-> 174.109.199.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:32.574615 0.794342 udp 10.0.2.104 54523 <-> 117.200.82.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:33.576073 0.102870 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:33.996772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:21:34.577507 0.074660 udp 10.0.2.104 54523 <-> 80.216.65.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:35.579098 0.162659 udp 10.0.2.104 54523 <-> 67.63.86.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:36.580839 0.105769 udp 10.0.2.104 54523 <-> 178.123.34.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:37.581528 0.122218 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:38.583790 4.560404 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:39.574438 0.154065 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:40.576421 2.584638 udp 10.0.2.104 54523 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:41.577579 0.138191 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:43.580212 0.308727 udp 10.0.2.104 54523 <-> 190.54.229.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:44.582217 0.000000 udp 10.0.2.104 54523 -> 120.141.157.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:45.583584 0.522456 udp 10.0.2.104 54523 <-> 117.97.228.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:46.234028 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:21:46.574865 0.000000 udp 10.0.2.104 54523 -> 176.200.210.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:47.575897 0.000000 udp 10.0.2.104 54523 -> 188.53.70.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:48.577299 0.000000 udp 10.0.2.104 54523 -> 37.242.228.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:49.578783 0.000000 udp 10.0.2.104 54523 -> 88.165.10.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:50.289910 0.010290 udp 10.0.2.104 54567 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 06:21:50.300484 0.000000 udp 10.0.2.104 54568 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:50.580217 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:51.582008 0.000000 udp 10.0.2.104 54523 -> 90.29.45.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:52.583081 0.000000 udp 10.0.2.104 54523 -> 200.124.98.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:21:53.574545 0.082756 udp 10.0.2.104 54523 <-> 87.2.181.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:54.576006 0.038454 udp 10.0.2.104 54523 <-> 5.15.14.14 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:55.578245 0.110448 udp 10.0.2.104 54523 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:56.579248 0.304055 udp 10.0.2.104 54523 <-> 186.9.15.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:57.580790 0.049687 udp 10.0.2.104 54523 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:58.582159 0.137050 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:21:59.583348 0.000000 udp 10.0.2.104 54523 -> 76.75.180.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:00.575199 0.000000 udp 10.0.2.104 54523 -> 117.204.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:01.576565 0.070539 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:02.577525 0.316572 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:03.579134 0.778239 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:04.580998 0.375003 udp 10.0.2.104 54523 <-> 61.227.71.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:05.582224 0.077320 udp 10.0.2.104 54523 <-> 176.52.77.39 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:06.583260 3.133148 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:07.574862 0.045866 udp 10.0.2.104 54523 <-> 213.231.137.6 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:08.576337 1.686000 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:10.579675 0.000000 udp 10.0.2.104 54523 -> 108.82.125.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:11.581059 0.055704 udp 10.0.2.104 54523 <-> 89.229.90.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:12.582464 0.362643 udp 10.0.2.104 54523 <-> 189.68.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:13.583276 0.475255 udp 10.0.2.104 54523 <-> 187.83.142.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:14.574727 0.066241 udp 10.0.2.104 54523 <-> 83.213.201.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:15.576368 0.314478 udp 10.0.2.104 54523 <-> 121.152.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:16.578083 0.166367 udp 10.0.2.104 54523 <-> 68.51.223.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:17.579139 0.000000 udp 10.0.2.104 54523 -> 95.238.196.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:18.581051 0.398066 udp 10.0.2.104 54523 <-> 88.236.237.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:19.582656 0.610803 udp 10.0.2.104 54523 <-> 182.233.71.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:20.583592 3.413441 udp 10.0.2.104 54523 <-> 190.55.25.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:21.575033 0.054225 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:22.576364 0.429347 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:23.577634 0.000000 udp 10.0.2.104 54523 -> 122.102.133.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:24.579739 0.000000 udp 10.0.2.104 54523 -> 184.71.86.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:25.580526 0.141027 udp 10.0.2.104 54523 <-> 203.192.219.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:26.582296 0.675808 udp 10.0.2.104 54523 <-> 92.32.95.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:27.583429 0.076012 udp 10.0.2.104 54523 <-> 2.92.13.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:28.575431 2.720046 udp 10.0.2.104 54523 <-> 177.180.213.254 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:29.576603 0.169425 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:31.579765 0.100516 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:32.580838 0.000000 udp 10.0.2.104 54523 -> 98.194.123.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:33.242117 0.000147 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:22:33.582122 0.000000 udp 10.0.2.104 54523 -> 180.151.208.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:34.583782 0.203609 udp 10.0.2.104 54523 <-> 72.183.243.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:35.575457 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:36.576304 0.069645 udp 10.0.2.104 54523 <-> 79.126.189.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:37.577790 0.387134 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:38.579510 0.046710 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:39.581525 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:40.582770 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:40.986918 0.000000 udp 10.0.2.104 54523 <- 180.151.208.163 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:41.583838 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:42.575231 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:43.576635 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:44.578526 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:45.579772 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:46.580717 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:47.582398 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:48.584310 2.307905 udp 10.0.2.104 54523 <-> 210.131.97.25 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:49.575399 0.170456 udp 10.0.2.104 54523 <-> 74.58.240.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:51.578348 0.000000 udp 10.0.2.104 54523 -> 201.192.152.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:52.579452 1.042444 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:54.582394 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:22:55.583682 0.014978 udp 10.0.2.104 54523 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:56.575163 0.168641 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:57.576809 0.047662 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:58.578497 0.210937 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:22:59.579605 3.187638 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:00.581356 0.159134 udp 10.0.2.104 54523 <-> 74.58.240.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:01.582479 0.000000 udp 10.0.2.104 54523 -> 201.192.152.83 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:03.575150 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:04.577133 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:05.578643 0.000042 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:05.578685 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:23:06.580203 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:07.581054 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:08.582629 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:09.573846 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:10.575630 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:11.577273 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:12.578315 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:13.579984 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:14.581105 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:15.582553 3.158259 udp 10.0.2.104 54523 <-> 74.58.240.185 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:17.575587 0.000000 udp 10.0.2.104 54523 -> 210.131.97.25 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:19.578600 0.205589 udp 10.0.2.104 54523 -> 201.192.152.83 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:19.784189 0.000000 icmp 201.192.152.83 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 06:23:20.239656 0.000148 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:23:20.580014 0.293561 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:21.581188 0.000000 udp 10.0.2.104 54523 -> 79.10.37.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:22.582807 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:23.574287 0.202944 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:24.575912 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:25.577244 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:26.578915 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:27.579995 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:28.581432 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:29.583019 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:30.574545 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:31.576200 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:32.577544 0.306069 udp 10.0.2.104 54523 <-> 210.131.97.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:33.578955 1.183056 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:35.581143 0.164313 udp 10.0.2.104 54523 <-> 74.58.240.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:36.582805 0.000000 udp 10.0.2.104 54523 -> 79.10.37.17 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:37.574259 0.015344 udp 10.0.2.104 54523 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:38.575470 0.384756 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:39.577346 0.174752 udp 10.0.2.104 54523 <-> 76.92.155.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:40.578322 0.305469 udp 10.0.2.104 54523 <-> 210.131.97.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:41.580096 1.182987 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:43.582719 0.041017 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:44.574290 3.004819 udp 10.0.2.104 54523 -> 77.78.227.24 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:45.575808 0.320523 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:46.577169 0.000000 udp 10.0.2.104 54523 -> 190.203.75.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:48.580251 1.061238 udp 10.0.2.104 54523 <-> 89.32.157.32 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:50.583441 0.000000 udp 10.0.2.104 54523 -> 77.78.227.24 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:51.574545 0.157515 udp 10.0.2.104 54523 <-> 71.194.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:52.576303 0.148732 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:53.577073 0.000000 udp 10.0.2.104 54523 -> 82.66.146.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:23:54.578800 0.137231 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:55.579985 0.028034 udp 10.0.2.104 54523 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:56.581494 0.180887 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:57.583186 2.025327 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:23:58.574765 2.002696 udp 10.0.2.104 54523 -> 72.47.76.3 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:01.579166 4.121506 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:02.580094 2.157560 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:03.581956 0.045890 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:06.576164 0.000000 udp 10.0.2.104 54523 -> 72.47.76.3 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:07.236664 0.000146 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:24:07.577289 0.031002 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:08.578868 2.003104 udp 10.0.2.104 54523 -> 142.136.206.4 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:09.580312 0.124559 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:11.583111 0.168602 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:12.574716 0.367228 udp 10.0.2.104 54523 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:13.576470 0.025842 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:14.577796 0.118346 udp 10.0.2.104 54523 <-> 216.121.246.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:15.579346 0.136574 udp 10.0.2.104 54523 <-> 176.237.169.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:16.580415 1.738407 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:18.583103 0.100804 udp 10.0.2.104 54523 <-> 79.52.41.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:19.574576 0.031179 udp 10.0.2.104 54523 <-> 195.189.250.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:20.576167 0.000000 udp 10.0.2.104 54523 -> 115.242.85.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:21.577301 4.997579 udp 10.0.2.104 54523 <-> 201.26.45.223 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:22.579326 1.088650 udp 10.0.2.104 54523 <-> 94.41.113.164 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:24.582112 0.031718 udp 10.0.2.104 54523 <-> 195.189.250.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:25.583369 0.000000 udp 10.0.2.104 54523 -> 49.107.6.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:27.576599 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:28.577801 0.849280 udp 10.0.2.104 54523 <-> 62.18.235.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:29.579133 0.958027 udp 10.0.2.104 54523 <-> 190.201.102.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:30.580781 0.000000 udp 10.0.2.104 54523 -> 76.220.60.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:31.581770 0.000000 udp 10.0.2.104 54523 -> 72.204.77.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:32.583395 0.000000 udp 10.0.2.104 54523 -> 201.26.45.223 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:33.574821 0.000000 udp 10.0.2.104 54523 -> 115.242.85.88 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:34.576027 0.181086 udp 10.0.2.104 54523 <-> 62.18.235.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:35.577992 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:36.579180 0.087228 udp 10.0.2.104 54523 <-> 94.41.113.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:37.580839 1.143850 udp 10.0.2.104 54523 <-> 190.201.102.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:38.582196 0.031627 udp 10.0.2.104 54523 <-> 195.189.250.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:39.583283 0.090449 udp 10.0.2.104 54523 <-> 109.101.94.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:40.575241 0.000000 udp 10.0.2.104 54523 -> 89.215.228.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:41.576275 0.115336 udp 10.0.2.104 54523 <-> 68.230.129.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:42.577772 1.001546 udp 10.0.2.104 54523 <-> 85.182.110.244 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:44.580831 0.377738 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:45.582257 0.068407 udp 10.0.2.104 54523 <-> 79.126.189.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:46.583253 3.167348 udp 10.0.2.104 54523 <-> 68.84.24.57 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:47.574822 0.054836 udp 10.0.2.104 54523 <-> 88.166.83.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:48.576590 3.174451 udp 10.0.2.104 54523 <-> 187.105.33.197 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:51.580831 0.000000 udp 10.0.2.104 54523 -> 1.172.59.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:52.582385 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:53.583437 0.067689 udp 10.0.2.104 54523 <-> 84.120.113.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:54.234280 0.000103 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:24:54.575182 0.163748 udp 10.0.2.104 54523 <-> 69.142.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:55.576824 0.065208 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:56.577848 0.139773 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:57.579432 0.000000 udp 10.0.2.104 54523 -> 5.13.132.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:24:58.580722 0.055493 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:24:59.582552 0.000000 udp 10.0.2.104 54523 -> 24.155.235.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:00.583438 0.065076 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:01.574997 0.432905 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:02.576736 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:03.578159 0.288876 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:04.579619 4.179680 udp 10.0.2.104 54523 <-> 94.205.1.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:05.580885 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:06.582423 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:07.583885 0.421193 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:09.576777 0.000000 udp 10.0.2.104 54523 -> 91.120.99.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:10.577926 0.000000 udp 10.0.2.104 54523 -> 161.200.173.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:11.579263 0.312850 udp 10.0.2.104 54523 <-> 201.208.192.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:12.580700 3.363186 udp 10.0.2.104 54523 <-> 223.188.124.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:13.582396 0.547192 udp 10.0.2.104 54523 <-> 101.0.73.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:14.583864 0.000000 udp 10.0.2.104 54523 -> 117.192.100.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:15.575252 0.000000 udp 10.0.2.104 54523 -> 85.84.74.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:16.576664 0.491160 udp 10.0.2.104 54523 <-> 112.197.226.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:17.578265 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:17.578376 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:25:18.579227 0.008691 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:19.580974 0.239952 udp 10.0.2.104 54523 <-> 189.194.113.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:20.582801 0.131964 udp 10.0.2.104 54523 <-> 80.117.95.216 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:21.583998 0.208252 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:22.575634 0.014596 udp 10.0.2.104 54523 <-> 188.230.145.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:23.576844 0.052199 udp 10.0.2.104 54523 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:24.578139 0.000000 udp 10.0.2.104 54523 -> 218.210.42.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:25.579623 0.000000 udp 10.0.2.104 54523 -> 68.3.145.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:26.580806 0.000000 udp 10.0.2.104 54523 -> 5.12.147.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:27.582467 0.062449 udp 10.0.2.104 54523 <-> 213.67.59.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:28.584368 0.164200 udp 10.0.2.104 54523 <-> 72.191.111.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:29.575637 0.612403 udp 10.0.2.104 54523 <-> 186.11.15.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:30.576962 0.140160 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:31.578654 0.151621 udp 10.0.2.104 54523 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:32.579972 0.392202 udp 10.0.2.104 54523 <-> 118.169.215.159 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:33.581589 0.000000 udp 10.0.2.104 54523 -> 115.240.113.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:34.582327 0.000000 udp 10.0.2.104 54523 -> 115.240.100.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:35.584370 0.181702 udp 10.0.2.104 54523 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:36.575324 0.000000 udp 10.0.2.104 54523 -> 31.223.219.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:37.577026 0.521585 udp 10.0.2.104 54523 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:38.578241 3.296094 udp 10.0.2.104 54523 <-> 190.208.123.196 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:39.580228 0.000000 udp 10.0.2.104 54523 -> 115.242.53.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:40.580883 0.000000 udp 10.0.2.104 54523 -> 5.20.66.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:41.242453 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:25:42.573806 4.032876 udp 10.0.2.104 54523 <-> 213.240.199.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:43.575729 0.080107 udp 10.0.2.104 54523 <-> 87.110.22.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:44.576690 0.298684 udp 10.0.2.104 54523 <-> 190.208.123.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:45.578373 0.000000 udp 10.0.2.104 54523 -> 119.154.153.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:47.581612 0.000000 udp 10.0.2.104 54523 -> 220.129.2.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:48.582930 0.402111 udp 10.0.2.104 54523 <-> 175.208.118.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:49.574241 0.064659 udp 10.0.2.104 54523 <-> 78.247.174.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:50.575358 0.550456 udp 10.0.2.104 54523 <-> 101.0.73.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:51.576896 0.240871 udp 10.0.2.104 54523 <-> 115.246.240.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:52.578618 0.158205 udp 10.0.2.104 54523 <-> 74.58.82.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:53.579927 0.000000 udp 10.0.2.104 54523 -> 78.176.76.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:54.581225 0.000000 udp 10.0.2.104 54523 -> 190.160.244.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:25:55.582901 0.072630 udp 10.0.2.104 54523 <-> 89.169.71.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:56.574548 0.154977 udp 10.0.2.104 54523 <-> 67.248.200.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:57.575607 0.394992 udp 10.0.2.104 54523 <-> 200.84.68.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:58.577024 3.920564 udp 10.0.2.104 54523 <-> 92.64.64.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:25:59.578508 0.542353 udp 10.0.2.104 54523 <-> 124.197.200.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:00.580369 0.000000 udp 10.0.2.104 54523 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:01.581839 1.501526 udp 10.0.2.104 54523 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:02.583180 0.000000 udp 10.0.2.104 54523 -> 75.152.30.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:03.162519 0.000000 udp 10.0.2.104 54523 <- 119.154.153.120 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:03.574566 0.263532 udp 10.0.2.104 54523 <-> 181.29.186.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:04.575782 1.130821 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:05.577336 0.071471 udp 10.0.2.104 54523 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:06.578435 0.000000 udp 10.0.2.104 54523 -> 187.1.104.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:07.580025 4.996943 udp 10.0.2.104 54523 <-> 93.105.14.115 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:08.581135 0.000000 udp 10.0.2.104 54523 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:09.582983 0.094033 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:10.574533 0.000000 udp 10.0.2.104 54523 -> 87.212.96.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:11.575658 0.161397 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:13.578382 0.000000 udp 10.0.2.104 54523 -> 95.75.139.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:14.580365 1.141107 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:15.581872 0.000000 udp 10.0.2.104 54523 -> 92.87.69.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:16.583067 0.015518 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:17.574548 0.191464 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:18.575934 0.060845 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:19.577578 0.348567 udp 10.0.2.104 54523 <-> 112.120.210.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:20.579012 0.450379 udp 10.0.2.104 54523 <-> 1.113.199.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:21.580395 0.020707 udp 10.0.2.104 54523 <-> 159.149.85.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:22.581420 2.066643 udp 10.0.2.104 54523 <-> 78.136.104.219 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:23.582892 0.362855 udp 10.0.2.104 54523 <-> 220.137.148.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:25.576563 0.054950 udp 10.0.2.104 54523 <-> 212.142.84.84 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:26.577182 0.000000 udp 10.0.2.104 54523 -> 59.90.194.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:27.578965 0.157136 udp 10.0.2.104 54523 <-> 123.201.36.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:28.240175 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:26:28.580137 0.187175 udp 10.0.2.104 54523 <-> 74.61.169.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:29.581501 0.087935 udp 10.0.2.104 54523 <-> 81.182.124.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:30.583363 0.166112 udp 10.0.2.104 54523 <-> 24.177.86.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:31.574299 2.083327 udp 10.0.2.104 54523 <-> 109.196.36.154 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:32.576239 0.065872 udp 10.0.2.104 54523 <-> 151.28.10.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:33.577456 0.366308 udp 10.0.2.104 54523 <-> 218.173.235.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:34.579037 2.064701 udp 10.0.2.104 54523 <-> 91.90.16.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:35.580554 0.141573 udp 10.0.2.104 54523 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:37.583246 0.073640 udp 10.0.2.104 54523 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:38.574837 0.076037 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:39.575763 1.107850 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:40.577351 0.060507 udp 10.0.2.104 54523 <-> 89.32.157.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:41.578599 0.052038 udp 10.0.2.104 54523 <-> 88.135.143.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:42.580632 0.000000 udp 10.0.2.104 54523 -> 76.16.28.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:43.581881 0.059847 udp 10.0.2.104 54523 <-> 178.149.181.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:44.583308 0.149668 udp 10.0.2.104 54523 <-> 174.109.218.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:45.574357 0.175988 udp 10.0.2.104 54523 <-> 24.171.100.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:46.575943 0.000000 udp 10.0.2.104 54523 -> 98.145.222.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:47.577945 4.498759 udp 10.0.2.104 54523 <-> 209.33.123.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:48.578891 0.043162 udp 10.0.2.104 54523 <-> 188.254.153.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:49.580307 0.049432 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:50.582137 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:51.583318 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:52.574644 0.356304 udp 10.0.2.104 54523 <-> 177.44.3.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:53.575813 0.000000 udp 10.0.2.104 54523 -> 71.199.58.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:54.577823 0.313145 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:55.578780 0.051444 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:56.580774 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:57.582429 0.102987 udp 10.0.2.104 54523 <-> 178.125.73.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:26:58.583209 0.000000 udp 10.0.2.104 54523 -> 88.9.109.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:26:59.574830 0.434922 udp 10.0.2.104 54523 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:00.576501 4.140549 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:01.577788 0.031012 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:02.579196 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:03.580685 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:05.583768 0.479017 udp 10.0.2.104 54523 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:06.574542 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:07.576617 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:08.577503 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:09.579395 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:10.580731 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:11.581703 0.163581 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:12.583665 0.342082 udp 10.0.2.104 54523 <-> 189.68.134.233 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:13.575214 0.030849 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:14.576606 0.162784 udp 10.0.2.104 54523 <-> 67.166.246.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:15.237317 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:27:15.577467 0.174050 udp 10.0.2.104 54523 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:16.579625 0.214424 udp 10.0.2.104 54523 <-> 200.82.151.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:17.580321 0.156698 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:18.582266 0.413822 udp 10.0.2.104 54523 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:19.583224 0.048518 udp 10.0.2.104 54523 <-> 89.228.145.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:20.575507 0.000000 udp 10.0.2.104 54523 -> 14.97.40.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:21.576838 0.000000 udp 10.0.2.104 54523 -> 84.62.69.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:22.577625 0.079058 udp 10.0.2.104 54523 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:23.578979 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:24.580497 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:25.581870 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:26.583674 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:27.574860 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:28.576823 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:29.577649 0.000000 udp 10.0.2.104 54523 -> 36.227.117.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:30.579076 0.215312 udp 10.0.2.104 54523 <-> 200.82.151.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:31.580827 0.045089 udp 10.0.2.104 54523 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:32.582339 0.059393 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:33.584007 0.991170 udp 10.0.2.104 54523 <-> 89.173.235.151 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:35.576704 0.138252 udp 10.0.2.104 54523 <-> 24.191.6.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:36.578331 0.215802 udp 10.0.2.104 54523 <-> 200.82.151.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:37.579495 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:38.002880 3.001430 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:27:38.581258 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:39.582424 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:40.584049 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:41.574966 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:42.576301 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:43.578399 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:44.579404 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:45.010110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:27:45.581468 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:46.582716 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:47.583956 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:48.574973 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:48.575061 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:27:49.576397 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:50.578186 3.004193 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:51.579761 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:52.581301 0.359984 udp 10.0.2.104 54523 <-> 61.58.184.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:27:53.011961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:27:54.583639 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:55.575295 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:56.577012 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:57.578355 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:58.579904 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:27:59.581342 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:00.582279 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:01.583792 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:02.235196 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:28:02.575129 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:03.577029 0.000101 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:03.577130 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:28:04.578457 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:05.579921 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:06.581505 2.993585 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:07.582879 0.072700 udp 10.0.2.104 54523 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:09.015098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:28:10.576892 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:11.578037 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:12.579759 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:13.581067 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:14.582746 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:15.573937 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:16.575803 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:17.577237 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:18.578554 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:19.580277 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:19.580323 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:28:20.581209 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:21.583064 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:22.574440 2.468010 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:23.575387 0.070423 udp 10.0.2.104 54523 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:25.578597 0.378618 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:26.579569 0.000000 udp 10.0.2.104 54523 -> 115.241.160.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:27.581281 0.072252 udp 10.0.2.104 54523 <-> 188.94.82.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:28.582881 0.000000 udp 10.0.2.104 54523 -> 85.72.207.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:29.574276 0.167910 udp 10.0.2.104 54523 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:30.575727 0.088860 udp 10.0.2.104 54523 <-> 95.95.199.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:31.577460 0.137247 udp 10.0.2.104 54523 <-> 174.44.41.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:32.578160 0.000000 udp 10.0.2.104 54523 -> 78.251.143.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:33.580171 0.075269 udp 10.0.2.104 54523 <-> 79.56.5.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:34.581082 0.157906 udp 10.0.2.104 54523 <-> 68.47.164.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:35.582689 1.555438 udp 10.0.2.104 54523 <-> 190.208.103.70 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:36.574544 0.158247 udp 10.0.2.104 54523 <-> 96.59.16.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:37.575664 0.165214 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:38.576834 4.997342 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:39.578508 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:40.580326 0.000000 udp 10.0.2.104 54523 -> 60.37.183.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:41.021050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:28:41.581213 0.051174 udp 10.0.2.104 54523 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:42.582762 0.000000 udp 10.0.2.104 54523 -> 117.222.36.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:44.575429 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:45.577226 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:46.578456 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:47.580385 0.045743 udp 10.0.2.104 54523 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:48.581967 0.366679 udp 10.0.2.104 54523 <-> 218.191.64.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:49.242300 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:28:49.583254 0.318881 udp 10.0.2.104 54523 <-> 175.204.146.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:50.574710 0.163216 udp 10.0.2.104 54523 <-> 69.242.83.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:51.575945 0.043995 udp 10.0.2.104 54523 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:52.577346 0.193955 udp 10.0.2.104 54523 <-> 75.54.70.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:53.578558 0.159488 udp 10.0.2.104 54523 <-> 68.59.56.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:54.580339 0.746613 udp 10.0.2.104 54523 <-> 121.91.91.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:55.581443 0.000000 udp 10.0.2.104 54523 -> 24.95.94.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:28:56.582992 0.048363 udp 10.0.2.104 54523 <-> 87.247.70.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:57.574335 0.048171 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:58.576151 0.324044 udp 10.0.2.104 54523 <-> 190.204.17.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:28:59.577194 0.260651 udp 10.0.2.104 54523 <-> 223.237.241.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:00.578585 1.198789 udp 10.0.2.104 54523 <-> 70.66.227.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:01.580474 0.000000 udp 10.0.2.104 54523 -> 94.156.86.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:02.581996 0.216700 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 9 7178 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:03.582813 0.142554 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:04.574817 0.199010 udp 10.0.2.104 54523 <-> 173.196.58.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:05.575813 0.000000 udp 10.0.2.104 54523 -> 181.192.6.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:06.577100 0.248864 udp 10.0.2.104 54523 <-> 177.224.174.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:07.578733 0.307874 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:08.580542 1.367531 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:09.581564 0.000000 udp 10.0.2.104 54523 -> 24.193.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:10.582822 3.249104 udp 10.0.2.104 54523 <-> 66.187.64.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:11.574550 0.169329 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:12.575969 0.000000 udp 10.0.2.104 54523 -> 177.224.174.245 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:14.578952 0.094056 udp 10.0.2.104 54523 <-> 90.11.87.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:15.580364 0.151090 udp 10.0.2.104 54523 <-> 202.131.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:16.581844 0.157214 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:17.583593 0.166127 udp 10.0.2.104 54523 <-> 62.177.243.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:18.574720 0.000000 udp 10.0.2.104 54523 -> 31.147.129.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:19.576214 0.304492 udp 10.0.2.104 54523 <-> 180.199.67.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:20.577431 4.402936 udp 10.0.2.104 54523 <-> 126.123.91.123 16464 CON 0 0 8 3792 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:22.580284 0.712996 udp 10.0.2.104 54523 <-> 31.185.116.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:25.574690 0.367457 udp 10.0.2.104 54523 <-> 59.102.146.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:26.576269 0.049795 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:27.577783 0.320822 udp 10.0.2.104 54523 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:28.579032 0.073525 udp 10.0.2.104 54523 <-> 85.84.161.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:29.580424 0.000000 udp 10.0.2.104 54523 -> 90.62.158.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:30.581751 0.000000 udp 10.0.2.104 54523 -> 14.97.213.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:31.583443 0.556482 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:32.575122 0.000000 udp 10.0.2.104 54523 -> 65.15.129.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:33.576512 0.270145 udp 10.0.2.104 54523 <-> 190.74.247.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:34.578021 0.135765 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:35.579237 0.125361 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:36.240077 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:29:36.580427 2.003275 udp 10.0.2.104 54523 -> 14.97.213.16 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:37.581726 0.045924 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:39.575053 3.004368 udp 10.0.2.104 54523 -> 186.11.15.244 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:40.576067 0.378557 udp 10.0.2.104 54523 <-> 111.242.31.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:41.577457 0.135927 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:43.580272 0.135739 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:44.581807 0.000000 udp 10.0.2.104 54523 -> 84.139.177.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:45.583635 0.169623 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:46.574851 0.047911 udp 10.0.2.104 54523 <-> 82.160.201.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:47.576121 0.166510 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:48.577505 0.329552 udp 10.0.2.104 54523 <-> 189.42.55.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:49.579164 1.348660 udp 10.0.2.104 54523 <-> 219.103.176.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:51.582245 0.000000 udp 10.0.2.104 54523 -> 117.206.117.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:52.583859 0.160668 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:53.575170 0.202048 udp 10.0.2.104 54523 <-> 72.172.107.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:54.576279 0.206418 udp 10.0.2.104 54523 <-> 76.105.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:55.577900 0.163565 udp 10.0.2.104 54523 <-> 67.241.70.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:56.579022 0.000000 udp 10.0.2.104 54523 -> 75.244.136.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:29:57.580956 1.455786 udp 10.0.2.104 54523 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:58.582378 0.021589 udp 10.0.2.104 54523 <-> 84.119.107.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:29:59.583260 0.324121 udp 10.0.2.104 54523 <-> 187.101.113.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:00.574740 0.350782 udp 10.0.2.104 54523 <-> 177.100.111.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:01.576309 0.000000 udp 10.0.2.104 54523 -> 84.118.201.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:02.577929 0.189036 udp 10.0.2.104 54523 <-> 190.249.30.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:03.579306 0.214099 udp 10.0.2.104 54523 <-> 98.232.173.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:04.580997 0.000000 udp 10.0.2.104 54523 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:05.582532 1.044141 udp 10.0.2.104 54523 <-> 201.248.60.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:06.583675 0.291889 udp 10.0.2.104 54523 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:07.574989 0.159075 udp 10.0.2.104 54523 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:08.576756 0.247554 udp 10.0.2.104 54523 <-> 202.142.86.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:09.577770 0.037293 udp 10.0.2.104 54523 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:10.579294 0.048779 udp 10.0.2.104 54523 <-> 88.196.202.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:11.581177 3.995663 udp 10.0.2.104 54523 -> 197.200.160.40 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:12.582246 2.040557 udp 10.0.2.104 54523 <-> 111.92.49.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:13.583437 0.000000 udp 10.0.2.104 54523 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:14.574907 0.000000 udp 10.0.2.104 54523 -> 96.26.13.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:16.578025 2.110211 udp 10.0.2.104 54523 <-> 212.122.101.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:17.579365 0.049366 udp 10.0.2.104 54523 <-> 88.196.202.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:19.582197 0.156375 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:20.584187 0.171258 udp 10.0.2.104 54523 <-> 75.66.130.254 16464 CON 0 0 2 388 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:21.575050 0.270641 udp 10.0.2.104 54523 <-> 181.166.30.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:22.576776 0.139668 udp 10.0.2.104 54523 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:23.237978 0.000130 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:30:23.578331 0.084363 udp 10.0.2.104 54523 <-> 85.182.110.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:24.579682 0.000000 udp 10.0.2.104 54523 -> 80.99.71.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:25.580642 0.171415 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:26.582523 0.060191 udp 10.0.2.104 54523 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:27.583959 0.000000 udp 10.0.2.104 54523 -> 89.136.139.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:28.575191 0.023080 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:29.576506 0.000000 udp 10.0.2.104 54523 -> 76.16.28.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:30.578093 0.000000 udp 10.0.2.104 54523 -> 220.225.13.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:31.579595 0.027275 udp 10.0.2.104 54523 <-> 213.240.199.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:32.580708 1.142501 udp 10.0.2.104 54523 <-> 184.56.45.20 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:34.583907 0.022529 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:35.575200 0.056173 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:36.576660 0.058246 udp 10.0.2.104 54523 <-> 151.15.141.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:37.578577 0.454205 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:38.579339 0.000000 udp 10.0.2.104 54523 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:39.581356 0.404690 udp 10.0.2.104 54523 <-> 201.44.88.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:40.582216 0.000000 udp 10.0.2.104 54523 -> 218.164.111.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:41.584433 0.391872 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:42.675893 0.254939 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:43.676872 0.347178 udp 10.0.2.104 54523 <-> 1.175.217.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:44.678796 0.429974 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:45.679694 0.072446 udp 10.0.2.104 54523 <-> 85.84.86.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:46.681443 0.161327 udp 10.0.2.104 54523 <-> 67.241.70.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:47.682415 0.056210 udp 10.0.2.104 54523 <-> 176.97.51.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:48.673855 0.381577 udp 10.0.2.104 54523 <-> 107.213.251.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:49.675659 0.073101 udp 10.0.2.104 54523 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:50.676853 0.027152 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:51.678167 0.000000 udp 10.0.2.104 54523 -> 86.38.55.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:52.679984 0.000000 udp 10.0.2.104 54523 -> 98.232.173.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:30:53.681385 0.051238 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:54.683043 0.210513 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:55.674099 0.149116 udp 10.0.2.104 54523 <-> 88.164.164.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:56.675747 0.137749 udp 10.0.2.104 54523 <-> 68.34.31.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:57.677502 0.068990 udp 10.0.2.104 54523 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:58.678544 0.233282 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:30:59.680036 0.000000 udp 10.0.2.104 54523 -> 125.4.221.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:00.681431 0.000000 udp 10.0.2.104 54523 -> 61.227.76.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:01.682578 0.419743 udp 10.0.2.104 54523 <-> 117.194.7.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:02.674281 0.000000 udp 10.0.2.104 54523 -> 190.190.21.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:03.675969 0.041146 udp 10.0.2.104 54523 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:04.676880 0.439787 udp 10.0.2.104 54523 <-> 182.214.34.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:05.678421 0.000000 udp 10.0.2.104 54523 -> 201.211.119.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:06.680240 0.178922 udp 10.0.2.104 54523 <-> 72.201.124.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:07.681484 0.129375 udp 10.0.2.104 54523 <-> 75.109.40.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:08.683291 0.348747 udp 10.0.2.104 54523 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:09.674319 0.000000 udp 10.0.2.104 54523 -> 182.165.171.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:10.335329 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:31:10.675976 0.167222 udp 10.0.2.104 54523 <-> 68.51.223.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:11.677042 1.170744 udp 10.0.2.104 54523 <-> 71.61.44.160 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:13.680004 0.000000 udp 10.0.2.104 54523 -> 114.24.114.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:14.681905 0.213491 udp 10.0.2.104 54523 <-> 189.193.239.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:15.682800 0.070410 udp 10.0.2.104 54523 <-> 188.32.59.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:16.674505 0.152594 udp 10.0.2.104 54523 <-> 70.118.93.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:17.675754 0.000000 udp 10.0.2.104 54523 -> 24.18.229.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:18.677484 0.337359 udp 10.0.2.104 54523 <-> 14.96.189.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:19.678958 0.157299 udp 10.0.2.104 54523 <-> 68.63.70.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:20.680430 0.388111 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:21.681302 0.072864 udp 10.0.2.104 54523 <-> 46.185.23.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:22.683059 0.150287 udp 10.0.2.104 54523 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:23.674637 1.324010 udp 10.0.2.104 54523 <-> 113.193.24.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:24.676116 0.035168 udp 10.0.2.104 54523 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:25.677293 0.145059 udp 10.0.2.104 54523 <-> 69.124.254.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:26.678953 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:27.680098 0.089984 udp 10.0.2.104 54523 <-> 83.230.170.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:28.681374 0.053919 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:29.682853 0.187283 udp 10.0.2.104 54523 <-> 49.205.136.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:30.674356 0.593249 udp 10.0.2.104 54523 <-> 106.198.209.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:31.675705 0.212261 udp 10.0.2.104 54523 <-> 108.185.229.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:32.677263 0.156826 udp 10.0.2.104 54523 <-> 96.28.143.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:33.679097 0.142007 udp 10.0.2.104 54523 <-> 1.186.124.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:34.680147 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:35.681480 0.378955 udp 10.0.2.104 54523 <-> 85.136.45.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:36.683434 0.167321 udp 10.0.2.104 54523 <-> 24.144.87.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:37.674724 0.093092 udp 10.0.2.104 54523 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:38.676477 0.191345 udp 10.0.2.104 54523 <-> 50.178.6.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:39.677618 0.057403 udp 10.0.2.104 54523 <-> 89.253.170.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:40.679280 0.180576 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:41.680758 0.000000 udp 10.0.2.104 54523 -> 117.204.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:42.681880 0.177748 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:43.683647 0.000000 udp 10.0.2.104 54523 -> 106.212.15.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:44.674391 0.000000 udp 10.0.2.104 54523 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:45.675925 0.136626 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:46.677473 0.000000 udp 10.0.2.104 54523 -> 91.15.138.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:47.679063 0.000000 udp 10.0.2.104 54523 -> 24.173.195.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:48.680549 1.303639 udp 10.0.2.104 54523 <-> 189.54.14.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:49.682268 2.137118 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:50.683378 0.140735 udp 10.0.2.104 54523 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:52.676091 0.000000 udp 10.0.2.104 54523 -> 88.246.181.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:53.677698 0.291265 udp 10.0.2.104 54523 -> 187.56.104.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:53.968963 0.000000 icmp 187.56.104.56 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 06:31:54.678920 0.000000 udp 10.0.2.104 54523 -> 87.205.140.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:31:55.680590 0.058885 udp 10.0.2.104 54523 <-> 89.40.50.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:56.682084 0.043562 udp 10.0.2.104 54523 <-> 89.25.112.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:57.332694 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:31:57.683549 2.163780 udp 10.0.2.104 54523 <-> 75.115.165.81 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:31:58.674619 0.079811 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:00.677503 0.000000 udp 10.0.2.104 54523 -> 108.85.122.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:01.679372 0.000000 udp 10.0.2.104 54523 -> 86.122.233.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:02.680739 0.302552 udp 10.0.2.104 54523 <-> 177.100.111.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:03.681688 4.367589 udp 10.0.2.104 54523 <-> 190.194.201.234 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:04.683438 0.525218 udp 10.0.2.104 54523 <-> 61.59.225.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:05.674926 4.005656 udp 10.0.2.104 54523 -> 114.37.15.246 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:06.676243 4.005625 udp 10.0.2.104 54523 -> 123.193.222.16 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:08.678953 0.000000 udp 10.0.2.104 54523 -> 98.193.134.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:11.683634 4.004331 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:12.675239 0.044260 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:13.676558 0.276193 udp 10.0.2.104 54523 <-> 190.151.62.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:14.677572 0.041135 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:16.680954 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:17.682022 0.162078 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:18.683284 0.124104 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:19.675015 0.290868 udp 10.0.2.104 54523 <-> 171.97.87.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:20.676425 0.027195 udp 10.0.2.104 54523 <-> 213.240.199.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:21.678192 0.156777 udp 10.0.2.104 54523 <-> 76.23.186.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:22.679196 0.017568 udp 10.0.2.104 54523 <-> 89.173.235.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:23.680795 0.094488 udp 10.0.2.104 54523 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:24.682617 0.407508 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:25.683708 0.036283 udp 10.0.2.104 54523 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:26.675029 0.213521 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:27.676972 0.172990 udp 10.0.2.104 54523 <-> 49.204.100.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:28.678088 0.000000 udp 10.0.2.104 54523 -> 72.45.2.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:29.679140 0.035203 udp 10.0.2.104 54523 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:30.680774 0.338092 udp 10.0.2.104 54523 <-> 220.158.39.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:31.681951 0.206701 udp 10.0.2.104 54523 <-> 75.70.148.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:32.683525 0.000000 udp 10.0.2.104 54523 -> 85.182.110.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:33.675259 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:34.676566 0.000000 udp 10.0.2.104 54523 -> 98.67.186.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:35.678404 0.237357 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:36.679732 0.112954 udp 10.0.2.104 54523 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:37.681267 0.000000 udp 10.0.2.104 54523 -> 46.203.90.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:38.682176 0.140172 udp 10.0.2.104 54523 <-> 79.12.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:39.683668 0.000000 udp 10.0.2.104 54523 -> 5.103.62.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:40.675339 4.261931 udp 10.0.2.104 54523 <-> 72.42.149.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:41.676779 0.045172 udp 10.0.2.104 54523 <-> 89.25.112.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:42.678133 0.058957 udp 10.0.2.104 54523 <-> 84.201.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:43.679306 0.089243 udp 10.0.2.104 54523 <-> 79.36.189.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:44.340608 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:32:44.681308 0.000000 udp 10.0.2.104 54523 -> 203.171.229.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:45.682766 0.176654 udp 10.0.2.104 54523 <-> 182.71.74.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:46.684138 0.177609 udp 10.0.2.104 54523 <-> 183.83.152.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:47.674956 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:48.676967 0.143398 udp 10.0.2.104 54523 <-> 37.150.22.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:49.678016 0.000000 udp 10.0.2.104 54523 -> 151.73.60.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:32:50.679987 0.388691 udp 10.0.2.104 54523 <-> 75.246.251.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:51.680853 0.050510 udp 10.0.2.104 54523 <-> 86.123.213.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:52.682142 4.384878 udp 10.0.2.104 54523 <-> 114.47.92.145 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:53.683672 0.157164 udp 10.0.2.104 54523 <-> 71.74.77.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:54.675138 0.042388 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:55.677155 3.190515 udp 10.0.2.104 54523 <-> 78.23.122.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:57.679986 0.361783 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:58.680758 0.223275 udp 10.0.2.104 54523 <-> 186.188.24.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:32:59.682525 0.180286 udp 10.0.2.104 54523 <-> 98.177.241.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:00.684008 0.157461 udp 10.0.2.104 54523 <-> 24.101.81.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:01.675145 0.173507 udp 10.0.2.104 54523 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:02.676993 0.159419 udp 10.0.2.104 54523 <-> 216.20.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:03.678025 0.545825 udp 10.0.2.104 54523 <-> 117.195.229.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:04.679569 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:05.681375 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:06.682276 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:07.683924 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:08.675290 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:09.677017 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:10.678226 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:11.680254 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:12.681532 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:13.682618 0.443698 udp 10.0.2.104 54523 <-> 81.172.41.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:14.684142 0.000000 udp 10.0.2.104 54523 -> 76.69.199.179 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:15.675976 0.056033 udp 10.0.2.104 54523 <-> 89.28.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:16.676679 0.171040 udp 10.0.2.104 54523 <-> 24.107.139.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:17.678332 0.225516 udp 10.0.2.104 54523 <-> 71.192.132.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:18.680028 0.157195 udp 10.0.2.104 54523 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:19.680969 1.120422 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:20.682502 0.000000 udp 10.0.2.104 54523 -> 181.192.6.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:21.674447 0.177781 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:22.675362 2.325396 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:23.677003 2.002593 udp 10.0.2.104 54523 -> 41.42.19.81 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:26.681299 0.339744 udp 10.0.2.104 54523 <-> 61.38.0.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:27.683110 0.142305 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:28.674612 2.645458 udp 10.0.2.104 54523 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:29.675806 0.136541 udp 10.0.2.104 54523 <-> 68.194.2.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:30.677347 0.000000 udp 10.0.2.104 54523 -> 91.120.99.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:31.338249 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:33:31.678416 0.393961 udp 10.0.2.104 54523 <-> 125.1.93.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:32.680514 0.000000 udp 10.0.2.104 54523 -> 101.63.183.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:33.681409 0.141332 udp 10.0.2.104 54523 <-> 74.207.2.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:34.682976 0.067086 udp 10.0.2.104 54523 <-> 109.197.98.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:35.674104 0.268472 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:36.675387 0.220223 udp 10.0.2.104 54523 <-> 95.158.97.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:37.677388 0.000000 udp 10.0.2.104 54523 -> 220.142.10.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:38.678899 0.000000 udp 10.0.2.104 54523 -> 190.176.231.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:39.679798 1.211848 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:40.681362 0.376122 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:41.682760 0.048027 udp 10.0.2.104 54523 <-> 188.27.89.242 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:42.674209 0.305562 udp 10.0.2.104 54523 <-> 58.11.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:43.675529 0.024114 udp 10.0.2.104 54523 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:44.677314 0.141625 udp 10.0.2.104 54523 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:45.678387 0.022652 udp 10.0.2.104 54523 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:46.679909 0.216745 udp 10.0.2.104 54523 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:47.681478 0.143575 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:48.682675 2.567987 udp 10.0.2.104 54523 <-> 202.142.85.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:49.674507 0.040782 udp 10.0.2.104 54523 <-> 178.148.27.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:50.675935 0.067830 udp 10.0.2.104 54523 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:51.677046 0.359487 udp 10.0.2.104 54523 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:52.678504 2.250593 udp 10.0.2.104 54523 <-> 161.200.214.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:53.680279 0.026810 udp 10.0.2.104 54523 <-> 213.240.199.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:55.683126 0.000000 udp 10.0.2.104 54523 -> 75.186.45.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:33:56.674321 0.296387 udp 10.0.2.104 54523 <-> 187.15.59.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:57.675894 3.433730 udp 10.0.2.104 54523 <-> 173.214.226.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:58.677129 0.152227 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:33:59.678636 3.004544 udp 10.0.2.104 54523 -> 72.149.35.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:01.682006 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:03.674312 0.067417 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:04.676392 0.317216 udp 10.0.2.104 54523 <-> 124.84.53.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:05.677246 0.077115 udp 10.0.2.104 54523 <-> 37.72.21.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:06.678746 1.398618 udp 10.0.2.104 54523 <-> 59.20.31.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:08.681517 3.694859 udp 10.0.2.104 54523 <-> 24.140.176.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:09.682900 0.055144 udp 10.0.2.104 54523 <-> 79.117.163.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:10.674568 0.399505 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:11.676091 0.045899 udp 10.0.2.104 54523 <-> 80.97.88.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:12.678189 0.129529 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:13.679148 3.995861 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:14.680748 0.000000 udp 10.0.2.104 54523 -> 82.19.149.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:15.681750 0.000000 udp 10.0.2.104 54523 -> 2.139.213.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:16.683423 0.055814 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:18.335729 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:34:18.676427 0.139325 udp 10.0.2.104 54523 <-> 46.250.78.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:19.677269 0.000000 udp 10.0.2.104 54523 -> 209.165.242.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:20.678671 0.543113 udp 10.0.2.104 54523 <-> 70.14.197.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:21.680703 3.995817 udp 10.0.2.104 54523 <-> 190.189.116.41 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:22.682179 0.588327 udp 10.0.2.104 54523 <-> 79.121.110.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:23.683222 0.058262 udp 10.0.2.104 54523 <-> 78.49.234.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:24.674660 3.585911 udp 10.0.2.104 54523 <-> 188.6.74.103 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:26.677287 0.000000 udp 10.0.2.104 54523 -> 190.198.147.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:28.680817 1.144036 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:30.683508 0.048735 udp 10.0.2.104 54523 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:31.674902 0.000000 udp 10.0.2.104 54523 -> 115.240.7.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:32.675953 0.000000 udp 10.0.2.104 54523 -> 82.241.35.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:33.677522 3.004174 udp 10.0.2.104 54523 -> 58.33.102.222 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:34.679425 0.135747 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:35.680456 0.000000 udp 10.0.2.104 54523 -> 178.120.201.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:37.683678 0.407990 udp 10.0.2.104 54523 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:38.357485 0.000000 udp 10.0.2.104 54523 <- 115.240.7.236 16464 RSP 0 0 1 610 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:38.674535 0.000000 udp 10.0.2.104 54523 -> 66.254.209.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:39.676216 0.035741 udp 10.0.2.104 54523 <-> 92.238.10.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:40.677480 0.060948 udp 10.0.2.104 54523 <-> 89.223.50.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:41.679047 2.003038 udp 10.0.2.104 54523 <-> 75.244.136.250 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:42.680962 0.320257 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:44.683803 0.176619 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:45.127086 3.001549 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:34:45.674730 0.000000 udp 10.0.2.104 54523 -> 77.78.239.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:46.676643 0.000000 udp 10.0.2.104 54523 -> 96.63.150.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:47.677773 0.281008 udp 10.0.2.104 54523 <-> 190.188.100.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:48.679452 0.211684 udp 10.0.2.104 54523 <-> 74.77.171.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:49.680950 0.591810 udp 10.0.2.104 54523 <-> 111.248.57.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:50.682031 0.164150 udp 10.0.2.104 54523 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:51.683585 0.000000 udp 10.0.2.104 54523 -> 14.99.9.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:34:52.134401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:34:52.675416 0.357191 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:53.676507 0.150912 udp 10.0.2.104 54523 <-> 96.30.149.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:54.677937 0.356023 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:55.679516 0.135585 udp 10.0.2.104 54523 <-> 24.222.149.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:56.681222 0.817094 udp 10.0.2.104 54523 <-> 211.74.92.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:57.681882 0.052844 udp 10.0.2.104 54523 <-> 79.114.167.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:58.683386 0.143291 udp 10.0.2.104 54523 <-> 68.197.223.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:34:59.675317 0.196549 udp 10.0.2.104 54523 <-> 128.123.234.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:00.135735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:35:00.676412 0.000000 udp 10.0.2.104 54523 -> 209.137.215.138 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:01.677848 0.111631 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:02.679047 0.386495 udp 10.0.2.104 54523 <-> 220.86.55.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:03.680801 0.390182 udp 10.0.2.104 54523 <-> 175.213.179.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:04.682461 2.059569 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:05.333137 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:35:05.683414 0.036576 udp 10.0.2.104 54523 <-> 92.238.10.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:07.676460 0.024879 udp 10.0.2.104 54523 <-> 94.208.41.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:08.677774 0.102281 udp 10.0.2.104 54523 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:09.679650 0.048303 udp 10.0.2.104 54523 <-> 87.247.100.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:10.680787 0.346729 udp 10.0.2.104 54523 <-> 189.68.134.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:11.682210 0.300635 udp 10.0.2.104 54523 <-> 189.110.71.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:12.684634 0.000000 udp 10.0.2.104 54523 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:13.674906 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:14.676741 0.307389 udp 10.0.2.104 54523 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:15.677829 0.000000 udp 10.0.2.104 54523 -> 93.180.115.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:16.138552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:35:16.679427 0.179009 udp 10.0.2.104 54523 <-> 162.192.38.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:17.681067 0.095638 udp 10.0.2.104 54523 <-> 82.130.134.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:18.682264 0.160074 udp 10.0.2.104 54523 <-> 71.90.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:19.684242 0.056210 udp 10.0.2.104 54523 <-> 217.197.248.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:21.676580 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:21.676659 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:35:22.677820 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:23.680009 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:24.680845 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:25.682599 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:26.684107 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:27.675291 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:28.676848 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:29.678170 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:30.679388 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:31.680952 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:32.682722 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:33.683809 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:34.675510 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:35.677198 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:36.678496 0.062334 udp 10.0.2.104 54523 <-> 79.117.151.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:37.679711 0.000000 udp 10.0.2.104 54523 -> 220.142.70.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:38.680961 0.301147 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:39.682416 0.141762 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:40.684052 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:41.675222 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:42.676898 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:43.678492 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:44.679787 0.000000 udp 10.0.2.104 54523 -> 58.186.173.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:45.681118 0.060695 udp 10.0.2.104 54523 <-> 79.117.151.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:46.682787 0.174968 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:35:47.684053 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:47.684116 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:35:48.144986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:35:48.675665 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:49.676789 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:50.678389 0.000000 udp 10.0.2.104 54523 -> 95.158.97.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:51.679897 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:52.680941 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:53.342188 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:35:53.682926 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:54.673808 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:55.675626 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:56.677388 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:57.678577 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:58.680185 0.000000 udp 10.0.2.104 54523 -> 178.125.70.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:35:59.681155 0.172806 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:00.683007 0.221821 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:01.674200 0.000000 udp 10.0.2.104 54523 -> 139.0.190.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:02.675847 0.000000 udp 10.0.2.104 54523 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:03.677404 0.204382 udp 10.0.2.104 54523 <-> 201.211.194.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:04.678573 3.169260 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:05.679839 0.000000 udp 10.0.2.104 54523 -> 114.69.70.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:06.681259 0.040863 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:08.674141 0.000000 udp 10.0.2.104 54523 -> 88.207.58.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:09.676077 0.000000 udp 10.0.2.104 54523 -> 87.221.194.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:10.676914 3.225766 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:11.678876 4.997281 udp 10.0.2.104 54523 -> 62.43.82.97 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:12.680314 4.821892 udp 10.0.2.104 54523 <-> 139.0.190.28 16464 CON 0 0 3 306 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:14.682681 0.000000 udp 10.0.2.104 54523 -> 188.53.70.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:17.676858 0.215118 udp 10.0.2.104 54523 <-> 201.211.194.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:18.678963 0.000000 udp 10.0.2.104 54523 -> 190.194.201.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:19.679740 0.119526 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:20.681377 0.164355 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:21.682926 0.162326 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:22.674835 0.000000 udp 10.0.2.104 54523 -> 213.37.230.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:23.675508 0.400523 udp 10.0.2.104 54523 <-> 62.68.100.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:24.677701 0.618470 udp 10.0.2.104 54523 <-> 177.180.213.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:25.679071 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:26.680697 0.433159 udp 10.0.2.104 54523 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:27.681408 4.997749 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:28.683376 4.996542 udp 10.0.2.104 54523 -> 81.147.68.37 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:29.674342 0.370680 udp 10.0.2.104 54523 <-> 223.17.105.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:30.675988 0.627530 udp 10.0.2.104 54523 <-> 177.180.213.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:31.677016 0.000000 udp 10.0.2.104 54523 -> 80.180.82.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:34.681349 0.097143 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:35.683343 0.302802 udp 10.0.2.104 54523 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:36.674679 0.000000 udp 10.0.2.104 54523 -> 212.104.170.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:37.676233 0.000000 udp 10.0.2.104 54523 -> 85.84.74.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:38.677768 0.000000 udp 10.0.2.104 54523 -> 190.94.233.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:39.678511 0.306293 udp 10.0.2.104 54523 <-> 201.211.194.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:40.339693 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:36:40.680353 0.154958 udp 10.0.2.104 54523 <-> 84.238.229.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:41.681925 0.161404 udp 10.0.2.104 54523 <-> 65.35.3.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:42.682994 0.157857 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:43.674917 4.005228 udp 10.0.2.104 54523 -> 121.216.135.242 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:44.675796 4.170318 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:45.677564 0.000000 udp 10.0.2.104 54523 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:46.679135 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:49.683438 0.168234 udp 10.0.2.104 54523 <-> 67.246.131.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:50.384677 0.015130 udp 10.0.2.104 54569 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 06:36:50.400131 0.000000 udp 10.0.2.104 54570 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:50.674494 0.000000 udp 10.0.2.104 54523 -> 201.211.194.192 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:51.676421 0.000000 udp 10.0.2.104 54523 -> 85.84.74.10 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:52.677412 1.109942 udp 10.0.2.104 54523 <-> 190.94.233.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:53.679337 0.000000 udp 10.0.2.104 54523 -> 78.92.11.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:54.680710 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:55.682207 0.132558 udp 10.0.2.104 54523 <-> 68.42.12.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:56.683339 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:57.675075 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:36:58.675832 0.068011 udp 10.0.2.104 54523 <-> 188.26.188.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:36:59.677478 0.337442 udp 10.0.2.104 54523 <-> 190.172.75.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:00.678954 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:01.680687 0.168649 udp 10.0.2.104 54523 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:02.681943 0.315176 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:03.683035 0.422446 udp 10.0.2.104 54523 <-> 27.2.203.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:04.675118 0.135560 udp 10.0.2.104 54523 <-> 72.226.86.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:05.676417 0.370051 udp 10.0.2.104 54523 <-> 189.103.8.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:06.677582 0.146336 udp 10.0.2.104 54523 <-> 174.96.94.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:07.679501 0.000000 udp 10.0.2.104 54523 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:08.680517 0.399601 udp 10.0.2.104 54523 <-> 120.75.17.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:09.681848 0.159112 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:10.683829 0.661058 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:11.674515 0.000000 udp 10.0.2.104 54523 -> 77.88.129.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:12.676664 0.030581 udp 10.0.2.104 54523 <-> 87.97.246.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:13.677505 0.046922 udp 10.0.2.104 54523 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:14.679727 0.061227 udp 10.0.2.104 54523 <-> 93.72.126.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:15.680842 0.497623 udp 10.0.2.104 54523 <-> 61.59.225.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:16.681886 0.346406 udp 10.0.2.104 54523 <-> 180.176.22.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:17.683669 0.014134 udp 10.0.2.104 54523 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:18.674839 0.293151 udp 10.0.2.104 54523 <-> 117.194.7.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:19.676559 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:20.677462 0.112534 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:21.679374 0.142748 udp 10.0.2.104 54523 <-> 76.11.73.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:22.680982 0.000000 udp 10.0.2.104 54523 -> 1.168.250.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:23.682266 0.333438 udp 10.0.2.104 54523 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:24.683433 0.103595 udp 10.0.2.104 54523 <-> 178.123.40.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:25.675385 0.286448 udp 10.0.2.104 54523 <-> 68.122.149.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:26.676299 1.225622 udp 10.0.2.104 54523 <-> 92.244.130.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:27.337156 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:37:27.677617 0.183770 udp 10.0.2.104 54523 <-> 87.76.53.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:28.679371 4.997205 udp 10.0.2.104 54523 -> 190.218.165.1 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:29.681161 0.027763 udp 10.0.2.104 54523 <-> 80.98.204.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:30.681841 0.175461 udp 10.0.2.104 54523 <-> 74.62.165.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:31.683730 0.030423 udp 10.0.2.104 54523 <-> 77.238.194.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:32.675234 0.000000 udp 10.0.2.104 54523 -> 114.145.242.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:34.678221 0.235685 udp 10.0.2.104 54523 <-> 201.209.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:35.679376 0.151159 udp 10.0.2.104 54523 <-> 151.72.22.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:36.680890 0.310736 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:37.682197 4.996900 udp 10.0.2.104 54523 <-> 79.113.175.8 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:38.683672 0.506692 udp 10.0.2.104 54523 <-> 83.180.205.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:39.674774 0.225030 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:40.676458 0.066802 udp 10.0.2.104 54523 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:41.678329 0.414646 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:42.719940 0.000000 udp 10.0.2.104 54523 <- 79.113.175.8 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:43.680914 0.519608 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:44.682725 0.000000 udp 10.0.2.104 54523 -> 5.15.14.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:45.683421 0.042003 udp 10.0.2.104 54523 <-> 147.156.162.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:46.675339 0.164433 udp 10.0.2.104 54523 <-> 98.216.132.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:47.676958 3.003807 udp 10.0.2.104 54523 -> 74.99.85.11 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:48.678188 4.005799 udp 10.0.2.104 54523 -> 115.241.36.120 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:49.679428 0.186574 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:51.682540 0.000000 udp 10.0.2.104 54523 -> 91.192.0.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:53.675508 0.000000 udp 10.0.2.104 54523 -> 177.224.174.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:54.726910 0.063501 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:55.728064 0.094022 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:56.729431 0.417537 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:37:57.730961 0.000000 udp 10.0.2.104 54523 -> 152.66.219.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:58.732787 0.000000 udp 10.0.2.104 54523 -> 91.192.0.1 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:37:59.734184 0.110820 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:00.725407 0.000000 udp 10.0.2.104 54523 -> 113.254.247.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:01.726825 0.134046 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:02.728862 0.193664 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:03.729716 0.266603 udp 10.0.2.104 54523 <-> 177.224.174.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:04.731389 0.164841 udp 10.0.2.104 54523 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:05.732410 0.000000 udp 10.0.2.104 54523 -> 152.66.219.240 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:06.734037 2.852494 udp 10.0.2.104 54523 <-> 186.19.203.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:07.725577 0.038098 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:08.726960 0.000000 udp 10.0.2.104 54523 -> 119.24.43.12 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:09.728375 0.026870 udp 10.0.2.104 54523 <-> 82.101.244.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:10.729578 0.141329 udp 10.0.2.104 54523 <-> 67.242.194.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:11.731400 4.368202 udp 10.0.2.104 54523 <-> 36.229.173.120 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:13.734550 0.220184 udp 10.0.2.104 54523 <-> 117.213.217.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:14.385034 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:38:14.725383 1.352833 udp 10.0.2.104 54523 <-> 92.244.130.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:16.728461 0.302596 udp 10.0.2.104 54523 <-> 101.63.194.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:17.729954 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:18.731425 0.158073 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:19.732995 0.000000 udp 10.0.2.104 54523 -> 190.189.207.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:20.733961 0.150528 udp 10.0.2.104 54523 <-> 74.70.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:21.725247 0.142989 udp 10.0.2.104 54523 <-> 67.242.78.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:22.727205 0.000000 udp 10.0.2.104 54523 -> 190.107.109.178 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:23.728889 0.229070 udp 10.0.2.104 54523 <-> 186.89.117.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:24.729692 0.046491 udp 10.0.2.104 54523 <-> 78.84.143.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:25.731125 0.174842 udp 10.0.2.104 54523 <-> 173.176.228.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:26.732885 0.048549 udp 10.0.2.104 54523 <-> 90.228.236.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:27.724176 0.043451 udp 10.0.2.104 54523 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:28.725795 0.169846 udp 10.0.2.104 54523 <-> 72.178.159.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:29.726844 0.156520 udp 10.0.2.104 54523 <-> 72.239.167.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:30.728376 0.155077 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:31.730082 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:32.731851 0.048918 udp 10.0.2.104 54523 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:33.733006 0.268181 udp 10.0.2.104 54523 <-> 50.70.121.229 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:34.724286 0.164621 udp 10.0.2.104 54523 <-> 71.56.93.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:35.725769 0.768321 udp 10.0.2.104 54523 <-> 24.168.107.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:36.727300 0.153774 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:37.728262 0.353194 udp 10.0.2.104 54523 <-> 37.254.82.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:38.730175 0.845102 udp 10.0.2.104 54523 <-> 24.68.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:39.731389 0.165537 udp 10.0.2.104 54523 <-> 75.74.9.221 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:40.732928 0.000000 udp 10.0.2.104 54523 -> 109.248.82.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:41.724197 0.049559 udp 10.0.2.104 54523 <-> 80.243.20.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:42.725858 0.350629 udp 10.0.2.104 54523 <-> 182.214.34.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:43.727093 3.004513 udp 10.0.2.104 54523 -> 78.92.11.63 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:38:44.729083 0.149663 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:45.729841 0.144041 udp 10.0.2.104 54523 <-> 149.140.171.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:47.733176 0.318235 udp 10.0.2.104 54523 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:48.724392 0.424211 udp 10.0.2.104 54523 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:49.725517 0.121100 udp 10.0.2.104 54523 <-> 216.164.210.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:50.726934 1.752030 udp 10.0.2.104 54523 <-> 186.22.10.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:51.728648 0.315215 udp 10.0.2.104 54523 <-> 177.55.204.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:52.729902 0.304712 udp 10.0.2.104 54523 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:53.731415 0.120297 udp 10.0.2.104 54523 <-> 206.253.172.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:54.733359 0.361572 udp 10.0.2.104 54523 <-> 112.118.56.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:55.724667 0.287922 udp 10.0.2.104 54523 <-> 179.216.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:56.725549 0.061085 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:57.727269 0.399027 udp 10.0.2.104 54523 <-> 211.178.220.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:58.728602 0.162080 udp 10.0.2.104 54523 <-> 69.180.126.101 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:38:59.729974 0.049002 udp 10.0.2.104 54523 <-> 83.166.2.153 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:00.731484 0.101850 udp 10.0.2.104 54523 <-> 109.235.225.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:01.392649 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:39:01.733501 0.096450 udp 10.0.2.104 54523 <-> 79.36.229.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:02.724838 0.036737 udp 10.0.2.104 54523 <-> 89.69.52.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:03.726121 0.044701 udp 10.0.2.104 54523 <-> 46.162.104.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:04.727185 0.073664 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:05.729070 4.292921 udp 10.0.2.104 54523 <-> 122.27.202.232 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:06.730057 0.265951 udp 10.0.2.104 54523 <-> 190.204.99.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:07.732190 0.145542 udp 10.0.2.104 54523 <-> 107.15.31.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:08.733436 1.611518 udp 10.0.2.104 54523 <-> 81.203.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:10.726058 0.000000 udp 10.0.2.104 54523 -> 77.70.120.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:11.727647 0.000000 udp 10.0.2.104 54523 -> 79.117.106.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:12.729077 0.000000 udp 10.0.2.104 54523 -> 68.60.48.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:13.730680 0.158051 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:14.732092 0.157018 udp 10.0.2.104 54523 <-> 111.91.62.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:15.733346 0.412820 udp 10.0.2.104 54523 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:16.724309 0.136663 udp 10.0.2.104 54523 <-> 76.106.23.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:17.726467 0.383453 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:18.727523 0.136497 udp 10.0.2.104 54523 <-> 24.0.79.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:19.728759 0.036167 udp 10.0.2.104 54523 <-> 89.137.133.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:20.730666 0.149856 udp 10.0.2.104 54523 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:21.731498 0.000000 udp 10.0.2.104 54523 -> 108.163.249.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:22.733236 0.000000 udp 10.0.2.104 54523 -> 108.163.253.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:23.724976 2.201163 udp 10.0.2.104 54523 <-> 115.69.243.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:24.726488 0.000000 udp 10.0.2.104 54523 -> 114.33.156.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:25.727359 0.332325 udp 10.0.2.104 54523 <-> 179.235.133.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:26.728810 0.000000 udp 10.0.2.104 54523 -> 211.128.83.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:27.730416 0.166021 udp 10.0.2.104 54523 <-> 68.61.139.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:28.731818 0.068593 udp 10.0.2.104 54523 <-> 151.15.58.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:29.733024 0.000000 udp 10.0.2.104 54523 -> 50.82.72.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:30.725228 0.054159 udp 10.0.2.104 54523 <-> 86.124.208.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:31.726244 0.000000 udp 10.0.2.104 54523 -> 116.75.22.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:31.944535 0.000000 udp 10.0.2.104 54523 <- 211.128.83.225 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:32.727770 3.358861 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:33.729036 0.371212 udp 10.0.2.104 54523 <-> 124.11.140.222 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:34.730557 0.048283 udp 10.0.2.104 54523 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:35.732007 0.057194 udp 10.0.2.104 54523 <-> 86.122.145.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:36.733338 0.000000 udp 10.0.2.104 54523 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:37.724511 0.125117 udp 10.0.2.104 54523 <-> 84.126.6.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:38.726136 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:38.726196 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:39:39.727461 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:40.728852 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:41.730427 0.158045 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:42.732050 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:43.733799 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:44.724784 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:45.726597 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:46.727605 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:47.729568 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:48.390287 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:39:48.730880 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:49.732615 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:50.733986 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:51.725379 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:52.726377 1.001371 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:54.728943 0.155414 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:39:55.730549 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:56.732122 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:57.733762 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:58.725341 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:39:59.726476 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:00.727700 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:01.729013 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:02.730550 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:03.732582 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:04.733780 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:06.726809 0.000058 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:06.726867 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:40:07.727911 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:08.729187 2.180563 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:09.731166 0.133086 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:11.733949 0.000000 udp 10.0.2.104 54523 -> 79.114.71.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:12.725297 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:13.726275 0.066190 udp 10.0.2.104 54523 <-> 84.126.6.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:14.728152 0.289372 udp 10.0.2.104 54523 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:15.729590 0.000000 udp 10.0.2.104 54523 -> 71.59.124.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:16.730879 0.244345 udp 10.0.2.104 54523 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:17.732280 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:18.733695 0.444961 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:19.724902 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:20.726829 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:21.728025 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:22.729428 3.004645 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:22.729478 3.004595 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 06:40:23.731304 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:24.732102 0.287917 udp 10.0.2.104 54523 <-> 187.107.55.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:26.725103 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:27.726511 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:28.727839 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:29.729638 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:30.731139 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:31.732459 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:32.733870 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:33.725197 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:34.726904 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:35.387457 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:40:35.728572 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:36.729347 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:37.731342 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:38.732881 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:39.734060 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:40.725130 2.599405 udp 10.0.2.104 54523 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:41.727162 0.439177 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:42.728467 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:43.730066 0.000000 udp 10.0.2.104 54523 -> 94.127.5.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:44.731023 0.143058 udp 10.0.2.104 54523 <-> 46.5.250.53 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:45.732881 0.023755 udp 10.0.2.104 54523 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:46.734019 0.000000 udp 10.0.2.104 54523 -> 193.106.25.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:47.725483 0.157435 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:48.727293 0.330395 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:49.728548 0.000000 udp 10.0.2.104 54523 -> 79.121.110.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:50.730034 0.357686 udp 10.0.2.104 54523 <-> 220.129.65.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:51.730946 0.467764 udp 10.0.2.104 54523 <-> 221.71.99.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:52.732829 0.000000 udp 10.0.2.104 54523 -> 24.94.112.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:53.733852 0.000000 udp 10.0.2.104 54523 -> 49.205.62.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:54.725453 0.150572 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:55.726963 0.056688 udp 10.0.2.104 54523 <-> 78.21.170.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:56.728772 0.155521 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:57.730129 0.000000 udp 10.0.2.104 54523 -> 114.40.170.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:40:58.731395 0.305005 udp 10.0.2.104 54523 <-> 60.37.183.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:40:59.732591 0.000000 udp 10.0.2.104 54523 -> 173.212.89.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:00.724116 0.308152 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:01.725726 0.355174 udp 10.0.2.104 54523 <-> 200.153.210.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:02.727276 3.127824 udp 10.0.2.104 54523 <-> 89.132.14.33 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:03.728608 0.154005 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:04.729896 4.288210 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:06.733143 0.000000 udp 10.0.2.104 54523 -> 31.140.117.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:07.723905 0.339623 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:09.727226 0.000000 udp 10.0.2.104 54523 -> 109.235.225.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:10.728628 0.291979 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:11.729806 0.154290 udp 10.0.2.104 54523 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:12.731675 1.162960 udp 10.0.2.104 54523 <-> 67.166.246.234 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:14.724534 0.178509 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:15.725618 0.000000 udp 10.0.2.104 54523 -> 186.66.206.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:16.727245 0.267547 udp 10.0.2.104 54523 <-> 117.194.193.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:17.728808 0.073721 udp 10.0.2.104 54523 <-> 84.61.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:18.729828 0.876497 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:19.731596 0.041329 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:20.733352 0.056233 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:21.724357 0.034263 udp 10.0.2.104 54523 <-> 95.88.88.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:22.385065 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:41:22.725797 0.000000 udp 10.0.2.104 54523 -> 202.43.160.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:23.727377 4.996735 udp 10.0.2.104 54523 <-> 201.210.219.39 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:24.728781 0.000000 udp 10.0.2.104 54523 -> 190.174.242.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:25.729801 4.997383 udp 10.0.2.104 54523 <-> 117.204.125.242 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:26.731622 0.406848 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:27.733069 0.000000 udp 10.0.2.104 54523 -> 173.23.113.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:29.726150 0.000000 udp 10.0.2.104 54523 -> 67.53.184.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:31.728985 0.364940 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:31.737072 0.000000 udp 10.0.2.104 54523 <- 201.210.219.39 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:31.919688 0.000000 udp 10.0.2.104 54523 <- 117.204.125.242 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:32.730247 0.159194 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:33.731858 0.037007 udp 10.0.2.104 54523 <-> 91.65.0.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:34.733354 0.233510 udp 10.0.2.104 54523 <-> 189.194.113.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:35.724534 2.003273 udp 10.0.2.104 54523 -> 82.40.241.30 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:36.725736 0.074891 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:38.729120 0.304407 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:39.730093 0.498247 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:40.731918 0.721306 udp 10.0.2.104 54523 <-> 123.201.102.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:41.733265 0.000000 udp 10.0.2.104 54523 -> 78.134.0.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:42.724754 0.410594 udp 10.0.2.104 54523 <-> 118.168.126.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:43.726173 0.140978 udp 10.0.2.104 54523 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:44.727776 0.111120 udp 10.0.2.104 54523 <-> 87.17.138.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:45.728746 0.059056 udp 10.0.2.104 54523 <-> 213.39.225.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:46.730512 0.000000 udp 10.0.2.104 54523 -> 117.204.125.242 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:47.731866 1.992599 udp 10.0.2.104 54523 -> 179.236.253.244 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:48.733321 0.216643 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:50.726486 0.184061 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:51.727305 1.507673 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:52.200157 3.002610 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:41:53.730641 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:54.732153 0.172762 udp 10.0.2.104 54523 <-> 75.133.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:55.733077 0.202108 udp 10.0.2.104 54523 <-> 190.249.30.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:56.724866 3.371527 udp 10.0.2.104 54523 <-> 76.202.180.65 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:41:57.726318 0.000000 udp 10.0.2.104 54523 -> 76.164.250.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:58.727281 0.000000 udp 10.0.2.104 54523 -> 78.165.4.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:41:59.208595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:42:00.730449 0.130783 udp 10.0.2.104 54523 <-> 176.200.231.224 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:01.732313 0.318644 udp 10.0.2.104 54523 <-> 171.96.99.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:02.733163 0.129377 udp 10.0.2.104 54523 <-> 87.17.252.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:03.725110 0.154208 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:04.726051 0.217686 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:05.727442 0.326274 udp 10.0.2.104 54523 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:06.729407 0.000000 udp 10.0.2.104 54523 -> 92.76.224.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:07.209535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:42:07.730325 0.335453 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:08.732045 0.000000 udp 10.0.2.104 54523 -> 117.206.98.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:09.382524 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:42:09.733202 0.058967 udp 10.0.2.104 54523 <-> 78.157.15.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:10.724797 0.000000 udp 10.0.2.104 54523 -> 115.241.149.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:11.726195 0.494639 udp 10.0.2.104 54523 <-> 119.236.234.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:12.727369 0.763433 udp 10.0.2.104 54523 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:13.729188 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:14.730871 0.000000 udp 10.0.2.104 54523 -> 190.192.26.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:15.732175 0.335471 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:16.733798 4.630062 udp 10.0.2.104 54523 <-> 115.241.149.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:17.725032 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:18.726603 0.299946 udp 10.0.2.104 54523 <-> 201.210.93.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:19.727966 0.753451 udp 10.0.2.104 54523 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:20.729426 1.157050 udp 10.0.2.104 54523 <-> 70.185.202.93 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:22.732349 0.001849 udp 10.0.2.104 54523 <-> 109.239.76.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:23.212624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:42:23.733388 0.000000 udp 10.0.2.104 54523 -> 94.50.41.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:24.725193 0.000000 udp 10.0.2.104 54523 -> 46.50.53.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:25.726085 0.000000 udp 10.0.2.104 54523 -> 190.207.231.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:26.727830 1.572302 udp 10.0.2.104 54523 <-> 14.96.28.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:27.729520 0.144719 udp 10.0.2.104 54523 <-> 217.22.82.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:28.730856 0.065535 udp 10.0.2.104 54523 <-> 94.19.17.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:29.732198 0.189779 udp 10.0.2.104 54523 <-> 62.18.19.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:30.733371 0.000000 udp 10.0.2.104 54523 -> 115.245.211.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:31.724752 0.234287 udp 10.0.2.104 54523 <-> 151.25.203.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:32.726447 0.031778 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:33.727818 0.167929 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:34.729129 0.332191 udp 10.0.2.104 54523 <-> 220.80.230.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:35.731086 0.000000 udp 10.0.2.104 54523 -> 115.240.63.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:36.731872 0.412057 udp 10.0.2.104 54523 <-> 61.192.59.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:37.734088 0.189137 udp 10.0.2.104 54523 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:38.724743 0.150638 udp 10.0.2.104 54523 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:39.726454 4.382269 udp 10.0.2.104 54523 <-> 180.177.33.167 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:40.727731 1.417612 udp 10.0.2.104 54523 <-> 190.179.200.225 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:42.731220 0.381673 udp 10.0.2.104 54523 <-> 114.76.142.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:44.733525 0.000000 udp 10.0.2.104 54523 -> 92.236.7.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:45.725505 0.596063 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:46.726520 3.825858 udp 10.0.2.104 54523 <-> 98.67.186.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:47.727942 0.000000 udp 10.0.2.104 54523 -> 79.42.10.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:48.729168 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:50.732002 0.000000 udp 10.0.2.104 54523 -> 1.169.103.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:51.733467 0.204065 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:52.725266 0.050006 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:53.726882 0.588550 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:54.728366 0.307548 udp 10.0.2.104 54523 <-> 72.186.32.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:55.218870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:42:55.729289 1.001980 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:42:56.390648 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:42:57.732780 0.000000 udp 10.0.2.104 54523 -> 1.169.103.233 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:58.733732 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:42:59.724940 0.319534 udp 10.0.2.104 54523 <-> 201.27.47.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:00.726931 0.225133 udp 10.0.2.104 54523 <-> 79.42.10.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:01.727829 0.168080 udp 10.0.2.104 54523 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:02.729551 0.346867 udp 10.0.2.104 54523 <-> 210.232.17.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:03.730916 0.053063 udp 10.0.2.104 54523 <-> 188.27.196.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:04.732929 0.139103 udp 10.0.2.104 54523 <-> 67.242.95.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:05.734104 0.339523 udp 10.0.2.104 54523 <-> 115.240.123.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:06.725386 0.297186 udp 10.0.2.104 54523 <-> 118.86.58.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:07.726592 0.155239 udp 10.0.2.104 54523 <-> 24.112.203.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:08.728465 0.046739 udp 10.0.2.104 54523 <-> 78.84.143.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:09.729313 0.148062 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:10.731431 0.217695 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:11.732206 0.920502 udp 10.0.2.104 54523 <-> 79.132.171.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:12.733965 0.000000 udp 10.0.2.104 54523 -> 67.149.214.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:13.725074 0.049867 udp 10.0.2.104 54523 <-> 82.225.207.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:14.726502 0.199275 udp 10.0.2.104 54523 <-> 103.240.97.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:15.728415 0.270514 udp 10.0.2.104 54523 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:16.729525 0.118898 udp 10.0.2.104 54523 <-> 86.107.40.90 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:17.731186 0.308938 udp 10.0.2.104 54523 <-> 82.212.11.234 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:18.732525 0.000000 udp 10.0.2.104 54523 -> 81.16.174.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:19.733988 0.130536 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:20.725475 1.307970 udp 10.0.2.104 54523 <-> 110.233.68.105 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:22.728324 0.000000 udp 10.0.2.104 54523 -> 183.83.249.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:23.729633 1.135737 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:25.732998 0.082214 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:26.734257 0.000000 udp 10.0.2.104 54523 -> 113.39.129.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:27.725637 0.000000 udp 10.0.2.104 54523 -> 95.107.216.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:28.726887 0.368780 udp 10.0.2.104 54523 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:29.728575 0.147679 udp 10.0.2.104 54523 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:30.729578 0.190053 udp 10.0.2.104 54523 <-> 50.66.54.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:31.731368 1.236226 udp 10.0.2.104 54523 <-> 184.45.92.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:32.733048 0.171590 udp 10.0.2.104 54523 <-> 66.169.209.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:33.724526 0.185921 udp 10.0.2.104 54523 <-> 24.155.247.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:34.725579 0.136790 udp 10.0.2.104 54523 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:35.727055 3.189801 udp 10.0.2.104 54523 <-> 75.111.219.107 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:36.728723 0.193428 udp 10.0.2.104 54523 <-> 113.193.81.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:37.730201 0.169627 udp 10.0.2.104 54523 <-> 72.178.159.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:39.732732 0.181879 udp 10.0.2.104 54523 <-> 184.189.232.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:40.724319 0.154243 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:41.726028 0.040411 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:42.727212 0.045390 udp 10.0.2.104 54523 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:43.388300 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:43:43.728245 0.000000 udp 10.0.2.104 54523 -> 115.241.22.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:44.730080 0.120582 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:45.731523 0.209945 udp 10.0.2.104 54523 <-> 75.25.21.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:46.732805 0.151099 udp 10.0.2.104 54523 <-> 24.144.193.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:47.724201 0.344989 udp 10.0.2.104 54523 <-> 58.177.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:48.725980 0.177612 udp 10.0.2.104 54523 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:49.726877 1.463197 udp 10.0.2.104 54523 <-> 139.0.190.28 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:50.728837 1.335923 udp 10.0.2.104 54523 <-> 201.213.208.87 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:52.731831 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:53.733107 1.014579 udp 10.0.2.104 54523 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:54.724675 0.026907 udp 10.0.2.104 54523 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:43:55.725997 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:56.726968 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:57.728409 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:58.729771 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:43:59.731348 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:00.733325 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:01.724304 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:02.726182 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:03.727503 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:04.728672 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:05.730171 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:06.731471 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:07.732903 4.997598 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:08.724882 0.053790 udp 10.0.2.104 54523 <-> 86.124.208.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:09.725841 0.207614 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:10.727054 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:11.728969 0.000000 udp 10.0.2.104 54523 -> 1.22.86.202 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:13.732175 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:14.733430 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:15.724741 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:16.725672 2.356649 udp 10.0.2.104 54523 <-> 111.242.31.147 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:17.727728 0.027434 udp 10.0.2.104 54523 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:19.730567 0.000000 udp 10.0.2.104 54523 -> 72.172.193.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:20.731966 0.056402 udp 10.0.2.104 54523 <-> 89.28.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:21.733528 4.997041 udp 10.0.2.104 54523 -> 81.37.252.14 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:22.724641 0.000000 udp 10.0.2.104 54523 -> 89.228.227.244 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:23.725730 0.152544 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:24.727482 0.027068 udp 10.0.2.104 54523 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:25.728701 0.413632 udp 10.0.2.104 54523 <-> 72.172.193.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:27.731955 0.329988 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:28.733323 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:30.385221 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:44:30.726115 1.263410 udp 10.0.2.104 54523 <-> 115.253.114.90 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:32.729450 0.150011 udp 10.0.2.104 54523 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:33.730407 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:34.732397 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:35.733386 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:36.724829 0.268741 udp 10.0.2.104 54523 <-> 143.107.215.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:37.725841 0.000000 udp 10.0.2.104 54523 -> 116.202.7.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:38.727710 0.418272 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:39.728864 0.000000 udp 10.0.2.104 54523 -> 178.105.130.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:40.730406 0.391012 udp 10.0.2.104 54523 <-> 27.143.12.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:41.732273 0.058125 udp 10.0.2.104 54523 <-> 78.49.234.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:42.733408 0.186024 udp 10.0.2.104 54523 <-> 106.51.82.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:43.724812 0.281861 udp 10.0.2.104 54523 <-> 151.65.229.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:44.726339 1.048194 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:46.729256 0.060389 udp 10.0.2.104 54523 <-> 5.12.93.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:47.730576 2.631698 udp 10.0.2.104 54523 <-> 101.63.192.68 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:48.731829 1.159248 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:50.724541 0.781176 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:51.726402 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:52.727557 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:53.729557 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:54.730866 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:54.730922 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:44:55.732360 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:56.733392 0.000000 udp 10.0.2.104 54523 -> 70.184.178.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:57.724696 0.000000 udp 10.0.2.104 54523 -> 114.37.112.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:44:58.726107 0.146681 udp 10.0.2.104 54523 <-> 69.14.90.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:44:59.727639 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:00.729237 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:01.730539 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:02.732447 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:03.733343 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:04.725120 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:05.726571 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:06.728031 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:07.729312 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:08.730644 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:10.734017 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:10.734077 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:45:11.725233 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:12.726369 0.094538 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:45:13.727817 0.173468 udp 10.0.2.104 54523 <-> 74.56.191.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:45:14.729298 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:15.731179 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:16.732185 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:17.383005 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:45:17.733382 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:18.724855 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:19.726449 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:20.727803 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:21.729245 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:22.731242 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:23.732324 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:24.733979 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:25.725042 4.005582 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:26.726637 0.000057 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:26.726694 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:45:28.729354 0.135565 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:45:30.732248 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:31.733527 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:32.725352 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:33.767044 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:34.767966 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:35.769562 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:36.770923 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:37.772883 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:38.774281 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:39.765218 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:40.767030 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:41.768036 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:42.769408 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:43.771088 0.123432 udp 10.0.2.104 54523 <-> 24.122.167.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:45:44.772801 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:45.774264 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:46.765437 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:47.767162 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:49.769688 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:50.771381 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:51.772426 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:52.774396 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:53.785447 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:53.785509 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:45:54.787301 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:55.788336 0.000000 udp 10.0.2.104 54523 -> 114.37.112.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:45:56.790127 0.124528 udp 10.0.2.104 54523 <-> 24.122.167.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:45:57.790951 0.105118 udp 10.0.2.104 54523 <-> 46.10.153.78 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:45:58.793075 0.886674 udp 10.0.2.104 54523 <-> 86.64.209.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:45:59.794282 0.000000 udp 10.0.2.104 54523 -> 151.74.196.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:00.785418 0.398365 udp 10.0.2.104 54523 <-> 60.246.152.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:01.787179 0.051662 udp 10.0.2.104 54523 <-> 188.25.130.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:02.788555 1.044154 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:04.450712 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:46:04.791361 0.512511 udp 10.0.2.104 54523 <-> 205.164.3.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:05.544317 0.000000 udp 10.0.2.104 54523 <- 151.74.196.17 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:05.793120 0.000000 udp 10.0.2.104 54523 -> 94.21.66.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:06.784002 4.005890 udp 10.0.2.104 54523 <-> 81.61.64.72 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:07.786034 4.391887 udp 10.0.2.104 54523 <-> 111.250.115.59 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:08.787416 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:09.788435 0.441233 udp 10.0.2.104 54523 <-> 75.193.62.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:12.792547 0.000000 udp 10.0.2.104 54523 -> 157.14.178.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:13.784000 0.398253 udp 10.0.2.104 54523 <-> 1.168.250.38 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:14.785938 0.062187 udp 10.0.2.104 54523 <-> 188.214.34.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:15.787018 0.562922 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:16.788670 2.154411 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:17.789865 2.994734 udp 10.0.2.104 54523 <-> 62.57.203.80 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:19.792855 0.421841 udp 10.0.2.104 54523 <-> 91.99.167.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:21.786039 0.000000 udp 10.0.2.104 54523 -> 79.116.225.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:22.787522 4.005418 udp 10.0.2.104 54523 -> 111.250.115.59 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:23.788975 0.000000 udp 10.0.2.104 54523 -> 75.193.62.134 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:24.790053 0.000000 udp 10.0.2.104 54523 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:25.791890 0.057622 udp 10.0.2.104 54523 <-> 188.214.34.53 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:27.784713 0.508030 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:28.785774 0.000000 udp 10.0.2.104 54523 -> 157.14.178.157 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:29.787178 0.391732 udp 10.0.2.104 54523 <-> 1.168.250.38 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:30.788962 0.041950 udp 10.0.2.104 54523 <-> 31.11.182.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:31.790333 0.212747 udp 10.0.2.104 54523 <-> 66.181.250.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:32.791868 0.176322 udp 10.0.2.104 54523 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:33.793242 0.234774 udp 10.0.2.104 54523 <-> 173.199.217.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:34.784211 0.134001 udp 10.0.2.104 54523 <-> 64.131.189.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:35.786052 0.000000 udp 10.0.2.104 54523 -> 79.115.67.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:36.787021 0.000000 udp 10.0.2.104 54523 -> 62.57.203.80 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:37.789084 0.000000 udp 10.0.2.104 54523 -> 91.99.167.126 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:38.790429 0.030194 udp 10.0.2.104 54523 <-> 78.90.174.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:39.791401 0.062820 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:40.793242 0.070900 udp 10.0.2.104 54523 <-> 46.10.153.78 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:41.784531 0.000000 udp 10.0.2.104 54523 -> 188.158.228.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:42.786203 0.142371 udp 10.0.2.104 54523 <-> 96.37.228.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:43.787085 0.050242 udp 10.0.2.104 54523 <-> 78.232.212.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:44.789019 0.166714 udp 10.0.2.104 54523 <-> 142.217.34.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:45.790207 0.046695 udp 10.0.2.104 54523 <-> 46.164.200.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:46.791787 0.172441 udp 10.0.2.104 54523 <-> 66.131.122.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:47.793275 0.252750 udp 10.0.2.104 54523 <-> 115.253.113.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:48.784665 0.160359 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:49.785715 0.154958 udp 10.0.2.104 54523 <-> 66.173.32.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:50.787740 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:51.448569 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:46:51.789168 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:52.790287 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:46:53.791831 1.176890 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:55.784415 0.153541 udp 10.0.2.104 54523 <-> 66.173.32.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:56.786460 3.137351 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:57.787671 0.160776 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:46:58.788661 0.000000 udp 10.0.2.104 54523 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:00.791742 0.167150 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:01.793341 0.555092 udp 10.0.2.104 54523 <-> 201.51.204.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:02.785013 1.322955 udp 10.0.2.104 54523 <-> 173.197.82.40 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:04.787269 0.096896 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:05.788998 0.052554 udp 10.0.2.104 54523 <-> 78.232.212.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:06.790336 0.284017 udp 10.0.2.104 54523 <-> 189.79.76.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:07.791997 0.088316 udp 10.0.2.104 54523 <-> 94.41.113.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:08.793680 0.131969 udp 10.0.2.104 54523 <-> 176.238.175.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:09.785158 0.000000 udp 10.0.2.104 54523 -> 151.66.226.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:10.785955 0.142284 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:11.787998 0.109771 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:12.788813 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:13.790548 0.165063 udp 10.0.2.104 54523 <-> 24.129.11.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:14.791935 0.049645 udp 10.0.2.104 54523 <-> 79.118.98.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:15.793299 0.000000 udp 10.0.2.104 54523 -> 188.27.89.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:16.784784 0.151076 udp 10.0.2.104 54523 <-> 96.20.36.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:17.786130 0.875607 udp 10.0.2.104 54523 <-> 125.63.103.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:18.787838 0.135445 udp 10.0.2.104 54523 <-> 67.81.98.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:19.789516 2.002535 udp 10.0.2.104 54523 -> 82.241.35.111 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:20.790352 0.046654 udp 10.0.2.104 54523 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:22.793736 0.277348 udp 10.0.2.104 54523 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:23.815205 1.393081 udp 10.0.2.104 54523 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:24.816141 0.000000 udp 10.0.2.104 54523 -> 67.81.98.90 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:25.818048 0.150212 udp 10.0.2.104 54523 <-> 70.60.4.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:26.818954 0.000000 udp 10.0.2.104 54523 -> 117.221.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:27.820913 0.063886 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:28.822074 0.000000 udp 10.0.2.104 54523 -> 87.0.227.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:29.823805 0.449482 udp 10.0.2.104 54523 <-> 186.244.216.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:30.814767 0.053478 udp 10.0.2.104 54523 <-> 88.186.7.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:31.816519 0.949186 udp 10.0.2.104 54523 <-> 201.81.192.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:32.817903 0.343655 udp 10.0.2.104 54523 <-> 220.129.1.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:33.819291 0.000000 udp 10.0.2.104 54523 -> 95.236.221.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:34.820964 1.230632 udp 10.0.2.104 54523 <-> 187.41.64.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:35.822333 0.145016 udp 10.0.2.104 54523 <-> 74.203.121.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:36.823474 0.056837 udp 10.0.2.104 54523 <-> 78.88.97.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:37.815009 0.094320 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:38.476350 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:47:38.816206 0.174789 udp 10.0.2.104 54523 <-> 209.62.210.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:39.817849 0.000000 udp 10.0.2.104 54523 -> 121.245.55.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:40.819222 0.257198 udp 10.0.2.104 54523 <-> 189.38.156.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:41.820524 2.075475 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:42.822633 0.168410 udp 10.0.2.104 54523 <-> 24.144.18.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:44.815191 0.000000 udp 10.0.2.104 54523 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:47:45.816908 3.526826 udp 10.0.2.104 54523 <-> 75.213.231.201 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:46.818089 0.158106 udp 10.0.2.104 54523 <-> 75.69.111.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:47.819507 1.244806 udp 10.0.2.104 54523 <-> 175.177.128.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:49.822684 0.212412 udp 10.0.2.104 54523 <-> 201.209.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:50.824233 0.176224 udp 10.0.2.104 54523 <-> 66.169.209.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:51.814893 0.398357 udp 10.0.2.104 54523 <-> 27.35.53.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:52.816834 0.162069 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:53.818233 0.213455 udp 10.0.2.104 54523 <-> 98.150.103.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:54.819621 0.064015 udp 10.0.2.104 54523 <-> 82.238.239.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:55.821196 0.205962 udp 10.0.2.104 54523 <-> 110.5.75.90 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:56.822091 0.907923 udp 10.0.2.104 54523 <-> 190.16.22.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:57.823613 0.163202 udp 10.0.2.104 54523 <-> 68.53.137.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:58.815259 0.412363 udp 10.0.2.104 54523 <-> 14.32.249.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:47:59.816504 1.874846 udp 10.0.2.104 54523 <-> 89.228.227.244 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:01.819323 1.035800 udp 10.0.2.104 54523 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:02.821121 0.435064 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:03.822941 0.386873 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:04.824279 0.159548 udp 10.0.2.104 54523 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:05.815167 0.621702 udp 10.0.2.104 54523 <-> 190.39.204.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:06.816598 0.000000 udp 10.0.2.104 54523 -> 24.193.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:07.818552 0.041777 udp 10.0.2.104 54523 <-> 95.85.182.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:08.819369 0.736220 udp 10.0.2.104 54523 <-> 194.242.201.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:09.821354 0.000000 udp 10.0.2.104 54523 -> 209.140.74.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:10.822762 0.538674 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:11.824261 0.038644 udp 10.0.2.104 54523 <-> 89.71.59.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:12.815841 1.047482 udp 10.0.2.104 54523 <-> 89.46.84.98 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:14.818334 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:15.820122 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:16.821414 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:17.822303 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:18.824231 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:19.815323 3.004589 udp 10.0.2.104 54523 <-> 190.78.188.114 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:20.817095 0.312867 udp 10.0.2.104 54523 <-> 189.42.55.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:21.818572 0.167218 udp 10.0.2.104 54523 <-> 98.253.252.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:23.821388 4.140726 udp 10.0.2.104 54523 <-> 74.89.59.113 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:24.823216 0.065157 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:25.473832 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:48:25.824467 0.275477 udp 10.0.2.104 54523 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:26.815815 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:28.818669 0.000000 udp 10.0.2.104 54523 -> 78.247.174.177 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:29.819549 0.137873 udp 10.0.2.104 54523 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:30.821439 0.000000 udp 10.0.2.104 54523 -> 27.57.111.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:31.822433 0.150179 udp 10.0.2.104 54523 <-> 107.5.244.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:32.824394 0.082077 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:33.815448 0.054601 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:34.817137 0.256396 udp 10.0.2.104 54523 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:35.818640 1.001726 udp 10.0.2.104 54523 <-> 118.141.242.65 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:37.821026 0.146047 udp 10.0.2.104 54523 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:38.822652 0.258549 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:40.816089 0.131594 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:41.817287 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:41.817380 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:48:42.818655 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:43.820070 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:44.821096 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:45.823233 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:46.814552 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:47.815424 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:48.817544 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:49.818880 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:51.821387 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:52.823102 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:53.814214 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:54.816061 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:55.817026 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:56.818842 2.002981 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:48:57.820569 2.079013 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:48:59.315644 3.001250 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:49:00.814683 1.001006 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:02.817227 1.164746 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:04.820042 0.078794 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:05.821295 0.335449 udp 10.0.2.104 54523 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:06.322397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:49:06.823114 0.051619 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:07.814718 0.304634 udp 10.0.2.104 54523 <-> 97.76.164.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:08.886289 0.438987 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:09.887452 0.000000 udp 10.0.2.104 54523 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:10.889072 0.030236 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:11.890349 2.994284 udp 10.0.2.104 54523 <-> 79.117.106.187 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:12.551194 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:49:12.891592 4.997576 udp 10.0.2.104 54523 <-> 66.115.88.130 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:13.893559 4.996782 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:14.393909 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:49:15.886063 1.174282 udp 10.0.2.104 54523 <-> 183.83.32.66 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:19.057632 4.088149 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:19.891945 0.372310 udp 10.0.2.104 54523 <-> 36.229.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:20.893523 0.000000 udp 10.0.2.104 54523 -> 69.176.180.71 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:21.884788 0.030192 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:23.887343 0.019181 udp 10.0.2.104 54523 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:24.889299 0.000000 udp 10.0.2.104 54523 -> 166.159.168.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:25.890683 0.252780 udp 10.0.2.104 54523 <-> 2.185.55.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:26.892037 0.138016 udp 10.0.2.104 54523 <-> 50.166.125.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:27.893467 0.000000 udp 10.0.2.104 54523 -> 89.176.72.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:28.884861 0.159625 udp 10.0.2.104 54523 <-> 24.220.201.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:29.886196 0.142041 udp 10.0.2.104 54523 <-> 37.151.165.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:30.397384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:49:30.887425 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:30.887476 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:49:31.889463 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:33.892144 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:34.893627 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:35.885255 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:36.886682 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:37.887755 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:38.889013 4.997211 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:39.891005 4.996997 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:40.891877 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:41.893553 0.167420 udp 10.0.2.104 54523 <-> 67.11.181.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:42.884835 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:45.889491 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:46.890639 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:47.892330 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:48.894065 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:49.885237 0.356958 udp 10.0.2.104 54523 <-> 187.57.60.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:50.886422 1.038101 udp 10.0.2.104 54523 <-> 195.70.108.58 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:52.889110 0.125267 udp 10.0.2.104 54523 <-> 37.151.165.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:53.891022 0.000000 udp 10.0.2.104 54523 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:54.892300 0.155096 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:55.893291 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:56.884938 0.000000 udp 10.0.2.104 54523 -> 88.163.39.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:57.886867 0.000000 udp 10.0.2.104 54523 -> 181.192.6.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:49:58.888192 0.339426 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:49:59.549219 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:49:59.889024 2.019074 udp 10.0.2.104 54523 <-> 98.90.31.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:00.890929 0.049342 udp 10.0.2.104 54523 <-> 78.232.212.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:01.892468 0.896304 udp 10.0.2.104 54523 <-> 117.194.11.232 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:02.403147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:50:02.894010 0.123447 udp 10.0.2.104 54523 <-> 24.254.149.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:03.884915 1.081767 udp 10.0.2.104 54523 <-> 79.119.175.47 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:05.887850 0.056912 udp 10.0.2.104 54523 <-> 86.122.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:06.889355 0.377752 udp 10.0.2.104 54523 <-> 27.2.158.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:07.891038 0.142984 udp 10.0.2.104 54523 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:08.892121 0.182852 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:09.893783 0.165002 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:10.885344 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:11.886431 0.375451 udp 10.0.2.104 54523 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:12.888430 0.051282 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:13.889908 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:14.891186 0.142543 udp 10.0.2.104 54523 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:15.892718 0.000000 udp 10.0.2.104 54523 -> 71.65.252.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:16.893933 0.063282 udp 10.0.2.104 54523 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:17.885047 0.196848 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:18.886670 0.176971 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:19.887958 0.175822 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:20.889811 0.000000 udp 10.0.2.104 54523 -> 98.67.186.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:21.890684 1.652473 arp 10.0.2.104 who 169.254.90.254 INT 3 126 flow=Background-ARP 1970/01/01 06:50:22.892122 0.289987 udp 10.0.2.104 54523 <-> 126.15.243.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:23.894166 0.160971 udp 10.0.2.104 54523 <-> 87.53.130.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:24.915370 0.000000 udp 10.0.2.104 54523 -> 72.88.226.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:25.916701 0.747928 udp 10.0.2.104 54523 <-> 79.43.148.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:26.918138 0.000000 udp 10.0.2.104 54523 -> 87.252.227.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:27.919468 0.132934 udp 10.0.2.104 54523 <-> 105.129.14.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:28.920896 0.046746 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:29.922596 0.181173 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:30.924280 0.000000 udp 10.0.2.104 54523 -> 188.27.89.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:31.915214 0.170615 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:32.916901 0.067799 udp 10.0.2.104 54523 <-> 85.84.94.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:33.917974 0.000000 udp 10.0.2.104 54523 -> 111.248.172.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:34.919598 0.144075 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:35.921522 3.319852 udp 10.0.2.104 54523 <-> 220.129.38.30 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:36.922348 0.000000 udp 10.0.2.104 54523 -> 220.142.10.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:37.923943 0.344938 udp 10.0.2.104 54523 <-> 58.177.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:39.917224 0.085762 udp 10.0.2.104 54523 <-> 87.9.223.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:40.918554 0.022083 udp 10.0.2.104 54523 <-> 82.212.10.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:41.919796 1.039726 udp 10.0.2.104 54523 <-> 94.253.162.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:43.924536 0.312645 udp 10.0.2.104 54523 <-> 201.1.80.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:44.924132 0.582430 udp 10.0.2.104 54523 <-> 79.121.110.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:45.915782 0.124634 udp 10.0.2.104 54523 <-> 37.213.183.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:46.576125 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:50:46.917108 0.000000 udp 10.0.2.104 54523 -> 90.41.23.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:47.918271 0.113716 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:48.920137 0.623027 udp 10.0.2.104 54523 <-> 92.78.34.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:49.921062 0.296694 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:50.922802 0.172396 udp 10.0.2.104 54523 <-> 70.112.106.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:51.924499 0.848322 udp 10.0.2.104 54523 <-> 79.43.148.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:52.915510 0.056621 udp 10.0.2.104 54523 <-> 109.254.91.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:53.916711 1.719888 udp 10.0.2.104 54523 <-> 49.147.25.185 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:55.919613 0.000000 udp 10.0.2.104 54523 -> 87.10.29.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:56.921229 0.000000 udp 10.0.2.104 54523 -> 207.6.94.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:50:57.923076 0.162589 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:58.924110 0.207088 udp 10.0.2.104 54523 <-> 107.2.211.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:50:59.915816 0.023041 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:00.917414 0.045603 udp 10.0.2.104 54523 <-> 213.118.190.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:01.918783 0.000000 udp 10.0.2.104 54523 -> 117.205.243.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:02.919905 0.171259 udp 10.0.2.104 54523 <-> 84.237.145.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:03.921399 0.109404 udp 10.0.2.104 54523 <-> 79.16.230.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:04.922813 1.352695 udp 10.0.2.104 54523 <-> 58.177.49.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:06.916001 0.363748 udp 10.0.2.104 54523 <-> 111.249.141.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:07.917222 0.098005 udp 10.0.2.104 54523 <-> 87.17.244.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:08.918455 0.038261 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:09.919921 0.134013 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:10.921466 0.165402 udp 10.0.2.104 54523 <-> 70.112.106.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:11.923137 0.231096 udp 10.0.2.104 54523 <-> 190.206.205.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:12.914409 0.000000 udp 10.0.2.104 54523 -> 68.93.156.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:13.915845 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:14.917196 0.063234 udp 10.0.2.104 54523 <-> 83.195.175.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:15.918365 0.341460 udp 10.0.2.104 54523 <-> 14.98.249.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:16.920267 0.260719 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:17.921930 0.000000 udp 10.0.2.104 54523 -> 217.174.48.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:18.923003 0.098141 udp 10.0.2.104 54523 <-> 81.61.64.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:19.914282 0.185004 udp 10.0.2.104 54523 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:20.916060 0.000000 udp 10.0.2.104 54523 -> 188.246.77.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:21.917485 0.138072 udp 10.0.2.104 54523 <-> 98.121.91.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:22.918792 0.000000 udp 10.0.2.104 54523 -> 14.97.201.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:23.920606 0.049512 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:24.921635 0.295913 udp 10.0.2.104 54523 <-> 117.221.0.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:25.923159 2.994194 udp 10.0.2.104 54523 <-> 122.121.38.64 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:26.914770 0.064927 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:29.919087 0.159857 udp 10.0.2.104 54523 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:30.919936 1.457689 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:32.922918 0.000000 udp 10.0.2.104 54523 -> 83.20.188.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:33.574156 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:51:33.914863 0.000000 udp 10.0.2.104 54523 -> 166.154.87.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:34.916233 0.236235 udp 10.0.2.104 54523 <-> 5.200.201.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:35.917088 0.080709 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:36.918835 0.000000 udp 10.0.2.104 54523 -> 89.136.104.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:37.919973 0.074219 udp 10.0.2.104 54523 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:38.921567 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:39.923160 0.179889 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:40.914420 2.167082 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:41.916019 1.298352 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:43.919134 0.805435 udp 10.0.2.104 54523 <-> 217.72.209.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:44.920385 0.000000 udp 10.0.2.104 54523 -> 95.57.165.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:45.921559 0.372575 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:46.923635 0.993358 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:47.914344 0.138719 udp 10.0.2.104 54523 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:48.916523 0.000000 udp 10.0.2.104 54523 -> 178.150.156.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:49.917282 0.163745 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:50.628929 0.010511 udp 10.0.2.104 54571 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 06:51:50.639739 0.000000 udp 10.0.2.104 54572 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:50.918678 0.215078 udp 10.0.2.104 54523 <-> 71.196.186.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:51.920417 4.997040 udp 10.0.2.104 54523 <-> 68.59.56.94 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:52.921788 0.000000 udp 10.0.2.104 54523 -> 171.4.6.165 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:53.923486 0.291203 udp 10.0.2.104 54523 <-> 190.207.164.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:55.915874 2.872244 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:57.075776 0.000000 udp 10.0.2.104 54523 <- 68.59.56.94 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:51:58.920167 4.161242 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:51:59.921985 0.214428 udp 10.0.2.104 54523 <-> 71.196.186.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:00.923049 0.042229 udp 10.0.2.104 54523 <-> 89.216.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:01.914793 2.003029 udp 10.0.2.104 54523 -> 31.15.210.97 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:04.918977 1.178429 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:05.920619 0.127934 udp 10.0.2.104 54523 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:06.922228 0.381594 udp 10.0.2.104 54523 <-> 88.132.4.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:07.923128 0.343650 udp 10.0.2.104 54523 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:08.914664 0.273931 udp 10.0.2.104 54523 <-> 72.130.237.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:09.916202 0.078291 udp 10.0.2.104 54523 <-> 85.226.38.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:10.918059 0.235532 udp 10.0.2.104 54523 <-> 190.204.99.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:11.919270 0.160544 udp 10.0.2.104 54523 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:12.920834 0.186246 udp 10.0.2.104 54523 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:13.922061 0.000000 udp 10.0.2.104 54523 -> 187.104.44.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:14.923214 0.000000 udp 10.0.2.104 54523 -> 79.1.27.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:15.915093 0.162771 udp 10.0.2.104 54523 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:16.916096 0.106984 udp 10.0.2.104 54523 <-> 82.124.235.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:17.917990 0.036551 udp 10.0.2.104 54523 <-> 77.242.145.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:18.919065 0.000000 udp 10.0.2.104 54523 -> 91.240.43.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:19.920816 0.071001 udp 10.0.2.104 54523 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:20.581330 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:52:20.921982 0.172942 udp 10.0.2.104 54523 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:21.923241 0.146672 udp 10.0.2.104 54523 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:22.915245 0.000000 udp 10.0.2.104 54523 -> 79.1.27.25 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:23.916607 0.048647 udp 10.0.2.104 54523 <-> 5.13.132.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:24.918228 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:25.918978 0.144764 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:26.921158 0.000058 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:26.921216 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:52:27.921957 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:28.923941 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:29.915325 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:30.916604 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:31.917910 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:32.919355 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:33.920913 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:34.922478 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:35.923401 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:36.915608 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:37.916408 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:38.917939 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:39.919186 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:40.920656 0.120518 udp 10.0.2.104 54523 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:41.922134 0.042151 udp 10.0.2.104 54523 <-> 46.40.96.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:42.923507 0.142825 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:43.915459 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:44.917024 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:45.918151 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:46.919735 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:47.921103 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:48.922460 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:49.924244 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:50.915102 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:51.916919 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:52.918399 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:53.920015 0.000044 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:53.920059 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:52:55.922667 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:56.924123 0.000000 udp 10.0.2.104 54523 -> 108.160.26.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:52:57.915653 1.043480 udp 10.0.2.104 54523 <-> 46.40.96.88 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:52:59.918153 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:01.921362 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:02.922502 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:03.924051 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:04.915186 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:05.916622 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:06.918026 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:07.578872 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:53:07.919587 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:07.919646 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:53:08.921526 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:09.922775 3.995514 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:10.924047 0.142867 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:11.915692 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:12.917171 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:14.920157 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:15.921503 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:16.922753 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:17.924035 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:18.915908 0.000000 udp 10.0.2.104 54523 -> 108.160.26.185 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:19.916706 0.042095 udp 10.0.2.104 54523 <-> 46.40.96.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:20.918641 0.167987 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:21.919761 0.000000 udp 10.0.2.104 54523 -> 14.97.213.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:22.920941 3.267685 udp 10.0.2.104 54523 <-> 190.194.201.234 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:23.922545 0.158228 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:24.924160 0.164134 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:26.917081 0.000000 udp 10.0.2.104 54523 -> 108.160.26.185 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:27.918611 0.040238 udp 10.0.2.104 54523 <-> 46.40.96.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:28.919826 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:29.921537 0.052431 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:30.923034 1.049728 udp 10.0.2.104 54523 <-> 87.247.96.38 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:32.915506 0.000000 udp 10.0.2.104 54523 -> 79.184.204.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:33.916986 0.216945 udp 10.0.2.104 54523 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:34.918618 0.000000 udp 10.0.2.104 54523 -> 79.15.185.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:35.920362 4.805465 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:36.921128 1.052022 udp 10.0.2.104 54523 <-> 188.190.84.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:38.924537 0.014522 udp 10.0.2.104 54523 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:40.917254 0.070519 udp 10.0.2.104 54523 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:41.918814 0.403799 udp 10.0.2.104 54523 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:42.920226 0.000000 udp 10.0.2.104 54523 -> 92.76.239.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:43.921775 0.171816 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:44.922650 0.306283 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:45.914015 0.173148 udp 10.0.2.104 54523 <-> 209.224.198.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:46.915451 0.000000 udp 10.0.2.104 54523 -> 41.107.39.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:47.917398 0.212259 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:48.918665 0.153898 udp 10.0.2.104 54523 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:49.920394 0.049485 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:50.921811 0.067500 udp 10.0.2.104 54523 <-> 84.120.186.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:51.922665 0.000000 udp 10.0.2.104 54523 -> 114.51.132.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:52.914596 0.058729 udp 10.0.2.104 54523 <-> 31.176.241.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:53.915558 0.241175 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:54.576588 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:53:54.917164 0.000000 udp 10.0.2.104 54523 -> 1.1.138.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:53:55.918786 0.204429 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:56.920439 0.043099 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:57.921724 0.139497 udp 10.0.2.104 54523 <-> 71.14.34.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:58.923285 0.041496 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:53:59.914680 0.100204 udp 10.0.2.104 54523 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:00.915724 0.145656 udp 10.0.2.104 54523 <-> 76.11.100.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:01.917465 0.000000 udp 10.0.2.104 54523 -> 75.253.114.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:02.918950 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:03.919894 3.050354 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:04.921495 0.000000 udp 10.0.2.104 54523 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:05.923043 0.144077 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:07.916186 0.000000 udp 10.0.2.104 54523 -> 173.212.89.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:08.917457 0.162441 udp 10.0.2.104 54523 <-> 67.80.216.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:09.918652 0.204775 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:10.930006 0.398878 udp 10.0.2.104 54523 <-> 42.77.204.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:11.931674 0.378096 udp 10.0.2.104 54523 <-> 190.38.66.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:12.933427 0.171140 udp 10.0.2.104 54523 <-> 98.194.208.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:13.924731 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:14.925922 0.519258 udp 10.0.2.104 54523 <-> 71.197.74.70 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:16.057347 0.137759 udp 10.0.2.104 54523 <-> 74.57.225.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:17.059470 0.324351 udp 10.0.2.104 54523 <-> 103.19.18.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:18.060773 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:19.061768 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:20.063260 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:22.056143 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:23.058046 4.005704 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:24.059311 0.163031 udp 10.0.2.104 54523 <-> 98.28.87.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:25.060974 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:26.062013 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:29.056358 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:30.057947 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:31.059689 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:32.061017 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:33.062053 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:34.063945 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:35.055238 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:36.056798 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:37.058007 0.000068 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:37.058075 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:54:38.058985 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:39.060768 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:40.062625 4.822491 udp 10.0.2.104 54523 <-> 219.90.97.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:41.083592 0.208385 udp 10.0.2.104 54523 <-> 183.82.196.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:42.075667 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:42.736022 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:54:43.076581 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:43.076644 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:54:44.077859 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:45.079756 0.161908 udp 10.0.2.104 54523 <-> 76.123.228.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:46.081165 0.563685 udp 10.0.2.104 54523 <-> 60.228.64.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:47.082453 0.161814 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:48.083370 0.000000 udp 10.0.2.104 54523 -> 200.30.233.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:49.075242 0.000000 udp 10.0.2.104 54523 -> 188.60.15.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:50.076471 0.000000 udp 10.0.2.104 54523 -> 85.86.199.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:51.078002 0.035534 udp 10.0.2.104 54523 <-> 89.40.179.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:52.079715 0.290101 udp 10.0.2.104 54523 <-> 171.96.99.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:53.080952 0.405896 udp 10.0.2.104 54523 <-> 2.133.185.146 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:54.082635 0.377739 udp 10.0.2.104 54523 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:55.084150 0.445673 udp 10.0.2.104 54523 <-> 189.6.157.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:56.075506 0.000000 udp 10.0.2.104 54523 -> 67.191.36.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:54:57.077181 0.386424 udp 10.0.2.104 54523 <-> 123.201.86.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:58.078427 0.975759 udp 10.0.2.104 54523 <-> 70.67.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:54:59.079372 0.566213 udp 10.0.2.104 54523 <-> 66.115.90.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:00.080978 0.152732 udp 10.0.2.104 54523 <-> 74.58.82.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:01.082293 1.792596 udp 10.0.2.104 54523 <-> 70.239.90.152 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:03.075291 0.476133 udp 10.0.2.104 54523 <-> 217.201.52.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:04.077098 0.000000 udp 10.0.2.104 54523 -> 218.102.238.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:05.078363 0.140401 udp 10.0.2.104 54523 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:06.079819 0.000000 udp 10.0.2.104 54523 -> 95.75.139.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:07.080896 0.028144 udp 10.0.2.104 54523 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:08.082477 0.000000 udp 10.0.2.104 54523 -> 189.79.170.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:09.084223 0.049939 udp 10.0.2.104 54523 <-> 212.45.82.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:10.075420 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:11.076469 0.000000 udp 10.0.2.104 54523 -> 24.140.176.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:12.078290 0.000000 udp 10.0.2.104 54523 -> 114.26.249.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:13.079705 0.028424 udp 10.0.2.104 54523 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:14.081338 2.994452 udp 10.0.2.104 54523 -> 95.75.139.35 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:15.082411 0.047178 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:16.084266 0.049395 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:18.076952 0.038579 udp 10.0.2.104 54523 <-> 5.15.195.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:19.078317 0.442869 udp 10.0.2.104 54523 <-> 217.201.52.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:20.079874 0.352489 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:21.081427 0.000000 udp 10.0.2.104 54523 -> 114.26.249.21 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:22.082305 3.867615 udp 10.0.2.104 54523 <-> 24.140.176.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:23.083705 0.047126 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:24.075275 0.051736 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:25.076805 0.135238 udp 10.0.2.104 54523 <-> 68.197.223.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:26.078384 0.010231 udp 10.0.2.104 54523 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:27.080165 0.303045 udp 10.0.2.104 54523 <-> 110.233.68.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:28.081534 0.068822 udp 10.0.2.104 54523 <-> 85.87.229.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:29.082628 0.000000 udp 10.0.2.104 54523 -> 82.53.170.210 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:29.733628 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:55:30.084426 0.051704 udp 10.0.2.104 54523 <-> 178.164.167.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:31.075234 0.000000 udp 10.0.2.104 54523 -> 85.130.46.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:32.077285 0.468107 udp 10.0.2.104 54523 <-> 115.241.78.238 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:33.078789 0.207800 udp 10.0.2.104 54523 <-> 67.185.164.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:34.079989 0.164961 udp 10.0.2.104 54523 <-> 106.51.204.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:35.081359 0.167122 udp 10.0.2.104 54523 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:36.082845 3.024959 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:37.083969 0.613375 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:38.075572 1.905583 udp 10.0.2.104 54523 <-> 94.47.119.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:40.078686 3.141929 udp 10.0.2.104 54523 <-> 76.100.52.234 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:41.080282 1.706347 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:42.081409 0.024112 udp 10.0.2.104 54523 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:44.084278 0.054169 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:45.075377 0.102252 udp 10.0.2.104 54523 <-> 78.8.74.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:46.076774 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:47.078202 2.328032 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:48.079661 0.202668 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:50.082672 0.293853 udp 10.0.2.104 54523 <-> 186.89.103.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:51.084492 0.000000 udp 10.0.2.104 54523 -> 84.123.103.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:52.075436 0.000000 udp 10.0.2.104 54523 -> 212.98.178.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:55:53.077451 0.160140 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:54.078388 0.160191 udp 10.0.2.104 54523 <-> 50.155.109.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:55.079719 0.027512 udp 10.0.2.104 54523 <-> 131.114.121.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:56.081680 0.314672 udp 10.0.2.104 54523 <-> 175.208.118.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:57.083282 0.170928 udp 10.0.2.104 54523 <-> 98.223.2.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:58.084410 0.387105 udp 10.0.2.104 54523 <-> 42.147.5.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:55:59.075595 0.022764 udp 10.0.2.104 54523 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:00.077470 1.170509 udp 10.0.2.104 54523 <-> 24.154.191.75 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:02.080020 0.035021 udp 10.0.2.104 54523 <-> 89.253.159.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:03.081247 0.056215 udp 10.0.2.104 54523 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:04.082661 0.053924 udp 10.0.2.104 54523 <-> 84.232.228.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:05.084111 0.480985 udp 10.0.2.104 54523 <-> 189.106.52.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:06.075937 0.048431 udp 10.0.2.104 54523 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:06.598827 3.002191 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:56:07.076965 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:08.078886 0.065230 udp 10.0.2.104 54523 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:09.080307 0.135259 udp 10.0.2.104 54523 <-> 98.221.57.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:10.081483 0.000000 udp 10.0.2.104 54523 -> 5.12.105.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:11.083332 4.139257 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:12.084316 0.024801 udp 10.0.2.104 54523 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:13.075636 0.048676 udp 10.0.2.104 54523 <-> 5.14.226.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:13.606920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:56:14.077714 0.423078 udp 10.0.2.104 54523 <-> 76.202.180.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:16.080592 0.198591 udp 10.0.2.104 54523 <-> 24.67.23.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:16.741000 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:56:17.082080 0.000000 udp 10.0.2.104 54523 -> 99.176.30.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:18.083140 2.994149 udp 10.0.2.104 54523 <-> 219.77.79.83 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:19.074478 0.150705 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:20.076229 0.143991 udp 10.0.2.104 54523 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:21.608418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:56:22.078680 0.040346 udp 10.0.2.104 54523 <-> 195.178.240.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:23.080494 0.146196 udp 10.0.2.104 54523 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:24.081417 0.000000 udp 10.0.2.104 54523 -> 89.139.162.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:25.083188 4.379616 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:26.074521 0.042894 udp 10.0.2.104 54523 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:27.076502 0.419166 udp 10.0.2.104 54523 <-> 186.191.21.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:28.077333 0.000000 udp 10.0.2.104 54523 -> 70.112.193.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:30.080175 0.153225 udp 10.0.2.104 54523 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:31.081752 0.042500 udp 10.0.2.104 54523 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:32.083108 0.372425 udp 10.0.2.104 54523 <-> 186.191.21.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:33.074521 0.136307 udp 10.0.2.104 54523 <-> 94.50.41.6 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:34.076449 0.155723 udp 10.0.2.104 54523 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:35.077780 0.037612 udp 10.0.2.104 54523 <-> 85.130.65.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:36.079073 0.329891 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:37.080718 3.140378 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:37.611310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:56:38.081925 0.205830 udp 10.0.2.104 54523 <-> 173.26.91.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:39.083562 0.000000 udp 10.0.2.104 54523 -> 5.238.135.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:41.076086 0.132415 udp 10.0.2.104 54523 <-> 50.157.214.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:42.077593 0.000000 udp 10.0.2.104 54523 -> 97.71.95.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:43.078858 0.239779 udp 10.0.2.104 54523 <-> 158.108.164.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:44.080486 0.410110 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:45.081658 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:46.083811 0.000000 udp 10.0.2.104 54523 -> 94.50.41.6 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:47.075124 0.157963 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:48.076639 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:49.077901 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:50.079268 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:51.080822 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:52.082095 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:53.083214 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:54.074536 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:55.076606 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:56.077709 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:57.079286 0.000000 udp 10.0.2.104 54523 -> 94.50.41.6 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:56:58.080534 0.142421 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:56:59.082021 0.530308 udp 10.0.2.104 54523 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:00.083439 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:01.075103 0.000000 udp 10.0.2.104 54523 -> 68.114.151.5 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:02.076472 0.050848 udp 10.0.2.104 54523 <-> 79.118.98.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:03.078019 0.033882 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:03.738985 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:57:04.079240 0.455436 udp 10.0.2.104 54523 <-> 42.148.109.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:05.080437 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:06.082338 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:07.083491 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:08.074746 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:09.076785 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:09.617075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:57:10.078152 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:10.078211 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:57:12.080989 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:13.081868 0.142084 udp 10.0.2.104 54523 <-> 94.50.41.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:14.083589 0.529182 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:15.074989 0.000000 udp 10.0.2.104 54523 -> 5.22.73.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:16.076546 0.000000 udp 10.0.2.104 54523 -> 187.67.179.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:17.077851 0.026230 udp 10.0.2.104 54523 <-> 95.208.125.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:18.079206 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:19.080954 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:20.082449 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:21.083447 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:22.075521 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:23.076970 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:24.077924 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:24.078003 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:57:25.079206 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:27.082102 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:28.084012 0.775052 udp 10.0.2.104 54523 <-> 5.22.73.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:29.075569 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:30.076612 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:31.078326 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:33.080649 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:34.082508 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:35.084154 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:36.075793 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:37.076407 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:38.078109 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:39.079661 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:40.081181 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:41.082138 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:42.083806 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:42.083851 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:57:43.075185 3.004572 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:44.077003 0.785148 udp 10.0.2.104 54523 <-> 5.22.73.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:57:45.078135 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:47.081139 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:48.082584 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:49.084133 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:50.075228 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:50.736125 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:57:51.077286 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:52.078531 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:53.080102 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:54.080836 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:55.082443 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:56.084209 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:57.075333 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:58.076691 0.000070 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:57:58.076761 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:58:00.080032 0.026952 udp 10.0.2.104 54523 <-> 95.208.125.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:01.081227 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:02.083029 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:03.083899 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:04.075594 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:05.076709 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:06.078551 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:07.079811 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:08.081163 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:09.082792 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:10.084316 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:11.075482 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:11.075556 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:58:12.077313 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:13.078420 0.029706 udp 10.0.2.104 54523 <-> 95.208.125.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:14.080314 0.150952 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:15.081031 0.031245 udp 10.0.2.104 54523 <-> 158.58.245.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:16.082777 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:17.084076 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:18.075856 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:19.076995 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:20.078386 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:21.079693 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:22.081352 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:23.082644 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:24.084550 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:26.076809 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:27.078590 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:27.078646 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:58:28.079705 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:29.081267 0.377605 udp 10.0.2.104 54523 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:30.083024 0.129746 udp 10.0.2.104 54523 <-> 151.48.188.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:31.084800 4.996600 udp 10.0.2.104 54523 <-> 5.146.110.49 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:32.075474 0.152202 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:33.077290 0.000000 udp 10.0.2.104 54523 -> 192.95.207.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:34.078996 0.000000 udp 10.0.2.104 54523 -> 65.49.160.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:35.080098 0.180641 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:36.105320 0.000000 udp 10.0.2.104 54523 <- 5.146.110.49 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:37.083266 0.027087 udp 10.0.2.104 54523 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:37.733765 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:58:38.084334 0.015459 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:39.075744 2.003165 udp 10.0.2.104 54523 <-> 190.78.188.114 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:40.076945 1.282918 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:42.080478 0.208810 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:43.081831 0.116510 udp 10.0.2.104 54523 <-> 24.122.208.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:44.083091 0.170828 udp 10.0.2.104 54523 <-> 67.11.222.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:45.084261 1.993052 udp 10.0.2.104 54523 <-> 202.29.178.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:46.075603 0.270565 udp 10.0.2.104 54523 <-> 201.187.117.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:48.078483 0.166340 udp 10.0.2.104 54523 <-> 95.238.31.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:49.080568 0.171167 udp 10.0.2.104 54523 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:50.081593 0.164676 udp 10.0.2.104 54523 <-> 69.207.82.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:51.082861 0.205076 udp 10.0.2.104 54523 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:52.074341 0.305920 udp 10.0.2.104 54523 <-> 122.145.189.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:53.076262 0.160362 udp 10.0.2.104 54523 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:54.077297 1.048485 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:56.080231 0.000000 udp 10.0.2.104 54523 -> 24.244.127.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:57.081414 0.155453 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:58:58.082979 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:58:59.074989 0.162104 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:00.076220 0.286111 udp 10.0.2.104 54523 <-> 190.204.102.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:01.077260 4.006360 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:02.079186 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:03.080037 0.120346 udp 10.0.2.104 54523 <-> 93.150.248.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:04.081463 0.000089 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:04.081552 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:59:06.074708 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:07.076451 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:08.077811 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:09.078703 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:10.080623 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:11.081987 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:12.082980 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:13.074908 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:14.076266 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:15.077973 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:16.078872 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:18.081995 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:19.083710 0.281792 udp 10.0.2.104 54523 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:20.074721 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:21.076017 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:22.077741 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:22.077796 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:59:23.078930 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:24.080780 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:24.741320 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:59:25.081884 0.340226 udp 10.0.2.104 54523 <-> 181.236.59.241 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:26.083310 2.600432 udp 10.0.2.104 54523 <-> 95.158.96.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:27.074896 0.162684 udp 10.0.2.104 54523 <-> 98.164.115.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:28.076181 0.199773 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:29.077413 0.156033 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:30.079078 0.164513 udp 10.0.2.104 54523 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:31.080582 0.052809 udp 10.0.2.104 54523 <-> 77.77.29.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:32.081956 0.000000 udp 10.0.2.104 54523 -> 89.230.126.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:33.083488 0.439828 udp 10.0.2.104 54523 <-> 117.197.252.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:34.074880 0.000000 udp 10.0.2.104 54523 -> 203.194.104.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:35.076667 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:36.078006 2.002561 udp 10.0.2.104 54523 -> 181.192.6.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:37.078919 0.065624 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:39.081781 0.159463 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:40.083593 0.512722 udp 10.0.2.104 54523 <-> 117.201.127.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:41.074967 0.135403 udp 10.0.2.104 54523 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:41.156278 0.000000 udp 10.0.2.104 54523 <- 181.192.6.250 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:42.076727 0.049022 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:43.077876 3.134504 udp 10.0.2.104 54523 <-> 5.34.126.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:44.079628 0.367716 udp 10.0.2.104 54523 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:45.080764 0.000000 udp 10.0.2.104 54523 -> 187.179.73.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:47.083423 0.000000 udp 10.0.2.104 54523 -> 78.52.190.227 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:48.075236 0.260208 udp 10.0.2.104 54523 <-> 143.107.215.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:49.076461 1.001417 udp 10.0.2.104 54523 <-> 176.215.215.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:51.079758 0.083870 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:52.080899 0.215590 udp 10.0.2.104 54523 <-> 50.26.127.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:53.082564 0.000000 udp 10.0.2.104 54523 -> 181.43.87.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:54.083924 0.991343 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:56.076948 0.000000 udp 10.0.2.104 54523 -> 181.55.88.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:57.077799 0.246300 udp 10.0.2.104 54523 <-> 14.97.201.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 06:59:58.079308 4.997293 udp 10.0.2.104 54523 -> 5.15.135.33 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 06:59:59.081054 0.149038 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:00.082427 0.043721 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:01.083886 0.000000 udp 10.0.2.104 54523 -> 181.43.87.20 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:02.075507 0.000000 udp 10.0.2.104 54523 -> 50.26.127.53 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:03.124200 0.000000 udp 10.0.2.104 54523 <- 5.15.135.33 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:04.078027 0.034318 udp 10.0.2.104 54523 <-> 217.23.206.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:05.079312 1.189485 udp 10.0.2.104 54523 <-> 186.176.148.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:06.080645 0.034034 udp 10.0.2.104 54523 <-> 80.99.247.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:07.082605 0.389471 udp 10.0.2.104 54523 <-> 83.20.188.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:08.083721 0.286929 udp 10.0.2.104 54523 <-> 76.90.73.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:09.075413 0.170678 udp 10.0.2.104 54523 <-> 50.71.21.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:10.077045 0.000000 udp 10.0.2.104 54523 -> 31.140.117.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:11.077969 0.027255 udp 10.0.2.104 54523 <-> 213.240.199.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:11.739329 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:00:12.079324 0.162224 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:13.080967 0.141271 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:14.082817 2.734434 udp 10.0.2.104 54523 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:15.083813 0.000000 udp 10.0.2.104 54523 -> 31.140.117.19 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:16.075203 0.119835 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:17.076433 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:18.078606 0.000000 udp 10.0.2.104 54523 -> 176.42.203.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:19.079442 0.360368 udp 10.0.2.104 54523 <-> 201.212.133.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:20.081458 0.042061 udp 10.0.2.104 54523 <-> 37.143.247.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:21.082802 0.179006 udp 10.0.2.104 54523 <-> 24.49.203.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:22.083759 0.042171 udp 10.0.2.104 54523 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:23.075589 0.178909 udp 10.0.2.104 54523 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:24.077195 0.197566 udp 10.0.2.104 54523 <-> 72.251.39.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:25.078119 0.000000 udp 10.0.2.104 54523 -> 176.240.246.227 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:26.079972 3.152462 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:27.081236 0.839212 udp 10.0.2.104 54523 <-> 189.10.64.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:28.089240 0.126512 udp 10.0.2.104 54523 <-> 68.185.126.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:30.075279 0.000000 udp 10.0.2.104 54523 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:31.076791 0.296371 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:32.078311 0.000000 udp 10.0.2.104 54523 -> 5.250.84.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:33.080126 1.056294 udp 10.0.2.104 54523 <-> 188.252.201.213 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:35.082407 0.097110 udp 10.0.2.104 54523 <-> 31.11.113.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:36.084342 1.123464 udp 10.0.2.104 54523 <-> 66.171.56.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:38.077199 0.119408 udp 10.0.2.104 54523 <-> 31.181.59.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:39.078643 0.046878 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:40.080074 2.002648 udp 10.0.2.104 54523 -> 190.177.182.77 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:41.081313 0.150230 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:43.084490 0.000000 udp 10.0.2.104 54523 -> 158.58.248.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:44.075501 0.000000 udp 10.0.2.104 54523 -> 79.117.216.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:45.077239 0.043594 udp 10.0.2.104 54523 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:46.078589 0.199138 udp 10.0.2.104 54523 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:47.079858 0.102860 udp 10.0.2.104 54523 <-> 79.27.233.25 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:47.173825 0.000000 udp 10.0.2.104 54523 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.173932 0.000000 udp 10.0.2.104 54523 -> 211.178.220.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.174038 0.000000 udp 10.0.2.104 54523 -> 85.178.70.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.174149 0.000000 udp 10.0.2.104 54523 -> 211.33.152.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.174247 0.000000 udp 10.0.2.104 54523 -> 212.75.2.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.174347 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.174448 4.182093 udp 10.0.2.104 54523 <-> 221.117.56.165 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:47.174548 0.000000 udp 10.0.2.104 54523 -> 212.67.155.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.174646 0.331384 udp 10.0.2.104 54523 <-> 181.43.67.27 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:47.174787 0.000000 udp 10.0.2.104 54523 -> 219.78.101.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.174886 0.000000 udp 10.0.2.104 54523 -> 158.58.245.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.174987 0.000000 udp 10.0.2.104 54523 -> 14.97.3.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.175087 0.000000 udp 10.0.2.104 54523 -> 178.149.14.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.175186 0.000000 udp 10.0.2.104 54523 -> 76.226.213.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.175284 0.000000 udp 10.0.2.104 54523 -> 88.168.134.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:47.175383 0.000000 udp 10.0.2.104 54523 -> 66.187.121.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:48.081111 0.039718 udp 10.0.2.104 54523 <-> 5.15.133.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:49.083095 1.334115 udp 10.0.2.104 54523 <-> 78.52.9.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:50.084236 0.333735 udp 10.0.2.104 54523 <-> 74.195.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:52.077247 0.248968 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:53.078936 0.000000 udp 10.0.2.104 54523 -> 113.254.247.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:54.079987 0.000000 udp 10.0.2.104 54523 -> 181.192.6.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:55.081151 0.053697 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:56.082629 0.140112 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:00:58.076069 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:58.736772 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:00:59.077368 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:00:59.077449 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:01:00.079026 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:01.079690 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:02.081122 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:03.082790 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:04.084271 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:05.075984 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:06.077329 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:07.078824 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:08.080175 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:09.081221 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:10.083355 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:11.084547 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:12.075980 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:13.077430 0.132585 udp 10.0.2.104 54523 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:14.078972 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:15.079998 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:16.081407 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:17.083151 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:18.084299 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:18.084378 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:01:19.075974 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:20.077224 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:21.078837 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:22.080059 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:24.082894 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:25.074282 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:26.075882 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:27.077633 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:28.078841 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:29.080458 1.004870 udp 10.0.2.104 54523 <-> 114.37.112.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:30.082087 0.064250 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:31.083219 0.000000 udp 10.0.2.104 54523 -> 86.123.54.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:32.074637 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:33.076400 0.141264 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:34.077124 0.071219 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:35.079091 0.562122 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:36.080398 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:37.081843 1.990213 udp 10.0.2.104 54523 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:38.083292 0.000000 udp 10.0.2.104 54523 -> 220.142.10.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:39.074777 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:40.075742 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:41.077231 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:42.079090 0.039694 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:43.080193 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:43.080275 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:01:44.081950 0.135308 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:45.083367 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:45.734299 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:01:46.074810 0.174111 udp 10.0.2.104 54523 <-> 183.82.95.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:47.076552 0.145624 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:48.077941 0.294644 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:49.079007 0.058132 udp 10.0.2.104 54523 <-> 93.80.0.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:50.080376 1.160936 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:52.083239 0.060400 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:53.074656 0.486317 udp 10.0.2.104 54523 <-> 87.17.240.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:54.076064 0.034018 udp 10.0.2.104 54523 <-> 95.76.74.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:55.077873 1.531097 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:56.079220 0.042809 udp 10.0.2.104 54523 <-> 146.52.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:57.080468 0.000000 udp 10.0.2.104 54523 -> 82.113.208.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:01:58.082305 0.545785 udp 10.0.2.104 54523 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:01:59.083377 0.000000 udp 10.0.2.104 54523 -> 212.166.241.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:00.074712 0.027668 udp 10.0.2.104 54523 <-> 213.240.199.6 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:01.076219 0.000000 udp 10.0.2.104 54523 -> 181.75.190.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:02.077759 0.000000 udp 10.0.2.104 54523 -> 88.57.184.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:03.079035 0.211836 udp 10.0.2.104 54523 <-> 50.131.239.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:04.080449 0.397253 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:05.082409 0.322815 udp 10.0.2.104 54523 <-> 87.17.240.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:06.083312 0.000000 udp 10.0.2.104 54523 -> 103.250.16.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:07.075181 0.374801 udp 10.0.2.104 54523 <-> 111.243.164.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:08.076045 2.116491 udp 10.0.2.104 54523 <-> 87.247.78.156 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:09.077919 0.079918 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:11.100355 0.000000 udp 10.0.2.104 54523 -> 37.28.248.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:12.102405 1.105515 udp 10.0.2.104 54523 <-> 190.124.149.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:13.103775 0.039907 udp 10.0.2.104 54523 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:14.095079 0.073787 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:15.096674 0.048433 udp 10.0.2.104 54523 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:16.098024 2.167401 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:17.099557 0.279335 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:19.102088 0.023055 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:20.103320 0.061369 udp 10.0.2.104 54523 <-> 92.233.16.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:21.094842 0.000000 udp 10.0.2.104 54523 -> 24.57.55.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:22.096609 0.000000 udp 10.0.2.104 54523 -> 70.102.5.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:23.098204 0.206431 udp 10.0.2.104 54523 <-> 67.181.210.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:24.099836 0.239120 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:25.100571 0.051045 udp 10.0.2.104 54523 <-> 77.77.31.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:26.101992 0.049114 udp 10.0.2.104 54523 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:27.103457 0.099915 udp 10.0.2.104 54523 <-> 37.45.48.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:28.095385 0.160490 udp 10.0.2.104 54523 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:29.096496 0.049964 udp 10.0.2.104 54523 <-> 212.45.82.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:30.098054 0.000000 udp 10.0.2.104 54523 -> 217.216.112.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:31.099218 0.378115 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:32.100861 0.147821 udp 10.0.2.104 54523 <-> 184.59.92.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:32.761973 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:02:33.102788 0.048973 udp 10.0.2.104 54523 <-> 5.14.128.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:34.103458 1.655005 udp 10.0.2.104 54523 <-> 189.102.103.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:35.095257 4.919117 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:37.098163 0.000000 udp 10.0.2.104 54523 -> 217.216.112.59 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:38.099559 0.270251 udp 10.0.2.104 54523 <-> 201.209.178.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:40.102626 0.000000 udp 10.0.2.104 54523 -> 178.172.245.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:41.103795 0.275359 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:42.095295 0.064809 udp 10.0.2.104 54523 <-> 78.247.174.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:43.096858 0.204496 udp 10.0.2.104 54523 <-> 1.23.72.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:44.098023 0.178927 udp 10.0.2.104 54523 <-> 174.48.245.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:45.099445 0.000000 udp 10.0.2.104 54523 -> 109.199.149.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:46.100813 0.000000 udp 10.0.2.104 54523 -> 70.112.193.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:47.102112 0.219020 udp 10.0.2.104 54523 <-> 115.118.20.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:48.104067 0.000000 udp 10.0.2.104 54523 -> 37.203.83.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:49.095229 4.005784 udp 10.0.2.104 54523 <-> 188.158.228.113 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:50.096959 0.000000 udp 10.0.2.104 54523 -> 68.235.158.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:51.098419 0.191308 udp 10.0.2.104 54523 <-> 190.218.84.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:52.099406 0.156588 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:54.102716 0.000000 udp 10.0.2.104 54523 -> 98.208.32.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:02:55.104056 0.032578 udp 10.0.2.104 54523 <-> 109.199.149.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:56.095210 0.037497 udp 10.0.2.104 54523 <-> 85.186.104.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:57.096900 0.434195 udp 10.0.2.104 54523 <-> 177.218.176.85 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:58.098530 0.162367 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:02:59.099615 0.285063 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:00.101463 0.064122 udp 10.0.2.104 54523 <-> 79.116.225.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:01.102762 0.035309 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:02.104053 0.310556 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:03.095302 0.866104 udp 10.0.2.104 54523 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:04.097132 0.040013 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:05.098474 0.055059 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:06.099933 0.000000 udp 10.0.2.104 54523 -> 178.166.124.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:07.100966 0.220055 udp 10.0.2.104 54523 <-> 182.71.74.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:08.102565 2.994544 udp 10.0.2.104 54523 -> 1.38.27.162 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:09.104254 0.119866 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:10.095705 3.004203 udp 10.0.2.104 54523 -> 177.9.168.22 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:12.098598 0.316097 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:13.643467 3.001747 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:03:14.100926 1.566563 udp 10.0.2.104 54523 <-> 92.228.45.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:15.102942 0.167752 udp 10.0.2.104 54523 <-> 103.6.187.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:16.103987 0.000000 udp 10.0.2.104 54523 -> 96.63.219.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:17.095742 0.407391 udp 10.0.2.104 54523 <-> 111.217.235.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:18.097304 0.247373 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:19.098151 0.230809 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:19.759178 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:03:20.099861 0.031770 udp 10.0.2.104 54523 <-> 5.53.164.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:20.650445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:03:21.101487 0.000000 udp 10.0.2.104 54523 -> 193.68.211.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:22.102591 0.204281 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:23.104377 0.000000 udp 10.0.2.104 54523 -> 88.216.9.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:24.095804 0.252457 udp 10.0.2.104 54523 <-> 74.220.242.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:25.097244 0.046101 udp 10.0.2.104 54523 <-> 188.254.149.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:26.098170 1.001820 udp 10.0.2.104 54523 <-> 50.178.6.175 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:28.101691 0.060423 udp 10.0.2.104 54523 <-> 77.122.191.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:28.652081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:03:29.102716 1.573862 udp 10.0.2.104 54523 <-> 201.210.213.118 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:30.104036 0.123110 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:31.096211 0.000000 udp 10.0.2.104 54523 -> 222.254.248.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:32.096855 0.000000 udp 10.0.2.104 54523 -> 114.24.166.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:33.098242 2.003286 udp 10.0.2.104 54523 -> 71.98.204.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:34.099924 0.176583 udp 10.0.2.104 54523 <-> 98.215.30.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:36.102764 0.435555 udp 10.0.2.104 54523 <-> 27.105.0.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:37.104422 0.000000 udp 10.0.2.104 54523 -> 114.24.166.8 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:38.096129 0.037520 udp 10.0.2.104 54523 <-> 77.64.187.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:39.097507 0.990299 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:40.098684 0.221730 udp 10.0.2.104 54523 <-> 149.140.171.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:41.100354 0.000000 udp 10.0.2.104 54523 -> 117.206.82.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:42.101517 0.396688 udp 10.0.2.104 54523 <-> 42.148.35.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:43.103288 0.071623 udp 10.0.2.104 54523 <-> 93.176.193.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:44.104119 4.796984 udp 10.0.2.104 54523 <-> 190.94.222.17 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:44.655160 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:03:45.096066 0.097177 udp 10.0.2.104 54523 <-> 79.33.141.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:46.097315 0.147474 udp 10.0.2.104 54523 <-> 24.144.167.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:47.098391 0.344789 udp 10.0.2.104 54523 <-> 186.54.122.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:48.100513 0.367129 udp 10.0.2.104 54523 <-> 112.197.242.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:49.101330 0.054375 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:50.103111 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:51.104160 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:52.095944 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:53.097525 4.997043 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:54.099202 4.996646 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:55.100471 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:03:56.101315 0.210463 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:03:57.102906 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:00.097258 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:01.099063 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:02.100112 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:03.101677 0.063148 udp 10.0.2.104 54523 <-> 82.11.20.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:04.103056 0.208244 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:05.096366 2.001109 udp 10.0.2.104 54523 <-> 114.25.138.159 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:06.096052 0.000000 udp 10.0.2.104 54523 -> 82.132.101.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:06.757074 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:04:08.098955 0.297408 udp 10.0.2.104 54523 <-> 151.233.128.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:09.100042 0.341103 udp 10.0.2.104 54523 <-> 182.225.0.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:10.101811 0.083984 udp 10.0.2.104 54523 <-> 46.120.136.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:11.103722 0.459107 udp 10.0.2.104 54523 <-> 42.148.35.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:12.094320 0.146666 udp 10.0.2.104 54523 <-> 24.144.240.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:13.096147 0.054400 udp 10.0.2.104 54523 <-> 84.32.149.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:14.097196 0.050730 udp 10.0.2.104 54523 <-> 95.180.52.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:15.099301 0.162151 udp 10.0.2.104 54523 <-> 68.56.21.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:16.100089 0.000000 udp 10.0.2.104 54523 -> 85.44.245.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:16.661415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:04:17.101764 0.047720 udp 10.0.2.104 54523 <-> 78.157.66.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:18.103326 0.040824 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:19.094522 0.386129 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:20.096438 0.151420 udp 10.0.2.104 54523 <-> 204.116.75.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:21.097858 0.149114 udp 10.0.2.104 54523 <-> 69.244.114.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:22.099134 0.056913 udp 10.0.2.104 54523 <-> 217.197.248.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:23.100175 0.000000 udp 10.0.2.104 54523 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:24.192421 4.279507 udp 10.0.2.104 54523 <-> 201.210.93.80 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:25.193181 1.993043 udp 10.0.2.104 54523 <-> 201.19.246.78 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:26.184606 3.036537 udp 10.0.2.104 54523 <-> 82.192.233.62 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:30.191009 0.214960 udp 10.0.2.104 54523 <-> 69.247.73.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:31.192348 0.045200 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:32.193329 1.633776 udp 10.0.2.104 54523 <-> 103.251.81.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:33.185367 0.044690 udp 10.0.2.104 54523 <-> 80.216.234.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:34.186120 0.031054 udp 10.0.2.104 54523 <-> 89.67.108.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:35.188315 0.363103 udp 10.0.2.104 54523 <-> 14.99.209.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:36.189149 0.489224 udp 10.0.2.104 54523 <-> 173.121.93.1 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:37.190723 0.156397 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:38.192075 0.000000 udp 10.0.2.104 54523 -> 27.49.17.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:39.193278 0.431472 udp 10.0.2.104 54523 <-> 219.36.148.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:40.184728 0.155686 udp 10.0.2.104 54523 <-> 70.80.122.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:41.186163 0.165644 udp 10.0.2.104 54523 <-> 24.177.86.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:42.187878 0.000000 udp 10.0.2.104 54523 -> 24.60.218.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:43.189157 0.519429 udp 10.0.2.104 54523 <-> 85.136.45.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:44.190773 2.527824 udp 10.0.2.104 54523 <-> 200.84.252.25 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:45.192128 0.129777 udp 10.0.2.104 54523 <-> 31.176.229.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:47.185367 1.411946 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:49.188184 0.000000 udp 10.0.2.104 54523 -> 212.166.241.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:50.189266 0.144389 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:51.191073 0.289107 udp 10.0.2.104 54523 <-> 134.3.105.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:52.192308 0.252880 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:53.193869 0.325230 udp 10.0.2.104 54523 <-> 210.222.222.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:53.844720 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:04:54.185015 0.120018 udp 10.0.2.104 54523 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:55.186757 4.159593 udp 10.0.2.104 54523 <-> 49.207.73.233 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:04:56.188207 0.000000 udp 10.0.2.104 54523 -> 190.178.187.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:04:57.189199 0.438946 udp 10.0.2.104 54523 <-> 87.17.229.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:00.193475 0.064590 udp 10.0.2.104 54523 <-> 213.64.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:01.185287 1.436411 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:02.186737 0.056150 udp 10.0.2.104 54523 <-> 89.136.104.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:03.188373 0.271359 udp 10.0.2.104 54523 <-> 190.194.109.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:04.189342 0.068525 udp 10.0.2.104 54523 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:05.191406 0.193526 udp 10.0.2.104 54523 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:06.192337 0.298803 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:07.193649 0.119578 udp 10.0.2.104 54523 <-> 24.122.51.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:08.185496 0.000000 udp 10.0.2.104 54523 -> 189.54.80.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:09.186820 0.383744 udp 10.0.2.104 54523 <-> 113.252.52.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:10.188000 0.170034 udp 10.0.2.104 54523 <-> 98.161.45.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:11.189617 0.183575 udp 10.0.2.104 54523 <-> 68.98.24.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:12.191062 2.066069 udp 10.0.2.104 54523 <-> 98.82.26.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:13.192631 0.377082 udp 10.0.2.104 54523 <-> 61.21.52.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:14.193594 0.029461 udp 10.0.2.104 54523 <-> 91.144.68.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:15.185453 0.208200 udp 10.0.2.104 54523 <-> 190.38.83.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:16.187034 1.323964 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:17.188493 0.219882 udp 10.0.2.104 54523 <-> 111.91.64.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:18.189804 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:19.190791 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:20.192495 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:21.193669 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:22.185098 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:23.186652 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:24.188010 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:25.189490 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:26.191445 3.995774 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:27.192605 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:28.193987 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:29.185142 0.255083 udp 10.0.2.104 54523 <-> 190.38.83.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:31.188507 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:32.189614 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:33.191416 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:34.192824 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:35.194182 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:36.185211 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:37.187408 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:39.189534 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:40.190987 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:40.852202 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:05:41.192954 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:42.194328 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:43.185774 0.000072 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:43.185846 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:05:44.186766 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:45.188388 0.167482 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:05:46.189908 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:47.191600 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:48.192947 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:49.193906 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:50.185361 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:51.186993 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:52.188498 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:53.190038 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:54.191762 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:55.193110 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:56.193979 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:58.187530 4.005424 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:59.188387 0.000086 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:05:59.188473 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:06:00.190249 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:01.191739 0.147292 udp 10.0.2.104 54523 <-> 173.81.217.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:03.194660 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:04.185749 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:05.187062 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:06.188663 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:07.190053 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:08.191319 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:09.463512 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:10.465159 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:11.456303 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:12.457513 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:13.458941 0.000087 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:13.459028 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:06:14.460252 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:15.462324 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:16.463749 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:17.465077 0.129753 udp 10.0.2.104 54523 <-> 173.81.217.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:18.455998 0.000000 udp 10.0.2.104 54523 -> 207.225.37.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:19.457487 0.232258 udp 10.0.2.104 54523 <-> 217.22.82.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:20.458890 0.350765 udp 10.0.2.104 54523 <-> 189.68.134.233 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:21.460772 1.258486 udp 10.0.2.104 54523 <-> 202.147.219.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:22.462384 0.317805 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:23.463672 0.075958 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:24.465107 1.272251 udp 10.0.2.104 54523 <-> 184.63.214.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:25.456807 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:26.457547 0.417204 udp 10.0.2.104 54523 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:27.459146 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:28.120363 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:06:28.460674 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:29.461813 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:30.463732 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:31.454953 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:32.456124 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:32.456170 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:06:34.459615 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:35.460494 0.047222 udp 10.0.2.104 54523 <-> 5.14.145.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:36.462650 0.444362 udp 10.0.2.104 54523 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:37.463338 0.163814 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:38.455256 0.000000 udp 10.0.2.104 54523 -> 201.243.173.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:39.456734 2.031896 udp 10.0.2.104 54523 <-> 87.97.204.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:40.457639 0.000000 udp 10.0.2.104 54523 -> 181.43.87.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:42.460942 0.052764 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:43.462238 0.049126 udp 10.0.2.104 54523 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:44.463719 0.075747 udp 10.0.2.104 54523 <-> 81.234.205.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:45.455234 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:46.456387 0.070686 udp 10.0.2.104 54523 <-> 78.206.76.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:47.458353 0.053767 udp 10.0.2.104 54523 <-> 77.78.246.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:48.459764 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:49.460716 4.997033 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:50.462288 0.192360 udp 10.0.2.104 54523 <-> 176.219.30.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:51.173744 0.010341 udp 10.0.2.104 54573 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 07:06:51.184364 0.000000 udp 10.0.2.104 54574 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:52.455172 0.000000 udp 10.0.2.104 54523 -> 119.24.43.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:53.456560 0.063880 udp 10.0.2.104 54523 <-> 78.206.76.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:54.613798 0.000000 udp 10.0.2.104 54523 <- 50.158.209.132 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:55.459405 0.129718 udp 10.0.2.104 54523 <-> 94.50.41.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:56.460955 0.000000 udp 10.0.2.104 54523 -> 186.94.17.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:06:57.462253 0.437050 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:58.464163 0.380175 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:06:59.455376 0.000000 udp 10.0.2.104 54523 -> 49.206.155.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:00.456389 0.000000 udp 10.0.2.104 54523 -> 190.205.166.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:01.458510 0.128852 udp 10.0.2.104 54523 <-> 94.50.41.6 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:02.459368 0.117665 udp 10.0.2.104 54523 <-> 37.214.49.15 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:03.460940 0.302749 udp 10.0.2.104 54523 <-> 190.185.220.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:04.462653 1.690958 udp 10.0.2.104 54523 <-> 14.96.65.63 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:06.455487 0.176605 udp 10.0.2.104 54523 <-> 68.117.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:07.457118 0.000000 udp 10.0.2.104 54523 -> 79.118.137.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:08.457951 0.000000 udp 10.0.2.104 54523 -> 75.206.212.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:09.459345 0.000000 udp 10.0.2.104 54523 -> 24.75.169.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:10.461190 2.002642 udp 10.0.2.104 54523 -> 206.253.148.89 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:11.462543 0.201113 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:13.455856 0.159384 udp 10.0.2.104 54523 <-> 75.132.196.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:14.456525 0.065208 udp 10.0.2.104 54523 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:15.117677 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:07:15.457958 0.048205 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:16.459725 2.845625 udp 10.0.2.104 54523 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:17.461349 0.015677 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:18.462471 0.000000 udp 10.0.2.104 54523 -> 173.2.212.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:19.463769 0.000000 udp 10.0.2.104 54523 -> 46.79.108.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:20.455128 1.109669 udp 10.0.2.104 54523 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:21.456576 0.000000 udp 10.0.2.104 54523 -> 58.8.140.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:22.458505 0.149176 udp 10.0.2.104 54523 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:23.459696 0.270412 udp 10.0.2.104 54523 <-> 189.120.4.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:24.461054 0.154124 udp 10.0.2.104 54523 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:25.462969 0.783902 udp 10.0.2.104 54523 <-> 181.43.67.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:26.464135 0.169965 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:27.455441 0.000000 udp 10.0.2.104 54523 -> 173.11.30.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:28.456920 0.000000 udp 10.0.2.104 54523 -> 190.218.165.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:29.458444 0.057510 udp 10.0.2.104 54523 <-> 134.3.105.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:30.460054 0.151649 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:31.460946 0.000000 udp 10.0.2.104 54523 -> 181.43.67.27 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:32.463092 0.034813 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:33.464191 0.000000 udp 10.0.2.104 54523 -> 173.11.30.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:34.455372 0.000000 udp 10.0.2.104 54523 -> 80.99.71.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:35.457098 2.166067 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:36.458796 0.000000 udp 10.0.2.104 54523 -> 179.57.31.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:38.461352 0.342869 udp 10.0.2.104 54523 <-> 182.155.52.71 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:39.463118 0.332790 udp 10.0.2.104 54523 <-> 180.151.23.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:40.464207 0.350585 udp 10.0.2.104 54523 <-> 1.173.229.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:41.455786 1.928858 udp 10.0.2.104 54523 <-> 117.201.121.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:42.456962 0.039052 udp 10.0.2.104 54523 <-> 89.76.158.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:43.458549 0.731901 udp 10.0.2.104 54523 <-> 14.99.54.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:44.460219 0.155069 udp 10.0.2.104 54523 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:45.461275 0.171622 udp 10.0.2.104 54523 <-> 68.54.38.108 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:46.462814 0.000000 udp 10.0.2.104 54523 -> 70.182.15.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:47.464514 0.279863 udp 10.0.2.104 54523 <-> 58.12.126.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:48.455711 0.163931 udp 10.0.2.104 54523 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:49.457287 0.043727 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:50.458916 0.187865 udp 10.0.2.104 54523 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:51.459951 0.941411 udp 10.0.2.104 54523 <-> 190.193.96.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:52.461206 0.390981 udp 10.0.2.104 54523 <-> 84.62.69.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:53.462582 0.270914 udp 10.0.2.104 54523 <-> 76.101.48.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:54.504110 0.166584 udp 10.0.2.104 54523 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:55.496102 0.000000 udp 10.0.2.104 54523 -> 174.88.65.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:56.497265 0.560938 udp 10.0.2.104 54523 <-> 79.133.238.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:07:57.498547 4.997432 udp 10.0.2.104 54523 -> 201.210.213.118 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:58.500508 0.000000 udp 10.0.2.104 54523 -> 201.243.112.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:07:59.501331 0.060917 udp 10.0.2.104 54523 <-> 194.140.132.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:00.502984 4.997232 udp 10.0.2.104 54523 -> 174.88.65.87 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:01.504827 0.117003 udp 10.0.2.104 54523 <-> 95.75.23.84 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:02.155041 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:08:03.497341 0.227087 udp 10.0.2.104 54523 <-> 71.92.68.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:03.668305 0.000000 udp 10.0.2.104 54523 <- 201.210.213.118 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:04.499096 0.000000 udp 10.0.2.104 54523 -> 188.194.15.142 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:06.501461 0.000000 udp 10.0.2.104 54523 -> 93.105.14.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:07.502898 0.232079 udp 10.0.2.104 54523 <-> 189.197.149.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:08.504440 0.212312 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:09.496329 0.535291 udp 10.0.2.104 54523 <-> 203.205.8.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:10.497139 0.915259 udp 10.0.2.104 54523 <-> 179.210.169.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:11.499148 0.000000 udp 10.0.2.104 54523 -> 180.199.144.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:12.500439 0.164398 udp 10.0.2.104 54523 <-> 74.77.171.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:13.501882 0.327786 udp 10.0.2.104 54523 <-> 111.252.28.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:14.503420 0.146700 udp 10.0.2.104 54523 <-> 24.240.26.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:15.504302 0.086240 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:16.495929 1.141306 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:18.498952 0.000000 udp 10.0.2.104 54523 -> 31.44.194.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:19.500591 4.996702 udp 10.0.2.104 54523 -> 181.118.86.242 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:20.501604 0.088088 udp 10.0.2.104 54523 <-> 85.130.65.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:21.502962 0.039889 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:22.504979 4.997287 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 4 1064 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:23.496164 1.565225 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:26.500251 0.056528 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:27.878792 0.000000 udp 10.0.2.104 54523 <- 111.254.125.242 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:28.503324 0.000000 udp 10.0.2.104 54523 -> 81.226.243.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:29.504882 0.000000 udp 10.0.2.104 54523 -> 94.170.240.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:30.496570 0.070585 udp 10.0.2.104 54523 <-> 85.130.65.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:31.497683 0.000000 udp 10.0.2.104 54523 -> 190.16.162.245 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:32.498991 0.312675 udp 10.0.2.104 54523 <-> 125.4.221.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:33.500160 0.168699 udp 10.0.2.104 54523 <-> 69.193.106.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:34.501947 0.173752 udp 10.0.2.104 54523 <-> 24.48.169.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:35.503254 0.033955 udp 10.0.2.104 54523 <-> 79.117.37.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:36.504677 0.090810 udp 10.0.2.104 54523 <-> 78.15.186.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:37.496244 3.140101 udp 10.0.2.104 54523 <-> 77.239.28.111 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:38.497363 0.159127 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:39.499306 0.158159 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:41.512289 0.178979 udp 10.0.2.104 54523 <-> 173.177.19.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:42.513541 0.126339 udp 10.0.2.104 54523 <-> 84.232.15.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:43.515061 1.065099 udp 10.0.2.104 54523 <-> 27.4.137.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:44.506508 0.074623 udp 10.0.2.104 54523 <-> 85.152.240.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:45.508108 0.577870 udp 10.0.2.104 54523 <-> 46.197.103.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:46.509401 0.121628 udp 10.0.2.104 54523 <-> 92.40.109.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:47.511016 0.000000 udp 10.0.2.104 54523 -> 1.161.111.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:48.511997 0.142337 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:49.173029 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:08:49.513424 0.056841 udp 10.0.2.104 54523 <-> 178.168.46.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:50.514962 0.774598 udp 10.0.2.104 54523 <-> 79.9.246.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:51.506124 0.631369 udp 10.0.2.104 54523 <-> 201.213.14.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:52.507843 1.138960 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:54.511108 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:08:55.512373 1.366565 udp 10.0.2.104 54523 <-> 111.253.130.102 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:57.504858 0.395654 udp 10.0.2.104 54523 <-> 201.213.14.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:58.506749 0.314708 udp 10.0.2.104 54523 <-> 153.161.235.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:08:59.507655 0.325145 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:00.509387 2.145111 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:01.510713 0.040408 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:03.513341 0.033164 udp 10.0.2.104 54523 <-> 94.231.32.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:04.505000 0.067334 udp 10.0.2.104 54523 <-> 77.179.32.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:05.506595 0.042715 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:06.508331 3.054280 udp 10.0.2.104 54523 <-> 79.114.8.199 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:07.509123 0.774256 udp 10.0.2.104 54523 <-> 79.45.66.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:08.510484 0.036899 udp 10.0.2.104 54523 <-> 188.254.186.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:10.514089 2.993813 udp 10.0.2.104 54523 -> 74.216.190.30 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:11.505404 0.172266 udp 10.0.2.104 54523 <-> 173.177.19.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:12.506652 0.000000 udp 10.0.2.104 54523 -> 69.180.10.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:14.509450 0.000000 udp 10.0.2.104 54523 -> 93.184.85.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:15.510658 0.061236 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:16.512561 0.000000 udp 10.0.2.104 54523 -> 46.253.3.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:17.514112 0.000000 udp 10.0.2.104 54523 -> 74.216.190.30 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:18.504869 0.149400 udp 10.0.2.104 54523 <-> 96.37.228.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:19.507033 0.067863 udp 10.0.2.104 54523 <-> 82.225.217.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:20.508050 1.102528 udp 10.0.2.104 54523 <-> 190.78.188.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:21.509714 0.310849 udp 10.0.2.104 54523 <-> 115.87.64.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:22.510818 0.000000 udp 10.0.2.104 54523 -> 24.23.214.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:23.512471 0.241603 udp 10.0.2.104 54523 <-> 190.78.59.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:24.513546 0.189547 udp 10.0.2.104 54523 <-> 123.201.36.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:25.505129 0.344589 udp 10.0.2.104 54523 <-> 190.110.186.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:26.506844 0.166894 udp 10.0.2.104 54523 <-> 68.102.200.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:27.508499 0.030623 udp 10.0.2.104 54523 <-> 188.104.226.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:28.509261 3.004783 udp 10.0.2.104 54523 <-> 2.184.46.51 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:29.511356 0.370380 udp 10.0.2.104 54523 <-> 59.190.46.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:30.512852 0.145920 udp 10.0.2.104 54523 <-> 67.80.216.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:32.504999 0.057180 udp 10.0.2.104 54523 <-> 79.115.127.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:33.506953 0.000000 udp 10.0.2.104 54523 -> 118.95.118.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:34.508410 0.167235 udp 10.0.2.104 54523 <-> 67.251.65.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:35.510003 0.000000 udp 10.0.2.104 54523 -> 186.89.8.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:36.170308 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:09:36.511253 0.156397 udp 10.0.2.104 54523 <-> 71.74.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:37.512255 0.437758 udp 10.0.2.104 54523 <-> 179.216.9.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:38.514009 0.110100 udp 10.0.2.104 54523 <-> 31.22.139.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:39.505261 0.167071 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:40.506864 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:41.507939 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:42.509511 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:43.511345 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:44.513068 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:45.514015 0.141463 udp 10.0.2.104 54523 <-> 89.247.92.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:46.505395 0.049639 udp 10.0.2.104 54523 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:09:47.506577 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:48.508788 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:49.509940 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:50.511108 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:51.512787 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:51.512838 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:09:52.514464 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:53.505429 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:54.507183 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:55.508355 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:56.509723 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:57.511525 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:09:59.514093 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:00.505381 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:01.507227 0.000000 udp 10.0.2.104 54523 -> 89.247.92.65 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:02.508412 0.166730 udp 10.0.2.104 54523 <-> 98.243.242.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:03.510075 0.162078 udp 10.0.2.104 54523 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:04.511599 0.158067 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:05.512728 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:06.514022 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:07.505910 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:08.507525 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:09.508916 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:10.509779 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:11.511652 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:12.512570 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:13.513953 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:15.507430 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:16.508476 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:17.510029 0.000000 udp 10.0.2.104 54523 -> 87.96.140.231 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:18.511631 0.058651 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:19.513155 0.138662 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:20.514750 0.172803 udp 10.0.2.104 54523 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:21.077984 3.001197 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:10:21.506022 0.000000 udp 10.0.2.104 54523 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:22.507659 0.053089 udp 10.0.2.104 54523 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:23.168363 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:10:23.508680 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:24.509794 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:25.511337 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:26.513222 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:27.514466 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:28.085619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:10:28.505920 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:29.507460 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:30.509097 0.170118 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:31.510303 0.035707 udp 10.0.2.104 54523 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:32.511881 0.174668 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:33.513408 0.000000 udp 10.0.2.104 54523 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:34.514523 0.071944 udp 10.0.2.104 54523 <-> 88.66.100.10 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:35.505596 2.294214 udp 10.0.2.104 54523 <-> 63.131.203.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:36.086903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:10:36.507430 3.349091 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:37.509067 0.000000 udp 10.0.2.104 54523 -> 67.88.29.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:38.509884 1.524141 udp 10.0.2.104 54523 <-> 98.67.228.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:39.511778 0.000000 udp 10.0.2.104 54523 -> 114.42.213.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:40.513368 0.214452 udp 10.0.2.104 54523 <-> 67.55.242.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:41.514811 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:42.505648 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:43.507105 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:44.508802 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:45.510581 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:46.511948 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:47.513473 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:48.514623 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:10:49.506345 0.145934 udp 10.0.2.104 54523 <-> 184.56.26.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:50.507245 0.173199 udp 10.0.2.104 54523 <-> 49.206.41.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:51.509036 0.028271 udp 10.0.2.104 54523 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:52.089849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:10:52.510315 0.037074 udp 10.0.2.104 54523 <-> 188.254.186.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:53.511785 0.729339 udp 10.0.2.104 54523 <-> 186.93.166.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:54.513125 0.029263 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:55.514729 0.058912 udp 10.0.2.104 54523 <-> 79.115.97.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:56.506481 0.145070 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:57.507961 0.110334 udp 10.0.2.104 54523 <-> 208.88.5.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:58.509190 0.040954 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:10:59.510828 0.355486 udp 10.0.2.104 54523 <-> 112.170.227.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:00.511520 0.365242 udp 10.0.2.104 54523 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:01.512971 0.000000 udp 10.0.2.104 54523 -> 92.36.202.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:02.514738 0.209368 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:03.506022 0.628401 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:04.507913 0.145662 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:05.508854 0.428092 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:06.510803 0.271573 udp 10.0.2.104 54523 <-> 189.120.4.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:07.512166 0.000000 udp 10.0.2.104 54523 -> 84.110.120.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:08.513218 0.330871 udp 10.0.2.104 54523 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:09.514587 0.044323 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:10.165872 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:11:10.506568 0.000000 udp 10.0.2.104 54523 -> 177.39.62.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:11.507376 0.067501 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:12.509369 0.138301 udp 10.0.2.104 54523 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:13.510535 0.138287 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:14.512057 2.040587 udp 10.0.2.104 54523 <-> 130.204.169.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:15.513195 3.842990 udp 10.0.2.104 54523 <-> 114.134.251.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:17.506621 0.045548 udp 10.0.2.104 54523 <-> 46.109.149.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:18.507402 0.171821 udp 10.0.2.104 54523 <-> 24.220.131.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:19.509216 0.118617 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:20.510680 0.034467 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:21.511770 0.064187 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:22.513289 0.043830 udp 10.0.2.104 54523 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:23.515003 0.000000 udp 10.0.2.104 54523 -> 201.124.100.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:24.095459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:11:24.506245 0.684148 udp 10.0.2.104 54523 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:25.507658 0.334392 udp 10.0.2.104 54523 <-> 202.131.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:26.509344 0.056468 udp 10.0.2.104 54523 <-> 158.49.215.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:27.510454 0.229269 udp 10.0.2.104 54523 <-> 186.112.163.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:28.512486 4.374067 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:29.513433 0.419703 udp 10.0.2.104 54523 <-> 190.36.169.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:30.505103 0.000000 udp 10.0.2.104 54523 -> 24.226.112.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:31.506471 0.095950 udp 10.0.2.104 54523 <-> 188.30.154.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:33.509228 0.378260 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:34.510804 0.229679 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:35.512183 0.000000 udp 10.0.2.104 54523 -> 99.240.230.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:36.513279 0.273496 udp 10.0.2.104 54523 <-> 201.53.219.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:37.504733 0.162783 udp 10.0.2.104 54523 <-> 98.193.188.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:38.506685 0.000000 udp 10.0.2.104 54523 -> 202.235.233.165 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:39.507912 0.021822 udp 10.0.2.104 54523 <-> 91.146.151.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:40.509046 0.151997 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:41.511096 0.000000 udp 10.0.2.104 54523 -> 211.13.57.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:42.512412 0.000000 udp 10.0.2.104 54523 -> 14.96.12.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:43.513792 0.547608 udp 10.0.2.104 54523 <-> 46.197.103.34 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:44.505402 0.464254 udp 10.0.2.104 54523 <-> 183.72.50.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:45.506218 0.061941 udp 10.0.2.104 54523 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:46.508287 2.002844 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:47.509453 0.655000 udp 10.0.2.104 54523 <-> 70.237.37.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:49.512570 0.168982 udp 10.0.2.104 54523 <-> 75.129.198.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:50.513521 0.062161 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:51.505593 0.325142 udp 10.0.2.104 54523 <-> 218.149.5.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:52.506586 0.407591 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:53.507994 0.000000 udp 10.0.2.104 54523 -> 223.223.153.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:11:54.509775 0.079285 udp 10.0.2.104 54523 <-> 80.117.95.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:55.511205 0.113052 udp 10.0.2.104 54523 <-> 72.209.212.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:56.512561 0.027283 udp 10.0.2.104 54523 <-> 83.84.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:57.173356 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:11:57.514007 0.175415 udp 10.0.2.104 54523 <-> 206.253.49.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:58.505501 0.050311 udp 10.0.2.104 54523 <-> 5.14.128.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:11:59.506674 0.204517 udp 10.0.2.104 54523 <-> 173.25.251.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:00.508454 0.525953 udp 10.0.2.104 54523 <-> 190.17.37.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:01.509326 0.040607 udp 10.0.2.104 54523 <-> 85.130.4.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:02.511349 0.325413 udp 10.0.2.104 54523 <-> 117.204.244.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:03.512702 0.279990 udp 10.0.2.104 54523 <-> 2.187.86.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:04.513541 0.151892 udp 10.0.2.104 54523 <-> 98.215.29.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:05.504975 0.322665 udp 10.0.2.104 54523 <-> 220.80.230.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:06.507043 0.178086 udp 10.0.2.104 54523 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:07.507934 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:08.509451 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:09.510751 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:10.512222 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:11.514098 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:12.505737 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:13.507096 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:14.508510 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:15.509856 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:16.511114 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:17.512611 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:18.513807 0.000000 udp 10.0.2.104 54523 -> 87.199.48.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:19.505654 0.000000 udp 10.0.2.104 54523 -> 116.193.136.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:20.507035 0.150343 udp 10.0.2.104 54523 <-> 74.58.82.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:21.508290 0.158719 udp 10.0.2.104 54523 <-> 50.142.111.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:22.509535 0.000000 udp 10.0.2.104 54523 -> 37.254.82.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:23.511328 0.091694 udp 10.0.2.104 54523 <-> 176.201.82.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:24.512324 0.087906 udp 10.0.2.104 54523 <-> 151.15.141.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:25.514416 0.056191 udp 10.0.2.104 54523 <-> 79.113.147.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:26.505354 0.163090 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:27.506817 0.155059 udp 10.0.2.104 54523 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:28.508533 0.000000 udp 10.0.2.104 54523 -> 213.121.150.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:29.510104 0.295511 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:30.511058 0.072456 udp 10.0.2.104 54523 <-> 78.251.75.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:31.512866 1.568450 udp 10.0.2.104 54523 <-> 202.29.178.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:33.851865 0.265656 udp 10.0.2.104 54523 <-> 177.182.184.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:34.667162 0.241784 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:35.668767 0.000000 udp 10.0.2.104 54523 -> 50.81.76.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:12:36.669936 0.039789 udp 10.0.2.104 54523 <-> 213.231.136.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:37.671356 0.323522 udp 10.0.2.104 54523 <-> 116.64.46.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:38.673036 0.030026 udp 10.0.2.104 54523 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:39.674117 0.055162 udp 10.0.2.104 54523 <-> 188.143.15.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:40.665781 2.897944 udp 10.0.2.104 54523 <-> 172.162.41.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:41.667576 0.364350 udp 10.0.2.104 54523 <-> 1.173.9.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:42.668579 0.206905 udp 10.0.2.104 54523 <-> 24.19.205.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:43.670327 0.324114 udp 10.0.2.104 54523 <-> 115.241.195.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:44.331171 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:12:44.671313 0.540392 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:45.672734 0.080504 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:46.674463 0.127869 udp 10.0.2.104 54523 <-> 216.121.246.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:47.666430 0.049429 udp 10.0.2.104 54523 <-> 62.194.156.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:48.667326 0.163016 udp 10.0.2.104 54523 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:49.669370 0.117198 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:50.670607 0.043135 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:51.672180 1.840007 udp 10.0.2.104 54523 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:52.673693 0.448137 udp 10.0.2.104 54523 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:53.674662 0.408408 udp 10.0.2.104 54523 <-> 190.198.177.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:54.665702 0.273138 udp 10.0.2.104 54523 <-> 179.235.4.239 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:55.667360 0.166868 udp 10.0.2.104 54523 <-> 74.193.110.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:56.671700 0.056633 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:57.670251 0.043871 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:58.672033 0.039067 udp 10.0.2.104 54523 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:12:59.672855 0.143898 udp 10.0.2.104 54523 <-> 24.159.153.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:00.674746 0.344626 udp 10.0.2.104 54523 <-> 114.24.22.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:01.665915 0.119405 udp 10.0.2.104 54523 <-> 85.67.109.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:02.667445 0.155711 udp 10.0.2.104 54523 <-> 24.154.191.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:03.669192 0.070248 udp 10.0.2.104 54523 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:04.670036 0.050792 udp 10.0.2.104 54523 <-> 31.129.21.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:05.671478 0.354121 udp 10.0.2.104 54523 <-> 211.209.63.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:06.672966 0.056715 udp 10.0.2.104 54523 <-> 84.32.149.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:07.674619 0.374526 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:08.666456 0.061660 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:09.667282 0.311456 udp 10.0.2.104 54523 <-> 119.200.155.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:10.669169 0.083929 udp 10.0.2.104 54523 <-> 93.81.199.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:11.670734 0.160910 udp 10.0.2.104 54523 <-> 71.56.93.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:12.671880 0.000000 udp 10.0.2.104 54523 -> 173.174.185.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:13.673419 0.155396 udp 10.0.2.104 54523 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:14.674851 0.039515 udp 10.0.2.104 54523 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:15.665995 0.034765 udp 10.0.2.104 54523 <-> 188.254.221.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:16.667939 0.368084 udp 10.0.2.104 54523 <-> 111.243.164.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:17.669121 0.000000 udp 10.0.2.104 54523 -> 184.21.193.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:18.670689 0.066669 udp 10.0.2.104 54523 <-> 92.87.69.43 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:19.672003 0.000000 udp 10.0.2.104 54523 -> 178.125.70.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:20.673171 0.229797 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:21.675143 1.250592 udp 10.0.2.104 54523 <-> 101.63.192.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:22.665910 0.311269 udp 10.0.2.104 54523 <-> 186.48.217.184 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:23.667385 0.094859 udp 10.0.2.104 54523 <-> 37.45.42.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:24.669221 0.167095 udp 10.0.2.104 54523 <-> 124.123.119.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:25.670663 2.002615 udp 10.0.2.104 54523 -> 67.166.246.234 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:26.672087 0.260542 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:28.674803 0.000000 udp 10.0.2.104 54523 -> 117.207.154.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:29.666006 0.109943 udp 10.0.2.104 54523 <-> 109.67.1.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:30.667906 0.258763 udp 10.0.2.104 54523 <-> 24.148.135.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:31.328827 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:13:31.668956 2.002794 udp 10.0.2.104 54523 -> 77.78.227.24 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:32.670775 0.049448 udp 10.0.2.104 54523 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:34.673562 0.000000 udp 10.0.2.104 54523 -> 62.77.244.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:35.674631 0.056508 udp 10.0.2.104 54523 <-> 77.78.246.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:36.666564 0.000000 udp 10.0.2.104 54523 -> 69.92.95.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:37.667555 0.429868 udp 10.0.2.104 54523 <-> 179.216.9.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:38.669435 0.146235 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:39.670991 0.039063 udp 10.0.2.104 54523 <-> 81.226.88.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:40.672473 0.332615 udp 10.0.2.104 54523 <-> 58.8.140.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:41.673865 0.103656 udp 10.0.2.104 54523 <-> 85.65.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:42.674712 0.160884 udp 10.0.2.104 54523 <-> 108.170.53.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:43.666114 0.064442 udp 10.0.2.104 54523 <-> 79.113.177.17 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:44.667681 0.387165 udp 10.0.2.104 54523 <-> 36.224.100.225 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:46.670593 0.304868 udp 10.0.2.104 54523 <-> 114.180.118.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:47.671862 0.157503 udp 10.0.2.104 54523 <-> 96.30.149.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:48.673615 0.030168 udp 10.0.2.104 54523 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:13:49.675177 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:50.666168 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:51.667681 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:52.669097 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:53.670514 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:54.672204 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:55.673651 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:56.675173 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:57.666815 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:58.667674 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:13:59.669478 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:00.670755 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:01.672154 0.153233 udp 10.0.2.104 54523 <-> 192.226.151.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:02.673529 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:03.665573 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:04.666578 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:05.668439 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:06.669376 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:07.671318 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:08.672675 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:09.673854 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:10.665336 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:12.667986 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:13.669793 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:14.670942 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:15.672556 0.000053 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:15.672609 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:14:16.674109 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:17.665027 0.000000 udp 10.0.2.104 54523 -> 95.252.151.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:18.326370 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:14:18.666603 0.303849 udp 10.0.2.104 54523 <-> 114.180.118.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:19.668320 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:20.670108 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:21.671385 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:22.672345 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:23.673772 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:24.665490 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:25.667126 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:26.668706 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:27.670009 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:28.671197 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:29.672402 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:30.674365 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:31.665809 0.000067 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:31.665876 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:14:32.666659 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:33.668400 0.303661 udp 10.0.2.104 54523 <-> 114.180.118.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:34.669442 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:35.671247 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:36.672519 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:37.674326 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:38.665357 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:39.667263 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:40.668083 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:41.669639 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:42.671445 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:43.672568 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:44.674392 0.000068 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:44.674460 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:14:46.667085 0.000000 udp 10.0.2.104 54523 -> 192.226.151.208 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:47.668377 0.138021 udp 10.0.2.104 54523 <-> 24.131.78.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:48.670240 0.141851 udp 10.0.2.104 54523 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:49.671353 0.000000 udp 10.0.2.104 54523 -> 46.167.88.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:14:50.673043 0.927770 udp 10.0.2.104 54523 <-> 68.170.235.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:51.674205 0.159190 udp 10.0.2.104 54523 <-> 49.207.85.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:52.665316 0.152306 udp 10.0.2.104 54523 <-> 50.134.10.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:53.667301 0.035974 udp 10.0.2.104 54523 <-> 87.207.149.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:54.668765 0.030505 udp 10.0.2.104 54523 <-> 78.90.170.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:55.670191 0.391440 udp 10.0.2.104 54523 <-> 186.91.145.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:56.671500 0.078382 udp 10.0.2.104 54523 <-> 92.2.228.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:57.673002 0.288924 udp 10.0.2.104 54523 <-> 203.165.248.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:58.674139 0.127392 udp 10.0.2.104 54523 <-> 84.127.155.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:14:59.665701 0.000000 udp 10.0.2.104 54523 -> 93.102.92.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:00.667325 0.355240 udp 10.0.2.104 54523 <-> 27.100.67.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:01.668613 0.352188 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:02.670276 0.149791 udp 10.0.2.104 54523 <-> 68.199.44.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:03.671216 0.324581 udp 10.0.2.104 54523 <-> 114.174.40.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:04.673143 0.000000 udp 10.0.2.104 54523 -> 218.164.7.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:05.323714 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:15:05.674219 0.058993 udp 10.0.2.104 54523 <-> 82.241.35.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:06.665822 0.146589 udp 10.0.2.104 54523 <-> 69.123.17.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:07.667476 0.234942 udp 10.0.2.104 54523 <-> 190.204.99.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:08.668678 0.334025 udp 10.0.2.104 54523 <-> 115.240.68.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:09.670039 0.126031 udp 10.0.2.104 54523 <-> 82.48.115.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:10.671245 0.000000 udp 10.0.2.104 54523 -> 181.166.176.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:11.672991 3.158063 udp 10.0.2.104 54523 <-> 72.202.193.7 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:12.674710 0.078876 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:13.665749 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:15.668749 0.012424 udp 10.0.2.104 54523 <-> 89.176.244.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:16.670156 0.146642 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:17.671422 4.203431 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:18.673419 4.997132 udp 10.0.2.104 54523 <-> 176.215.215.44 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:19.674364 1.828720 udp 10.0.2.104 54523 <-> 186.9.10.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:20.665923 0.138706 udp 10.0.2.104 54523 <-> 151.77.138.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:22.668910 0.000000 udp 10.0.2.104 54523 -> 2.137.160.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:23.755476 0.000000 udp 10.0.2.104 54523 <- 176.215.215.44 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:24.671346 2.994515 udp 10.0.2.104 54523 -> 178.79.41.4 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:25.673648 0.138169 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:26.674698 0.000000 udp 10.0.2.104 54523 -> 186.92.177.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:28.667224 0.047161 udp 10.0.2.104 54523 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:29.668669 0.616694 udp 10.0.2.104 54523 <-> 173.216.251.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:30.670085 0.416122 udp 10.0.2.104 54523 <-> 14.194.52.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:31.671942 0.166581 udp 10.0.2.104 54523 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:32.673184 0.119046 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:33.674549 0.658796 udp 10.0.2.104 54523 <-> 14.96.120.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:34.666056 0.212058 udp 10.0.2.104 54523 <-> 109.54.58.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:35.667950 0.033754 udp 10.0.2.104 54523 <-> 188.254.174.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:36.668583 0.061115 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:37.670234 0.527141 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:38.671777 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:39.672922 0.155106 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:40.675036 0.084136 udp 10.0.2.104 54523 <-> 93.81.199.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:41.665758 0.318318 udp 10.0.2.104 54523 <-> 219.71.227.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:42.667300 0.051846 udp 10.0.2.104 54523 <-> 84.1.45.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:43.669026 0.032993 udp 10.0.2.104 54523 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:44.670434 0.041024 udp 10.0.2.104 54523 <-> 86.20.162.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:45.672072 0.309555 udp 10.0.2.104 54523 <-> 220.116.148.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:46.673116 0.242026 udp 10.0.2.104 54523 <-> 186.90.110.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:47.674801 0.000000 udp 10.0.2.104 54523 -> 79.11.198.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:48.666392 0.124063 udp 10.0.2.104 54523 <-> 64.121.148.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:49.667291 0.220004 udp 10.0.2.104 54523 <-> 108.184.253.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:50.669257 0.517598 udp 10.0.2.104 54523 <-> 203.73.103.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:51.670147 0.026840 udp 10.0.2.104 54523 <-> 213.240.199.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:52.331760 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:15:52.672061 0.152610 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:15:53.673142 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:54.674820 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:55.666505 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:56.667743 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:57.668801 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:15:59.672334 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:00.673101 0.086013 udp 10.0.2.104 54523 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:01.674570 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:02.666385 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:02.666447 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:16:03.667726 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:04.669339 0.000000 udp 10.0.2.104 54523 -> 117.203.20.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:05.670328 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:06.672420 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:07.673702 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:08.674597 0.132589 udp 10.0.2.104 54523 <-> 87.111.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:09.666384 0.049930 udp 10.0.2.104 54523 <-> 89.43.213.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:10.667489 0.000000 udp 10.0.2.104 54523 -> 118.169.110.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:11.669561 0.313242 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:12.670370 0.000000 udp 10.0.2.104 54523 -> 190.38.55.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:13.672035 0.124152 udp 10.0.2.104 54523 <-> 88.166.83.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:14.673352 0.148041 udp 10.0.2.104 54523 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:15.675289 0.064891 udp 10.0.2.104 54523 <-> 109.197.98.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:16.666561 0.042946 udp 10.0.2.104 54523 <-> 188.254.153.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:17.668220 0.141387 udp 10.0.2.104 54523 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:18.668964 0.298566 udp 10.0.2.104 54523 <-> 2.185.126.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:19.671135 0.150716 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:20.672131 0.107952 udp 10.0.2.104 54523 <-> 37.215.190.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:21.673899 0.119887 udp 10.0.2.104 54523 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:22.675198 0.000000 udp 10.0.2.104 54523 -> 178.167.220.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:23.666171 0.140411 udp 10.0.2.104 54523 <-> 95.59.36.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:24.667710 0.052515 udp 10.0.2.104 54523 <-> 81.57.148.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:25.669036 0.077014 udp 10.0.2.104 54523 <-> 82.130.134.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:26.671027 0.358886 udp 10.0.2.104 54523 <-> 59.190.37.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:27.672650 0.117508 udp 10.0.2.104 54523 <-> 79.42.25.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:28.674041 0.169979 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:29.675296 0.056472 udp 10.0.2.104 54523 <-> 89.230.66.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:30.666801 0.485315 udp 10.0.2.104 54523 <-> 117.204.46.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:31.667921 0.193966 udp 10.0.2.104 54523 <-> 70.173.84.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:32.669446 0.275014 udp 10.0.2.104 54523 <-> 187.67.172.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:33.670684 0.050793 udp 10.0.2.104 54523 <-> 86.123.213.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:34.672192 0.159948 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:35.673940 0.133416 udp 10.0.2.104 54523 <-> 95.59.36.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:36.665260 0.342935 udp 10.0.2.104 54523 <-> 118.130.233.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:37.666771 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:37.666826 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:16:38.667969 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:39.328798 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:16:39.669298 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:41.672598 0.084822 udp 10.0.2.104 54523 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:42.673488 0.061282 udp 10.0.2.104 54523 <-> 31.211.155.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:43.665533 0.140948 udp 10.0.2.104 54523 <-> 74.195.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:44.666669 0.000000 udp 10.0.2.104 54523 -> 95.77.177.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:45.667975 0.243333 udp 10.0.2.104 54523 <-> 208.126.231.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:46.669777 0.150620 udp 10.0.2.104 54523 <-> 71.197.28.72 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:47.671278 3.221570 udp 10.0.2.104 54523 <-> 14.99.108.53 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:48.672597 0.194775 udp 10.0.2.104 54523 <-> 68.191.141.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:49.674143 0.553319 udp 10.0.2.104 54523 <-> 1.169.103.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:50.665195 0.179216 udp 10.0.2.104 54523 <-> 68.2.34.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:51.666583 0.043663 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:52.668577 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:53.669746 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:54.671039 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:55.672350 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:56.673631 0.217302 udp 10.0.2.104 54523 <-> 109.53.248.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:16:57.665429 0.000000 udp 10.0.2.104 54523 -> 68.185.124.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:58.667013 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:16:59.668191 0.386264 udp 10.0.2.104 54523 <-> 118.170.205.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:00.669980 0.363352 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:01.671032 0.298796 udp 10.0.2.104 54523 <-> 122.132.76.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:02.672237 0.192267 udp 10.0.2.104 54523 <-> 74.102.139.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:03.673829 0.000000 udp 10.0.2.104 54523 -> 216.196.163.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:04.665805 0.206210 udp 10.0.2.104 54523 <-> 66.214.186.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:05.666691 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:06.668660 0.000000 udp 10.0.2.104 54523 -> 153.188.132.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:07.670167 0.174446 udp 10.0.2.104 54523 <-> 24.217.52.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:08.670875 0.000000 udp 10.0.2.104 54523 -> 50.80.10.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:09.672662 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:10.674313 0.249934 udp 10.0.2.104 54523 <-> 116.203.143.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:11.665479 0.000000 udp 10.0.2.104 54523 -> 187.162.186.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:12.666993 0.279213 udp 10.0.2.104 54523 <-> 42.125.56.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:13.668226 0.317528 udp 10.0.2.104 54523 <-> 124.5.147.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:14.669631 0.182025 udp 10.0.2.104 54523 <-> 49.204.100.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:15.671330 0.000000 udp 10.0.2.104 54523 -> 187.74.78.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:16.673053 0.132244 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:17.674129 1.234428 udp 10.0.2.104 54523 <-> 190.49.16.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:18.665763 0.175374 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:19.666666 0.184633 udp 10.0.2.104 54523 <-> 75.135.51.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:20.668581 0.025798 udp 10.0.2.104 54523 <-> 95.208.125.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:21.670027 0.089624 udp 10.0.2.104 54523 <-> 90.232.104.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:22.671333 0.525836 udp 10.0.2.104 54523 <-> 190.206.1.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:23.672560 0.146484 udp 10.0.2.104 54523 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:24.674392 0.093797 udp 10.0.2.104 54523 <-> 195.228.223.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:25.665840 0.145668 udp 10.0.2.104 54523 <-> 71.199.116.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:26.326520 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:17:26.667062 0.201820 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:27.668760 0.108411 udp 10.0.2.104 54523 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:28.261820 3.002406 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:17:28.669792 0.138235 udp 10.0.2.104 54523 <-> 75.75.92.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:29.671112 1.147775 udp 10.0.2.104 54523 <-> 177.106.0.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:30.672775 0.156257 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:31.674615 0.283215 udp 10.0.2.104 54523 <-> 187.78.171.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:32.665873 0.171582 udp 10.0.2.104 54523 <-> 173.22.218.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:33.667302 0.355824 udp 10.0.2.104 54523 <-> 180.215.159.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:34.668262 0.488609 udp 10.0.2.104 54523 <-> 117.236.111.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:35.269509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:17:35.669987 0.154583 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:36.671297 0.017026 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:37.672763 0.000000 udp 10.0.2.104 54523 -> 41.143.35.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:38.674314 0.045739 udp 10.0.2.104 54523 <-> 46.109.149.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:39.665659 0.403739 udp 10.0.2.104 54523 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:40.666939 0.171339 udp 10.0.2.104 54523 <-> 72.202.193.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:41.668568 0.000000 udp 10.0.2.104 54523 -> 117.201.119.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:42.670213 0.295955 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:43.270596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:17:43.671633 0.153922 udp 10.0.2.104 54523 <-> 69.47.252.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:44.672627 0.000000 udp 10.0.2.104 54523 -> 99.242.107.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:45.674063 0.164555 udp 10.0.2.104 54523 <-> 50.162.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:46.666163 0.205811 udp 10.0.2.104 54523 <-> 122.166.14.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:47.667130 0.243099 udp 10.0.2.104 54523 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:48.668390 0.000000 udp 10.0.2.104 54523 -> 89.214.224.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:49.669799 0.047672 udp 10.0.2.104 54523 <-> 178.254.201.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:50.671301 4.997366 udp 10.0.2.104 54523 -> 78.0.29.43 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:17:51.673163 0.042002 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:52.674707 0.212140 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:53.665557 0.055962 udp 10.0.2.104 54523 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:54.667119 0.158108 udp 10.0.2.104 54523 <-> 72.239.167.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:56.669935 0.146240 udp 10.0.2.104 54523 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:57.671336 0.196347 udp 10.0.2.104 54523 <-> 24.205.186.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:58.673027 0.059669 udp 10.0.2.104 54523 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:17:59.274188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:17:59.674455 0.021128 udp 10.0.2.104 54523 <-> 109.90.62.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:00.666358 0.240739 udp 10.0.2.104 54523 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:01.667462 0.153301 udp 10.0.2.104 54523 <-> 67.248.209.92 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:02.668795 0.000000 udp 10.0.2.104 54523 -> 1.174.128.183 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:03.669943 0.023071 udp 10.0.2.104 54523 <-> 5.158.182.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:04.671676 0.148759 udp 10.0.2.104 54523 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:05.673296 0.000000 udp 10.0.2.104 54523 -> 197.206.38.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:06.674688 0.067642 udp 10.0.2.104 54523 <-> 130.204.197.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:07.665720 0.331319 udp 10.0.2.104 54523 <-> 61.70.94.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:08.667831 0.258150 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:09.668556 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:10.670410 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:11.671460 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:12.673513 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:13.324014 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:18:13.674637 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:14.666113 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:15.667269 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:16.669305 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:17.670777 0.000000 udp 10.0.2.104 54523 -> 117.207.55.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:18.672006 0.162886 udp 10.0.2.104 54523 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:19.673277 0.158747 udp 10.0.2.104 54523 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:20.674395 0.156846 udp 10.0.2.104 54523 <-> 82.54.236.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:21.665894 0.000000 udp 10.0.2.104 54523 -> 115.242.253.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:22.667258 0.065814 udp 10.0.2.104 54523 <-> 151.73.60.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:23.669052 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:24.670543 0.000000 udp 10.0.2.104 54523 -> 78.187.176.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:25.671811 0.144285 udp 10.0.2.104 54523 <-> 87.14.65.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:26.673027 0.169350 udp 10.0.2.104 54523 <-> 135.19.188.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:27.674438 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:28.666257 0.000000 udp 10.0.2.104 54523 -> 177.54.140.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:29.668090 0.037376 udp 10.0.2.104 54523 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:30.668795 0.127789 udp 10.0.2.104 54523 <-> 50.95.150.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:31.280174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:18:31.670285 0.166685 udp 10.0.2.104 54523 <-> 71.62.251.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:32.672013 0.380890 udp 10.0.2.104 54523 <-> 114.40.182.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:33.673087 2.671693 udp 10.0.2.104 54523 <-> 24.69.66.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:34.675171 0.140786 udp 10.0.2.104 54523 <-> 203.194.101.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:35.666322 0.093997 udp 10.0.2.104 54523 <-> 78.177.216.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:36.667375 0.181944 udp 10.0.2.104 54523 <-> 106.51.33.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:37.669195 0.341717 udp 10.0.2.104 54523 <-> 211.124.168.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:38.670489 0.496215 udp 10.0.2.104 54523 <-> 200.237.147.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:39.672200 0.191285 udp 10.0.2.104 54523 <-> 124.123.119.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:40.673380 0.397927 udp 10.0.2.104 54523 <-> 124.10.128.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:41.674628 0.085335 udp 10.0.2.104 54523 <-> 2.92.13.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:42.666854 0.138255 udp 10.0.2.104 54523 <-> 66.191.214.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:43.667847 0.058338 udp 10.0.2.104 54523 <-> 88.169.45.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:44.669264 0.190433 udp 10.0.2.104 54523 <-> 68.224.37.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:45.670523 0.168976 udp 10.0.2.104 54523 <-> 68.56.123.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:46.672654 0.168787 udp 10.0.2.104 54523 <-> 98.100.135.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:47.673416 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:48.674876 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:49.666330 0.425596 udp 10.0.2.104 54523 <-> 59.179.157.219 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:50.667876 0.000000 udp 10.0.2.104 54523 -> 68.193.213.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:18:51.669454 0.160345 udp 10.0.2.104 54523 <-> 123.236.7.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:52.671095 0.151460 udp 10.0.2.104 54523 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:53.672523 0.030232 udp 10.0.2.104 54523 <-> 5.53.164.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:54.673260 0.217737 udp 10.0.2.104 54523 <-> 108.185.4.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:55.675263 0.355428 udp 10.0.2.104 54523 <-> 111.242.143.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:56.666435 0.923732 udp 10.0.2.104 54523 <-> 116.73.58.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:57.667688 0.576470 udp 10.0.2.104 54523 <-> 115.241.45.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:58.669294 0.662599 udp 10.0.2.104 54523 <-> 202.29.179.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:18:59.670587 0.210040 udp 10.0.2.104 54523 <-> 64.234.32.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:00.331570 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:19:00.672340 0.059163 udp 10.0.2.104 54523 <-> 87.121.12.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:01.673846 0.050730 udp 10.0.2.104 54523 <-> 94.21.204.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:02.674787 0.036693 udp 10.0.2.104 54523 <-> 178.79.51.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:03.666587 0.164372 udp 10.0.2.104 54523 <-> 24.243.8.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:04.667967 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:05.669289 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:06.670533 0.059244 udp 10.0.2.104 54523 <-> 213.66.213.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:07.672666 0.000000 udp 10.0.2.104 54523 -> 50.20.96.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:08.673448 0.144534 udp 10.0.2.104 54523 <-> 76.127.155.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:09.664839 0.028792 udp 10.0.2.104 54523 <-> 85.130.74.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:10.666355 0.204146 udp 10.0.2.104 54523 <-> 67.174.109.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:11.668557 0.047570 udp 10.0.2.104 54523 <-> 86.125.174.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:12.669143 0.000000 udp 10.0.2.104 54523 -> 115.179.88.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:13.670654 0.390106 udp 10.0.2.104 54523 <-> 118.166.206.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:14.672058 0.836097 udp 10.0.2.104 54523 <-> 60.250.101.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:15.673791 0.000000 udp 10.0.2.104 54523 -> 174.2.220.214 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:16.665325 0.173854 udp 10.0.2.104 54523 <-> 142.217.34.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:17.666347 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:18.668297 0.000000 udp 10.0.2.104 54523 -> 111.243.164.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:19.669581 0.322850 udp 10.0.2.104 54523 <-> 177.188.177.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:20.671112 0.426031 udp 10.0.2.104 54523 <-> 101.63.26.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:21.672345 0.332215 udp 10.0.2.104 54523 <-> 219.169.100.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:22.673854 0.172199 udp 10.0.2.104 54523 <-> 96.33.173.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:23.665310 0.097732 udp 10.0.2.104 54523 <-> 46.159.185.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:24.666760 0.172314 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:25.668550 0.198569 udp 10.0.2.104 54523 <-> 76.95.67.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:26.669856 0.151887 udp 10.0.2.104 54523 <-> 24.148.135.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:27.671323 0.148023 udp 10.0.2.104 54523 <-> 72.231.172.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:28.672707 0.280800 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:29.673622 0.174705 udp 10.0.2.104 54523 <-> 149.172.200.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:30.665326 0.334981 udp 10.0.2.104 54523 <-> 219.169.100.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:31.666822 0.186053 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:32.668048 0.200890 udp 10.0.2.104 54523 <-> 72.175.79.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:33.669967 0.146590 udp 10.0.2.104 54523 <-> 216.36.28.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:34.671191 0.134371 udp 10.0.2.104 54523 <-> 178.126.73.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:35.672434 0.152619 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:36.673921 0.054393 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:37.665641 1.001362 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:39.668473 0.166742 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:40.669746 0.517187 udp 10.0.2.104 54523 <-> 67.215.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:41.671284 0.159546 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:42.672726 0.148337 udp 10.0.2.104 54523 <-> 68.189.146.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:43.674142 0.095176 udp 10.0.2.104 54523 <-> 77.126.133.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:44.665553 0.315138 udp 10.0.2.104 54523 <-> 121.152.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:45.667297 0.000000 udp 10.0.2.104 54523 -> 87.111.211.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:46.668322 0.343558 udp 10.0.2.104 54523 <-> 107.223.54.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:47.328934 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:19:47.670250 0.132121 udp 10.0.2.104 54523 <-> 207.180.74.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:48.671519 0.312585 udp 10.0.2.104 54523 <-> 180.215.185.149 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:49.672830 0.065078 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:50.674334 0.367084 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:51.665744 0.166213 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:52.667182 0.096997 udp 10.0.2.104 54523 <-> 77.126.133.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:53.668607 0.000000 udp 10.0.2.104 54523 -> 79.11.198.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:54.669656 0.146375 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:55.671421 0.023292 udp 10.0.2.104 54523 <-> 91.146.128.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:56.672430 0.172497 udp 10.0.2.104 54523 <-> 178.121.25.41 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:57.674371 0.000000 udp 10.0.2.104 54523 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:19:58.665919 0.223703 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:19:59.667019 0.156687 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:00.668792 0.196525 udp 10.0.2.104 54523 <-> 24.84.178.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:01.669591 0.609453 udp 10.0.2.104 54523 <-> 177.182.119.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:02.671187 0.153710 udp 10.0.2.104 54523 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:03.673092 0.078417 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:04.674152 0.345864 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:05.665381 0.167987 udp 10.0.2.104 54523 <-> 109.102.186.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:06.667384 0.000000 udp 10.0.2.104 54523 -> 79.144.159.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:07.668245 3.063042 udp 10.0.2.104 54523 <-> 78.49.234.99 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:08.669802 0.265893 udp 10.0.2.104 54523 <-> 186.90.110.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:09.671216 0.401195 udp 10.0.2.104 54523 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:11.674547 0.000000 udp 10.0.2.104 54523 -> 81.32.104.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:12.666116 0.232246 udp 10.0.2.104 54523 <-> 75.15.193.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:13.667550 2.002798 udp 10.0.2.104 54523 -> 178.166.124.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:14.668418 0.159125 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:16.671224 0.053750 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:17.672743 0.385423 udp 10.0.2.104 54523 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:18.674525 0.024262 udp 10.0.2.104 54523 <-> 89.33.186.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:19.666036 0.061355 udp 10.0.2.104 54523 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:20.667365 0.161253 udp 10.0.2.104 54523 <-> 173.218.201.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:21.669104 0.075758 udp 10.0.2.104 54523 <-> 188.23.228.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:22.670110 0.048118 udp 10.0.2.104 54523 <-> 62.195.179.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:23.671708 1.163535 udp 10.0.2.104 54523 <-> 79.132.171.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:24.673398 0.000000 udp 10.0.2.104 54523 -> 216.121.192.14 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:25.674458 0.135434 udp 10.0.2.104 54523 <-> 69.121.34.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:26.666258 0.114746 udp 10.0.2.104 54523 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:27.667460 0.000000 udp 10.0.2.104 54523 -> 50.242.184.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:28.668407 0.078946 udp 10.0.2.104 54523 <-> 78.8.187.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:29.670383 0.144182 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:30.671610 0.032147 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:31.673378 0.065810 udp 10.0.2.104 54523 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:32.674829 0.291896 udp 10.0.2.104 54523 <-> 182.165.97.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:33.665722 0.187861 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:34.327306 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:20:34.667373 0.288278 udp 10.0.2.104 54523 <-> 187.104.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:35.668949 0.162644 udp 10.0.2.104 54523 <-> 173.218.201.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:36.669985 0.068007 udp 10.0.2.104 54523 <-> 212.92.232.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:37.672216 0.000000 udp 10.0.2.104 54523 -> 190.43.79.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:38.672960 0.476242 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:39.674586 0.136627 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:40.665949 0.044929 udp 10.0.2.104 54523 <-> 5.20.68.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:41.667341 0.143186 udp 10.0.2.104 54523 <-> 68.194.88.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:42.669196 1.039969 udp 10.0.2.104 54523 <-> 89.215.36.131 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:44.671598 0.054449 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:45.672908 0.046861 udp 10.0.2.104 54523 <-> 83.251.242.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:46.674944 0.367479 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:47.665739 0.000000 udp 10.0.2.104 54523 -> 83.33.197.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:48.667661 0.050640 udp 10.0.2.104 54523 <-> 86.106.28.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:49.668739 0.236736 udp 10.0.2.104 54523 <-> 190.39.122.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:50.670164 0.048726 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:51.672189 0.000000 udp 10.0.2.104 54523 -> 180.151.23.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:52.673612 0.000000 udp 10.0.2.104 54523 -> 75.85.120.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:53.674375 0.000000 udp 10.0.2.104 54523 -> 24.40.254.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:20:54.665923 0.339124 udp 10.0.2.104 54523 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:55.667828 0.345032 udp 10.0.2.104 54523 <-> 61.61.228.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:56.669397 0.363202 udp 10.0.2.104 54523 <-> 201.186.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:57.670364 0.080973 udp 10.0.2.104 54523 <-> 84.43.137.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:58.672281 0.158862 udp 10.0.2.104 54523 <-> 173.218.201.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:20:59.673283 0.043076 udp 10.0.2.104 54523 <-> 83.250.195.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:00.674700 0.156649 udp 10.0.2.104 54523 <-> 71.89.26.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:01.665866 0.398119 udp 10.0.2.104 54523 <-> 59.115.150.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:02.667887 0.159544 udp 10.0.2.104 54523 <-> 74.65.45.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:03.669244 0.000000 udp 10.0.2.104 54523 -> 49.144.9.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:04.670405 0.060887 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:05.672376 0.000000 udp 10.0.2.104 54523 -> 81.35.170.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:06.673323 0.212527 udp 10.0.2.104 54523 <-> 24.2.42.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:07.674613 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:08.666258 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:09.667961 0.000000 udp 10.0.2.104 54523 -> 178.118.247.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:10.669448 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:11.670349 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:12.671953 0.206547 udp 10.0.2.104 54523 <-> 24.2.42.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:13.673280 0.027480 udp 10.0.2.104 54523 <-> 86.101.244.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:14.674564 0.224325 udp 10.0.2.104 54523 <-> 200.109.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:15.666571 0.180250 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:16.667443 0.153833 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:17.669548 0.380286 udp 10.0.2.104 54523 <-> 123.110.35.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:18.670758 0.281783 udp 10.0.2.104 54523 <-> 119.241.182.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:19.672474 0.000000 udp 10.0.2.104 54523 -> 173.23.113.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:20.673523 0.269884 udp 10.0.2.104 54523 <-> 114.109.34.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:21.324453 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:21:21.675137 0.305642 udp 10.0.2.104 54523 <-> 219.70.173.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:22.666387 0.783150 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:23.667755 0.036734 udp 10.0.2.104 54523 <-> 84.196.174.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:24.669180 0.039787 udp 10.0.2.104 54523 <-> 77.96.67.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:25.670954 0.305205 udp 10.0.2.104 54523 <-> 111.235.58.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:26.671944 0.162753 udp 10.0.2.104 54523 <-> 71.234.70.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:27.673486 0.000000 udp 10.0.2.104 54523 -> 37.250.134.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:28.675334 0.145335 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:29.666480 0.156669 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:30.667641 0.000000 udp 10.0.2.104 54523 -> 189.68.1.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:31.669020 0.000000 udp 10.0.2.104 54523 -> 190.218.165.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:32.670545 0.054638 udp 10.0.2.104 54523 <-> 89.137.133.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:33.671889 0.000000 udp 10.0.2.104 54523 -> 186.94.84.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:34.673691 0.000000 udp 10.0.2.104 54523 -> 200.153.210.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:35.675097 0.059021 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:36.666540 0.131642 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:37.668263 0.165140 udp 10.0.2.104 54523 <-> 63.246.56.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:38.669173 0.044703 udp 10.0.2.104 54523 <-> 46.162.104.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:39.671067 0.000000 udp 10.0.2.104 54523 -> 87.224.111.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:40.672484 0.278601 udp 10.0.2.104 54523 <-> 117.195.69.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:41.673715 0.307420 udp 10.0.2.104 54523 <-> 115.43.164.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:42.665249 0.090814 udp 10.0.2.104 54523 <-> 62.87.225.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:43.666445 0.351775 udp 10.0.2.104 54523 <-> 125.224.37.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:44.668234 0.000000 udp 10.0.2.104 54523 -> 219.70.173.138 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:45.669123 3.004736 udp 10.0.2.104 54523 -> 50.81.76.87 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:46.670799 0.046433 udp 10.0.2.104 54523 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:47.672553 0.216642 udp 10.0.2.104 54523 <-> 223.235.217.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:49.665124 0.197608 udp 10.0.2.104 54523 <-> 166.230.66.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:50.666711 0.000000 udp 10.0.2.104 54523 -> 219.70.173.138 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:51.377730 0.011718 udp 10.0.2.104 54575 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 07:21:51.389744 0.000000 udp 10.0.2.104 54576 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:21:51.667961 0.317283 udp 10.0.2.104 54523 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:52.669210 0.140568 udp 10.0.2.104 54523 <-> 216.36.152.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:53.671154 0.450004 udp 10.0.2.104 54523 <-> 171.207.9.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:54.672741 0.064164 udp 10.0.2.104 54523 <-> 89.100.113.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:55.674010 1.033061 udp 10.0.2.104 54523 <-> 87.252.173.82 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:57.666467 0.373806 udp 10.0.2.104 54523 <-> 107.28.19.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:58.668142 0.200837 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:21:59.669651 0.111587 udp 10.0.2.104 54523 <-> 24.226.252.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:00.671427 0.000000 udp 10.0.2.104 54523 -> 5.12.147.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:01.672308 0.201550 udp 10.0.2.104 54523 <-> 108.232.93.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:02.673622 0.000000 udp 10.0.2.104 54523 -> 217.201.99.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:03.665909 0.044582 udp 10.0.2.104 54523 <-> 79.118.190.28 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:04.666813 0.000000 udp 10.0.2.104 54523 -> 95.243.57.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:05.668036 0.905755 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:06.669675 0.051928 udp 10.0.2.104 54523 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:07.670775 0.159033 udp 10.0.2.104 54523 <-> 217.22.82.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:08.332145 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:22:08.672427 0.143807 udp 10.0.2.104 54523 <-> 69.126.154.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:09.673627 0.000000 udp 10.0.2.104 54523 -> 181.16.7.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:10.665425 0.000000 udp 10.0.2.104 54523 -> 217.201.99.28 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:11.667205 3.003938 udp 10.0.2.104 54523 -> 95.243.57.28 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:12.668269 0.000000 udp 10.0.2.104 54523 -> 95.224.125.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:13.669363 0.654577 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:15.672865 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:16.673770 0.062444 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:18.666941 0.000114 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:18.667055 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:22:19.668159 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:20.670008 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:21.670974 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:22.672835 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:23.674005 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:24.665377 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:25.666828 0.424286 udp 10.0.2.104 54523 <-> 180.148.54.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:26.668590 0.000000 udp 10.0.2.104 54523 -> 111.242.73.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:27.669551 0.291176 udp 10.0.2.104 54523 <-> 118.237.85.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:28.671800 0.025257 udp 10.0.2.104 54523 <-> 109.192.41.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:29.672967 0.267295 udp 10.0.2.104 54523 <-> 78.228.89.167 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:30.674084 0.306281 udp 10.0.2.104 54523 <-> 211.33.152.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:31.665677 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:32.666951 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:33.668556 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:34.670348 0.043664 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:35.671144 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:36.672976 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:37.673929 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:38.665467 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:39.667087 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:40.668300 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:41.670212 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:42.671057 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:43.673090 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:44.674385 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:45.665450 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:46.667281 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:46.667352 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:22:47.669010 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:49.671842 0.316175 udp 10.0.2.104 54523 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:50.673251 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:51.674504 4.195394 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:52.666001 0.202743 udp 10.0.2.104 54523 <-> 82.213.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:53.667219 1.169724 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:55.329997 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:22:56.671392 0.000000 udp 10.0.2.104 54523 -> 178.124.122.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:57.673256 0.470677 udp 10.0.2.104 54523 <-> 181.54.23.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:22:58.674597 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:22:59.665786 0.228150 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:00.667255 0.054686 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:01.668771 0.088444 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:02.669983 4.066099 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 4 1064 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:03.671793 0.055303 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:05.674432 0.283556 udp 10.0.2.104 54523 <-> 27.140.6.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:07.667249 0.047080 udp 10.0.2.104 54523 <-> 5.15.135.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:08.668925 0.000000 udp 10.0.2.104 54523 -> 190.194.201.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:09.669966 0.157844 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:10.671621 0.160966 udp 10.0.2.104 54523 <-> 70.80.122.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:11.672809 0.469642 udp 10.0.2.104 54523 <-> 186.70.25.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:12.674664 0.240604 udp 10.0.2.104 54523 <-> 184.167.226.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:13.665856 0.000000 udp 10.0.2.104 54523 -> 180.215.46.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:14.667882 0.068989 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:15.668921 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:16.670064 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:17.671884 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:18.673467 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:19.674639 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:21.667552 0.046324 udp 10.0.2.104 54523 <-> 5.13.132.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:22.668634 2.178984 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:23.670019 0.000000 udp 10.0.2.104 54523 -> 98.114.227.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:25.673699 2.307504 udp 10.0.2.104 54523 <-> 111.235.58.35 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:26.674425 3.647519 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 6 3676 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:28.667452 0.463824 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:30.670592 0.162250 udp 10.0.2.104 54523 <-> 49.204.132.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:31.671816 0.042185 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:32.672976 0.055273 udp 10.0.2.104 54523 <-> 85.204.248.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:33.675044 0.775031 udp 10.0.2.104 54523 <-> 172.243.148.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:34.666411 0.399211 udp 10.0.2.104 54523 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:35.667280 0.040066 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:36.668716 0.000000 udp 10.0.2.104 54523 -> 114.143.49.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:37.670663 0.226640 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:38.671934 0.066797 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:39.673021 0.000000 udp 10.0.2.104 54523 -> 200.122.70.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:40.674901 0.018073 udp 10.0.2.104 54523 <-> 178.202.155.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:41.666356 1.350296 udp 10.0.2.104 54523 <-> 14.98.134.167 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:42.327162 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:23:43.669486 0.135171 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:44.670393 0.198035 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:45.672051 0.143285 udp 10.0.2.104 54523 <-> 67.81.98.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:46.673402 0.000000 udp 10.0.2.104 54523 -> 2.180.93.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:47.674841 0.082677 udp 10.0.2.104 54523 <-> 85.84.87.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:48.666253 3.194681 udp 10.0.2.104 54523 <-> 123.201.207.144 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:49.667821 0.000000 udp 10.0.2.104 54523 -> 217.94.18.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:52.671892 0.287249 udp 10.0.2.104 54523 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:53.673156 0.000000 udp 10.0.2.104 54523 -> 123.201.207.144 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:54.675072 0.062498 udp 10.0.2.104 54523 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:55.666432 0.000000 udp 10.0.2.104 54523 -> 183.83.111.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:56.667743 0.000000 udp 10.0.2.104 54523 -> 217.94.18.72 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:57.668919 0.000000 udp 10.0.2.104 54523 -> 184.162.36.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:23:58.671047 0.284877 udp 10.0.2.104 54523 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:23:59.672071 0.000000 udp 10.0.2.104 54523 -> 220.129.38.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:00.673806 1.040087 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:02.666466 0.000000 udp 10.0.2.104 54523 -> 118.6.66.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:03.668013 1.036935 udp 10.0.2.104 54523 <-> 84.197.3.107 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:05.670728 0.065411 udp 10.0.2.104 54523 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:06.672383 0.903454 udp 10.0.2.104 54523 <-> 84.38.87.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:07.673702 0.000000 udp 10.0.2.104 54523 -> 90.227.35.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:08.675251 0.168607 udp 10.0.2.104 54523 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:09.666313 2.046756 udp 10.0.2.104 54523 <-> 84.252.22.95 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:10.668281 0.160631 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:12.671042 0.309141 udp 10.0.2.104 54523 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:13.672214 0.195260 udp 10.0.2.104 54523 <-> 79.7.27.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:14.673728 0.029863 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:15.665434 1.344562 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:16.666651 1.174688 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:18.669524 3.003888 udp 10.0.2.104 54523 <-> 200.165.109.240 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:19.671228 0.165738 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:20.672446 0.024465 udp 10.0.2.104 54523 <-> 89.142.152.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:22.665331 0.055848 udp 10.0.2.104 54523 <-> 188.24.101.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:23.666678 1.049198 udp 10.0.2.104 54523 <-> 178.117.121.224 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:25.669306 0.193777 udp 10.0.2.104 54523 <-> 46.228.100.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:26.671387 0.000000 udp 10.0.2.104 54523 -> 190.128.117.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:27.672965 0.059794 udp 10.0.2.104 54523 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:28.674104 0.000000 udp 10.0.2.104 54523 -> 81.80.21.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:29.324757 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:24:29.665110 0.385596 udp 10.0.2.104 54523 <-> 220.142.10.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:30.666544 0.059431 udp 10.0.2.104 54523 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:31.668255 0.085494 udp 10.0.2.104 54523 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:32.669317 0.941394 udp 10.0.2.104 54523 <-> 223.204.5.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:33.670720 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:34.672935 0.000000 udp 10.0.2.104 54523 -> 62.189.162.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:35.285394 3.001929 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:24:35.673840 0.222520 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:36.665383 0.149544 udp 10.0.2.104 54523 <-> 174.96.248.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:37.667084 1.661026 udp 10.0.2.104 54523 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:38.668511 0.336495 udp 10.0.2.104 54523 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:39.669599 0.000000 udp 10.0.2.104 54523 -> 84.237.145.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:40.671437 0.080523 udp 10.0.2.104 54523 <-> 176.8.201.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:41.672665 0.000000 udp 10.0.2.104 54523 -> 2.68.140.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:42.293725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:24:42.673913 3.305533 udp 10.0.2.104 54523 <-> 117.220.76.129 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:43.665424 0.096188 udp 10.0.2.104 54523 <-> 88.180.180.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:44.666948 0.172944 udp 10.0.2.104 54523 <-> 207.190.82.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:46.669742 0.173116 udp 10.0.2.104 54523 <-> 49.205.234.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:47.671347 0.156793 udp 10.0.2.104 54523 <-> 24.225.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:48.672923 0.000000 udp 10.0.2.104 54523 -> 14.99.15.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:49.673992 0.000000 udp 10.0.2.104 54523 -> 107.4.87.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:50.294708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:24:50.665818 0.000000 udp 10.0.2.104 54523 -> 181.166.176.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:51.666637 1.016765 udp 10.0.2.104 54523 <-> 2.193.131.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:52.668710 0.288478 udp 10.0.2.104 54523 <-> 60.148.85.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:53.670009 2.352709 udp 10.0.2.104 54523 <-> 115.165.236.91 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:54.670942 0.029376 udp 10.0.2.104 54523 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:56.674172 0.170780 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:24:57.665632 0.000000 udp 10.0.2.104 54523 -> 113.193.112.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:58.666819 0.000000 udp 10.0.2.104 54523 -> 207.6.94.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:24:59.668215 0.249240 udp 10.0.2.104 54523 <-> 201.211.130.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:00.669827 0.162505 udp 10.0.2.104 54523 <-> 71.94.98.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:01.671181 0.000000 udp 10.0.2.104 54523 -> 101.63.213.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:02.672483 1.193378 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:03.674447 0.198683 udp 10.0.2.104 54523 <-> 76.90.73.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:04.665816 0.057849 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:05.667352 0.000000 udp 10.0.2.104 54523 -> 114.37.112.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:06.297589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:25:06.668314 0.000000 udp 10.0.2.104 54523 -> 5.57.12.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:07.670241 0.038945 udp 10.0.2.104 54523 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:08.671319 3.996002 udp 10.0.2.104 54523 <-> 72.197.251.237 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:09.672812 0.867339 udp 10.0.2.104 54523 <-> 75.120.38.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:10.512810 0.000000 udp 10.0.2.104 54523 <- 101.63.213.148 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:10.674206 0.000000 udp 10.0.2.104 54523 -> 68.56.82.142 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:11.665322 0.076829 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:13.668613 0.198113 udp 10.0.2.104 54523 <-> 76.90.73.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:14.669603 0.000000 udp 10.0.2.104 54523 -> 95.18.171.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:15.671794 0.540214 udp 10.0.2.104 54523 <-> 114.37.112.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:16.332219 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:25:16.672726 0.367327 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:17.674595 0.000000 udp 10.0.2.104 54523 -> 5.146.110.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:18.665565 0.013466 udp 10.0.2.104 54523 <-> 188.230.151.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:19.667225 0.293483 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:20.668974 0.171883 udp 10.0.2.104 54523 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:21.669979 0.056090 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:22.671433 2.303528 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:23.673280 0.038106 udp 10.0.2.104 54523 <-> 89.137.133.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:25.665853 3.929596 udp 10.0.2.104 54523 <-> 190.94.221.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:26.667685 0.294264 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:27.668305 0.072753 udp 10.0.2.104 54523 <-> 88.112.83.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:28.669905 0.312197 udp 10.0.2.104 54523 <-> 150.162.97.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:35.992334 1.130895 udp 10.0.2.104 54523 <-> 174.99.98.125 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:37.959765 0.365206 udp 10.0.2.104 54523 <-> 200.101.111.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:38.939543 0.000000 udp 10.0.2.104 54523 -> 189.192.237.173 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:39.928423 0.011679 udp 10.0.2.104 54523 <-> 93.103.161.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:40.916196 0.149282 udp 10.0.2.104 54523 <-> 47.16.108.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:41.902670 0.027300 udp 10.0.2.104 54523 <-> 178.202.155.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:42.892777 0.214971 udp 10.0.2.104 54523 <-> 98.232.173.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:43.877554 0.086098 udp 10.0.2.104 54523 <-> 95.86.74.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:44.501555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 1 146 flow=Background 1970/01/01 07:25:44.868326 0.375817 udp 10.0.2.104 54523 <-> 14.96.182.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:45.848457 0.062090 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:46.837221 1.902898 udp 10.0.2.104 54523 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:47.824607 2.148722 udp 10.0.2.104 54523 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:48.810820 0.134304 udp 10.0.2.104 54523 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:49.796442 0.363391 udp 10.0.2.104 54523 <-> 114.26.249.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:50.780910 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:51.771700 3.183899 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:52.751623 0.060827 udp 10.0.2.104 54523 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:53.745690 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:55.882517 0.306092 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:25:56.871190 0.000000 udp 10.0.2.104 54523 -> 190.74.65.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:25:57.858001 0.420396 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:06.933895 4.918217 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:06.933949 3.932489 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:07.903046 0.000000 udp 10.0.2.104 54523 -> 84.55.13.19 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:08.892126 0.348991 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:09.879956 0.000000 udp 10.0.2.104 54523 -> 202.74.222.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:12.836335 0.884310 udp 10.0.2.104 54523 <-> 190.74.65.248 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:14.334966 0.000000 udp 10.0.2.104 54523 -> 216.218.62.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:15.314837 0.353241 udp 10.0.2.104 54523 <-> 203.81.155.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:16.302994 0.297553 udp 10.0.2.104 54523 <-> 84.237.145.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:17.290212 0.286448 udp 10.0.2.104 54523 <-> 200.7.146.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:17.939540 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:26:18.276708 0.253930 udp 10.0.2.104 54523 <-> 190.75.98.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:19.262463 1.975052 udp 10.0.2.104 54523 -> 62.221.143.16 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:20.246761 3.102039 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:22.217359 0.991604 udp 10.0.2.104 54523 <-> 190.74.80.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:24.195348 0.000000 udp 10.0.2.104 54523 -> 90.151.210.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:25.181794 0.164274 udp 10.0.2.104 54523 <-> 72.184.24.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:26.168492 3.303988 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:27.152983 0.250540 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:28.144370 0.467802 udp 10.0.2.104 54523 <-> 46.5.227.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:30.112395 1.974401 udp 10.0.2.104 54523 -> 82.83.222.67 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:31.100549 0.228796 udp 10.0.2.104 54523 <-> 186.89.101.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:33.072414 0.000000 udp 10.0.2.104 54523 -> 86.122.233.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:36.961994 0.273158 udp 10.0.2.104 54523 <-> 186.89.101.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:37.952488 0.066813 udp 10.0.2.104 54523 <-> 85.86.152.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:38.932412 1.325964 udp 10.0.2.104 54523 <-> 75.249.252.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:40.933619 0.177304 udp 10.0.2.104 54523 <-> 2.180.43.214 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:41.921298 0.054798 udp 10.0.2.104 54523 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:42.908219 0.222136 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:43.893509 0.049976 udp 10.0.2.104 54523 <-> 24.132.151.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:44.878100 0.000000 udp 10.0.2.104 54523 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:45.869032 0.000000 udp 10.0.2.104 54523 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:46.848570 0.160077 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:47.917695 0.126332 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:48.906889 2.075765 udp 10.0.2.104 54523 <-> 189.55.190.23 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:49.895730 0.076826 udp 10.0.2.104 54523 <-> 46.37.71.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:50.881127 0.000000 udp 10.0.2.104 54523 -> 72.130.237.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:51.865624 1.183219 udp 10.0.2.104 54523 <-> 178.90.13.60 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:53.835810 0.000000 udp 10.0.2.104 54523 -> 27.5.183.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:26:54.824401 0.115462 udp 10.0.2.104 54523 <-> 70.188.21.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:55.811907 0.176044 udp 10.0.2.104 54523 <-> 68.84.24.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:56.798864 0.061174 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:57.783972 0.062146 udp 10.0.2.104 54523 <-> 188.2.163.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:58.768116 1.886485 udp 10.0.2.104 54523 <-> 206.251.71.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:26:59.758835 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:00.739425 0.091076 udp 10.0.2.104 54523 <-> 212.225.145.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:27:01.727732 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:02.715209 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:03.701469 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:04.686823 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:05.673225 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:06.654008 1.978030 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:07.643345 0.148763 udp 10.0.2.104 54523 <-> 72.226.4.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:27:08.294839 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:27:09.619518 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:10.605515 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:11.590639 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:12.574698 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:13.555439 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:14.544888 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:18.224465 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:19.211644 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:20.197788 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:22.166920 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:23.147627 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:24.136887 0.000044 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:24.136931 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:27:25.125147 2.958615 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:26.112363 0.289752 udp 10.0.2.104 54523 <-> 125.4.221.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:27:27.098674 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:29.067888 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:30.049099 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:31.038364 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:32.026942 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:33.014129 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:34.000349 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:34.986614 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:36.951388 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:37.940767 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:38.928281 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:39.916300 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:39.916376 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:27:40.902363 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:41.887328 0.000000 udp 10.0.2.104 54523 -> 37.203.68.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:42.871476 0.061220 udp 10.0.2.104 54523 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:27:43.852007 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:44.841086 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:45.829368 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:46.816507 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:47.804938 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:48.789651 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:49.773472 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:50.753904 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:51.743012 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:52.731289 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:59.190863 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:27:59.190922 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:28:01.161467 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:02.145483 2.957592 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:02.788689 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:28:03.125863 0.697772 udp 10.0.2.104 54523 <-> 87.4.161.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:28:04.115067 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:06.089986 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:07.075933 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:08.060638 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:09.044407 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:10.025093 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:11.014487 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:12.002714 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:12.989774 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:13.975939 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:14.960736 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:15.944609 0.000123 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:15.944732 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:28:16.924762 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:18.901665 0.000000 udp 10.0.2.104 54523 -> 109.55.103.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:24.857819 0.000000 udp 10.0.2.104 54523 <- 109.55.103.145 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:25.722021 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:26.706859 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:27.690141 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:28.680233 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:29.658906 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:30.646937 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:31.635208 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:32.620644 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:33.605020 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:34.588636 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:35.578067 0.000058 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:35.578125 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:28:36.557035 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:37.545065 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:38.531730 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:39.517237 3.946389 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:40.504252 0.294056 udp 10.0.2.104 54523 <-> 115.240.116.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:28:41.494297 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:44.451690 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:45.438260 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:46.423160 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:47.407477 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:48.390519 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:49.386597 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:50.365671 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:51.353392 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:52.340025 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:53.325263 0.000043 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:53.325306 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:28:54.309427 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:28:54.955723 0.000000 arp 10.0.2.104 who 10.0.2.2 INT 1 42 flow=Background-ARP 1970/01/01 07:29:00.046987 0.000000 arp 10.0.2.104 who 10.0.2.2 RSP 1 42 flow=Background-ARP 1970/01/01 07:29:00.370018 0.256702 udp 10.0.2.104 54523 <-> 115.245.101.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:29:01.359876 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:02.338719 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:03.330246 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:04.316925 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:05.302209 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:06.286350 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:06.286398 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:29:07.269534 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:08.259830 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:09.238759 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:10.226539 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:11.213239 4.922538 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:12.198532 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:13.182808 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:14.165935 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:15.155900 0.349786 udp 10.0.2.104 54523 <-> 190.189.116.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:29:17.123571 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:18.109671 0.000040 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:18.109711 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:29:19.095239 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:20.079885 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:21.062699 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:22.053192 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:23.032676 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:24.020238 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:25.006560 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:25.991886 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:26.975875 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:27.961779 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:28.951332 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:29.929515 0.000000 udp 10.0.2.104 54523 -> 109.55.103.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:32.044949 0.366475 udp 10.0.2.104 54523 <-> 115.240.116.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:29:33.031117 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:34.016246 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:35.000223 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:35.983395 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:36.971967 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:46.144965 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:47.132577 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:48.118646 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:49.103865 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:49.103920 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:29:50.087609 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:51.070377 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:52.059850 3.937731 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:53.038452 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:54.025983 2.955913 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:55.012174 0.053813 udp 10.0.2.104 54523 <-> 109.173.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:29:55.660613 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:29:57.964614 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:57.964690 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:29:58.954139 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:29:59.932821 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:00.919471 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:01.905757 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:02.890651 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:03.874445 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:04.857002 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:05.836726 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:12.652055 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:13.638826 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:14.624918 0.266941 udp 10.0.2.104 54523 <-> 1.22.199.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:30:15.610190 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:16.594096 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:17.576879 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:17.576945 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:30:18.556778 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:19.545236 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:20.532406 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:21.518692 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:22.503444 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:23.487116 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:24.469428 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:25.448998 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:26.437189 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:27.424433 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:28.410527 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:29.395098 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:30.378773 0.278955 udp 10.0.2.104 54523 <-> 115.245.101.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:30:31.361240 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:32.340764 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:33.328966 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:34.316279 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:35.302110 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:36.286701 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:37.273318 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:44.009019 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:44.987334 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:45.974686 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:46.960818 4.911500 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:46.960895 4.911423 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 07:30:47.945683 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:48.929462 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:49.912195 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:50.893847 0.122918 udp 10.0.2.104 54523 <-> 109.55.103.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:30:52.859311 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:53.508912 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:30:53.845370 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:54.830917 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:55.814748 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:56.797237 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:57.778434 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:58.761039 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:30:59.747988 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:00.734036 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:01.718285 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:02.702024 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:03.684645 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:04.665943 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:05.644338 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:06.631337 0.095668 udp 10.0.2.104 54523 <-> 2.199.28.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:07.618408 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:08.603229 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:09.585956 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:09.586033 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:31:10.568363 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:11.549346 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:12.530687 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:13.517515 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:16.943286 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:17.927862 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:18.913864 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:19.896070 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:20.877425 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:21.855722 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:22.842723 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:23.828452 0.054286 udp 10.0.2.104 54523 <-> 109.173.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:24.813184 0.101399 udp 10.0.2.104 54523 <-> 2.199.28.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:25.796678 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:26.779677 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:27.768968 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:28.749492 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:29.734615 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:30.720359 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:31.705187 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:32.688518 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:33.670664 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:34.660684 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:34.660743 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:31:35.638952 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:36.625639 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:37.611273 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:38.596353 1.913941 udp 10.0.2.104 54523 <-> 206.251.71.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:39.579962 0.415795 udp 10.0.2.104 54523 <-> 115.240.116.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:40.561934 0.000000 udp 10.0.2.104 54523 -> 82.250.219.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:41.550450 0.344512 udp 10.0.2.104 54523 <-> 58.177.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:42.192310 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:31:42.529014 0.368029 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:43.515858 0.000000 udp 10.0.2.104 54523 -> 117.196.26.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:44.501652 0.091438 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:45.486232 0.000000 udp 10.0.2.104 54523 -> 186.191.21.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:46.468760 4.592678 udp 10.0.2.104 54523 <-> 114.36.82.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:51.666496 0.385706 udp 10.0.2.104 54523 <-> 114.36.82.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:52.668316 0.000000 udp 10.0.2.104 54523 -> 182.166.242.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:31:53.659575 0.290117 udp 10.0.2.104 54523 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:54.661180 0.164244 udp 10.0.2.104 54523 <-> 50.142.111.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:55.662637 0.333685 udp 10.0.2.104 54523 <-> 116.32.104.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:56.664106 0.038842 udp 10.0.2.104 54523 <-> 84.197.114.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:57.664979 0.160566 udp 10.0.2.104 54523 <-> 71.61.50.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:58.666714 0.319247 udp 10.0.2.104 54523 <-> 117.203.235.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:31:59.668427 0.179263 udp 10.0.2.104 54523 <-> 49.206.187.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:00.659920 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:01.661211 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:02.662619 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:03.664027 3.995994 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:04.664848 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:05.666429 2.994752 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:06.668353 0.115441 udp 10.0.2.104 54523 <-> 82.56.162.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:09.662785 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:11.665347 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:12.666488 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:13.668560 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:14.660301 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:15.661425 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:16.662932 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:17.664295 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:18.665653 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:19.666874 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:19.666982 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:32:20.668826 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:21.659958 4.421810 udp 10.0.2.104 54523 <-> 68.58.91.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:26.898440 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:27.886069 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:28.872595 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:29.859248 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:30.844367 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:31.835061 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:32.814865 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:33.803258 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:34.790723 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:35.777506 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:36.762949 0.162142 udp 10.0.2.104 54523 <-> 68.58.91.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:37.410375 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:32:37.747438 0.144810 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:38.738184 0.000000 udp 10.0.2.104 54523 -> 216.114.33.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:39.717982 0.277093 udp 10.0.2.104 54523 <-> 179.209.249.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:40.706486 0.146623 udp 10.0.2.104 54523 <-> 24.186.58.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:41.697193 0.150884 udp 10.0.2.104 54523 <-> 71.76.246.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:42.683764 0.276765 udp 10.0.2.104 54523 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:43.669165 0.225810 udp 10.0.2.104 54523 <-> 186.95.213.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:44.653631 0.167490 udp 10.0.2.104 54523 <-> 95.74.47.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:45.645187 0.058695 udp 10.0.2.104 54523 <-> 84.1.45.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:46.624951 3.985681 udp 10.0.2.104 54523 <-> 190.49.16.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:47.259191 2.956773 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:32:47.613505 0.170250 udp 10.0.2.104 54523 <-> 173.174.12.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:48.601165 0.064112 udp 10.0.2.104 54523 <-> 79.113.147.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:49.587477 0.168874 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:50.572843 0.043350 udp 10.0.2.104 54523 <-> 95.180.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:51.557077 0.036912 udp 10.0.2.104 54523 <-> 89.176.58.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:52.547744 1.158088 udp 10.0.2.104 54523 <-> 181.16.7.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:53.527078 0.388914 udp 10.0.2.104 54523 <-> 60.246.152.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:54.168510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:32:54.515615 0.144427 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:55.502877 0.051062 udp 10.0.2.104 54523 <-> 83.142.2.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:56.489357 0.000000 udp 10.0.2.104 54523 -> 24.240.58.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:32:57.474696 0.046304 udp 10.0.2.104 54523 <-> 82.139.58.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:58.459008 0.339239 udp 10.0.2.104 54523 <-> 1.173.9.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:32:59.439780 0.000000 udp 10.0.2.104 54523 -> 88.241.238.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:00.429538 0.310060 udp 10.0.2.104 54523 <-> 42.144.94.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:01.418366 0.594497 udp 10.0.2.104 54523 <-> 112.200.82.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:02.059037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:33:02.405893 0.000000 udp 10.0.2.104 54523 -> 205.240.139.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:03.392170 0.298339 udp 10.0.2.104 54523 <-> 111.217.235.135 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:04.377452 0.130330 udp 10.0.2.104 54523 <-> 109.182.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:05.361660 0.144757 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:06.342313 0.296999 udp 10.0.2.104 54523 <-> 27.143.12.38 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:07.332078 0.341528 udp 10.0.2.104 54523 <-> 1.173.9.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:08.320596 0.739652 udp 10.0.2.104 54523 <-> 192.95.197.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:09.308013 2.956074 udp 10.0.2.104 54523 -> 190.217.162.118 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:10.294498 0.178150 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:11.279807 4.026172 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:13.245263 0.000000 udp 10.0.2.104 54523 -> 75.195.44.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:14.234903 0.318240 udp 10.0.2.104 54523 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:16.210594 0.167621 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:17.196638 0.156046 udp 10.0.2.104 54523 <-> 82.61.52.48 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:17.834612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:33:18.181669 0.000000 udp 10.0.2.104 54523 -> 68.13.253.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:19.165715 0.107920 udp 10.0.2.104 54523 <-> 82.59.53.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:20.146845 0.000000 udp 10.0.2.104 54523 -> 180.215.117.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:21.136323 0.296987 udp 10.0.2.104 54523 <-> 117.220.76.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:22.124598 0.324014 udp 10.0.2.104 54523 <-> 181.72.94.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:23.111724 2.015819 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:23.760870 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:33:24.097771 0.358710 udp 10.0.2.104 54523 <-> 190.204.24.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:26.069804 0.152629 udp 10.0.2.104 54523 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:27.050240 0.481186 udp 10.0.2.104 54523 <-> 61.231.86.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:28.039589 0.153386 udp 10.0.2.104 54523 <-> 74.58.82.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:29.027803 0.062056 udp 10.0.2.104 54523 <-> 93.72.126.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:30.014982 2.957477 udp 10.0.2.104 54523 -> 74.41.235.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:31.001016 0.000000 udp 10.0.2.104 54523 -> 94.253.231.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:31.986067 0.166022 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:33.952852 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:34.942076 0.605590 udp 10.0.2.104 54523 <-> 117.204.120.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:35.930215 0.310811 udp 10.0.2.104 54523 <-> 190.191.188.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:36.917205 0.000000 udp 10.0.2.104 54523 -> 75.118.77.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:37.903434 0.042290 udp 10.0.2.104 54523 <-> 188.27.217.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:38.888471 0.156956 udp 10.0.2.104 54523 <-> 75.133.233.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:39.872572 0.052622 udp 10.0.2.104 54523 <-> 178.210.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:40.853034 0.276200 udp 10.0.2.104 54523 <-> 179.235.133.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:41.842179 0.000000 udp 10.0.2.104 54523 -> 1.23.72.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:42.830269 0.218341 udp 10.0.2.104 54523 <-> 98.202.16.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:43.817324 0.068758 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:44.803567 0.212218 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:45.788447 2.415015 udp 10.0.2.104 54523 <-> 27.5.183.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:46.772482 0.398378 udp 10.0.2.104 54523 <-> 59.115.150.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:47.752842 0.298590 udp 10.0.2.104 54523 <-> 96.20.104.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:48.742146 0.073210 udp 10.0.2.104 54523 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:49.393313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:33:49.730344 0.000000 udp 10.0.2.104 54523 -> 182.165.171.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:50.717422 0.595750 udp 10.0.2.104 54523 <-> 190.105.68.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:51.703419 0.000000 udp 10.0.2.104 54523 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:52.689250 0.137981 udp 10.0.2.104 54523 <-> 67.242.95.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:53.673042 0.181209 udp 10.0.2.104 54523 <-> 76.92.155.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:54.655847 0.038798 udp 10.0.2.104 54523 <-> 78.128.39.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:55.645164 0.000000 udp 10.0.2.104 54523 -> 95.180.89.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:56.633371 0.048856 udp 10.0.2.104 54523 <-> 77.78.246.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:57.620569 0.206834 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:33:58.606498 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:33:59.591264 0.027201 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:00.575144 0.164593 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:01.555366 2.310625 udp 10.0.2.104 54523 <-> 1.172.166.20 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:02.544633 0.191654 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:04.520298 0.000000 udp 10.0.2.104 54523 -> 187.10.22.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:05.506049 0.146877 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:06.490421 0.082599 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:07.474521 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:08.454911 0.387452 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:09.444119 0.138750 udp 10.0.2.104 54523 <-> 68.197.121.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:10.095186 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:34:10.432769 0.087411 udp 10.0.2.104 54523 <-> 78.8.187.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:11.419665 0.144231 udp 10.0.2.104 54523 <-> 24.144.167.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:12.405505 0.159472 udp 10.0.2.104 54523 <-> 76.180.211.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:13.391596 0.000000 udp 10.0.2.104 54523 -> 179.223.86.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:14.383411 3.025432 udp 10.0.2.104 54523 <-> 84.120.186.165 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:15.363788 3.008651 udp 10.0.2.104 54523 <-> 193.150.231.59 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:16.352678 0.119785 udp 10.0.2.104 54523 <-> 205.237.49.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:19.313035 0.047176 udp 10.0.2.104 54523 <-> 95.155.219.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:20.297643 0.369501 udp 10.0.2.104 54523 <-> 183.103.133.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:21.288566 0.158364 udp 10.0.2.104 54523 <-> 68.226.188.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:22.268518 3.334337 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:23.260856 0.513305 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:25.236140 0.049618 udp 10.0.2.104 54523 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:26.221901 0.137223 udp 10.0.2.104 54523 <-> 37.214.49.15 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:27.206813 0.269100 udp 10.0.2.104 54523 <-> 181.29.200.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:28.197091 0.000000 udp 10.0.2.104 54523 -> 209.165.242.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:29.177324 0.169383 udp 10.0.2.104 54523 <-> 71.229.16.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:30.166264 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:31.154220 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:32.141285 0.171015 udp 10.0.2.104 54523 <-> 75.65.186.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:33.127124 0.000000 udp 10.0.2.104 54523 -> 37.142.248.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:34.111881 0.008537 udp 10.0.2.104 54523 <-> 82.209.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:35.102922 0.067706 udp 10.0.2.104 54523 <-> 85.84.46.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:36.082798 0.140049 udp 10.0.2.104 54523 <-> 69.123.89.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:37.072036 0.231059 udp 10.0.2.104 54523 <-> 75.119.124.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:38.059959 0.029877 udp 10.0.2.104 54523 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:39.046736 2.693389 udp 10.0.2.104 54523 <-> 186.22.122.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:40.032456 0.000000 udp 10.0.2.104 54523 -> 117.200.251.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:41.016938 0.141960 udp 10.0.2.104 54523 <-> 24.182.94.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:42.008089 0.072819 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:42.988301 0.294211 udp 10.0.2.104 54523 <-> 186.137.232.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:43.976987 0.144539 udp 10.0.2.104 54523 <-> 178.127.43.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:44.966812 0.133804 udp 10.0.2.104 54523 <-> 173.80.7.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:45.953270 0.149867 udp 10.0.2.104 54523 <-> 76.11.73.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:46.939018 0.169800 udp 10.0.2.104 54523 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:47.923446 0.165082 udp 10.0.2.104 54523 <-> 106.51.33.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:48.914260 0.206519 udp 10.0.2.104 54523 <-> 70.77.219.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:49.894292 0.025339 udp 10.0.2.104 54523 <-> 94.210.213.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:50.882678 0.567476 udp 10.0.2.104 54523 <-> 175.177.128.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:51.870513 0.070210 udp 10.0.2.104 54523 <-> 212.119.157.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:52.856954 0.000000 udp 10.0.2.104 54523 -> 117.206.87.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:53.842587 0.132648 udp 10.0.2.104 54523 <-> 66.65.121.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:54.827021 0.146289 udp 10.0.2.104 54523 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:55.817965 2.257952 udp 10.0.2.104 54523 <-> 37.250.162.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:56.460652 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:34:56.797794 0.056328 udp 10.0.2.104 54523 <-> 188.26.91.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:57.786534 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:34:58.774150 0.089531 udp 10.0.2.104 54523 <-> 62.220.208.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:34:59.763061 0.127700 udp 10.0.2.104 54523 <-> 188.2.163.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:00.748955 0.045968 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:01.733393 0.055951 udp 10.0.2.104 54523 <-> 87.99.108.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:02.724226 0.237337 udp 10.0.2.104 54523 <-> 74.102.139.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:03.704000 0.050861 udp 10.0.2.104 54523 <-> 89.23.205.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:04.692590 0.032489 udp 10.0.2.104 54523 <-> 77.238.194.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:05.680212 0.062017 udp 10.0.2.104 54523 <-> 109.194.231.7 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:06.666907 0.353402 udp 10.0.2.104 54523 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:07.652779 1.100825 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:09.627724 0.364013 udp 10.0.2.104 54523 <-> 1.172.101.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:10.607580 0.161722 udp 10.0.2.104 54523 <-> 69.180.104.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:11.596409 0.165687 udp 10.0.2.104 54523 <-> 106.51.33.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:12.583979 0.343822 udp 10.0.2.104 54523 <-> 111.251.246.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:13.570432 0.162364 udp 10.0.2.104 54523 <-> 71.61.50.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:14.555559 0.000000 udp 10.0.2.104 54523 -> 24.184.213.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:35:15.540163 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:35:16.530872 0.399413 udp 10.0.2.104 54523 <-> 114.27.222.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:17.510287 0.049625 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:18.499036 0.312724 udp 10.0.2.104 54523 <-> 14.98.210.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:19.486515 0.000000 udp 10.0.2.104 54523 -> 67.59.37.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:35:20.473402 0.155104 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:21.458463 0.000000 udp 10.0.2.104 54523 -> 27.106.35.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:35:22.442726 0.227347 udp 10.0.2.104 54523 <-> 98.232.173.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:25.301886 0.137138 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:26.271889 0.046186 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:27.260449 0.162336 udp 10.0.2.104 54523 <-> 46.42.57.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:28.247849 0.056014 udp 10.0.2.104 54523 <-> 77.91.22.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:29.234208 2.131833 udp 10.0.2.104 54523 <-> 50.142.135.182 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:30.219755 1.186920 udp 10.0.2.104 54523 <-> 91.144.119.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:32.185202 0.289252 udp 10.0.2.104 54523 <-> 122.102.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:33.174627 0.056250 udp 10.0.2.104 54523 <-> 178.168.46.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:34.163060 2.031496 udp 10.0.2.104 54523 <-> 72.199.138.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:35.150706 0.147598 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:36.137450 1.969069 udp 10.0.2.104 54523 -> 122.172.35.199 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:35:37.122376 4.930229 udp 10.0.2.104 54523 <-> 49.205.17.150 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:39.087218 0.063985 udp 10.0.2.104 54523 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:40.076997 0.029425 udp 10.0.2.104 54523 <-> 109.61.91.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:41.065319 0.137405 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:42.226574 2.958117 udp 10.0.2.104 54523 <-> 49.205.17.150 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:43.040476 0.000000 udp 10.0.2.104 54523 -> 122.172.35.199 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:35:44.025678 0.000000 udp 10.0.2.104 54523 -> 98.67.186.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:35:44.673025 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:35:45.990822 0.000000 udp 10.0.2.104 54523 -> 109.97.23.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:35:46.980604 0.988216 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:48.956054 0.036287 udp 10.0.2.104 54523 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:49.942498 0.066887 udp 10.0.2.104 54523 <-> 178.156.117.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:50.927617 0.224161 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:51.911598 0.324763 udp 10.0.2.104 54523 <-> 114.182.221.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:52.892006 0.032894 udp 10.0.2.104 54523 <-> 95.76.68.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:53.881335 0.336860 udp 10.0.2.104 54523 <-> 115.240.124.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:54.869527 0.111997 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:55.856700 0.059582 udp 10.0.2.104 54523 <-> 46.35.97.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:56.844564 0.375878 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:57.829647 0.240430 udp 10.0.2.104 54523 <-> 75.28.107.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:58.813695 0.162106 udp 10.0.2.104 54523 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:35:59.794357 0.167951 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:00.784166 0.066033 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:01.772512 4.923085 udp 10.0.2.104 54523 -> 190.195.127.58 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:02.759699 0.139177 udp 10.0.2.104 54523 <-> 24.164.171.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:03.745819 0.188734 udp 10.0.2.104 54523 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:04.730872 4.459263 udp 10.0.2.104 54523 <-> 72.242.83.72 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:05.714844 0.000000 udp 10.0.2.104 54523 -> 74.62.164.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:08.674758 0.083202 udp 10.0.2.104 54523 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:09.661995 0.000000 udp 10.0.2.104 54523 -> 78.52.9.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:10.648667 0.049456 udp 10.0.2.104 54523 <-> 82.17.168.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:11.634017 0.168521 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:12.618303 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:13.598729 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:14.587864 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:15.576057 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:16.563252 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:17.548954 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:18.533779 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:19.518456 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:20.499302 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:21.489175 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:22.477186 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:23.464326 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:24.450337 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:25.435572 1.780394 udp 10.0.2.104 54523 <-> 78.52.9.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:26.419564 0.235589 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:27.399829 0.048595 udp 10.0.2.104 54523 <-> 82.17.168.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:28.388906 1.052916 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:30.364268 0.367421 udp 10.0.2.104 54523 <-> 122.121.38.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:31.013632 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:36:31.350888 0.000000 udp 10.0.2.104 54523 -> 95.107.216.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:32.335514 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:33.319387 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:34.299939 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:35.289005 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:36.276930 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:37.264095 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:38.249954 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:39.234924 0.036240 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:40.218843 0.090370 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:41.199211 0.847583 udp 10.0.2.104 54523 <-> 184.63.220.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:42.188454 0.090413 udp 10.0.2.104 54523 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:43.176361 0.304787 udp 10.0.2.104 54523 <-> 117.194.250.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:44.163244 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:45.149413 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:45.149464 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:36:46.134139 2.959800 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:47.125205 0.364310 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:48.104958 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:50.082672 0.257045 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:51.069494 0.146255 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:52.055338 0.444822 udp 10.0.2.104 54523 <-> 201.68.33.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:53.039738 0.189925 udp 10.0.2.104 54523 <-> 98.242.129.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:54.030922 0.030388 udp 10.0.2.104 54523 <-> 89.137.97.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:54.723925 0.010028 udp 10.0.2.104 54577 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 07:36:54.734243 0.000000 udp 10.0.2.104 54578 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:55.011337 0.156813 udp 10.0.2.104 54523 <-> 24.15.40.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:56.000434 0.000000 udp 10.0.2.104 54523 -> 89.73.207.4 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:56.988321 0.000000 udp 10.0.2.104 54523 -> 24.147.226.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:57.974996 0.000000 udp 10.0.2.104 54523 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:36:58.961070 0.340454 udp 10.0.2.104 54523 <-> 153.139.79.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:36:59.945824 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:00.936897 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:01.917126 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:02.905970 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:03.894515 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:04.881266 0.000068 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:04.881334 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:37:05.867724 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:06.852213 0.392157 udp 10.0.2.104 54523 <-> 219.77.21.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:07.843501 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:08.823310 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:09.812344 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:10.800376 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:11.865600 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:12.851600 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:13.836587 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:14.827549 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:15.807610 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:16.798279 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:17.449026 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:37:17.786179 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:18.774062 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:19.759620 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:20.744118 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:20.744178 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:37:22.714605 0.000000 udp 10.0.2.104 54523 -> 24.147.226.5 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:23.703295 0.179292 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:24.690955 0.408024 udp 10.0.2.104 54523 <-> 219.77.21.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:25.677634 0.065030 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:26.663057 0.235977 udp 10.0.2.104 54523 <-> 190.198.225.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:27.647880 0.162675 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:28.638846 0.350095 udp 10.0.2.104 54523 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:29.618608 0.385064 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:30.607461 0.162262 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:31.595114 0.054874 udp 10.0.2.104 54523 <-> 79.117.163.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:32.581703 0.155335 udp 10.0.2.104 54523 <-> 174.101.8.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:33.567247 0.177608 udp 10.0.2.104 54523 <-> 142.165.23.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:34.551763 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:35.542713 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:36.522876 0.165373 udp 10.0.2.104 54523 <-> 209.168.157.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:37.511588 0.000000 udp 10.0.2.104 54523 -> 201.208.23.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:38.499185 0.432936 udp 10.0.2.104 54523 <-> 1.168.224.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:39.485699 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:40.471445 4.931957 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:41.455848 4.933864 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:42.446986 0.066213 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:44.415973 0.130022 udp 10.0.2.104 54523 <-> 66.108.161.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:47.375094 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:48.359588 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:49.350390 0.039972 udp 10.0.2.104 54523 <-> 176.12.49.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:50.330125 3.113663 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:51.318845 0.395255 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:52.306585 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:54.278265 4.101766 udp 10.0.2.104 54523 <-> 68.42.82.143 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:37:55.262487 0.000000 udp 10.0.2.104 54523 -> 77.56.229.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:56.253475 0.000000 udp 10.0.2.104 54523 -> 98.194.123.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:57.233118 0.000000 udp 10.0.2.104 54523 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:37:59.209686 0.142146 udp 10.0.2.104 54523 <-> 98.192.242.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:00.196569 0.648744 udp 10.0.2.104 54523 <-> 101.63.83.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:01.181811 0.145581 udp 10.0.2.104 54523 <-> 69.126.154.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:02.166342 0.387140 udp 10.0.2.104 54523 <-> 14.98.97.151 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:03.146891 0.414543 udp 10.0.2.104 54523 <-> 14.99.196.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:03.799346 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:38:04.136414 0.069190 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:05.124829 0.156968 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:06.112359 0.385514 udp 10.0.2.104 54523 <-> 5.190.123.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:07.098873 2.012354 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:08.084078 0.652100 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:10.048706 0.050195 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:11.038284 0.330739 udp 10.0.2.104 54523 <-> 211.179.224.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:12.026725 0.350827 udp 10.0.2.104 54523 <-> 61.207.180.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:13.013925 0.237432 udp 10.0.2.104 54523 <-> 67.169.170.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:14.000120 0.153024 udp 10.0.2.104 54523 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:14.985131 0.156785 udp 10.0.2.104 54523 <-> 76.188.221.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:15.969171 0.314688 udp 10.0.2.104 54523 <-> 189.110.71.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:16.949820 0.164720 udp 10.0.2.104 54523 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:17.939586 0.163638 udp 10.0.2.104 54523 <-> 50.178.6.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:18.927638 2.098273 udp 10.0.2.104 54523 <-> 113.19.199.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:19.914850 0.293662 udp 10.0.2.104 54523 <-> 58.11.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:20.901174 4.928354 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:21.886574 0.159229 udp 10.0.2.104 54523 <-> 69.180.104.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:22.871047 0.192379 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:23.851721 0.000000 udp 10.0.2.104 54523 -> 66.31.49.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:38:24.841295 0.000000 udp 10.0.2.104 54523 -> 190.254.103.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:38:25.985255 0.000000 udp 10.0.2.104 54523 <- 98.212.118.109 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:38:26.816534 0.141198 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:27.802730 0.286410 udp 10.0.2.104 54523 <-> 186.137.251.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:28.787649 0.064832 udp 10.0.2.104 54523 <-> 37.146.132.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:29.771589 0.155921 udp 10.0.2.104 54523 <-> 68.63.7.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:30.752084 0.130397 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:31.741382 0.194742 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:32.729502 0.346160 udp 10.0.2.104 54523 <-> 177.188.177.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:33.716502 0.293955 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:34.702587 0.061923 udp 10.0.2.104 54523 <-> 109.194.231.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:35.687400 0.044353 udp 10.0.2.104 54523 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:36.671619 0.076409 udp 10.0.2.104 54523 <-> 109.74.171.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:37.651916 0.353499 udp 10.0.2.104 54523 <-> 58.230.46.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:38.641719 0.000000 udp 10.0.2.104 54523 -> 60.246.187.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:38:39.629939 0.113253 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:40.617229 0.165703 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:41.603288 0.126133 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:42.588627 0.097173 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:43.572679 0.571920 udp 10.0.2.104 54523 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:44.552901 0.038624 udp 10.0.2.104 54523 <-> 212.104.100.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:45.542100 0.049171 udp 10.0.2.104 54523 <-> 188.230.39.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:46.532026 0.086881 udp 10.0.2.104 54523 <-> 46.120.136.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:47.519173 0.000000 udp 10.0.2.104 54523 -> 86.107.40.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:38:48.505149 0.156468 udp 10.0.2.104 54523 <-> 65.28.245.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:49.490730 1.032624 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:50.137598 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:38:51.455351 0.152222 udp 10.0.2.104 54523 <-> 184.162.123.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:52.444855 0.409429 udp 10.0.2.104 54523 <-> 14.96.24.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:53.433028 0.041562 udp 10.0.2.104 54523 <-> 87.252.173.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:54.420091 0.136678 udp 10.0.2.104 54523 <-> 66.189.245.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:55.407372 0.201286 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:56.392623 0.157822 udp 10.0.2.104 54523 <-> 75.115.30.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:57.376763 0.000000 udp 10.0.2.104 54523 -> 189.121.42.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:38:58.357354 0.017264 udp 10.0.2.104 54523 <-> 89.177.210.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:38:59.346504 0.090099 udp 10.0.2.104 54523 <-> 188.107.190.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:00.334519 1.016125 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:01.321684 0.173456 udp 10.0.2.104 54523 <-> 71.229.16.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:02.307727 0.042407 udp 10.0.2.104 54523 <-> 91.65.0.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:03.292588 0.105349 udp 10.0.2.104 54523 <-> 84.108.234.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:04.276543 0.150257 udp 10.0.2.104 54523 <-> 74.133.226.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:05.257145 0.194019 udp 10.0.2.104 54523 <-> 70.234.170.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:06.246577 0.770556 udp 10.0.2.104 54523 <-> 190.124.133.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:07.234604 1.242040 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:08.222189 0.077777 udp 10.0.2.104 54523 <-> 85.224.225.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:09.208247 0.397264 udp 10.0.2.104 54523 <-> 37.254.124.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:10.192998 0.669995 udp 10.0.2.104 54523 <-> 113.193.117.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:11.177972 0.120498 udp 10.0.2.104 54523 <-> 77.106.75.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:12.158193 0.036221 udp 10.0.2.104 54523 <-> 81.161.241.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:13.148990 0.000000 udp 10.0.2.104 54523 -> 75.111.95.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:14.137191 0.370010 udp 10.0.2.104 54523 <-> 186.57.78.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:15.124339 0.000000 udp 10.0.2.104 54523 -> 61.90.69.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:16.110122 0.000000 udp 10.0.2.104 54523 -> 93.64.153.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:17.094840 0.167938 udp 10.0.2.104 54523 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:18.085955 0.237403 udp 10.0.2.104 54523 <-> 117.204.120.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:19.066174 0.072575 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:20.055206 0.173236 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:21.043363 4.928909 udp 10.0.2.104 54523 -> 115.250.159.137 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:22.030566 0.159507 udp 10.0.2.104 54523 <-> 50.142.135.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:23.016311 0.208867 udp 10.0.2.104 54523 <-> 76.87.9.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:24.000778 3.997113 udp 10.0.2.104 54523 <-> 24.132.151.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:24.992083 0.000000 udp 10.0.2.104 54523 -> 94.59.45.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:26.961164 0.000000 udp 10.0.2.104 54523 -> 58.140.50.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:27.021927 0.000000 udp 10.0.2.104 54523 <- 115.250.159.137 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:28.936256 0.116029 udp 10.0.2.104 54523 <-> 65.182.49.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:29.922162 0.297877 udp 10.0.2.104 54523 <-> 190.191.235.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:30.907066 0.287715 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:31.897673 0.210820 udp 10.0.2.104 54523 <-> 92.229.49.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:32.878064 0.290132 udp 10.0.2.104 54523 <-> 219.112.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:33.867057 0.210441 udp 10.0.2.104 54523 <-> 189.193.239.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:34.854970 0.166230 udp 10.0.2.104 54523 <-> 24.203.105.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:35.842138 0.213829 udp 10.0.2.104 54523 <-> 70.226.198.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:36.490690 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:39:36.827813 0.190282 udp 10.0.2.104 54523 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:37.812295 0.056820 udp 10.0.2.104 54523 <-> 109.87.247.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:38.803417 0.320805 udp 10.0.2.104 54523 <-> 183.83.152.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:39.783359 0.000000 udp 10.0.2.104 54523 -> 75.72.209.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:40.772483 0.127693 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:41.760615 0.000000 udp 10.0.2.104 54523 -> 50.176.68.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:42.748298 0.148550 udp 10.0.2.104 54523 <-> 71.80.67.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:43.733777 0.374597 udp 10.0.2.104 54523 <-> 182.237.190.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:44.719052 1.154977 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:46.690068 0.064995 udp 10.0.2.104 54523 <-> 188.24.141.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:47.678962 0.040171 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:48.666446 0.000000 udp 10.0.2.104 54523 -> 92.138.36.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:49.663596 0.218033 udp 10.0.2.104 54523 <-> 87.10.29.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:50.327675 3.899663 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:39:50.665554 1.925837 udp 10.0.2.104 54523 <-> 88.169.29.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:51.667099 1.158022 udp 10.0.2.104 54523 <-> 74.220.242.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:53.573608 0.000000 udp 10.0.2.104 54523 -> 50.157.253.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:39:54.554848 0.014247 udp 10.0.2.104 54523 <-> 89.176.58.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:55.544982 0.116208 udp 10.0.2.104 54523 <-> 98.174.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:56.534414 0.268177 udp 10.0.2.104 54523 <-> 201.82.232.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:57.522863 3.993812 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:58.182759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:39:58.510220 4.938611 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 3 306 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:39:59.496342 0.991906 udp 10.0.2.104 54523 <-> 2.185.55.67 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:02.459382 4.945424 udp 10.0.2.104 54523 <-> 78.228.60.22 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:03.619979 0.000000 udp 10.0.2.104 54523 <- 71.15.96.2 16464 RSP 0 0 1 190 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:04.437075 0.214905 udp 10.0.2.104 54523 <-> 72.172.107.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:06.083740 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:40:06.411282 0.000000 udp 10.0.2.104 54523 -> 2.185.55.67 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:07.563660 0.000000 udp 10.0.2.104 54523 <- 78.228.60.22 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:08.386019 0.090623 udp 10.0.2.104 54523 <-> 87.110.62.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:09.376655 0.148358 udp 10.0.2.104 54523 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:10.366237 0.000000 udp 10.0.2.104 54523 -> 68.150.142.201 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:11.354466 1.700868 udp 10.0.2.104 54523 <-> 118.169.223.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:13.329092 1.167467 udp 10.0.2.104 54523 <-> 96.63.219.58 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:15.308160 0.037894 udp 10.0.2.104 54523 <-> 89.71.3.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:16.298040 0.173634 udp 10.0.2.104 54523 <-> 74.77.226.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:17.287446 0.146326 udp 10.0.2.104 54523 <-> 74.69.201.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:18.275615 0.270268 udp 10.0.2.104 54523 <-> 98.69.141.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:19.263160 3.099789 udp 10.0.2.104 54523 <-> 82.239.45.91 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:21.241677 0.163635 udp 10.0.2.104 54523 <-> 75.73.227.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:21.904906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:40:23.864215 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:40:24.201805 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:25.190140 0.000068 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:25.190208 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:40:26.178995 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:27.165288 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:28.157406 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:29.138609 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:30.129048 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:31.118393 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:32.106472 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:33.093580 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:34.080821 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:35.063127 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:36.054358 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:37.044427 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:38.033372 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:39.021606 0.297622 udp 10.0.2.104 54523 <-> 101.63.0.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:40.009213 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:40.995323 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:41.977688 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:42.968576 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:43.959344 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:44.948639 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:45.937326 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:46.924538 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:48.899617 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:49.890320 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:50.880257 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:51.869140 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:52.862929 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:52.862993 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:40:53.532265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:40:54.133680 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:55.119796 0.361939 udp 10.0.2.104 54523 <-> 101.63.0.59 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:40:56.101665 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:58.083011 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:40:59.071849 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:00.061369 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:01.048490 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:02.034595 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:03.016488 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:04.007428 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:04.997346 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:05.985936 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:06.973952 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:07.964222 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:08.951105 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:08.951165 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:41:09.933000 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:10.586227 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:41:10.923738 3.624270 udp 10.0.2.104 54523 <-> 63.149.19.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:11.913790 0.319220 udp 10.0.2.104 54523 <-> 101.63.0.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:12.902727 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:13.890792 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:14.877522 0.300658 udp 10.0.2.104 54523 <-> 58.11.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:15.863314 0.000000 udp 10.0.2.104 54523 -> 97.119.248.211 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:16.845203 0.215579 udp 10.0.2.104 54523 <-> 189.193.101.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:17.835700 0.269835 udp 10.0.2.104 54523 <-> 201.53.219.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:18.825091 0.245213 udp 10.0.2.104 54523 <-> 186.147.157.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:19.813951 0.086197 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:20.806909 0.071555 udp 10.0.2.104 54523 <-> 85.86.152.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:21.793909 0.170530 udp 10.0.2.104 54523 <-> 76.101.70.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:22.780608 0.143394 udp 10.0.2.104 54523 <-> 67.242.194.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:23.762828 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:23.762924 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:41:24.753250 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:25.743750 0.316226 udp 10.0.2.104 54523 <-> 179.232.211.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:26.732640 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:28.706725 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:29.692808 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:30.674150 0.045812 udp 10.0.2.104 54523 <-> 77.87.8.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:31.664874 0.061719 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:32.662228 0.182436 udp 10.0.2.104 54523 <-> 184.189.232.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:33.669035 0.036262 udp 10.0.2.104 54523 <-> 87.207.149.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:34.668659 0.036299 udp 10.0.2.104 54523 <-> 81.161.241.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:35.668331 0.166362 udp 10.0.2.104 54523 <-> 178.120.41.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:36.668535 0.082377 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:37.659232 0.358624 udp 10.0.2.104 54523 <-> 14.198.154.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:38.660785 0.338956 udp 10.0.2.104 54523 <-> 210.128.207.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:39.662594 0.713633 udp 10.0.2.104 54523 <-> 1.174.230.249 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:40.663884 0.149592 udp 10.0.2.104 54523 <-> 96.42.52.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:41.665133 0.235513 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:42.666626 0.426940 udp 10.0.2.104 54523 <-> 74.127.151.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:43.667908 0.153286 udp 10.0.2.104 54523 <-> 69.14.90.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:44.659312 1.017311 udp 10.0.2.104 54523 <-> 111.92.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:45.660790 3.605607 udp 10.0.2.104 54523 <-> 181.166.176.239 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:46.664035 0.000000 udp 10.0.2.104 54523 -> 202.29.179.135 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:47.664283 0.000000 udp 10.0.2.104 54523 -> 2.187.196.144 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:49.666515 0.026320 udp 10.0.2.104 54523 <-> 85.130.81.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:50.668256 0.164861 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:51.659541 0.000000 udp 10.0.2.104 54523 -> 111.246.35.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:52.661014 0.213067 udp 10.0.2.104 54523 <-> 76.90.73.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:53.662539 0.176471 udp 10.0.2.104 54523 <-> 68.114.69.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:54.664268 2.617535 udp 10.0.2.104 54523 <-> 186.19.134.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:55.665006 0.150320 udp 10.0.2.104 54523 <-> 24.61.172.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:56.666489 0.026246 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:57.317473 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:41:57.668001 0.000000 udp 10.0.2.104 54523 -> 146.251.75.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:41:58.659415 0.294555 udp 10.0.2.104 54523 <-> 177.139.72.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:41:59.660946 1.009260 udp 10.0.2.104 54523 <-> 212.182.29.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:01.605471 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:02.594411 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:03.582077 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:04.568562 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:05.561621 1.971670 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:06.543009 0.519141 udp 10.0.2.104 54523 <-> 187.69.61.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:08.522790 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:09.513915 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:10.501439 0.029091 udp 10.0.2.104 54523 <-> 78.42.33.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:11.487858 0.000000 udp 10.0.2.104 54523 -> 76.30.230.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:12.484057 0.296083 udp 10.0.2.104 54523 <-> 189.103.8.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:13.465500 0.097078 udp 10.0.2.104 54523 <-> 82.245.150.146 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:14.455868 0.289970 udp 10.0.2.104 54523 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:15.445436 0.153868 udp 10.0.2.104 54523 <-> 79.36.189.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:16.434128 2.113152 udp 10.0.2.104 54523 <-> 76.106.112.163 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:17.421539 0.032610 udp 10.0.2.104 54523 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:19.401032 0.057380 udp 10.0.2.104 54523 <-> 89.137.133.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:20.383246 0.144713 udp 10.0.2.104 54523 <-> 24.177.233.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:21.373686 0.517955 udp 10.0.2.104 54523 <-> 36.244.233.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:22.362965 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:23.351641 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:24.339262 0.131358 udp 10.0.2.104 54523 <-> 2.133.245.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:25.325739 0.168762 udp 10.0.2.104 54523 <-> 174.55.3.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:26.318441 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:27.299837 0.144872 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:28.290652 0.043901 udp 10.0.2.104 54523 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:29.280299 0.242946 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:30.268118 0.174863 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:31.255781 0.061602 udp 10.0.2.104 54523 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:32.242648 0.258324 udp 10.0.2.104 54523 <-> 190.198.147.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:33.234788 0.066428 udp 10.0.2.104 54523 <-> 83.213.201.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:34.216254 0.000000 udp 10.0.2.104 54523 -> 203.187.203.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:35.206207 0.257454 udp 10.0.2.104 54523 <-> 187.20.177.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:36.195784 1.557309 udp 10.0.2.104 54523 <-> 186.95.110.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:37.994304 0.000000 udp 10.0.2.104 54523 -> 24.191.109.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:38.981857 0.301762 udp 10.0.2.104 54523 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:39.968193 0.000000 udp 10.0.2.104 54523 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:40.960806 0.455072 udp 10.0.2.104 54523 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:41.942145 0.164601 udp 10.0.2.104 54523 <-> 49.204.136.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:42.932436 0.055394 udp 10.0.2.104 54523 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:43.921750 0.046456 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:44.910278 0.166061 udp 10.0.2.104 54523 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:45.559675 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:42:45.897319 0.355018 udp 10.0.2.104 54523 <-> 24.230.219.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:46.883622 0.314709 udp 10.0.2.104 54523 <-> 220.129.65.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:47.875733 0.136017 udp 10.0.2.104 54523 <-> 68.193.213.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:48.856969 0.065054 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:49.847606 1.234281 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:51.826337 0.000000 udp 10.0.2.104 54523 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:52.814212 0.056697 udp 10.0.2.104 54523 <-> 109.87.240.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:53.800827 0.041963 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:54.793227 0.000000 udp 10.0.2.104 54523 -> 24.77.226.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:55.774285 0.162332 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:56.764835 0.000000 udp 10.0.2.104 54523 -> 79.115.126.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:42:57.753976 0.050600 udp 10.0.2.104 54523 <-> 79.118.98.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:58.742283 0.175198 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:42:59.731411 0.117562 udp 10.0.2.104 54523 <-> 24.254.149.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:00.717567 0.052295 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:01.709767 2.043287 udp 10.0.2.104 54523 <-> 181.208.87.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:02.693416 0.272171 udp 10.0.2.104 54523 <-> 177.100.109.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:03.683347 0.050282 udp 10.0.2.104 54523 <-> 79.118.98.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:04.676219 0.193717 udp 10.0.2.104 54523 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:05.666965 1.172793 udp 10.0.2.104 54523 <-> 201.19.246.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:06.653600 0.114786 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:07.640315 0.000000 udp 10.0.2.104 54523 -> 94.190.190.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:08.624153 0.000000 udp 10.0.2.104 54523 -> 98.127.174.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:09.616478 0.000000 udp 10.0.2.104 54523 -> 95.57.165.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:10.606775 0.159525 udp 10.0.2.104 54523 <-> 50.128.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:11.596108 0.054649 udp 10.0.2.104 54523 <-> 88.156.89.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:12.584179 0.346677 udp 10.0.2.104 54523 <-> 118.130.233.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:13.571268 0.060852 udp 10.0.2.104 54523 <-> 84.126.54.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:14.557686 0.042819 udp 10.0.2.104 54523 <-> 82.19.125.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:15.540856 0.000000 udp 10.0.2.104 54523 -> 94.240.167.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:16.532616 0.198410 udp 10.0.2.104 54523 <-> 70.70.162.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:17.522610 0.364842 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:18.511904 0.136196 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:19.500022 0.000000 udp 10.0.2.104 54523 -> 115.241.87.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:20.487281 0.044103 udp 10.0.2.104 54523 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:21.474541 0.000000 udp 10.0.2.104 54523 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:22.456485 2.399606 udp 10.0.2.104 54523 <-> 186.93.108.92 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:23.448345 0.028683 udp 10.0.2.104 54523 <-> 213.66.78.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:25.429172 0.000000 udp 10.0.2.104 54523 -> 117.220.10.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:26.417163 1.117994 udp 10.0.2.104 54523 <-> 67.218.169.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:27.404368 0.039660 udp 10.0.2.104 54523 <-> 91.218.81.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:28.391095 0.060590 udp 10.0.2.104 54523 <-> 78.82.62.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:29.373026 0.368450 udp 10.0.2.104 54523 <-> 61.231.35.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:30.364686 0.163336 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:31.354772 0.153066 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:32.006391 1.757858 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:43:34.091564 0.160161 udp 10.0.2.104 54523 <-> 74.196.247.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:35.079703 0.039764 udp 10.0.2.104 54523 <-> 79.115.87.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:36.067107 0.163459 udp 10.0.2.104 54523 <-> 97.95.43.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:37.052820 0.205023 udp 10.0.2.104 54523 <-> 184.167.204.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:38.035006 0.354477 udp 10.0.2.104 54523 <-> 58.64.71.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:39.025830 0.124387 udp 10.0.2.104 54523 <-> 89.250.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:40.015506 0.169926 udp 10.0.2.104 54523 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:41.004323 0.990383 udp 10.0.2.104 54523 <-> 46.5.227.254 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:42.982188 0.177041 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:43.968105 2.284984 udp 10.0.2.104 54523 <-> 83.23.9.138 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:44.950113 0.312516 udp 10.0.2.104 54523 <-> 59.0.192.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:46.930878 0.056685 udp 10.0.2.104 54523 <-> 86.122.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:47.919783 0.159320 udp 10.0.2.104 54523 <-> 188.2.163.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:48.907713 0.000000 udp 10.0.2.104 54523 -> 187.247.105.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:49.894598 2.868905 udp 10.0.2.104 54523 <-> 113.193.117.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:50.880850 0.353005 udp 10.0.2.104 54523 <-> 125.142.179.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:51.862255 0.000000 udp 10.0.2.104 54523 -> 216.45.40.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:52.853375 0.161041 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:53.843192 0.143672 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:54.831824 0.000000 udp 10.0.2.104 54523 -> 50.84.28.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:43:55.820283 0.037431 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:56.807815 0.147824 udp 10.0.2.104 54523 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:57.794129 0.089236 udp 10.0.2.104 54523 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:58.776064 0.110809 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:43:59.837010 0.056441 udp 10.0.2.104 54523 <-> 109.87.240.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:00.827082 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:01.815736 0.172073 udp 10.0.2.104 54523 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:02.804204 0.000000 udp 10.0.2.104 54523 -> 118.170.205.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:03.791368 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:04.832376 0.441416 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:05.814168 2.481930 udp 10.0.2.104 54523 <-> 92.229.49.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:06.804596 0.000000 udp 10.0.2.104 54523 -> 144.75.135.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:08.782700 1.061333 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:10.608119 0.283544 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:11.595302 0.176802 udp 10.0.2.104 54523 <-> 62.220.208.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:12.581781 0.166096 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:13.563305 0.219619 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:14.553780 0.000000 udp 10.0.2.104 54523 -> 60.246.187.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:15.543600 0.000000 udp 10.0.2.104 54523 -> 76.178.38.26 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:16.532431 0.000000 udp 10.0.2.104 54523 -> 75.84.97.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:17.520035 0.000000 udp 10.0.2.104 54523 -> 36.224.167.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:18.506589 0.000000 udp 10.0.2.104 54523 -> 115.241.78.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:19.493848 0.219726 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:20.475391 1.158325 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:21.129062 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:44:22.456524 0.493980 udp 10.0.2.104 54523 <-> 117.204.49.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:23.445249 0.000000 udp 10.0.2.104 54523 -> 101.221.69.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:24.433447 0.127451 udp 10.0.2.104 54523 <-> 24.75.177.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:25.420466 0.158031 udp 10.0.2.104 54523 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:26.406796 0.040137 udp 10.0.2.104 54523 <-> 79.113.241.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:27.388411 0.267288 udp 10.0.2.104 54523 <-> 190.194.109.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:28.378982 4.493389 udp 10.0.2.104 54523 <-> 115.253.40.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:29.369007 1.638729 arp 10.0.2.104 who 169.254.54.88 INT 3 126 flow=Background-ARP 1970/01/01 07:44:30.357680 0.147392 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:31.345234 0.715786 udp 10.0.2.104 54523 <-> 112.200.82.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:32.331813 0.205311 udp 10.0.2.104 54523 <-> 67.185.146.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:33.324307 0.390299 udp 10.0.2.104 54523 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:34.306084 0.026379 udp 10.0.2.104 54523 <-> 178.48.83.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:35.296763 0.169433 udp 10.0.2.104 54523 <-> 173.174.12.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:36.286165 3.957699 udp 10.0.2.104 54523 <-> 178.164.167.94 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:37.274920 0.291139 udp 10.0.2.104 54523 <-> 213.217.45.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:38.262758 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:39.251376 0.000000 udp 10.0.2.104 54523 -> 24.147.226.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:41.966775 1.147591 udp 10.0.2.104 54523 <-> 62.211.235.217 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:43.943739 0.278967 udp 10.0.2.104 54523 <-> 27.143.20.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:44.930527 0.055022 udp 10.0.2.104 54523 <-> 86.63.86.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:45.916387 0.000000 udp 10.0.2.104 54523 -> 217.164.147.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:46.901330 0.126651 udp 10.0.2.104 54523 <-> 90.232.104.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:47.892193 0.115773 udp 10.0.2.104 54523 <-> 95.252.168.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:48.872464 0.141284 udp 10.0.2.104 54523 <-> 74.203.121.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:49.862214 0.166362 udp 10.0.2.104 54523 <-> 217.203.147.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:50.850015 0.000000 udp 10.0.2.104 54523 -> 207.42.135.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:51.836777 0.364030 udp 10.0.2.104 54523 <-> 61.228.94.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:52.822491 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:53.807090 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:54.798427 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:55.778394 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:56.767361 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:57.755262 0.076029 udp 10.0.2.104 54523 <-> 82.247.203.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:44:58.742475 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:44:59.728526 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:00.712954 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:01.703616 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:02.685472 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:03.674381 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:04.662233 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:06.634369 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:08.070347 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:08.714152 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:45:09.060844 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:10.040665 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:11.029245 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:12.017062 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:12.017157 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:45:13.003574 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:13.988976 1.305291 udp 10.0.2.104 54523 <-> 210.170.30.83 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:15.967047 1.951794 udp 10.0.2.104 54523 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:16.946698 0.177944 udp 10.0.2.104 54523 <-> 76.92.224.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:17.935407 3.226322 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:18.923030 0.048772 udp 10.0.2.104 54523 <-> 77.89.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:19.909711 0.150413 udp 10.0.2.104 54523 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:20.895387 0.040108 udp 10.0.2.104 54523 <-> 80.4.111.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:21.880041 0.000000 udp 10.0.2.104 54523 -> 201.208.196.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:22.870760 0.304228 udp 10.0.2.104 54523 <-> 190.39.122.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:23.850614 0.000000 udp 10.0.2.104 54523 -> 50.72.184.244 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:24.839165 0.048796 udp 10.0.2.104 54523 <-> 77.89.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:25.827196 0.000000 udp 10.0.2.104 54523 -> 91.116.138.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:26.814098 0.039225 udp 10.0.2.104 54523 <-> 80.4.111.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:27.799534 1.310627 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:28.783932 0.315888 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:29.774432 0.033923 udp 10.0.2.104 54523 <-> 158.58.245.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:30.754181 0.050091 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:31.742661 0.159230 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:32.729917 0.637196 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:33.716344 0.310878 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:34.701763 0.000000 udp 10.0.2.104 54523 -> 86.125.184.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:35.688635 0.113737 udp 10.0.2.104 54523 <-> 31.181.59.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:36.679387 0.041969 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:37.659358 0.067037 udp 10.0.2.104 54523 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:38.649341 0.435576 udp 10.0.2.104 54523 <-> 36.225.131.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:39.636650 1.021528 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:41.609875 0.109288 udp 10.0.2.104 54523 <-> 89.247.92.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:42.593935 0.120700 udp 10.0.2.104 54523 <-> 2.192.114.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:43.574771 0.338708 udp 10.0.2.104 54523 <-> 190.193.54.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:44.564438 0.166504 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:45.552924 0.000000 udp 10.0.2.104 54523 -> 14.97.201.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:46.540430 0.059883 udp 10.0.2.104 54523 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:47.526839 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:48.841674 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:49.826176 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:50.807038 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:51.797333 0.223324 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:52.788007 0.000000 udp 10.0.2.104 54523 -> 190.128.117.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:53.775276 0.063428 udp 10.0.2.104 54523 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:45:54.761512 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:55.409726 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:45:55.747975 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:56.732079 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:57.712856 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:58.702208 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:45:59.692793 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:00.680073 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:01.666418 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:02.651781 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:03.635831 0.315946 udp 10.0.2.104 54523 <-> 190.178.251.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:04.616430 0.000000 udp 10.0.2.104 54523 -> 24.231.62.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:05.606299 1.143812 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:07.582692 0.158179 udp 10.0.2.104 54523 <-> 88.187.105.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:08.568934 0.178115 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:09.554179 0.019953 udp 10.0.2.104 54523 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:10.538266 0.368434 udp 10.0.2.104 54523 <-> 222.166.66.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:11.524430 0.326948 udp 10.0.2.104 54523 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:12.513650 0.000000 udp 10.0.2.104 54523 -> 14.36.11.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:13.501917 0.000000 udp 10.0.2.104 54523 -> 83.37.27.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:14.492142 0.128362 udp 10.0.2.104 54523 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:15.478330 0.022623 udp 10.0.2.104 54523 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:16.463815 0.231234 udp 10.0.2.104 54523 <-> 123.238.232.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:17.448660 0.373558 udp 10.0.2.104 54523 <-> 123.110.35.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:18.429224 0.298979 udp 10.0.2.104 54523 <-> 189.103.8.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:19.418691 0.000000 udp 10.0.2.104 54523 -> 46.37.84.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:20.408269 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:21.395675 0.036795 udp 10.0.2.104 54523 <-> 92.237.138.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:22.381846 0.294668 udp 10.0.2.104 54523 <-> 14.99.61.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:23.366954 0.219863 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:24.350878 0.333608 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:25.332249 0.072416 udp 10.0.2.104 54523 <-> 2.68.0.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:26.321363 0.152864 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:27.309575 0.000000 udp 10.0.2.104 54523 -> 14.198.30.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:28.296808 0.156713 udp 10.0.2.104 54523 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:29.282845 0.000000 udp 10.0.2.104 54523 -> 181.55.88.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:30.268032 0.293559 udp 10.0.2.104 54523 <-> 200.30.233.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:31.251872 0.030603 udp 10.0.2.104 54523 <-> 78.90.64.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:32.232064 0.046744 udp 10.0.2.104 54523 <-> 78.8.65.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:33.221326 0.204531 udp 10.0.2.104 54523 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:34.209970 0.156037 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:35.197158 0.157662 udp 10.0.2.104 54523 <-> 98.215.29.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:36.183786 0.000000 udp 10.0.2.104 54523 -> 76.203.208.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:37.168776 0.015269 udp 10.0.2.104 54523 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:38.152242 1.164257 udp 10.0.2.104 54523 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:39.132653 0.424725 udp 10.0.2.104 54523 <-> 177.143.109.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:40.122087 0.468476 udp 10.0.2.104 54523 <-> 142.165.23.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:41.110311 0.251191 udp 10.0.2.104 54523 <-> 186.221.45.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:41.759950 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:46:42.097191 0.000000 udp 10.0.2.104 54523 -> 190.94.233.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:43.083210 0.000000 udp 10.0.2.104 54523 -> 93.105.99.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:44.068132 0.136639 udp 10.0.2.104 54523 <-> 69.124.115.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:45.052259 0.000000 udp 10.0.2.104 54523 -> 99.247.214.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:46.032574 0.041577 udp 10.0.2.104 54523 <-> 188.44.5.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:47.021815 0.160704 udp 10.0.2.104 54523 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:48.010017 0.046396 udp 10.0.2.104 54523 <-> 5.43.104.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:48.996713 0.156955 udp 10.0.2.104 54523 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:49.982890 0.040728 udp 10.0.2.104 54523 <-> 80.78.224.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:50.967767 0.026736 udp 10.0.2.104 54523 <-> 89.142.152.236 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:51.951731 0.248451 udp 10.0.2.104 54523 <-> 187.244.81.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:52.932029 0.000000 udp 10.0.2.104 54523 -> 179.144.222.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:46:53.921359 0.483226 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:54.909493 0.295665 udp 10.0.2.104 54523 <-> 58.11.209.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:55.896144 0.068431 udp 10.0.2.104 54523 <-> 90.229.251.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:56.882663 0.172960 udp 10.0.2.104 54523 <-> 174.49.200.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:57.867632 0.030219 udp 10.0.2.104 54523 <-> 95.88.88.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:58.851268 0.179237 udp 10.0.2.104 54523 <-> 68.88.77.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:46:59.831617 3.075704 udp 10.0.2.104 54523 <-> 85.130.182.168 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:00.820753 0.132404 udp 10.0.2.104 54523 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:01.808765 0.346718 udp 10.0.2.104 54523 <-> 190.100.165.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:03.781688 0.447638 udp 10.0.2.104 54523 <-> 171.207.9.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:04.766474 0.000000 udp 10.0.2.104 54523 -> 109.90.117.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:05.757592 0.036258 udp 10.0.2.104 54523 <-> 79.113.12.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:06.737787 0.000000 udp 10.0.2.104 54523 -> 117.200.139.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:07.726888 0.209562 udp 10.0.2.104 54523 <-> 67.160.130.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:08.715226 0.155612 udp 10.0.2.104 54523 <-> 98.250.16.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:09.702028 0.220926 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:10.688008 0.551227 udp 10.0.2.104 54523 <-> 190.206.235.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:11.672385 0.263905 udp 10.0.2.104 54523 <-> 122.166.14.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:12.663759 0.000000 udp 10.0.2.104 54523 -> 180.215.207.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:13.643606 0.602753 udp 10.0.2.104 54523 <-> 84.38.87.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:14.632642 0.048379 udp 10.0.2.104 54523 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:15.620761 0.208878 udp 10.0.2.104 54523 <-> 128.123.234.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:16.607612 0.157811 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:17.593384 0.306505 udp 10.0.2.104 54523 <-> 190.217.162.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:18.578168 0.000000 udp 10.0.2.104 54523 -> 190.206.235.157 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:19.569496 0.355299 udp 10.0.2.104 54523 <-> 190.11.112.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:20.549836 0.209741 udp 10.0.2.104 54523 <-> 174.45.179.206 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:21.539336 0.067401 udp 10.0.2.104 54523 <-> 188.27.119.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:22.530067 0.018171 udp 10.0.2.104 54523 <-> 77.175.74.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:23.516726 0.179735 udp 10.0.2.104 54523 <-> 72.23.74.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:24.502307 1.598136 udp 10.0.2.104 54523 <-> 117.195.29.108 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:26.478387 0.221742 udp 10.0.2.104 54523 <-> 71.92.129.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:27.458486 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:28.110511 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:47:28.447595 1.008213 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:30.421909 0.143703 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:31.408760 1.113978 udp 10.0.2.104 54523 <-> 190.183.73.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:32.393454 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:33.384554 0.000000 udp 10.0.2.104 54523 -> 119.225.245.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:34.369003 0.149650 udp 10.0.2.104 54523 <-> 2.187.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:35.360591 0.177251 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:36.348304 0.000000 udp 10.0.2.104 54523 -> 190.206.217.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:37.334691 1.557235 udp 10.0.2.104 54523 <-> 186.19.50.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:38.322403 0.166433 udp 10.0.2.104 54523 <-> 70.178.41.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:39.307086 0.313287 udp 10.0.2.104 54523 <-> 122.29.163.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:40.297893 0.253517 udp 10.0.2.104 54523 <-> 117.204.244.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:41.285805 0.373284 udp 10.0.2.104 54523 <-> 123.204.131.154 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:42.277395 0.347717 udp 10.0.2.104 54523 <-> 2.185.38.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:43.265065 0.986817 udp 10.0.2.104 54523 <-> 188.27.119.238 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:45.237593 0.539433 udp 10.0.2.104 54523 <-> 92.249.152.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:46.222164 0.322445 udp 10.0.2.104 54523 <-> 219.115.125.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:47.215154 0.174284 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:48.197541 0.000000 udp 10.0.2.104 54523 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:49.186304 0.156539 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:50.173901 0.000000 udp 10.0.2.104 54523 -> 116.203.249.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:51.160596 0.000000 udp 10.0.2.104 54523 -> 91.191.58.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:52.145874 0.122525 udp 10.0.2.104 54523 <-> 92.62.67.209 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:53.132434 0.289835 udp 10.0.2.104 54523 <-> 63.195.75.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:54.123176 0.155686 udp 10.0.2.104 54523 <-> 79.42.179.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:55.102488 0.141695 udp 10.0.2.104 54523 <-> 182.48.203.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:56.091317 0.000000 udp 10.0.2.104 54523 -> 78.101.232.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:57.078958 0.000000 udp 10.0.2.104 54523 -> 216.249.94.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:47:58.065574 0.928496 udp 10.0.2.104 54523 <-> 2.193.131.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:47:58.759487 2.962361 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:47:59.053386 4.438393 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:00.038211 0.050004 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:01.029285 0.057982 udp 10.0.2.104 54523 <-> 213.193.25.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:02.009320 0.000000 udp 10.0.2.104 54523 -> 85.230.174.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:04.125217 3.140888 udp 10.0.2.104 54523 <-> 24.121.84.144 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:05.111575 1.694108 udp 10.0.2.104 54523 <-> 190.17.84.42 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:05.809622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:48:08.072211 0.728613 udp 10.0.2.104 54523 <-> 190.112.98.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:09.051936 0.148083 udp 10.0.2.104 54523 <-> 71.82.48.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:10.042469 0.155942 udp 10.0.2.104 54523 <-> 184.91.17.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:11.030420 0.280139 udp 10.0.2.104 54523 <-> 203.165.248.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:12.017434 0.000000 udp 10.0.2.104 54523 -> 190.198.225.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:13.002933 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:13.700281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:48:13.987422 0.160052 udp 10.0.2.104 54523 <-> 66.176.196.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:14.631219 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:48:14.968313 0.071063 udp 10.0.2.104 54523 <-> 94.253.238.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:15.958041 0.155886 udp 10.0.2.104 54523 <-> 71.194.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:16.946722 0.191230 udp 10.0.2.104 54523 <-> 77.239.84.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:17.934340 0.088503 udp 10.0.2.104 54523 <-> 93.81.199.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:18.922282 0.293062 udp 10.0.2.104 54523 <-> 211.124.168.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:19.907610 0.146789 udp 10.0.2.104 54523 <-> 203.194.104.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:20.892276 0.146211 udp 10.0.2.104 54523 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:21.873472 0.350818 udp 10.0.2.104 54523 <-> 190.173.98.66 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:22.863758 0.391174 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:23.854344 1.419476 udp 10.0.2.104 54523 <-> 84.182.163.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:24.841927 0.211040 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:25.828771 0.145810 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:26.815890 0.213665 udp 10.0.2.104 54523 <-> 98.234.202.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:27.800121 0.183965 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:28.780794 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:29.526671 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:48:29.804176 0.250271 udp 10.0.2.104 54523 <-> 184.10.180.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:30.792790 0.000000 udp 10.0.2.104 54523 -> 117.199.224.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:31.780301 0.000000 udp 10.0.2.104 54523 -> 190.112.98.186 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:32.766607 0.052833 udp 10.0.2.104 54523 <-> 78.60.103.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:33.751961 0.383128 udp 10.0.2.104 54523 <-> 123.110.35.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:34.738000 0.199808 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:35.720360 1.463840 udp 10.0.2.104 54523 <-> 36.244.233.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:36.710122 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:37.700168 0.158380 udp 10.0.2.104 54523 <-> 76.24.95.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:38.687764 0.294375 udp 10.0.2.104 54523 <-> 61.21.52.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:39.673999 0.060271 udp 10.0.2.104 54523 <-> 213.37.119.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:40.662169 0.000000 udp 10.0.2.104 54523 -> 178.122.189.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:41.646224 0.071508 udp 10.0.2.104 54523 <-> 151.15.164.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:42.628563 0.061987 udp 10.0.2.104 54523 <-> 88.180.180.197 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:43.618151 0.000000 udp 10.0.2.104 54523 -> 2.184.17.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:44.607230 1.954319 udp 10.0.2.104 54523 <-> 113.19.24.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:45.594554 0.211236 udp 10.0.2.104 54523 <-> 87.13.102.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:46.580609 0.395590 udp 10.0.2.104 54523 <-> 114.47.13.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:47.565600 2.291005 udp 10.0.2.104 54523 <-> 27.4.145.8 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:50.837052 0.281463 udp 10.0.2.104 54523 <-> 201.211.132.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:51.828124 3.012457 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:52.817357 0.000000 udp 10.0.2.104 54523 -> 117.221.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:53.805445 0.000000 udp 10.0.2.104 54523 -> 70.91.250.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:55.778243 0.187242 udp 10.0.2.104 54523 <-> 124.125.22.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:56.762400 0.000000 udp 10.0.2.104 54523 -> 72.199.208.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:48:57.742819 0.258846 udp 10.0.2.104 54523 <-> 190.78.59.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:58.732954 0.139848 udp 10.0.2.104 54523 <-> 216.20.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:48:59.721537 0.144720 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:00.708594 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:01.694722 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:02.342737 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:49:02.402302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:49:02.679809 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:03.663746 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:04.643988 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:05.633347 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:06.621486 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:07.608022 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:08.594327 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:09.579261 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:10.563642 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:11.543651 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:12.532760 0.138743 udp 10.0.2.104 54523 <-> 66.191.214.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:13.520985 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:14.508111 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:15.494443 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:16.479308 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:17.463369 0.038855 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:18.443727 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:19.432937 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:20.421176 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:21.408370 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:22.394292 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:23.379201 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:25.343682 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:25.343732 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:49:26.334877 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:27.323035 0.034707 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:28.310209 0.140705 udp 10.0.2.104 54523 <-> 216.20.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:29.296979 0.000000 udp 10.0.2.104 54523 -> 14.97.91.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:30.281877 0.286654 udp 10.0.2.104 54523 <-> 117.222.47.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:31.265771 0.127434 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:32.245910 0.044763 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:33.234948 0.044189 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:34.222877 0.174294 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:35.209834 0.141542 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:36.196233 0.373653 udp 10.0.2.104 54523 <-> 36.224.196.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:37.181430 1.036377 udp 10.0.2.104 54523 <-> 95.76.197.77 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:39.152989 0.160941 udp 10.0.2.104 54523 <-> 95.74.47.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:40.141876 0.000000 udp 10.0.2.104 54523 -> 94.74.144.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:49:41.130092 3.327047 udp 10.0.2.104 54523 <-> 50.143.3.25 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:42.117230 0.368648 udp 10.0.2.104 54523 <-> 67.61.188.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:43.312375 0.167307 udp 10.0.2.104 54523 <-> 24.37.209.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:45.288999 0.622730 udp 10.0.2.104 54523 <-> 74.244.8.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:46.269535 0.284136 udp 10.0.2.104 54523 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:47.258401 1.176619 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:48.896601 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:49:49.233552 0.086853 udp 10.0.2.104 54523 <-> 62.99.18.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:50.219756 0.386071 udp 10.0.2.104 54523 <-> 2.184.54.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:51.204689 0.291208 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:52.195738 0.557928 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:53.175928 0.213608 udp 10.0.2.104 54523 <-> 184.155.114.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:54.164552 0.503740 udp 10.0.2.104 54523 <-> 151.16.159.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:55.152625 0.135196 udp 10.0.2.104 54523 <-> 75.109.75.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:56.139324 0.138209 udp 10.0.2.104 54523 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:57.125306 0.222071 udp 10.0.2.104 54523 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:58.110870 0.048822 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:49:59.101865 0.284136 udp 10.0.2.104 54523 <-> 119.240.172.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:00.082280 0.171908 udp 10.0.2.104 54523 <-> 2.180.103.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:01.071220 4.936150 udp 10.0.2.104 54523 <-> 99.102.150.224 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:02.059174 0.215037 udp 10.0.2.104 54523 <-> 67.181.210.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:03.046295 0.147133 udp 10.0.2.104 54523 <-> 74.55.169.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:04.032079 0.322661 udp 10.0.2.104 54523 <-> 211.179.224.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:05.016785 0.152957 udp 10.0.2.104 54523 <-> 96.42.52.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:06.191242 0.000000 udp 10.0.2.104 54523 <- 99.102.150.224 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:50:06.987631 0.000000 udp 10.0.2.104 54523 -> 177.170.221.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:50:07.976904 0.139594 udp 10.0.2.104 54523 <-> 173.2.97.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:08.964837 0.409952 udp 10.0.2.104 54523 <-> 61.227.76.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:09.951649 0.154031 udp 10.0.2.104 54523 <-> 24.179.39.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:10.937588 0.384540 udp 10.0.2.104 54523 <-> 61.231.38.154 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:11.922478 0.441436 udp 10.0.2.104 54523 <-> 200.37.182.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:12.913651 0.056882 udp 10.0.2.104 54523 <-> 86.122.234.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:13.893617 0.242115 udp 10.0.2.104 54523 <-> 201.211.194.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:14.882267 0.135403 udp 10.0.2.104 54523 <-> 67.86.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:15.870333 0.047911 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:16.857022 0.133741 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:17.842589 1.231343 udp 10.0.2.104 54523 <-> 186.92.193.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:18.826839 0.387054 udp 10.0.2.104 54523 <-> 187.24.139.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:19.817983 0.040458 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:20.798342 0.338692 udp 10.0.2.104 54523 <-> 1.173.2.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:21.787075 0.226513 udp 10.0.2.104 54523 <-> 189.197.164.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:22.774587 0.032672 udp 10.0.2.104 54523 <-> 178.150.4.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:23.761349 0.000000 udp 10.0.2.104 54523 -> 188.44.5.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:50:24.746784 0.274423 udp 10.0.2.104 54523 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:25.731202 0.842303 udp 10.0.2.104 54523 <-> 188.2.138.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:26.721957 0.336038 udp 10.0.2.104 54523 <-> 84.46.159.117 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:28.692308 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:50:29.680324 0.045909 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:30.666947 0.348476 udp 10.0.2.104 54523 <-> 183.97.104.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:31.654542 0.082107 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:32.639057 0.340014 udp 10.0.2.104 54523 <-> 119.14.115.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:33.629844 0.073762 udp 10.0.2.104 54523 <-> 95.104.232.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:34.609647 0.000000 udp 10.0.2.104 54523 -> 75.58.127.217 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:50:35.261342 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:50:35.598449 3.116401 udp 10.0.2.104 54523 <-> 76.179.117.101 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:36.585971 0.099543 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:37.572613 1.045150 udp 10.0.2.104 54523 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:39.543005 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:50:40.534146 0.190085 udp 10.0.2.104 54523 <-> 98.176.21.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:41.513824 0.035657 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:42.503238 0.500830 udp 10.0.2.104 54523 <-> 59.102.184.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:43.490796 0.139260 udp 10.0.2.104 54523 <-> 76.114.222.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:44.477407 0.029809 udp 10.0.2.104 54523 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:45.462609 1.174371 udp 10.0.2.104 54523 <-> 202.216.86.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:46.446891 0.307747 udp 10.0.2.104 54523 <-> 189.19.128.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:47.427840 1.037996 udp 10.0.2.104 54523 <-> 87.247.96.38 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:49.406303 0.000000 udp 10.0.2.104 54523 -> 83.173.151.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:50:50.394387 0.037383 udp 10.0.2.104 54523 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:51.380754 1.056079 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:53.350253 0.224869 udp 10.0.2.104 54523 <-> 2.132.173.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:54.331976 0.000000 udp 10.0.2.104 54523 -> 202.71.10.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:50:55.322423 4.542102 udp 10.0.2.104 54523 <-> 111.92.96.70 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:56.312834 0.119400 udp 10.0.2.104 54523 <-> 216.21.193.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:58.286495 0.039831 udp 10.0.2.104 54523 <-> 178.150.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:50:59.271794 0.029314 udp 10.0.2.104 54523 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:00.256900 0.000000 udp 10.0.2.104 54523 -> 75.54.70.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:01.237632 0.312300 udp 10.0.2.104 54523 <-> 180.15.183.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:02.227422 0.000000 udp 10.0.2.104 54523 -> 111.243.189.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:03.215658 0.158521 udp 10.0.2.104 54523 <-> 98.161.45.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:04.202798 0.551658 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:05.189325 0.087822 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:06.174896 0.017579 udp 10.0.2.104 54523 <-> 178.202.155.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:07.158895 0.044311 udp 10.0.2.104 54523 <-> 95.76.197.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:08.139918 0.000000 udp 10.0.2.104 54523 -> 201.19.246.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:09.130708 0.456746 udp 10.0.2.104 54523 <-> 118.165.157.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:10.119420 0.230702 udp 10.0.2.104 54523 <-> 2.132.173.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:11.106593 0.806639 udp 10.0.2.104 54523 <-> 184.63.14.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:12.093969 0.028995 udp 10.0.2.104 54523 <-> 85.121.1.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:13.079206 0.191302 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:14.063091 0.658487 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:15.043668 0.214490 udp 10.0.2.104 54523 <-> 190.207.61.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:16.032644 0.057929 udp 10.0.2.104 54523 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:17.021314 0.311107 udp 10.0.2.104 54523 <-> 180.15.183.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:18.009605 0.284554 udp 10.0.2.104 54523 <-> 218.45.34.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:18.995855 0.161670 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:19.982748 0.000000 udp 10.0.2.104 54523 -> 187.244.81.0 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:20.966844 0.159592 udp 10.0.2.104 54523 <-> 27.106.26.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:21.610312 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:51:21.946962 0.121471 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:22.936768 0.067211 udp 10.0.2.104 54523 <-> 86.104.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:23.925999 0.152722 udp 10.0.2.104 54523 <-> 96.42.34.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:24.913271 0.262996 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:25.899779 0.134018 udp 10.0.2.104 54523 <-> 140.193.57.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:26.884994 0.375893 udp 10.0.2.104 54523 <-> 60.40.218.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:27.871431 0.000000 udp 10.0.2.104 54523 -> 190.185.220.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:28.853344 0.083453 udp 10.0.2.104 54523 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:29.842772 0.000000 udp 10.0.2.104 54523 -> 190.124.133.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:30.831011 0.048644 udp 10.0.2.104 54523 <-> 217.24.79.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:31.818483 0.045901 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:32.804481 0.052892 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:33.789581 0.106427 udp 10.0.2.104 54523 <-> 87.0.233.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:34.773472 0.142582 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:35.754329 0.086818 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:36.743712 0.177318 udp 10.0.2.104 54523 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:37.732795 2.961671 udp 10.0.2.104 54523 -> 89.94.179.53 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:38.719985 0.179396 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:39.706164 4.015353 udp 10.0.2.104 54523 <-> 77.89.104.82 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:41.678415 0.073533 udp 10.0.2.104 54523 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:42.658903 0.000000 udp 10.0.2.104 54523 -> 69.151.57.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:44.661947 0.215247 udp 10.0.2.104 54523 <-> 50.26.127.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:45.663302 0.185775 udp 10.0.2.104 54523 <-> 74.216.8.226 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:46.664963 0.175184 udp 10.0.2.104 54523 <-> 49.205.234.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:47.666454 0.000000 udp 10.0.2.104 54523 -> 178.167.99.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:48.668001 0.366448 udp 10.0.2.104 54523 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:49.659360 0.136812 udp 10.0.2.104 54523 <-> 83.180.205.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:50.660388 0.013943 udp 10.0.2.104 54523 <-> 89.103.128.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:51.661836 0.041169 udp 10.0.2.104 54523 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:52.373306 0.012645 udp 10.0.2.104 54579 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 07:51:52.386227 0.000000 udp 10.0.2.104 54580 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:52.663551 0.072945 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:53.664577 0.176848 udp 10.0.2.104 54523 <-> 75.135.210.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:54.666295 0.000000 udp 10.0.2.104 54523 -> 181.118.86.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:55.668446 0.190730 udp 10.0.2.104 54523 <-> 68.101.204.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:56.659152 0.154460 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:57.660828 0.159261 udp 10.0.2.104 54523 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:51:58.661534 0.000000 udp 10.0.2.104 54523 -> 79.183.53.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:51:59.666636 0.078694 udp 10.0.2.104 54523 <-> 79.165.237.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:00.669230 0.070763 udp 10.0.2.104 54523 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:01.667925 0.000000 udp 10.0.2.104 54523 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:02.667832 0.160742 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:03.659166 0.113977 udp 10.0.2.104 54523 <-> 79.42.179.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:04.660785 0.183901 udp 10.0.2.104 54523 <-> 74.216.8.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:05.662259 0.357379 udp 10.0.2.104 54523 <-> 201.93.44.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:06.663297 1.001477 udp 10.0.2.104 54523 <-> 117.197.240.241 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:08.325322 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:52:08.666588 0.000000 udp 10.0.2.104 54523 -> 68.40.218.227 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:09.668375 0.000000 udp 10.0.2.104 54523 -> 202.29.179.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:10.660092 0.152613 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:11.660753 0.031478 udp 10.0.2.104 54523 <-> 89.253.136.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:12.662333 0.000000 udp 10.0.2.104 54523 -> 79.112.193.201 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:13.663642 0.308426 udp 10.0.2.104 54523 <-> 201.93.44.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:14.664987 0.000000 udp 10.0.2.104 54523 -> 5.250.84.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:15.666381 0.000000 udp 10.0.2.104 54523 -> 151.77.193.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:16.668049 0.073514 udp 10.0.2.104 54523 <-> 46.185.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:17.659311 0.184636 udp 10.0.2.104 54523 <-> 124.125.254.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:18.660911 0.269126 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:19.662388 0.131529 udp 10.0.2.104 54523 <-> 24.235.158.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:20.663996 0.727424 udp 10.0.2.104 54523 <-> 186.93.108.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:21.665028 0.000000 udp 10.0.2.104 54523 -> 62.20.124.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:22.666546 0.133741 udp 10.0.2.104 54523 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:23.668213 0.078807 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:24.659263 0.780942 udp 10.0.2.104 54523 <-> 172.243.139.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:25.660849 0.066576 udp 10.0.2.104 54523 <-> 78.251.143.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:26.662525 0.291238 udp 10.0.2.104 54523 <-> 117.200.213.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:27.663970 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:28.667035 0.096708 udp 10.0.2.104 54523 <-> 85.67.109.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:29.667886 1.005533 udp 10.0.2.104 54523 <-> 27.4.145.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:30.668259 0.049260 udp 10.0.2.104 54523 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:31.659390 0.052212 udp 10.0.2.104 54523 <-> 84.54.174.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:32.661035 0.000000 udp 10.0.2.104 54523 -> 84.232.15.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:33.662557 0.026138 udp 10.0.2.104 54523 <-> 176.199.23.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:34.663477 0.106379 udp 10.0.2.104 54523 <-> 89.117.246.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:35.665336 0.366614 udp 10.0.2.104 54523 <-> 114.26.72.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:36.666656 0.112845 udp 10.0.2.104 54523 <-> 87.111.114.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:37.668129 0.125783 udp 10.0.2.104 54523 <-> 79.42.179.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:38.659730 3.726262 udp 10.0.2.104 54523 <-> 219.90.102.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:39.660860 0.055957 udp 10.0.2.104 54523 <-> 85.204.248.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:40.662410 0.270388 udp 10.0.2.104 54523 <-> 177.80.157.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:41.663869 0.171407 udp 10.0.2.104 54523 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:42.665366 0.000000 udp 10.0.2.104 54523 -> 105.146.1.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:43.666790 0.156877 udp 10.0.2.104 54523 <-> 173.18.163.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:44.668240 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:45.659558 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:46.661058 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:47.665927 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:48.665180 3.488212 udp 10.0.2.104 54523 <-> 115.253.140.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:49.664820 0.022693 udp 10.0.2.104 54523 <-> 46.223.92.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:50.667040 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:51.669984 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:51.670080 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:52:52.659980 0.145442 udp 10.0.2.104 54523 <-> 76.181.153.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:53.661225 0.057639 udp 10.0.2.104 54523 <-> 79.118.218.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:54.662749 0.000000 udp 10.0.2.104 54523 -> 181.226.152.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:52:55.323384 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:52:55.664066 0.311554 udp 10.0.2.104 54523 <-> 114.158.112.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:56.665819 0.008995 udp 10.0.2.104 54523 <-> 89.176.244.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:57.666616 0.264751 udp 10.0.2.104 54523 <-> 177.192.239.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:58.668265 0.072372 udp 10.0.2.104 54523 <-> 79.109.85.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:52:59.659666 0.000000 udp 10.0.2.104 54523 -> 180.151.23.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:00.661091 0.309627 udp 10.0.2.104 54523 <-> 59.20.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:01.662617 1.087220 udp 10.0.2.104 54523 <-> 176.215.215.44 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:03.665265 0.207158 udp 10.0.2.104 54523 <-> 97.101.194.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:04.667094 0.045797 udp 10.0.2.104 54523 <-> 93.103.63.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:05.668589 0.142709 udp 10.0.2.104 54523 <-> 24.89.198.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:06.666150 0.453246 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:07.666070 0.499008 udp 10.0.2.104 54523 <-> 208.1.38.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:08.666058 0.130381 udp 10.0.2.104 54523 <-> 37.212.96.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:09.665201 0.299487 udp 10.0.2.104 54523 <-> 201.1.80.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:11.666634 0.162228 udp 10.0.2.104 54523 <-> 71.194.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:12.668579 0.443649 udp 10.0.2.104 54523 <-> 79.12.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:13.664528 0.593574 udp 10.0.2.104 54523 <-> 14.97.140.115 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:14.664098 0.158269 udp 10.0.2.104 54523 <-> 50.154.185.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:15.664093 0.043148 udp 10.0.2.104 54523 <-> 83.177.147.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:16.663925 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:17.665925 0.166559 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:18.666770 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:19.658665 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:20.660104 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:21.661389 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:22.662915 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:23.664263 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:24.665418 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:25.666714 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:26.658535 0.168793 udp 10.0.2.104 54523 <-> 49.206.159.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:27.660116 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:28.664264 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:29.664325 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:30.664100 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:31.665945 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:32.667097 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:33.658701 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:34.660336 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:35.661437 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:36.662888 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:37.664218 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:38.666209 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:39.669857 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:39.669904 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:53:41.660033 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:42.321167 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:53:42.661712 0.172459 udp 10.0.2.104 54523 <-> 49.205.220.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:43.662885 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:44.664552 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:45.665964 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:46.667238 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:47.658768 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:49.661587 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:50.663018 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:51.664801 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:52.665453 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:53.667319 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:54.658843 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:55.660361 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:56.662050 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:56.662097 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:53:57.663131 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:53:58.664353 0.176178 udp 10.0.2.104 54523 <-> 49.205.220.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:53:59.666171 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:00.667481 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:01.658974 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:02.660283 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:03.661801 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:04.663281 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:05.664808 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:06.666310 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:07.667693 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:08.658913 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:09.660531 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:10.662281 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:11.662692 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:12.664836 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:12.664895 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:54:14.667338 0.067932 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:15.658958 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:16.660468 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:17.662090 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:18.663784 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:19.664791 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:20.666455 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:20.666501 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:54:21.667235 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:22.659289 0.296106 udp 10.0.2.104 54523 <-> 117.221.0.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:23.660509 0.256282 udp 10.0.2.104 54523 <-> 49.206.159.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:24.662325 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:25.663311 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:26.664722 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:27.667948 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:28.667367 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:29.318753 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:54:29.659342 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:30.660768 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:31.662108 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:32.663550 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:33.665019 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:35.667645 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:35.667691 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:54:36.659304 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:37.660909 0.040270 udp 10.0.2.104 54523 <-> 83.177.147.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:38.662031 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:39.663681 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:40.664883 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:41.666287 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:42.667930 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:43.659596 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:44.660826 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:45.662398 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:46.663840 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:47.665285 0.157526 udp 10.0.2.104 54523 <-> 50.154.185.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:48.666611 0.375924 udp 10.0.2.104 54523 <-> 1.168.69.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:49.667883 0.297334 udp 10.0.2.104 54523 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:50.659317 0.285871 udp 10.0.2.104 54523 <-> 190.36.188.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:51.660691 0.115187 udp 10.0.2.104 54523 <-> 85.130.182.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:52.662498 0.254368 udp 10.0.2.104 54523 <-> 49.249.34.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:53.663582 0.139141 udp 10.0.2.104 54523 <-> 68.187.182.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:54.665083 0.295317 udp 10.0.2.104 54523 <-> 42.146.65.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:55.666690 0.022634 udp 10.0.2.104 54523 <-> 46.5.123.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:56.675940 0.100381 udp 10.0.2.104 54523 <-> 85.56.52.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:54:57.664416 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:58.661848 0.000000 udp 10.0.2.104 54523 -> 95.111.72.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:54:59.662255 0.049160 udp 10.0.2.104 54523 <-> 78.63.74.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:00.663975 0.182975 udp 10.0.2.104 54523 <-> 94.205.117.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:01.665360 0.303804 udp 10.0.2.104 54523 <-> 125.215.109.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:02.666965 0.230737 udp 10.0.2.104 54523 <-> 190.204.253.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:03.668180 0.250509 udp 10.0.2.104 54523 <-> 71.95.45.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:04.659849 0.310375 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:05.660968 0.139547 udp 10.0.2.104 54523 <-> 71.76.197.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:06.662437 0.348794 udp 10.0.2.104 54523 <-> 31.17.213.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:07.663614 0.068823 udp 10.0.2.104 54523 <-> 78.239.110.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:08.668321 0.214518 udp 10.0.2.104 54523 <-> 181.51.139.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:09.670587 0.045812 udp 10.0.2.104 54523 <-> 146.52.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:10.670564 0.046334 udp 10.0.2.104 54523 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:11.660102 0.175279 udp 10.0.2.104 54523 <-> 71.15.136.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:12.661210 0.013242 udp 10.0.2.104 54523 <-> 188.230.151.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:13.662487 0.000000 udp 10.0.2.104 54523 -> 208.126.211.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:14.664041 0.967626 udp 10.0.2.104 54523 <-> 192.222.24.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:15.668400 0.086301 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:16.326976 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:55:16.666739 0.356684 udp 10.0.2.104 54523 <-> 190.176.202.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:17.400756 3.028898 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:55:17.699747 0.183947 udp 10.0.2.104 54523 <-> 72.199.208.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:18.685402 0.063961 udp 10.0.2.104 54523 <-> 37.146.145.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:19.683925 0.000000 udp 10.0.2.104 54523 -> 5.14.226.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:19.816193 0.000000 udp 10.0.2.104 54523 <- 208.126.211.241 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:20.678729 0.119440 udp 10.0.2.104 54523 <-> 72.218.201.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:21.673234 0.143613 udp 10.0.2.104 54523 <-> 96.22.163.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:22.669101 0.168463 udp 10.0.2.104 54523 <-> 75.133.156.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:23.666599 0.327476 udp 10.0.2.104 54523 <-> 186.93.166.249 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:24.418034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:55:24.668494 0.000000 udp 10.0.2.104 54523 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:25.659935 0.037494 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:26.661179 0.000000 udp 10.0.2.104 54523 -> 67.86.61.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:27.662583 0.000000 udp 10.0.2.104 54523 -> 86.139.44.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:28.664184 0.050466 udp 10.0.2.104 54523 <-> 78.97.35.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:29.665410 0.166444 udp 10.0.2.104 54523 <-> 173.178.10.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:30.666954 0.156709 udp 10.0.2.104 54523 <-> 192.222.24.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:31.668256 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:32.425010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:55:32.665012 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:33.665231 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:34.664887 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:35.664418 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:36.667845 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:37.666840 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:39.660792 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:40.662540 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:41.662620 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:42.665825 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:43.665857 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:43.665902 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:55:44.666928 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:45.668833 1.995732 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:46.663704 0.140013 udp 10.0.2.104 54523 <-> 192.222.24.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:55:48.424167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:55:48.664351 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:49.664368 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:51.667056 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:52.658659 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:53.660067 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:54.666025 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:55.666008 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:56.666055 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:57.667748 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:58.667107 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:59.658620 0.000072 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:55:59.658692 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:56:00.660165 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:01.661635 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:02.662845 0.000000 udp 10.0.2.104 54523 -> 24.133.174.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:03.323940 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:56:03.664452 0.083159 udp 10.0.2.104 54523 <-> 145.236.151.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:04.665909 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:05.667067 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:06.658437 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:07.660051 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:08.661332 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:10.664597 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:10.664663 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:56:11.665312 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:12.667204 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:13.660698 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:14.660107 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:15.664206 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:16.663940 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:17.664394 0.000000 udp 10.0.2.104 54523 -> 208.104.198.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:18.666208 0.000000 udp 10.0.2.104 54523 -> 24.133.174.218 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:19.667232 0.151617 udp 10.0.2.104 54523 <-> 176.215.172.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:20.428493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:56:20.658741 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:21.660234 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:22.661824 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:23.663197 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:24.664703 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:25.665407 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:26.667056 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:27.658926 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:28.660466 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:29.661229 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:30.663199 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:31.664532 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:31.664584 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:56:33.667806 0.123378 udp 10.0.2.104 54523 <-> 208.104.198.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:34.659046 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:35.660315 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:36.661463 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:37.663228 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:38.664614 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:39.666151 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:40.667784 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:41.659039 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:42.660367 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:43.661709 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:43.661755 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:56:45.664797 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:46.666031 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:47.667924 1.447348 udp 10.0.2.104 54523 <-> 68.48.58.156 16464 CON 0 0 5 1106 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:49.660662 0.153076 udp 10.0.2.104 54523 <-> 176.215.172.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:50.321396 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:56:50.661515 0.395769 udp 10.0.2.104 54523 <-> 65.8.167.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:51.663116 0.204954 udp 10.0.2.104 54523 <-> 96.59.16.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:52.664685 0.000000 udp 10.0.2.104 54523 -> 108.132.235.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:56:53.666363 0.395751 udp 10.0.2.104 54523 <-> 27.3.191.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:54.667279 0.757266 udp 10.0.2.104 54523 <-> 117.222.76.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:55.659647 0.158879 udp 10.0.2.104 54523 <-> 66.56.172.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:56.660448 0.201825 udp 10.0.2.104 54523 <-> 97.76.164.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:57.662010 0.485242 udp 10.0.2.104 54523 <-> 177.29.103.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:58.663515 0.214016 udp 10.0.2.104 54523 <-> 201.242.77.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:56:59.664933 0.000000 udp 10.0.2.104 54523 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:00.666207 0.142181 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:01.667955 0.080435 udp 10.0.2.104 54523 <-> 176.194.213.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:02.659259 0.189873 udp 10.0.2.104 54523 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:03.660515 0.175598 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:04.661958 0.140783 udp 10.0.2.104 54523 <-> 24.188.50.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:05.663442 0.000000 udp 10.0.2.104 54523 -> 198.100.62.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:06.664807 0.127763 udp 10.0.2.104 54523 <-> 87.111.41.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:07.666334 0.070039 udp 10.0.2.104 54523 <-> 212.225.185.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:08.668051 0.300961 udp 10.0.2.104 54523 <-> 217.16.129.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:09.659295 0.187077 udp 10.0.2.104 54523 <-> 76.30.191.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:10.660818 0.087742 udp 10.0.2.104 54523 <-> 37.250.203.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:11.662138 0.179315 udp 10.0.2.104 54523 <-> 208.104.198.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:12.663739 3.003899 udp 10.0.2.104 54523 -> 122.106.43.205 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:13.664898 0.000000 udp 10.0.2.104 54523 -> 116.212.219.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:14.666603 0.072512 udp 10.0.2.104 54523 <-> 84.120.122.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:16.659266 0.045517 udp 10.0.2.104 54523 <-> 109.251.242.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:17.660794 0.271290 udp 10.0.2.104 54523 <-> 189.5.220.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:18.662244 0.343588 udp 10.0.2.104 54523 <-> 14.53.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:19.663336 0.286825 udp 10.0.2.104 54523 <-> 190.191.188.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:19.721544 0.000000 udp 10.0.2.104 54523 <- 122.106.43.205 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:20.664807 0.398333 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:21.666510 0.067004 udp 10.0.2.104 54523 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:22.668530 0.078290 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:23.659227 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:24.660881 0.226860 udp 10.0.2.104 54523 <-> 181.54.23.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:25.662327 0.162944 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:27.665054 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:28.666625 0.000000 udp 10.0.2.104 54523 -> 74.135.11.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:29.668301 0.169522 udp 10.0.2.104 54523 <-> 178.127.191.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:30.659615 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:31.661132 0.631447 udp 10.0.2.104 54523 <-> 186.191.21.3 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:32.662412 0.328196 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:33.663230 0.676589 udp 10.0.2.104 54523 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:34.665101 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:35.666547 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:37.319009 0.000135 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:57:37.659647 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:38.819346 0.222551 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:39.812799 0.000000 udp 10.0.2.104 54523 -> 186.191.21.3 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:40.807316 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:41.798934 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:42.790059 0.095116 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:43.785050 0.109243 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:45.763839 0.000000 udp 10.0.2.104 54523 -> 85.71.95.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:46.774725 0.040146 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:47.767418 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:48.759731 0.290334 udp 10.0.2.104 54523 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:49.752194 0.000000 udp 10.0.2.104 54523 -> 5.52.194.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:50.747161 0.260583 udp 10.0.2.104 54523 <-> 178.127.191.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:51.850500 0.000000 udp 10.0.2.104 54523 -> 186.191.21.3 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:52.842731 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:53.837946 2.325922 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:54.829199 0.000000 udp 10.0.2.104 54523 -> 85.71.95.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:56.809433 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:57.803172 0.090781 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:57:58.786942 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:57:59.779601 0.225647 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:00.771856 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:01.762897 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:03.743433 0.040885 udp 10.0.2.104 54523 <-> 213.231.137.6 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:04.737285 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:05.720074 0.340322 udp 10.0.2.104 54523 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:06.712397 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:07.704621 3.044384 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:08.695605 0.000000 udp 10.0.2.104 54523 -> 186.191.21.3 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:09.687071 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:11.671579 0.000000 udp 10.0.2.104 54523 -> 85.71.95.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:12.659934 0.900037 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:14.304560 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:15.293661 0.090511 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:16.281845 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:17.269456 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:18.255806 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:19.248483 0.000067 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:19.248550 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:58:20.140989 0.000000 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:21.220044 0.000000 udp 10.0.2.104 54523 -> 190.94.221.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:22.209325 0.120495 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:23.197663 0.331394 udp 10.0.2.104 54523 -> 5.52.194.47 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:23.529057 0.000000 icmp 5.52.194.47 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 07:58:24.184542 0.049933 udp 10.0.2.104 54523 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:25.171071 1.342527 udp 10.0.2.104 54523 <-> 186.191.21.3 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:25.815886 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:58:26.153332 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:27.144365 0.475399 udp 10.0.2.104 54523 <-> 181.166.176.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:28.136272 0.163885 udp 10.0.2.104 54523 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:29.125409 0.158483 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:30.113890 0.000000 udp 10.0.2.104 54523 -> 84.228.222.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:31.102316 0.156852 udp 10.0.2.104 54523 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:32.088550 0.000000 udp 10.0.2.104 54523 -> 197.7.118.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:33.070265 0.000000 udp 10.0.2.104 54523 -> 69.204.108.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:34.061872 0.000000 udp 10.0.2.104 54523 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:35.052085 0.042259 udp 10.0.2.104 54523 <-> 62.31.245.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:36.041137 0.229468 udp 10.0.2.104 54523 <-> 189.197.164.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:37.029525 0.037120 udp 10.0.2.104 54523 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:38.016758 0.577660 udp 10.0.2.104 54523 <-> 111.248.57.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:39.003299 0.000000 udp 10.0.2.104 54523 -> 97.71.95.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:39.985167 0.265128 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:40.975924 1.352879 udp 10.0.2.104 54523 <-> 187.41.64.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:41.966125 0.133884 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:42.954938 0.180844 udp 10.0.2.104 54523 <-> 103.250.144.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:43.945176 0.051988 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:44.932366 0.124840 udp 10.0.2.104 54523 <-> 74.196.59.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:45.919480 0.061666 udp 10.0.2.104 54523 <-> 86.127.19.147 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:46.902629 0.294267 udp 10.0.2.104 54523 <-> 117.207.63.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:47.893504 0.173191 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:48.883880 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:49.874025 0.000000 udp 10.0.2.104 54523 -> 188.2.254.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:50.862035 0.034837 udp 10.0.2.104 54523 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:51.849033 0.000000 udp 10.0.2.104 54523 -> 27.2.158.196 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:52.835186 0.034814 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:53.817054 0.000000 udp 10.0.2.104 54523 -> 72.231.199.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:58:54.808015 0.752785 udp 10.0.2.104 54523 <-> 186.66.29.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:55.797861 0.176377 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:56.787010 0.161706 udp 10.0.2.104 54523 <-> 67.248.200.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:57.775401 0.121584 udp 10.0.2.104 54523 <-> 205.237.49.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:58.762502 0.294136 udp 10.0.2.104 54523 <-> 186.218.187.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:58:59.748588 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:00.730370 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:01.721371 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:02.711151 4.947800 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:03.701870 4.958690 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:04.689764 0.046601 udp 10.0.2.104 54523 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:05.676565 0.000000 udp 10.0.2.104 54523 -> 67.197.173.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:06.667453 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:09.661719 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:10.663159 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:11.664580 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:12.325790 0.000035 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:59:12.666295 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:13.667213 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:14.658906 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:16.661469 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:17.662872 0.558469 udp 10.0.2.104 54523 <-> 113.193.117.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:18.664836 0.038238 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:19.666072 0.155662 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:20.667137 0.048274 udp 10.0.2.104 54523 <-> 5.14.128.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:21.659058 0.126346 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:22.660648 0.068622 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:23.662097 0.267125 udp 10.0.2.104 54523 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:24.662906 0.692570 udp 10.0.2.104 54523 <-> 91.82.212.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:25.664598 0.000000 udp 10.0.2.104 54523 -> 79.118.137.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:26.666470 0.166880 udp 10.0.2.104 54523 <-> 75.133.46.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:27.667048 0.325631 udp 10.0.2.104 54523 <-> 211.105.97.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:28.659329 0.252014 udp 10.0.2.104 54523 <-> 181.54.23.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:29.660436 0.070801 udp 10.0.2.104 54523 <-> 85.84.216.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:30.662114 0.606939 udp 10.0.2.104 54523 <-> 186.18.157.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:31.662801 0.081655 udp 10.0.2.104 54523 <-> 79.118.138.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:32.664701 0.060269 udp 10.0.2.104 54523 <-> 89.46.221.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:33.666210 0.251656 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:34.667235 2.157900 udp 10.0.2.104 54523 <-> 66.31.49.90 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:35.659206 0.070641 udp 10.0.2.104 54523 <-> 213.66.160.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:37.662049 0.038545 udp 10.0.2.104 54523 <-> 5.15.99.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:38.663231 0.059106 udp 10.0.2.104 54523 <-> 78.157.7.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:39.665136 0.224659 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:40.666401 0.041263 udp 10.0.2.104 54523 <-> 89.215.64.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:41.667393 3.995946 udp 10.0.2.104 54523 -> 91.82.212.224 16464 REQ 0 0 3 174 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 07:59:42.659194 0.139830 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:44.661846 0.016809 udp 10.0.2.104 54523 <-> 89.173.235.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:46.665184 0.043225 udp 10.0.2.104 54523 <-> 94.156.86.154 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:47.666667 3.052403 udp 10.0.2.104 54523 <-> 79.113.115.84 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:48.667411 0.039448 udp 10.0.2.104 54523 <-> 5.15.99.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:49.659323 0.049780 udp 10.0.2.104 54523 <-> 78.157.7.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:51.662252 0.211712 udp 10.0.2.104 54523 <-> 186.92.232.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:52.663781 0.426414 udp 10.0.2.104 54523 <-> 190.206.219.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:53.664969 0.047922 udp 10.0.2.104 54523 <-> 212.83.78.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:54.666648 0.180695 udp 10.0.2.104 54523 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:55.668197 0.287261 udp 10.0.2.104 54523 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:56.659381 0.039932 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:57.660680 0.148869 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:58.662356 0.230607 udp 10.0.2.104 54523 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 07:59:59.323210 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:59:59.663880 0.293896 udp 10.0.2.104 54523 <-> 201.210.93.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:00.664987 0.000000 udp 10.0.2.104 54523 -> 178.148.154.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:00:01.666036 1.325959 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:02.668072 0.206336 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:03.659779 0.000000 udp 10.0.2.104 54523 -> 187.176.73.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:00:04.660874 0.000000 udp 10.0.2.104 54523 -> 115.241.13.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:00:05.662521 0.060335 udp 10.0.2.104 54523 <-> 178.167.99.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:06.663874 0.000000 udp 10.0.2.104 54523 -> 79.119.175.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:00:07.664670 0.067167 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:08.666681 0.158977 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:09.668239 0.053631 udp 10.0.2.104 54523 <-> 176.14.143.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:10.660155 0.000000 udp 10.0.2.104 54523 -> 187.176.73.39 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:00:11.660977 0.053318 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:12.662650 0.000000 udp 10.0.2.104 54523 -> 50.143.3.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:00:13.668429 0.700587 udp 10.0.2.104 54523 <-> 178.148.154.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:14.667213 0.199075 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:15.667017 4.350481 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:16.668213 0.042247 udp 10.0.2.104 54523 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:17.659375 0.031558 udp 10.0.2.104 54523 <-> 77.56.229.60 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:18.660796 0.418651 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:20.664143 0.073523 udp 10.0.2.104 54523 <-> 78.52.41.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:21.665478 0.056252 udp 10.0.2.104 54523 <-> 217.174.48.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:22.667044 0.237968 udp 10.0.2.104 54523 <-> 75.119.124.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:23.668102 0.000000 udp 10.0.2.104 54523 -> 79.11.10.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:00:24.659451 0.220420 udp 10.0.2.104 54523 <-> 190.75.83.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:25.661007 0.486953 udp 10.0.2.104 54523 <-> 115.242.199.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:26.662591 0.054251 udp 10.0.2.104 54523 <-> 94.156.106.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:27.664104 0.193885 udp 10.0.2.104 54523 <-> 68.117.245.32 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:28.665205 2.040529 udp 10.0.2.104 54523 <-> 87.207.149.247 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:29.666723 0.142538 udp 10.0.2.104 54523 <-> 67.86.61.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:31.659423 0.367968 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:32.660933 3.341691 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:33.662606 1.164071 udp 10.0.2.104 54523 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:34.663937 0.039918 udp 10.0.2.104 54523 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:36.666898 0.158968 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:37.668223 0.173252 udp 10.0.2.104 54523 <-> 184.161.209.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:38.659991 0.187069 udp 10.0.2.104 54523 <-> 186.188.200.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:39.661049 0.065866 udp 10.0.2.104 54523 <-> 83.213.126.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:40.663965 0.411592 udp 10.0.2.104 54523 <-> 117.207.154.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:41.664107 0.104925 udp 10.0.2.104 54523 <-> 78.8.187.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:42.665515 0.075615 udp 10.0.2.104 54523 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:43.667020 0.075936 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:44.668431 0.024842 udp 10.0.2.104 54523 <-> 89.133.44.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:45.659849 0.000000 udp 10.0.2.104 54523 -> 37.214.58.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:00:46.320742 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:00:46.660916 0.141140 udp 10.0.2.104 54523 <-> 67.85.150.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:47.662521 0.072457 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:48.664421 0.354383 udp 10.0.2.104 54523 <-> 117.203.253.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:49.665533 0.182893 udp 10.0.2.104 54523 <-> 76.77.130.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:50.667085 3.029398 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:51.658655 0.037644 udp 10.0.2.104 54523 <-> 5.15.99.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:52.659875 0.065941 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:54.662547 1.415531 udp 10.0.2.104 54523 <-> 189.6.157.136 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:56.665431 4.332121 udp 10.0.2.104 54523 <-> 88.207.58.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:57.666985 0.149312 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:58.658811 0.207561 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:00:59.660141 0.153442 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:01.662663 0.046565 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:02.664083 0.060805 udp 10.0.2.104 54523 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:03.665887 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:04.667066 0.000000 udp 10.0.2.104 54523 -> 201.231.197.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:05.658702 0.000000 udp 10.0.2.104 54523 -> 86.211.187.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:06.660135 4.146391 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:07.661521 0.172857 udp 10.0.2.104 54523 <-> 92.249.152.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:08.662858 0.137819 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:11.667332 0.136005 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:12.658679 1.131581 udp 10.0.2.104 54523 <-> 186.18.157.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:13.659996 0.064532 udp 10.0.2.104 54523 <-> 83.213.126.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:14.661427 0.246445 udp 10.0.2.104 54523 <-> 201.164.238.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:15.662924 0.257518 udp 10.0.2.104 54523 <-> 117.207.154.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:16.664159 0.840083 udp 10.0.2.104 54523 <-> 116.202.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:17.665719 1.015863 udp 10.0.2.104 54523 <-> 190.74.80.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:18.667287 0.024310 udp 10.0.2.104 54523 <-> 46.223.226.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:19.658628 1.158837 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:21.661789 0.000000 udp 10.0.2.104 54523 -> 84.232.15.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:22.662821 0.166513 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:23.664206 0.044787 udp 10.0.2.104 54523 <-> 5.15.162.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:24.665516 0.196081 udp 10.0.2.104 54523 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:25.667827 0.178981 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:26.659052 0.026685 udp 10.0.2.104 54523 <-> 89.133.44.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:27.660189 4.339196 udp 10.0.2.104 54523 <-> 1.163.129.178 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:28.661273 0.109413 udp 10.0.2.104 54523 <-> 188.36.143.161 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:29.662904 0.257025 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:30.664589 0.324847 udp 10.0.2.104 54523 <-> 117.203.253.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:32.667676 0.321771 udp 10.0.2.104 54523 <-> 112.164.233.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:33.318213 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:01:33.658921 0.119711 udp 10.0.2.104 54523 <-> 216.246.254.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:34.660295 0.162319 udp 10.0.2.104 54523 <-> 24.249.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:35.661819 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:36.662935 0.107190 udp 10.0.2.104 54523 <-> 46.50.27.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:37.664557 0.081570 udp 10.0.2.104 54523 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:38.666095 1.992974 udp 10.0.2.104 54523 -> 188.161.194.107 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:39.667248 0.154211 udp 10.0.2.104 54523 <-> 98.102.219.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:41.660297 0.000000 udp 10.0.2.104 54523 -> 75.187.154.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:43.662953 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:44.664695 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:44.664764 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:01:45.666068 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:46.667543 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:47.658940 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:48.660478 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:49.663132 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:50.663398 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:51.664723 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:52.666126 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:53.667272 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:54.659066 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:55.660643 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:56.662169 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:57.663082 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:58.664662 4.162269 udp 10.0.2.104 54523 <-> 50.171.133.68 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:01:59.666219 0.000043 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:01:59.666262 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:02:00.667743 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:03.662116 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:04.663416 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:05.664910 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:06.666277 4.997212 udp 10.0.2.104 54523 <-> 50.171.133.68 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:02:07.667899 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:09.662275 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:10.663218 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:11.832595 0.000000 udp 10.0.2.104 54523 <- 50.171.133.68 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:13.426722 0.235969 udp 10.0.2.104 54523 <-> 190.37.93.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:02:14.403302 0.000000 udp 10.0.2.104 54523 -> 14.97.50.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:15.389143 0.000000 udp 10.0.2.104 54523 -> 109.98.105.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:16.370911 0.092172 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:02:17.361341 0.000000 udp 10.0.2.104 54523 -> 68.151.100.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:18.350904 0.000000 udp 10.0.2.104 54523 -> 61.90.69.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:19.339487 1.839208 udp 10.0.2.104 54523 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:02:29.082268 0.293889 udp 10.0.2.104 54523 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:02:29.720008 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:02:30.056955 0.315395 udp 10.0.2.104 54523 <-> 180.18.8.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:02:32.021042 0.148619 udp 10.0.2.104 54523 <-> 67.242.84.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:02:33.010131 0.049801 udp 10.0.2.104 54523 <-> 109.86.167.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:02:33.776170 0.983741 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 2 292 flow=Background 1970/01/01 08:02:34.001002 0.000000 udp 10.0.2.104 54523 -> 79.116.203.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:02:52.462017 0.000000 udp 10.0.2.104 54523 -> 190.107.103.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:13.155734 0.535613 udp 10.0.2.104 54523 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:13.920853 3.946673 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/01 08:03:14.138724 0.154384 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:15.113506 0.000000 udp 10.0.2.104 54523 <- 190.107.103.9 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:15.121961 0.302592 udp 10.0.2.104 54523 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:16.101036 0.000000 udp 10.0.2.104 54523 -> 115.253.32.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:17.089124 0.054826 udp 10.0.2.104 54523 <-> 78.88.193.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:18.075651 0.033944 udp 10.0.2.104 54523 <-> 188.254.163.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:19.061059 0.168158 udp 10.0.2.104 54523 <-> 97.106.144.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:20.045674 0.000000 udp 10.0.2.104 54523 -> 111.242.73.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:21.028839 0.000000 udp 10.0.2.104 54523 -> 195.67.142.227 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:22.018970 0.233013 udp 10.0.2.104 54523 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:22.998235 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:23.986189 0.019430 udp 10.0.2.104 54523 <-> 37.209.66.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:24.973051 0.180651 udp 10.0.2.104 54523 <-> 70.45.231.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:25.750697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:03:25.958672 0.000000 udp 10.0.2.104 54523 -> 75.110.50.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:26.943717 0.307272 udp 10.0.2.104 54523 <-> 123.254.16.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:27.926970 0.203432 udp 10.0.2.104 54523 <-> 190.38.83.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:28.917230 0.979301 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:30.886398 0.256231 udp 10.0.2.104 54523 <-> 187.20.177.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:31.873087 0.345513 udp 10.0.2.104 54523 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:32.858610 0.137059 udp 10.0.2.104 54523 <-> 68.199.57.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:33.843192 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:34.826360 0.191570 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:35.816696 0.000000 udp 10.0.2.104 54523 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:36.795962 0.091842 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:37.783337 0.063437 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:38.769435 2.952896 udp 10.0.2.104 54523 <-> 84.236.70.25 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:39.755154 0.064719 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:40.739151 4.112530 udp 10.0.2.104 54523 <-> 71.192.132.121 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:41.514310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:03:42.712257 4.332196 udp 10.0.2.104 54523 <-> 219.162.195.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:43.691311 3.261535 udp 10.0.2.104 54523 <-> 181.43.67.27 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:03:47.639091 0.000000 udp 10.0.2.104 54523 -> 72.230.110.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:54.304966 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:55.294800 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:56.273751 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:57.261781 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:58.247705 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:03:58.896583 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:03:59.233388 0.000000 udp 10.0.2.104 54523 -> 213.231.137.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:00.217635 0.000000 udp 10.0.2.104 54523 -> 71.192.132.121 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:01.200831 0.092302 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:02.194501 2.421169 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:03.173407 0.333339 udp 10.0.2.104 54523 <-> 181.54.23.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:05.146947 0.177422 udp 10.0.2.104 54523 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:06.132567 0.308460 udp 10.0.2.104 54523 <-> 175.198.68.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:07.116854 0.103367 udp 10.0.2.104 54523 <-> 151.25.203.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:08.099979 1.682131 udp 10.0.2.104 54523 <-> 46.5.112.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:09.090241 0.164312 udp 10.0.2.104 54523 <-> 142.217.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:10.069628 0.720709 udp 10.0.2.104 54523 <-> 117.204.62.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:11.056809 0.000000 udp 10.0.2.104 54523 -> 134.3.82.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:12.043336 0.176921 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:13.028634 0.244184 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:14.012920 0.000000 udp 10.0.2.104 54523 -> 79.118.137.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:14.996049 0.129784 udp 10.0.2.104 54523 <-> 151.41.213.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:15.976269 4.113389 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:16.967637 0.000000 udp 10.0.2.104 54523 -> 95.77.135.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:17.954587 0.292541 udp 10.0.2.104 54523 <-> 153.161.235.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:18.745649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 1 146 flow=Background 1970/01/01 08:04:18.943679 0.065663 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:20.913216 0.000000 udp 10.0.2.104 54523 -> 204.14.77.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:21.895421 0.593945 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:22.874743 0.155249 udp 10.0.2.104 54523 <-> 151.25.203.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:23.865843 0.078344 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:24.852806 0.090782 udp 10.0.2.104 54523 <-> 46.119.183.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:25.838939 0.161275 udp 10.0.2.104 54523 <-> 37.203.83.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:26.824263 0.342407 udp 10.0.2.104 54523 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:27.808366 0.052579 udp 10.0.2.104 54523 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:28.790599 0.000000 udp 10.0.2.104 54523 -> 36.86.156.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:33.805960 0.206113 udp 10.0.2.104 54523 <- 36.86.156.28 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:34.513094 0.289479 udp 10.0.2.104 54523 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:35.501190 0.229447 udp 10.0.2.104 54523 <-> 66.131.206.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:36.487793 0.779134 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:37.473389 0.158208 udp 10.0.2.104 54523 <-> 66.131.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:38.457413 0.049968 udp 10.0.2.104 54523 <-> 79.98.3.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:39.441071 0.211917 udp 10.0.2.104 54523 <-> 31.181.59.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:40.422951 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:41.402613 0.000106 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:41.402719 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:04:42.390149 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:43.375826 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:44.361813 0.000000 udp 10.0.2.104 54523 -> 124.176.236.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:45.345818 0.000000 udp 10.0.2.104 54523 -> 71.63.13.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:46.328821 0.035569 udp 10.0.2.104 54523 <-> 89.40.179.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:04:47.310373 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:48.289611 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:49.276611 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:49.927067 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:04:50.263547 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:51.249010 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:52.233618 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:53.216395 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:55.177257 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:56.164829 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:56.164874 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:04:57.151490 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:58.137447 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:04:59.121190 0.000000 udp 10.0.2.104 54523 -> 84.54.174.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:00.103886 0.000000 udp 10.0.2.104 54523 -> 202.29.178.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:01.085722 0.114716 udp 10.0.2.104 54523 <-> 31.181.59.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:02.064425 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:03.051332 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:04.037590 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:07.242735 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:08.226676 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:09.209745 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:10.191346 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:11.170266 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:12.157417 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:13.145335 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:14.130371 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:15.114668 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:16.097432 0.286771 udp 10.0.2.104 54523 <-> 181.166.240.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:17.079102 0.000000 udp 10.0.2.104 54523 -> 84.54.174.109 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:18.057914 0.114186 udp 10.0.2.104 54523 <-> 31.181.59.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:19.046211 0.140640 udp 10.0.2.104 54523 <-> 69.161.78.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:20.034099 0.043965 udp 10.0.2.104 54523 <-> 109.251.72.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:21.019911 0.049556 udp 10.0.2.104 54523 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:22.003680 1.141957 udp 10.0.2.104 54523 <-> 67.167.82.92 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:23.968586 0.120700 udp 10.0.2.104 54523 <-> 24.122.115.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:24.947313 0.166680 udp 10.0.2.104 54523 <-> 98.251.239.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:25.934629 0.159764 udp 10.0.2.104 54523 <-> 66.131.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:26.920834 0.000000 udp 10.0.2.104 54523 -> 116.193.131.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:27.905886 0.000000 udp 10.0.2.104 54523 -> 82.127.146.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:28.889779 0.130349 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:29.872204 0.000000 udp 10.0.2.104 54523 -> 201.74.112.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:30.852800 0.043509 udp 10.0.2.104 54523 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:31.831525 0.166350 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:32.819144 0.160451 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:33.805463 0.000000 udp 10.0.2.104 54523 -> 187.247.181.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:34.790451 0.195902 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:35.778964 0.123408 udp 10.0.2.104 54523 <-> 78.204.132.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:36.762137 1.611896 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:39.177153 1.068112 udp 10.0.2.104 54523 <-> 190.195.127.58 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:39.819127 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:05:40.155697 1.636492 arp 10.0.2.104 who 169.254.166.47 INT 3 126 flow=Background-ARP 1970/01/01 08:05:41.142735 0.162741 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:42.129028 0.047649 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:43.113895 0.403211 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:44.098998 0.375447 udp 10.0.2.104 54523 <-> 179.208.248.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:45.084621 0.327759 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:46.068368 4.737282 udp 10.0.2.104 54523 <-> 116.68.100.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:47.046861 0.030855 udp 10.0.2.104 54523 <-> 81.226.88.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:48.033866 0.044119 udp 10.0.2.104 54523 <-> 178.148.27.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:49.019898 0.179958 udp 10.0.2.104 54523 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:50.003164 0.785291 udp 10.0.2.104 54523 <-> 190.204.42.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:50.986707 0.118396 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:51.969286 0.633908 udp 10.0.2.104 54523 <-> 218.164.207.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:52.950336 0.159153 udp 10.0.2.104 54523 <-> 66.229.143.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:53.928689 0.254130 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:54.915977 0.000000 udp 10.0.2.104 54523 -> 2.192.123.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:55.901802 0.461696 udp 10.0.2.104 54523 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:05:56.886761 0.000000 udp 10.0.2.104 54523 -> 177.42.170.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:57.873154 0.000000 udp 10.0.2.104 54523 -> 41.211.70.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:58.855599 1.961013 udp 10.0.2.104 54523 -> 98.198.65.0 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:05:59.837239 0.066044 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:01.803783 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:02.789622 0.154782 udp 10.0.2.104 54523 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:03.773993 4.105375 udp 10.0.2.104 54523 <-> 78.90.230.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:06.855346 0.000000 udp 10.0.2.104 54523 -> 14.96.232.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:08.845258 0.000000 udp 10.0.2.104 54523 -> 223.225.141.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:09.830088 0.000000 udp 10.0.2.104 54523 -> 194.65.226.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:10.824307 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:11.817731 0.158947 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:12.810575 0.237543 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:13.802811 0.991088 udp 10.0.2.104 54523 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:14.794220 0.000000 udp 10.0.2.104 54523 -> 223.225.141.43 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:15.789200 0.416997 udp 10.0.2.104 54523 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:16.862698 0.159938 udp 10.0.2.104 54523 <-> 12.39.137.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:17.856142 0.227498 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:18.849391 1.315381 udp 10.0.2.104 54523 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:19.843018 0.175798 udp 10.0.2.104 54523 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:20.836474 0.207586 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:21.886361 0.356605 udp 10.0.2.104 54523 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:22.881649 0.165110 udp 10.0.2.104 54523 <-> 207.134.187.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:23.866074 0.158776 udp 10.0.2.104 54523 <-> 97.106.144.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:24.859763 0.890964 udp 10.0.2.104 54523 <-> 72.199.208.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:25.853041 0.121327 udp 10.0.2.104 54523 <-> 24.54.59.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:26.846396 0.054499 udp 10.0.2.104 54523 <-> 94.240.167.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:27.846065 0.677441 udp 10.0.2.104 54523 <-> 72.198.68.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:28.499034 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:06:28.837484 0.315172 udp 10.0.2.104 54523 <-> 59.0.192.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:29.832155 0.138518 udp 10.0.2.104 54523 <-> 98.121.91.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:30.817823 0.162347 udp 10.0.2.104 54523 <-> 98.100.135.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:31.814309 0.306347 udp 10.0.2.104 54523 <-> 201.213.14.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:32.807385 0.375486 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:33.800045 0.047419 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:34.792918 2.051785 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:35.784071 0.311417 udp 10.0.2.104 54523 <-> 117.221.0.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:37.767671 0.000000 udp 10.0.2.104 54523 -> 179.109.142.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:38.761353 0.158711 udp 10.0.2.104 54523 <-> 24.201.162.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:39.760044 0.119943 udp 10.0.2.104 54523 <-> 216.246.254.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:40.764219 0.000000 udp 10.0.2.104 54523 -> 89.46.22.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:41.764338 1.973020 udp 10.0.2.104 54523 <-> 1.64.200.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:44.353055 0.000000 udp 10.0.2.104 54523 -> 166.159.168.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:45.347689 0.000000 udp 10.0.2.104 54523 -> 68.99.93.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:46.329074 0.000000 udp 10.0.2.104 54523 -> 64.18.99.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:47.319397 0.148190 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:48.308597 0.368280 udp 10.0.2.104 54523 <-> 1.64.200.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:49.297215 1.147751 udp 10.0.2.104 54523 <-> 50.178.6.175 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:51.271398 0.304508 udp 10.0.2.104 54523 <-> 117.221.0.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:52.263741 1.062244 udp 10.0.2.104 54523 <-> 190.193.62.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:53.245231 0.000000 udp 10.0.2.104 54523 -> 176.215.215.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:54.236636 0.165258 udp 10.0.2.104 54523 <-> 71.229.124.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:55.225986 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:06:56.218249 0.369713 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:57.205700 0.036583 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:06:58.192689 1.051535 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:01.158525 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:02.147587 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:02.147643 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:07:03.135615 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:04.123152 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:05.109505 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:06.091705 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:07.082591 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:08.072659 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:09.061884 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:10.050008 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:11.037546 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:12.023826 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:13.005776 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:13.997015 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:17.428768 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:18.416485 0.241034 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:19.065794 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:07:19.403025 0.181647 udp 10.0.2.104 54523 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:20.388130 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:21.372345 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:22.353204 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:23.343358 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:24.333483 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:25.321154 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:26.307743 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:27.293087 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:27.293149 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:07:28.277001 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:29.257697 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:30.247201 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:31.235656 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:32.223198 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:33.209355 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:34.194585 0.000000 udp 10.0.2.104 54523 -> 201.211.111.236 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:35.178642 0.139684 udp 10.0.2.104 54523 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:36.159232 0.000000 udp 10.0.2.104 54523 -> 190.73.237.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:37.152914 0.184411 udp 10.0.2.104 54523 <-> 106.51.31.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:38.142815 0.146914 udp 10.0.2.104 54523 <-> 178.122.80.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:39.131859 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:40.118120 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:41.103298 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:42.087257 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:43.068924 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:44.058342 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:45.046580 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:46.034687 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:47.020842 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:51.980402 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:52.960860 0.059762 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:53.950234 0.000000 udp 10.0.2.104 54523 -> 31.147.129.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:54.938732 0.377432 udp 10.0.2.104 54523 <-> 61.192.59.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:55.926035 0.364025 udp 10.0.2.104 54523 <-> 61.223.150.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:56.912515 0.086544 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:57.897501 0.289614 udp 10.0.2.104 54523 <-> 58.177.117.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:58.594122 0.012593 udp 10.0.2.104 54581 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 08:07:58.607044 0.000000 udp 10.0.2.104 54582 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:07:58.881527 0.215348 udp 10.0.2.104 54523 <-> 189.193.101.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:07:59.862138 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:00.851621 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:01.839945 0.054430 udp 10.0.2.104 54523 <-> 213.193.25.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:02.827051 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:03.815785 0.030450 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:04.802691 0.000000 udp 10.0.2.104 54523 -> 46.191.214.12 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:05.786950 0.134370 udp 10.0.2.104 54523 <-> 173.80.7.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:06.767734 0.229960 udp 10.0.2.104 54523 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:07.757115 0.000000 udp 10.0.2.104 54523 -> 106.66.111.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:08.408452 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:08:08.745769 0.536615 udp 10.0.2.104 54523 <-> 190.74.65.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:09.732809 0.053244 udp 10.0.2.104 54523 <-> 46.107.35.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:10.718644 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:11.703858 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:12.687771 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:13.668106 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:14.657461 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:15.645547 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:16.632673 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:17.619179 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:18.604194 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:19.588418 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:21.556742 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:23.746252 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:24.733376 0.179144 udp 10.0.2.104 54523 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:25.719184 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:26.704248 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:27.688406 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:28.668702 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:29.658196 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:30.646549 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:31.633813 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:32.619878 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:33.611145 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:34.595010 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:35.575147 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:36.564651 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:37.552817 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:38.539934 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:39.526052 0.000053 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:39.526105 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:08:40.510812 0.000000 udp 10.0.2.104 54523 -> 106.66.111.50 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:41.494742 1.025277 udp 10.0.2.104 54523 <-> 188.44.5.83 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:43.464122 0.156008 udp 10.0.2.104 54523 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:44.452362 0.438192 udp 10.0.2.104 54523 <-> 74.60.180.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:45.439879 0.061089 udp 10.0.2.104 54523 <-> 89.32.157.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:46.426289 0.020010 udp 10.0.2.104 54523 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:47.411040 0.158783 udp 10.0.2.104 54523 <-> 71.200.230.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:48.395587 0.096073 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:49.375433 0.000000 udp 10.0.2.104 54523 -> 178.167.99.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:50.364587 1.835809 udp 10.0.2.104 54523 <-> 173.197.240.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:51.352845 0.000000 udp 10.0.2.104 54523 -> 78.134.0.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:52.341500 0.417041 udp 10.0.2.104 54523 <-> 74.142.131.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:56.881300 0.143539 udp 10.0.2.104 54523 <-> 24.159.3.63 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:57.856354 0.000000 udp 10.0.2.104 54523 -> 158.58.248.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:08:58.848796 0.454806 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:08:59.492325 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:08:59.829297 0.352849 udp 10.0.2.104 54523 <-> 118.141.242.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:00.817994 0.145931 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:01.805924 2.296415 udp 10.0.2.104 54523 <-> 123.225.58.143 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:02.792962 0.155425 udp 10.0.2.104 54523 <-> 87.18.54.195 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:04.768323 3.294431 udp 10.0.2.104 54523 <-> 181.226.152.52 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:05.758682 0.076159 udp 10.0.2.104 54523 <-> 93.180.97.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:06.740286 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:08.717319 0.000000 udp 10.0.2.104 54523 -> 76.72.33.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:09.704075 0.092502 udp 10.0.2.104 54523 <-> 62.87.225.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:10.688725 0.559331 udp 10.0.2.104 54523 <-> 172.162.41.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:11.674029 0.107517 udp 10.0.2.104 54523 <-> 95.252.168.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:12.664728 0.159527 udp 10.0.2.104 54523 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:13.644933 0.000000 udp 10.0.2.104 54523 -> 75.50.92.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:14.633913 0.042345 udp 10.0.2.104 54523 <-> 79.117.19.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:15.622046 0.176703 udp 10.0.2.104 54523 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:16.608795 0.000000 udp 10.0.2.104 54523 -> 190.174.242.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:17.594286 0.065548 udp 10.0.2.104 54523 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:18.579829 0.662713 udp 10.0.2.104 54523 <-> 96.44.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:19.571087 0.046574 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:20.550910 0.000000 udp 10.0.2.104 54523 -> 5.15.99.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:21.541670 0.200279 udp 10.0.2.104 54523 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:22.529508 0.355710 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:23.516060 0.528101 udp 10.0.2.104 54523 <-> 189.47.44.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:24.505898 0.313828 udp 10.0.2.104 54523 <-> 121.152.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:25.490727 0.276172 udp 10.0.2.104 54523 <-> 201.209.227.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:26.483110 0.156816 udp 10.0.2.104 54523 <-> 96.59.16.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:27.462898 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:29.506171 0.028290 udp 10.0.2.104 54523 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:30.498923 0.030600 udp 10.0.2.104 54523 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:31.485554 0.132120 udp 10.0.2.104 54523 <-> 188.17.160.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:32.471351 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:33.455840 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:34.446627 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:35.426933 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:36.415377 0.000000 udp 10.0.2.104 54523 -> 61.114.37.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:37.403088 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:38.389681 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:39.378340 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:40.362888 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:41.343219 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:42.334013 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:43.323696 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:43.323748 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:09:45.299297 0.126351 udp 10.0.2.104 54523 <-> 95.252.168.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:46.284511 1.176956 udp 10.0.2.104 54523 <-> 61.114.37.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:46.935702 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:09:47.272832 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:48.254952 0.220040 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:49.244722 0.066301 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:50.233438 0.308349 udp 10.0.2.104 54523 <-> 189.47.29.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:51.224013 0.294797 udp 10.0.2.104 54523 <-> 211.7.6.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:52.211066 0.162405 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:53.198151 0.331965 udp 10.0.2.104 54523 <-> 121.133.29.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:54.182529 0.000000 udp 10.0.2.104 54523 -> 14.97.50.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:55.163959 0.052599 udp 10.0.2.104 54523 <-> 83.157.35.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:56.153341 0.000000 udp 10.0.2.104 54523 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:09:57.142160 2.963239 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:09:58.759532 0.170741 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:00.730825 0.031724 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:01.715182 0.047178 udp 10.0.2.104 54523 <-> 78.60.103.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:02.695997 0.155186 udp 10.0.2.104 54523 <-> 24.112.203.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:03.686156 0.195408 udp 10.0.2.104 54523 <-> 115.69.242.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:04.674907 0.318322 udp 10.0.2.104 54523 <-> 181.72.94.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:05.662509 0.000000 udp 10.0.2.104 54523 -> 79.119.37.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:10:06.648458 0.000000 udp 10.0.2.104 54523 -> 188.25.55.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:10:07.633222 0.137034 udp 10.0.2.104 54523 <-> 80.25.215.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:08.617654 0.323118 udp 10.0.2.104 54523 <-> 211.36.185.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:09.598770 0.121486 udp 10.0.2.104 54523 <-> 206.253.172.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:10.588349 0.176620 udp 10.0.2.104 54523 <-> 2.180.103.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:11.576777 0.650191 udp 10.0.2.104 54523 <-> 60.250.101.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:12.563993 0.000000 udp 10.0.2.104 54523 -> 189.55.190.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:10:13.550419 0.031880 udp 10.0.2.104 54523 <-> 158.58.245.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:14.537804 0.313499 udp 10.0.2.104 54523 <-> 175.210.26.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:15.522070 0.000000 udp 10.0.2.104 54523 -> 184.162.65.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:10:16.502717 1.021095 udp 10.0.2.104 54523 <-> 86.101.158.104 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:18.482211 0.154932 udp 10.0.2.104 54523 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:19.469081 0.165949 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:20.455417 0.243895 udp 10.0.2.104 54523 <-> 190.201.175.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:21.441024 4.086593 udp 10.0.2.104 54523 <-> 24.201.226.137 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:22.425060 0.530871 udp 10.0.2.104 54523 <-> 92.229.49.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:23.408938 0.975124 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:24.398749 3.178487 udp 10.0.2.104 54523 <-> 172.190.102.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:26.374721 0.369345 udp 10.0.2.104 54523 <-> 114.39.237.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:28.345887 0.033916 udp 10.0.2.104 54523 <-> 188.254.174.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:29.330451 0.143062 udp 10.0.2.104 54523 <-> 184.56.26.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:30.311013 0.000000 udp 10.0.2.104 54523 -> 118.166.56.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:10:31.300495 1.932418 udp 10.0.2.104 54523 <-> 123.241.118.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:32.289055 0.090716 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:36.509723 0.163934 udp 10.0.2.104 54523 <-> 37.14.140.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:37.151973 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:10:37.489093 1.046244 udp 10.0.2.104 54523 <-> 99.126.92.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:38.474337 0.561401 udp 10.0.2.104 54523 <-> 74.162.87.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:39.458206 0.171097 udp 10.0.2.104 54523 <-> 173.17.3.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:40.438701 0.303573 udp 10.0.2.104 54523 <-> 187.39.118.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:41.428293 0.476829 udp 10.0.2.104 54523 <-> 117.201.22.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:42.416567 0.383196 udp 10.0.2.104 54523 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:43.404887 0.038149 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:44.390697 0.160969 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:45.180475 2.961316 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:10:45.376035 0.303141 udp 10.0.2.104 54523 <-> 183.83.67.109 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:46.360006 0.200186 udp 10.0.2.104 54523 <-> 186.93.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:47.340550 0.000000 udp 10.0.2.104 54523 -> 74.135.11.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:10:48.329954 0.207429 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:49.319602 0.124429 udp 10.0.2.104 54523 <-> 79.51.155.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:50.306797 0.217769 udp 10.0.2.104 54523 <-> 50.68.79.194 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:51.293072 0.203148 udp 10.0.2.104 54523 <-> 72.175.42.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:52.089781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:10:52.278071 0.336957 udp 10.0.2.104 54523 <-> 219.71.227.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:53.262209 0.202181 udp 10.0.2.104 54523 <-> 69.5.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:54.242543 0.171517 udp 10.0.2.104 54523 <-> 97.66.100.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:55.231928 0.360811 udp 10.0.2.104 54523 <-> 186.88.103.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:56.220124 0.000000 udp 10.0.2.104 54523 -> 61.231.38.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:10:57.207300 0.000000 udp 10.0.2.104 54523 -> 99.196.156.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:10:58.193488 0.159968 udp 10.0.2.104 54523 <-> 68.63.7.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:59.178364 0.359605 udp 10.0.2.104 54523 <-> 180.218.89.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:10:59.974136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:11:00.162622 0.016220 udp 10.0.2.104 54523 <-> 89.103.132.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:01.143124 0.158218 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:02.132767 0.215046 udp 10.0.2.104 54523 <-> 67.164.82.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:03.120851 0.158478 udp 10.0.2.104 54523 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:04.108267 0.051004 udp 10.0.2.104 54523 <-> 79.112.193.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:05.094417 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:06.079456 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:07.063591 2.010672 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:09.038555 0.000000 udp 10.0.2.104 54523 <- 99.196.156.159 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:10.008798 0.000000 udp 10.0.2.104 54523 -> 187.2.67.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:10.997944 0.389344 udp 10.0.2.104 54523 <-> 190.179.130.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:11.986085 0.347969 udp 10.0.2.104 54523 <-> 115.185.69.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:12.973177 1.796312 udp 10.0.2.104 54523 <-> 78.52.9.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:13.961494 0.575180 udp 10.0.2.104 54523 <-> 27.59.215.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:14.947981 0.291222 udp 10.0.2.104 54523 <-> 123.0.101.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:15.931851 0.000000 udp 10.0.2.104 54523 -> 187.25.181.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:16.914939 0.220844 udp 10.0.2.104 54523 <-> 186.89.100.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:17.725726 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:11:17.904155 0.057600 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:18.892446 1.403219 udp 10.0.2.104 54523 <-> 69.55.205.73 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:20.865513 0.000000 udp 10.0.2.104 54523 -> 69.63.46.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:21.850270 0.000000 udp 10.0.2.104 54523 -> 115.241.171.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:22.833982 0.147460 udp 10.0.2.104 54523 <-> 98.102.132.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:23.814899 0.145483 udp 10.0.2.104 54523 <-> 69.119.241.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:24.804133 0.209548 udp 10.0.2.104 54523 <-> 72.175.42.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:25.455225 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:11:25.792374 0.107219 udp 10.0.2.104 54523 <-> 85.49.83.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:26.778911 0.899463 udp 10.0.2.104 54523 <-> 91.240.43.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:27.764929 0.032189 udp 10.0.2.104 54523 <-> 77.21.231.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:28.753786 0.508338 udp 10.0.2.104 54523 <-> 189.105.169.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:29.737349 0.396211 udp 10.0.2.104 54523 <-> 58.11.136.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:30.717508 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:31.706527 0.000053 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:31.706580 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:11:32.694873 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:33.681754 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:34.667636 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:35.652333 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:36.643841 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:37.624255 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:38.613482 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:39.601733 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:41.682443 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:42.668060 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:43.652771 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:44.643739 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:45.623853 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:46.612824 0.065677 udp 10.0.2.104 54523 <-> 46.107.35.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:48.587567 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:49.573402 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:50.379233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:11:50.557669 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:51.548662 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:52.528843 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:52.528890 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:11:53.516943 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:54.504709 0.000000 udp 10.0.2.104 54523 -> 173.217.127.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:55.491801 0.290767 udp 10.0.2.104 54523 <-> 58.11.136.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:56.477482 0.168710 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:11:57.462044 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:58.453218 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:11:59.433178 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:00.422175 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:01.411616 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:02.398620 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:03.385109 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:04.369672 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:05.360733 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:06.340795 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:07.329706 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:08.317689 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:09.304460 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:10.289927 0.000000 udp 10.0.2.104 54523 -> 173.217.127.34 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:11.274106 1.253260 udp 10.0.2.104 54523 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:12:13.350133 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:13.992744 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:12:14.329832 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:15.318728 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:16.306003 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:17.292703 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:18.278332 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:19.263231 4.933779 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:20.244080 4.938279 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:21.233940 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:22.222687 0.165245 udp 10.0.2.104 54523 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:12:23.210192 0.000000 udp 10.0.2.104 54523 -> 77.78.227.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:26.166859 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:27.150844 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:28.142358 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:29.130934 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:30.118596 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:31.105336 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:32.095388 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:33.078996 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:34.059722 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:35.049468 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:36.038142 4.925524 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:37.025907 0.000000 udp 10.0.2.104 54523 -> 190.179.130.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:38.012490 0.151277 udp 10.0.2.104 54523 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:12:38.997992 0.000000 udp 10.0.2.104 54523 -> 85.86.199.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:39.982313 0.361430 udp 10.0.2.104 54523 <-> 58.11.136.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:12:41.953650 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:42.941963 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:46.590326 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:47.576987 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:48.563226 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:49.547586 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:50.528484 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:51.518150 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:52.509472 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:53.497129 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:54.482910 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:55.468425 0.348077 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:12:56.452885 0.162772 udp 10.0.2.104 54523 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:12:57.434088 0.000000 udp 10.0.2.104 54523 -> 173.217.127.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:12:58.423700 1.041147 udp 10.0.2.104 54523 <-> 46.107.35.94 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:00.399671 0.367898 udp 10.0.2.104 54523 <-> 190.179.130.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:01.385845 0.163265 udp 10.0.2.104 54523 <-> 50.143.3.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:02.370933 0.084851 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:03.017975 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:13:03.355017 0.081651 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:04.336657 0.616003 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:05.326253 0.232749 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:06.314843 0.136020 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:07.301808 0.120426 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:08.288248 0.149647 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:09.275712 0.369272 udp 10.0.2.104 54523 <-> 190.190.110.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:10.259814 0.260270 udp 10.0.2.104 54523 <-> 201.9.191.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:11.240485 0.000000 udp 10.0.2.104 54523 -> 149.172.89.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:12.230444 0.189576 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:13.218935 0.256926 udp 10.0.2.104 54523 <-> 187.244.81.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:14.206259 0.000000 udp 10.0.2.104 54523 -> 84.224.247.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:15.191926 0.000000 udp 10.0.2.104 54523 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:16.177168 0.299719 udp 10.0.2.104 54523 <-> 190.190.110.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:17.161287 0.328201 udp 10.0.2.104 54523 <-> 201.9.191.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:18.142221 0.349853 udp 10.0.2.104 54523 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:19.131725 0.000000 udp 10.0.2.104 54523 -> 189.110.89.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:20.120051 0.321663 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:21.107263 4.177777 udp 10.0.2.104 54523 <-> 1.23.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:26.064722 0.000000 udp 10.0.2.104 54523 -> 189.110.89.122 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:27.049714 0.038834 udp 10.0.2.104 54523 <-> 212.117.58.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:28.033683 0.272785 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:29.016730 0.000000 udp 10.0.2.104 54523 -> 186.89.24.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:30.007081 1.293733 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:31.982379 0.000000 udp 10.0.2.104 54523 -> 204.16.10.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:32.968393 0.549703 udp 10.0.2.104 54523 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:33.954396 2.052828 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:34.938400 0.622774 udp 10.0.2.104 54523 <-> 190.141.220.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:36.907806 2.963677 udp 10.0.2.104 54523 -> 1.36.118.97 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:37.896323 0.123671 udp 10.0.2.104 54523 <-> 79.11.55.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:38.883389 0.000000 udp 10.0.2.104 54523 -> 203.205.21.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:40.856447 0.000000 udp 10.0.2.104 54523 -> 46.102.30.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:41.840449 1.262192 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:42.820510 0.284865 udp 10.0.2.104 54523 <-> 75.195.44.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:43.809661 0.053611 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:44.797749 0.160844 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:45.785106 0.357838 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:46.771963 0.145276 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:47.756921 0.039317 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:48.740921 0.158194 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:49.721321 0.031454 udp 10.0.2.104 54523 <-> 178.79.29.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:50.709561 4.932426 udp 10.0.2.104 54523 <-> 122.121.26.7 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:51.697632 0.067997 udp 10.0.2.104 54523 -> 86.110.138.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:51.765629 0.000000 icmp 86.110.138.246 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:13:52.684995 0.330461 udp 10.0.2.104 54523 <-> 201.68.33.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:53.336219 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:13:53.673485 4.505046 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:54.658283 0.000000 udp 10.0.2.104 54523 -> 85.152.244.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:13:58.836639 0.330275 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:13:59.824991 0.000000 udp 10.0.2.104 54523 -> 201.68.33.246 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:00.811893 3.339693 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:05.062306 0.346774 udp 10.0.2.104 54523 <-> 201.68.33.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:06.047154 0.159745 udp 10.0.2.104 54523 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:07.031080 0.542196 udp 10.0.2.104 54523 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:08.011451 4.149934 udp 10.0.2.104 54523 <-> 71.196.226.207 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:09.000674 0.255836 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:10.975752 0.344653 udp 10.0.2.104 54523 <-> 118.170.205.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:12.946319 0.030671 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:13.930046 4.980134 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:14.910433 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:15.899633 0.044686 udp 10.0.2.104 54523 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:16.887772 0.137230 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:17.876965 0.174270 udp 10.0.2.104 54523 <-> 103.250.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:19.847620 0.141357 udp 10.0.2.104 54523 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:20.838693 0.047107 udp 10.0.2.104 54523 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:21.818961 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:22.807697 0.000000 udp 10.0.2.104 54523 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:23.795635 0.046099 udp 10.0.2.104 54523 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:24.782307 0.037736 udp 10.0.2.104 54523 <-> 188.254.203.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:25.768245 0.414240 udp 10.0.2.104 54523 <-> 181.23.133.94 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:26.753408 0.000000 udp 10.0.2.104 54523 -> 176.215.215.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:27.744592 0.158438 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:28.724952 0.000000 udp 10.0.2.104 54523 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:29.713835 0.355908 udp 10.0.2.104 54523 <-> 201.46.181.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:30.701769 0.157447 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:31.688779 0.000000 udp 10.0.2.104 54523 -> 70.30.90.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:32.674619 0.000000 udp 10.0.2.104 54523 -> 75.197.131.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:33.659225 0.000000 udp 10.0.2.104 54523 -> 188.54.88.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:34.650209 0.280880 udp 10.0.2.104 54523 <-> 46.209.216.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:35.630403 2.390268 udp 10.0.2.104 54523 <-> 69.142.3.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:38.847194 4.090754 udp 10.0.2.104 54523 <-> 67.81.98.90 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:39.834792 0.000000 udp 10.0.2.104 54523 -> 188.54.88.110 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:40.821573 0.000000 udp 10.0.2.104 54523 -> 77.54.40.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:41.807055 0.000000 udp 10.0.2.104 54523 -> 70.178.43.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:43.786292 0.157209 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:44.768180 0.000000 udp 10.0.2.104 54523 -> 95.133.169.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:45.757282 0.047509 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:46.407928 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:14:46.745073 0.150413 udp 10.0.2.104 54523 <-> 173.178.10.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:47.735667 0.061233 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:48.721283 0.803048 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:49.706162 0.383861 udp 10.0.2.104 54523 <-> 187.38.201.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:50.810931 0.070120 udp 10.0.2.104 54523 <-> 86.104.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:51.791135 0.000000 udp 10.0.2.104 54523 -> 63.147.47.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:52.780009 0.179958 udp 10.0.2.104 54523 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:53.767914 0.000000 udp 10.0.2.104 54523 -> 79.117.12.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:54.755247 1.250143 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:55.740958 0.042520 udp 10.0.2.104 54523 <-> 37.143.247.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:56.725443 0.370355 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:14:57.716507 0.000000 udp 10.0.2.104 54523 -> 197.7.50.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:58.696438 0.000000 udp 10.0.2.104 54523 -> 71.192.132.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:14:59.687227 0.000000 udp 10.0.2.104 54523 -> 95.57.165.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:00.675019 0.174239 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:01.661531 0.018771 udp 10.0.2.104 54523 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:02.647185 0.048355 udp 10.0.2.104 54523 <-> 95.76.197.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:03.631665 0.083303 udp 10.0.2.104 54523 <-> 89.132.28.71 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:04.612523 0.000000 udp 10.0.2.104 54523 -> 197.7.50.102 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:05.602050 0.141330 udp 10.0.2.104 54523 <-> 76.125.217.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:06.590849 2.960154 udp 10.0.2.104 54523 -> 95.57.165.122 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:07.578616 0.175021 udp 10.0.2.104 54523 <-> 76.85.171.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:08.565474 0.167306 udp 10.0.2.104 54523 <-> 71.192.132.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:10.535593 0.018137 udp 10.0.2.104 54523 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:11.517016 0.471788 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:12.506705 0.047691 udp 10.0.2.104 54523 <-> 86.122.21.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:13.496458 0.169173 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:14.484126 0.159635 udp 10.0.2.104 54523 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:15.470841 0.126782 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:16.456886 0.000000 udp 10.0.2.104 54523 -> 114.49.28.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:17.442353 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:18.423214 0.054297 udp 10.0.2.104 54523 <-> 94.240.167.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:19.412990 0.144457 udp 10.0.2.104 54523 <-> 68.199.44.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:20.401421 0.169110 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:21.388864 0.472909 udp 10.0.2.104 54523 <-> 76.202.180.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:22.375456 0.458806 udp 10.0.2.104 54523 <-> 1.186.113.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:23.360993 0.282959 udp 10.0.2.104 54523 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:24.345459 2.264684 udp 10.0.2.104 54523 <-> 190.244.206.192 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:25.326425 0.000000 udp 10.0.2.104 54523 -> 37.61.147.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:27.308071 0.286446 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:28.295610 2.033686 udp 10.0.2.104 54523 <-> 189.55.190.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:29.282199 0.300026 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:30.267887 0.350113 udp 10.0.2.104 54523 <-> 122.121.38.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:31.252306 0.000000 udp 10.0.2.104 54523 -> 114.40.221.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:32.234806 0.051919 udp 10.0.2.104 54523 <-> 79.113.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:32.887354 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:15:33.224503 0.034999 udp 10.0.2.104 54523 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:34.213139 0.000000 udp 10.0.2.104 54523 -> 31.212.143.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:35.200386 0.149657 udp 10.0.2.104 54523 <-> 113.193.90.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:36.186499 0.000000 udp 10.0.2.104 54523 -> 67.189.32.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:37.172495 0.000000 udp 10.0.2.104 54523 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:38.157217 0.043307 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:39.137854 0.055219 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:40.127589 0.000000 udp 10.0.2.104 54523 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:41.116004 0.000000 udp 10.0.2.104 54523 -> 31.212.143.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:42.102867 0.000000 udp 10.0.2.104 54523 -> 190.77.199.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:43.089957 0.865374 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:44.075636 0.499091 udp 10.0.2.104 54523 <-> 87.10.29.233 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:45.060386 0.000000 udp 10.0.2.104 54523 -> 93.63.201.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:46.558081 0.059994 udp 10.0.2.104 54523 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:47.547755 0.080150 udp 10.0.2.104 54523 <-> 84.90.235.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:48.539577 0.377090 udp 10.0.2.104 54523 <-> 27.3.64.21 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:49.527736 0.176029 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:50.513971 0.055128 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:51.499912 0.349892 udp 10.0.2.104 54523 <-> 114.36.213.71 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:52.486633 0.098234 udp 10.0.2.104 54523 <-> 212.225.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:53.467454 0.000000 udp 10.0.2.104 54523 -> 115.244.212.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:15:54.457724 0.137222 udp 10.0.2.104 54523 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:55.445983 0.149635 udp 10.0.2.104 54523 <-> 1.186.109.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:56.433187 0.161487 udp 10.0.2.104 54523 <-> 64.148.59.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:57.419523 0.158210 udp 10.0.2.104 54523 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:15:59.388735 0.000000 udp 10.0.2.104 54523 -> 62.141.232.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:00.369517 0.000067 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:00.369584 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:16:01.359333 0.172106 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:16:02.347591 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:03.334834 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:04.321263 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:05.306247 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:06.290256 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:07.270679 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:08.260179 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:09.248514 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:10.235746 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:11.221799 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:12.209007 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:13.193003 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:14.173395 2.149041 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:16:15.162665 0.000000 udp 10.0.2.104 54523 -> 62.141.232.249 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:17.138907 0.180425 udp 10.0.2.104 54523 <-> 49.207.219.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:16:18.124991 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:19.110016 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:19.746849 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:16:20.094158 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:21.074990 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:22.064094 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:24.040002 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:25.026396 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:26.011708 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:26.996002 0.000039 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:26.996041 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:16:27.976379 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:28.965606 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:29.953814 0.000000 udp 10.0.2.104 54523 -> 62.141.232.249 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:30.941326 0.191746 udp 10.0.2.104 54523 <-> 49.207.219.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:16:31.927232 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:33.896945 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:34.877347 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:35.866543 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:36.854697 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:37.841865 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:38.827980 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:39.813284 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:40.797606 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:41.777843 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:41.777904 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:16:42.767611 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:43.756421 0.181198 udp 10.0.2.104 54523 <-> 49.207.219.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:16:44.744074 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:45.730136 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:46.715063 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:47.699137 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:47.699189 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:16:48.679385 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:49.668633 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:50.656835 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:51.644490 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:52.630536 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:53.617404 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:54.601215 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:55.581498 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:57.558047 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:58.544973 2.964016 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:16:59.531607 0.177223 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:00.516271 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:02.490167 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:03.479170 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:04.466860 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:05.453886 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:06.102527 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:17:06.439662 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:07.424477 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:08.415759 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:09.396068 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:10.385141 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:11.372581 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:12.359402 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:13.345156 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:13.345219 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:17:15.320979 0.000000 udp 10.0.2.104 54523 -> 62.141.232.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:16.301003 0.180648 udp 10.0.2.104 54523 <-> 49.207.219.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:17.290385 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:19.265315 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:20.252002 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:21.236631 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:22.228072 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:23.208074 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:24.197444 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:25.184934 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:26.171640 0.000072 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:26.171712 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:17:27.157354 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:28.141970 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:29.133010 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:30.113042 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:31.101689 2.673209 udp 10.0.2.104 54523 -> 62.141.232.249 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:32.788025 1.972932 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:35.745206 0.162059 udp 10.0.2.104 54523 <-> 76.119.125.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:36.726391 0.017090 udp 10.0.2.104 54523 <-> 77.175.74.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:37.716397 0.170035 udp 10.0.2.104 54523 <-> 203.192.238.243 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:38.705473 0.157710 udp 10.0.2.104 54523 <-> 203.194.109.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:39.693127 0.042556 udp 10.0.2.104 54523 <-> 46.35.173.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:40.679621 0.000000 udp 10.0.2.104 54523 -> 2.190.61.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:41.665279 0.067470 udp 10.0.2.104 54523 <-> 178.167.99.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:42.649651 0.149897 udp 10.0.2.104 54523 <-> 65.185.171.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:43.630606 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:44.620618 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:45.610647 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:46.600438 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:46.600485 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:17:48.572408 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:49.556735 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:50.537859 4.941862 udp 10.0.2.104 54523 <-> 174.99.98.125 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:52.517337 0.065634 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:53.168305 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:17:53.505768 0.181027 udp 10.0.2.104 54523 <-> 74.77.32.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:54.492648 0.000000 udp 10.0.2.104 54523 -> 94.74.184.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:55.633968 0.000000 udp 10.0.2.104 54523 <- 174.99.98.125 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:17:56.464333 0.390273 udp 10.0.2.104 54523 <-> 75.211.149.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:57.445153 0.135280 udp 10.0.2.104 54523 <-> 67.87.15.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:58.436076 0.326686 udp 10.0.2.104 54523 <-> 1.175.115.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:17:59.424711 0.000000 udp 10.0.2.104 54523 -> 85.122.42.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:00.412339 0.000000 udp 10.0.2.104 54523 -> 217.217.228.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:01.399182 0.199796 udp 10.0.2.104 54523 <-> 76.105.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:02.384454 0.000000 udp 10.0.2.104 54523 -> 70.67.177.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:03.369459 0.218116 udp 10.0.2.104 54523 <-> 24.23.21.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:04.350404 0.000000 udp 10.0.2.104 54523 -> 117.254.94.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:05.174448 2.963526 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:18:05.340259 0.166650 udp 10.0.2.104 54523 <-> 71.238.253.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:06.328907 0.066694 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:07.320286 0.033799 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:08.306408 0.000000 udp 10.0.2.104 54523 -> 91.98.179.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:09.292814 0.047025 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:10.276989 0.163025 udp 10.0.2.104 54523 <-> 74.77.32.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:11.257449 0.303181 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:11.981789 0.000000 udp 10.0.2.104 54523 <- 117.254.94.68 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:12.089045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:18:12.368738 0.030433 udp 10.0.2.104 54523 <-> 91.137.154.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:13.357425 0.000000 udp 10.0.2.104 54523 -> 84.124.164.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:14.345326 0.213007 udp 10.0.2.104 54523 <-> 65.65.137.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:15.334525 0.064247 udp 10.0.2.104 54523 <-> 84.232.82.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:16.319760 0.794006 udp 10.0.2.104 54523 <-> 117.204.219.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:17.304098 0.170962 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:18.284989 0.113855 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:19.275330 0.000000 udp 10.0.2.104 54523 -> 105.224.122.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:20.115248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:18:20.263898 0.299124 udp 10.0.2.104 54523 <-> 68.88.77.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:21.251392 4.080882 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:22.237700 0.000000 udp 10.0.2.104 54523 -> 173.238.13.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:23.223212 0.000000 udp 10.0.2.104 54523 -> 71.84.132.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:24.207355 4.004434 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:26.182302 0.385382 udp 10.0.2.104 54523 <-> 14.98.167.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:27.171494 0.000000 udp 10.0.2.104 54523 -> 72.130.237.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:29.168957 0.141962 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:30.154094 0.090043 udp 10.0.2.104 54523 <-> 89.146.131.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:31.138234 0.116765 udp 10.0.2.104 54523 <-> 68.230.129.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:32.119295 0.417964 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:33.439189 0.169119 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:34.427940 0.147815 udp 10.0.2.104 54523 <-> 76.179.191.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:35.416382 0.000000 udp 10.0.2.104 54523 -> 193.151.100.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:36.254242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:18:36.403132 0.156971 udp 10.0.2.104 54523 <-> 24.127.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:37.392805 0.000000 udp 10.0.2.104 54523 -> 24.70.33.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:38.376730 0.115192 udp 10.0.2.104 54523 <-> 82.118.11.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:39.357322 0.222620 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:40.009615 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:18:40.346720 0.215296 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:41.334897 0.030584 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:42.322198 0.162713 udp 10.0.2.104 54523 <-> 71.62.251.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:43.309328 0.363684 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:44.294946 0.218225 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:45.278754 0.050106 udp 10.0.2.104 54523 <-> 79.118.98.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:46.259230 0.209094 udp 10.0.2.104 54523 <-> 66.214.56.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:47.248981 0.000000 udp 10.0.2.104 54523 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:48.237244 0.305039 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:49.224645 0.116716 udp 10.0.2.104 54523 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:50.210702 0.042535 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:51.195825 0.376011 udp 10.0.2.104 54523 <-> 190.195.52.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:52.179812 0.225684 udp 10.0.2.104 54523 <-> 190.39.171.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:53.160689 0.294856 udp 10.0.2.104 54523 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:54.149849 0.000000 udp 10.0.2.104 54523 -> 209.140.74.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:18:55.138480 0.024666 udp 10.0.2.104 54523 <-> 176.63.96.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:56.125629 0.320746 udp 10.0.2.104 54523 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:57.112094 0.198336 udp 10.0.2.104 54523 <-> 190.75.66.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:58.097430 0.089435 udp 10.0.2.104 54523 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:18:59.082411 0.344800 udp 10.0.2.104 54523 <-> 118.166.237.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:00.062855 0.000000 udp 10.0.2.104 54523 -> 101.220.162.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:01.053130 0.639307 udp 10.0.2.104 54523 <-> 203.170.38.247 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:02.042311 1.339541 udp 10.0.2.104 54523 <-> 72.183.243.88 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:04.015375 0.062901 udp 10.0.2.104 54523 <-> 31.11.215.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:05.000976 0.264762 udp 10.0.2.104 54523 <-> 41.97.167.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:05.985002 0.300235 udp 10.0.2.104 54523 <-> 177.100.237.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:06.965403 0.399323 udp 10.0.2.104 54523 <-> 79.12.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:07.815992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:19:08.744625 0.000000 udp 10.0.2.104 54523 -> 116.193.136.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:10.006616 4.920456 udp 10.0.2.104 54523 -> 72.0.251.222 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:10.992350 1.106119 udp 10.0.2.104 54523 <-> 182.188.213.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:11.978293 0.000000 udp 10.0.2.104 54523 -> 95.57.165.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:12.963335 0.000000 udp 10.0.2.104 54523 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:13.947185 0.000000 udp 10.0.2.104 54523 -> 116.193.136.103 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:15.916364 0.000000 udp 10.0.2.104 54523 -> 190.179.8.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:16.904418 0.000000 udp 10.0.2.104 54523 -> 109.79.195.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:17.891578 0.149003 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:18.879078 0.167339 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:19.864294 0.000000 udp 10.0.2.104 54523 -> 72.0.251.222 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:20.850648 1.225959 udp 10.0.2.104 54523 <-> 182.188.213.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:21.831701 0.747458 udp 10.0.2.104 54523 <-> 79.53.137.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:22.820462 0.056724 udp 10.0.2.104 54523 <-> 212.233.133.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:23.808625 0.095733 udp 10.0.2.104 54523 -> 78.166.0.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:23.904358 0.000000 icmp 78.166.0.235 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:19:24.795208 0.000000 udp 10.0.2.104 54523 -> 190.194.201.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:25.781426 0.000000 udp 10.0.2.104 54523 -> 83.86.91.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:26.766909 0.179120 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:27.411165 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:19:27.758201 0.159119 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:28.738552 0.000000 udp 10.0.2.104 54523 -> 190.204.196.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:29.727382 0.425132 udp 10.0.2.104 54523 <-> 98.204.79.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:30.715200 0.000000 udp 10.0.2.104 54523 -> 78.166.0.235 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:31.702070 0.166882 udp 10.0.2.104 54523 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:32.687595 0.366672 udp 10.0.2.104 54523 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:33.672644 0.129754 udp 10.0.2.104 54523 <-> 66.117.244.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:34.667745 0.332689 udp 10.0.2.104 54523 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:35.648032 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:36.637134 0.177317 udp 10.0.2.104 54523 <-> 68.184.206.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:37.625049 0.371726 udp 10.0.2.104 54523 <-> 200.175.127.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:38.611922 0.000000 udp 10.0.2.104 54523 -> 5.43.88.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:39.597315 1.824605 udp 10.0.2.104 54523 <-> 37.72.21.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:41.782699 0.344092 udp 10.0.2.104 54523 <-> 111.250.115.59 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:42.774475 3.950303 udp 10.0.2.104 54523 -> 173.9.63.145 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:43.754719 0.082138 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:44.743606 0.000000 udp 10.0.2.104 54523 -> 27.105.0.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:45.734613 0.232881 udp 10.0.2.104 54523 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:47.710238 0.507932 udp 10.0.2.104 54523 <-> 93.184.85.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:48.694758 0.075106 udp 10.0.2.104 54523 <-> 62.45.129.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:49.685986 0.000000 udp 10.0.2.104 54523 -> 31.147.115.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:50.666381 0.158815 udp 10.0.2.104 54523 <-> 76.122.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:51.655423 0.175186 udp 10.0.2.104 54523 <-> 150.201.62.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:52.643132 0.101434 udp 10.0.2.104 54523 <-> 90.132.103.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:53.629714 0.032451 udp 10.0.2.104 54523 <-> 85.226.127.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:54.615298 0.123922 udp 10.0.2.104 54523 <-> 66.65.121.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:55.600131 0.170132 udp 10.0.2.104 54523 <-> 70.178.163.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:56.591376 0.082447 udp 10.0.2.104 54523 <-> 95.233.120.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:57.571369 0.377618 udp 10.0.2.104 54523 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:19:58.560598 0.000000 udp 10.0.2.104 54523 -> 70.88.44.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:19:59.548316 0.136906 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:00.534657 0.157738 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:01.519659 0.000000 udp 10.0.2.104 54523 -> 105.132.82.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:02.504157 0.350010 udp 10.0.2.104 54523 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:03.496788 0.376068 udp 10.0.2.104 54523 <-> 202.78.81.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:04.477148 0.875409 udp 10.0.2.104 54523 <-> 186.85.219.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:05.466021 0.000000 udp 10.0.2.104 54523 -> 77.184.157.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:06.453482 0.000000 udp 10.0.2.104 54523 -> 186.124.166.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:07.441145 0.025773 udp 10.0.2.104 54523 <-> 89.133.190.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:08.426696 0.050465 udp 10.0.2.104 54523 <-> 83.157.205.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:09.411261 0.000000 udp 10.0.2.104 54523 -> 103.250.139.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:10.392245 0.415458 udp 10.0.2.104 54523 <-> 91.133.48.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:11.733220 0.046155 udp 10.0.2.104 54523 <-> 89.72.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:12.721969 0.319001 udp 10.0.2.104 54523 <-> 122.50.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:13.709944 0.353742 udp 10.0.2.104 54523 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:14.696595 0.728466 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:15.924093 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:20:16.261278 2.076485 udp 10.0.2.104 54523 <-> 109.185.10.218 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:17.245714 0.000000 udp 10.0.2.104 54523 -> 78.90.198.142 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:19.216244 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:20.204968 0.236820 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:21.192790 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:22.179291 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:23.164858 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:24.152093 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:25.132975 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:26.123026 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:27.111891 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:28.101557 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:29.088127 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:30.073688 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:31.058229 0.049468 udp 10.0.2.104 54523 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:32.039158 0.358367 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:33.028945 1.236179 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:34.017420 0.000000 udp 10.0.2.104 54523 -> 85.230.174.252 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:35.005257 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:35.991894 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:36.977542 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:37.962167 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:38.943014 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:40.920861 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:41.908435 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:42.894917 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:43.880375 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:44.864598 0.000057 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:44.864655 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:20:45.846006 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:46.835608 0.000000 udp 10.0.2.104 54523 -> 94.52.120.253 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:47.824298 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:49.588859 0.000000 udp 10.0.2.104 54523 -> 87.0.26.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:50.575422 0.051876 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:51.560635 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:52.544440 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:53.528705 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:54.518267 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:55.507169 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:56.494632 0.294040 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:20:57.480938 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:58.466400 0.000000 udp 10.0.2.104 54523 -> 77.221.21.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:20:59.450298 0.000000 udp 10.0.2.104 54523 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:00.431077 0.333079 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:01.420858 0.064067 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:02.409739 0.035475 udp 10.0.2.104 54523 <-> 79.117.59.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:03.063963 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:21:03.401031 0.154944 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:04.387407 0.444013 udp 10.0.2.104 54523 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:05.372498 0.209674 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:06.356560 0.037656 udp 10.0.2.104 54523 <-> 86.124.250.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:07.337286 0.000000 udp 10.0.2.104 54523 -> 109.175.102.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:08.326559 0.164416 udp 10.0.2.104 54523 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:09.314951 0.335042 udp 10.0.2.104 54523 <-> 190.193.222.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:10.302428 0.028427 udp 10.0.2.104 54523 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:11.288733 4.928837 udp 10.0.2.104 54523 <-> 115.135.134.197 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:12.273670 2.112496 udp 10.0.2.104 54523 <-> 72.231.172.149 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:13.259042 0.000000 udp 10.0.2.104 54523 -> 114.42.0.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:15.229237 0.164521 udp 10.0.2.104 54523 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:17.204999 0.300772 udp 10.0.2.104 54523 <-> 70.233.97.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:17.496507 0.000000 udp 10.0.2.104 54523 <- 115.135.134.197 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:18.191602 0.146611 udp 10.0.2.104 54523 <-> 72.231.172.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:19.176619 0.320552 udp 10.0.2.104 54523 <-> 190.201.237.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:20.160635 0.025189 udp 10.0.2.104 54523 <-> 86.101.158.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:21.142108 0.000000 udp 10.0.2.104 54523 -> 14.98.73.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:22.131772 0.151188 udp 10.0.2.104 54523 <-> 78.134.0.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:23.122501 0.036308 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:24.109288 0.265830 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:25.095705 0.000000 udp 10.0.2.104 54523 -> 186.70.25.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:26.080229 1.964405 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:27.064364 0.038364 udp 10.0.2.104 54523 <-> 5.15.99.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:29.034022 0.000000 udp 10.0.2.104 54523 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:30.022122 0.155734 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:31.009162 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:31.995722 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:32.980954 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:33.964964 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:34.945651 4.990253 udp 10.0.2.104 54523 <-> 95.168.240.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:35.935061 0.000000 udp 10.0.2.104 54523 -> 190.17.169.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:36.923024 0.144896 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:37.910594 0.000000 udp 10.0.2.104 54523 -> 217.174.48.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:38.896769 2.113908 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:41.846317 0.163734 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:42.835628 0.049887 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:43.823801 0.125513 udp 10.0.2.104 54523 <-> 173.81.42.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:44.815197 0.154127 udp 10.0.2.104 54523 <-> 69.73.42.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:45.800861 0.066501 udp 10.0.2.104 54523 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:46.786046 0.152447 udp 10.0.2.104 54523 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:47.769888 3.122611 udp 10.0.2.104 54523 <-> 116.73.207.173 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:48.750294 0.349953 udp 10.0.2.104 54523 <-> 201.252.88.214 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:49.402487 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:21:49.739649 0.096882 udp 10.0.2.104 54523 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:51.714915 0.251011 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:52.700983 3.938600 udp 10.0.2.104 54523 -> 91.120.99.47 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:53.685855 3.941861 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:54.670005 0.000000 udp 10.0.2.104 54523 -> 94.197.234.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:21:55.650239 0.278270 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:58.616941 0.047095 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:21:59.602048 0.862865 udp 10.0.2.104 54523 <-> 107.223.54.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:00.959817 0.159453 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:01.943698 0.051657 udp 10.0.2.104 54523 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:02.923905 0.144046 udp 10.0.2.104 54523 <-> 71.66.250.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:03.913057 0.142370 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:04.903970 0.300226 udp 10.0.2.104 54523 <-> 220.100.40.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:05.890857 2.171201 udp 10.0.2.104 54523 <-> 148.204.134.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:06.876059 0.165150 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:08.852130 0.164201 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:09.832241 0.000000 udp 10.0.2.104 54523 -> 2.71.88.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:22:10.821241 0.153571 udp 10.0.2.104 54523 <-> 24.202.60.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:11.809685 0.000000 udp 10.0.2.104 54523 -> 81.227.139.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:22:12.796739 0.454325 udp 10.0.2.104 54523 <-> 177.104.237.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:13.782820 0.499372 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:14.767683 0.036858 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:15.759193 0.054479 udp 10.0.2.104 54523 <-> 90.230.7.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:16.739261 0.493546 udp 10.0.2.104 54523 <-> 179.208.248.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:17.728385 0.151026 udp 10.0.2.104 54523 <-> 71.197.28.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:18.716067 0.119816 udp 10.0.2.104 54523 <-> 178.172.251.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:19.702766 0.031813 udp 10.0.2.104 54523 <-> 46.59.193.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:20.688399 0.215787 udp 10.0.2.104 54523 <-> 76.90.73.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:21.672972 0.154133 udp 10.0.2.104 54523 <-> 24.179.39.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:22.664213 0.150814 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:23.644237 0.402430 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:24.633737 0.349488 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:25.621675 0.302052 udp 10.0.2.104 54523 <-> 220.100.40.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:26.608439 0.050888 udp 10.0.2.104 54523 <-> 94.53.32.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:27.594109 0.134196 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:28.578872 1.043057 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:30.550239 0.343435 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:31.539731 1.296050 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:33.514063 0.061077 udp 10.0.2.104 54523 <-> 93.73.2.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:34.499639 0.044589 udp 10.0.2.104 54523 <-> 31.11.172.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:35.484094 0.308448 udp 10.0.2.104 54523 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:36.128170 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:22:36.475067 0.028226 udp 10.0.2.104 54523 <-> 46.150.57.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:37.455252 0.263641 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:38.444002 0.157397 udp 10.0.2.104 54523 <-> 24.179.39.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:39.432052 0.414595 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:40.418796 0.296415 udp 10.0.2.104 54523 <-> 181.29.2.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:41.404470 0.290883 udp 10.0.2.104 54523 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:42.389267 0.344073 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:43.370167 0.229012 udp 10.0.2.104 54523 <-> 190.78.178.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:44.360086 0.399055 udp 10.0.2.104 54523 <-> 112.118.16.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:45.348760 0.054655 udp 10.0.2.104 54523 <-> 79.117.151.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:46.336407 0.165589 udp 10.0.2.104 54523 <-> 50.172.254.82 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:47.322891 0.093102 udp 10.0.2.104 54523 <-> 213.57.243.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:48.308509 0.000000 udp 10.0.2.104 54523 -> 50.72.184.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:22:49.293075 3.251620 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:50.274146 0.000000 udp 10.0.2.104 54523 -> 81.231.84.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:22:51.264383 0.000000 udp 10.0.2.104 54523 -> 216.18.67.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:22:53.240573 0.000000 udp 10.0.2.104 54523 -> 78.50.27.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:22:54.227021 2.470975 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:55.212591 0.039435 udp 10.0.2.104 54523 <-> 89.137.133.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:56.197127 0.267434 udp 10.0.2.104 54523 <-> 115.253.40.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:57.178218 0.222770 udp 10.0.2.104 54523 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:22:58.168192 0.000000 udp 10.0.2.104 54523 -> 177.192.239.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:22:59.156981 0.158416 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:00.144627 0.382367 udp 10.0.2.104 54523 <-> 187.1.104.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:01.131165 0.136337 udp 10.0.2.104 54523 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:02.116793 0.218892 udp 10.0.2.104 54523 <-> 1.22.199.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:03.101358 0.149926 udp 10.0.2.104 54523 <-> 72.198.68.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:04.082304 0.211243 udp 10.0.2.104 54523 <-> 76.90.73.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:05.072450 0.051026 udp 10.0.2.104 54523 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:06.061215 0.625262 udp 10.0.2.104 54523 <-> 202.29.178.10 16464 CON 0 0 2 1088 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:07.049043 0.286551 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:08.035427 1.040705 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:09.020937 0.168038 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:10.005506 0.000000 udp 10.0.2.104 54523 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:10.986466 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:11.976109 2.138011 udp 10.0.2.104 54523 <-> 66.168.73.197 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:12.964422 1.569615 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:14.938684 0.159544 udp 10.0.2.104 54523 <-> 174.64.190.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:15.924206 0.077288 udp 10.0.2.104 54523 <-> 82.252.241.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:16.908670 0.067745 udp 10.0.2.104 54523 <-> 84.232.15.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:17.889481 3.257011 udp 10.0.2.104 54523 <-> 61.1.224.141 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:18.879241 0.050079 udp 10.0.2.104 54523 -> 89.47.85.135 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:18.929320 0.000000 icmp 89.47.85.135 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:23:19.580005 0.011786 udp 10.0.2.104 54583 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 08:23:19.592107 0.000000 udp 10.0.2.104 54584 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:19.867407 0.099011 udp 10.0.2.104 54523 -> 77.223.70.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:19.966418 0.000000 icmp 77.223.70.77 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:23:21.841173 0.349553 udp 10.0.2.104 54523 <-> 14.98.110.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:22.489295 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:23:22.826433 0.000000 udp 10.0.2.104 54523 -> 50.167.50.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:23.810702 0.181364 udp 10.0.2.104 54523 <-> 49.205.125.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:24.791239 0.642132 udp 10.0.2.104 54523 <-> 117.204.219.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:25.780754 0.000000 udp 10.0.2.104 54523 -> 175.177.248.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:26.769481 0.062543 udp 10.0.2.104 54523 <-> 88.165.102.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:27.756833 0.145600 udp 10.0.2.104 54523 <-> 69.126.154.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:28.743232 0.050235 udp 10.0.2.104 54523 <-> 79.98.3.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:29.728812 0.351303 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:30.713496 0.165897 udp 10.0.2.104 54523 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:31.694468 3.615653 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:32.684402 0.000000 udp 10.0.2.104 54523 -> 115.124.175.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:33.672932 0.000000 udp 10.0.2.104 54523 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:35.649980 0.386124 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:36.635148 0.391112 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:37.619285 4.160999 udp 10.0.2.104 54523 <-> 98.210.98.187 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:38.600380 0.162080 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:39.589892 0.222311 udp 10.0.2.104 54523 <-> 184.45.92.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:40.578323 0.149398 udp 10.0.2.104 54523 <-> 2.193.206.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:42.555653 0.000000 udp 10.0.2.104 54523 -> 190.160.37.245 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:43.540228 0.000000 udp 10.0.2.104 54523 -> 190.16.162.245 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:44.524472 0.000000 udp 10.0.2.104 54523 -> 98.215.30.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:45.504824 0.287153 udp 10.0.2.104 54523 <-> 69.193.106.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:46.494937 0.059892 udp 10.0.2.104 54523 <-> 79.116.213.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:47.483569 0.164993 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:48.470858 0.000000 udp 10.0.2.104 54523 -> 190.173.81.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:49.457303 0.167186 udp 10.0.2.104 54523 <-> 173.23.103.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:50.442336 0.064978 udp 10.0.2.104 54523 <-> 178.217.201.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:51.426318 0.034612 udp 10.0.2.104 54523 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:52.406667 0.000000 udp 10.0.2.104 54523 -> 186.4.7.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:53.396005 0.509905 udp 10.0.2.104 54523 <-> 201.95.31.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:54.384730 0.255959 udp 10.0.2.104 54523 <-> 187.20.40.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:55.372311 0.067813 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:56.358147 0.315877 udp 10.0.2.104 54523 <-> 190.173.98.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:57.342897 0.162839 udp 10.0.2.104 54523 <-> 76.107.10.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:23:58.326838 0.000000 udp 10.0.2.104 54523 -> 182.68.219.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:23:59.307701 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:00.296690 0.356212 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:01.288595 0.000000 udp 10.0.2.104 54523 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:02.275718 0.172537 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:03.262041 0.109277 udp 10.0.2.104 54523 <-> 93.89.196.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:04.247137 0.147167 udp 10.0.2.104 54523 <-> 27.106.50.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:05.231065 0.311449 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:06.211347 0.000000 udp 10.0.2.104 54523 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:07.200702 1.975229 udp 10.0.2.104 54523 -> 36.239.239.244 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:08.188774 0.159732 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:08.838858 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:24:10.161919 0.070386 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:11.147070 0.218616 udp 10.0.2.104 54523 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:12.131053 0.153719 udp 10.0.2.104 54523 <-> 50.4.105.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:13.111478 0.270903 udp 10.0.2.104 54523 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:14.100835 0.000000 udp 10.0.2.104 54523 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:15.089253 0.000000 udp 10.0.2.104 54523 -> 88.222.170.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:16.076493 0.159944 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:17.062563 0.000000 udp 10.0.2.104 54523 -> 114.180.181.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:18.047570 0.204935 udp 10.0.2.104 54523 <-> 98.210.235.8 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:19.031604 0.140614 udp 10.0.2.104 54523 <-> 23.28.124.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:20.011987 0.060604 udp 10.0.2.104 54523 <-> 79.116.213.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:21.001121 1.016797 udp 10.0.2.104 54523 <-> 77.242.145.104 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:22.976499 0.021656 udp 10.0.2.104 54523 <-> 37.209.66.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:23.963028 0.194793 udp 10.0.2.104 54523 <-> 105.139.71.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:24.158215 0.000000 udp 10.0.2.104 54523 -> 24.19.85.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.158347 0.000000 udp 10.0.2.104 54523 -> 74.62.164.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.158482 0.000000 udp 10.0.2.104 54523 -> 188.119.78.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.158610 0.000000 udp 10.0.2.104 54523 -> 95.223.45.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.158792 0.000000 udp 10.0.2.104 54523 -> 82.244.99.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.158918 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.159051 0.000000 udp 10.0.2.104 54523 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.159173 0.000000 udp 10.0.2.104 54523 -> 190.39.82.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.159320 0.000000 udp 10.0.2.104 54523 -> 94.205.117.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.159439 0.000000 udp 10.0.2.104 54523 -> 188.254.186.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.159723 0.000000 udp 10.0.2.104 54523 -> 31.192.7.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.159844 0.000000 udp 10.0.2.104 54523 -> 212.183.200.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.159968 0.000000 udp 10.0.2.104 54523 -> 92.249.152.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.160102 0.000000 udp 10.0.2.104 54523 -> 188.24.129.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.160238 0.000000 udp 10.0.2.104 54523 -> 70.80.64.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.160368 0.000000 udp 10.0.2.104 54523 -> 93.129.198.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:24.947863 0.067505 udp 10.0.2.104 54523 <-> 95.192.79.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:25.931621 0.023828 udp 10.0.2.104 54523 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:26.911965 0.167848 udp 10.0.2.104 54523 <-> 174.63.38.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:27.901169 0.000000 udp 10.0.2.104 54523 -> 49.205.73.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:28.889333 0.252882 udp 10.0.2.104 54523 <-> 91.98.179.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:29.876683 0.140124 udp 10.0.2.104 54523 <-> 50.157.201.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:30.862656 0.161830 udp 10.0.2.104 54523 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:31.847623 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:32.831250 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:33.811399 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:34.800702 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:35.788783 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:36.775536 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:37.762194 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:38.747050 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:39.738078 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:40.718219 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:41.707420 3.945949 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:42.695627 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:43.682886 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:44.668802 0.165152 udp 10.0.2.104 54523 <-> 98.140.199.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:24:46.645788 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:47.626181 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:48.615227 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:49.602655 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:50.589315 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:51.575252 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:52.559812 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:53.551086 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:54.530982 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:55.182860 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:24:55.519926 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:56.508099 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:58.480463 0.000054 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:24:58.480517 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:24:59.465340 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:00.456592 0.176653 udp 10.0.2.104 54523 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:01.437511 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:02.426331 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:03.414012 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:04.400680 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:05.386606 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:06.371173 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:07.362459 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:08.342045 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:09.331059 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:11.179664 2.958796 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:25:11.305888 0.000054 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:11.305942 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:25:12.291235 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:13.275864 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:14.257437 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:15.247514 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:16.352672 4.925709 udp 10.0.2.104 54523 <-> 75.115.165.81 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:17.340369 0.178270 udp 10.0.2.104 54523 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:18.208256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:25:18.327219 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:20.297619 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:20.297680 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:25:21.441412 0.000000 udp 10.0.2.104 54523 <- 75.115.165.81 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:22.268001 0.158545 udp 10.0.2.104 54523 <-> 69.249.214.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:23.256772 0.214611 udp 10.0.2.104 54523 <-> 75.25.21.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:24.244448 0.161746 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:25.230998 0.086371 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:26.097579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:25:26.216598 0.000000 udp 10.0.2.104 54523 -> 117.235.126.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:27.200930 0.038806 udp 10.0.2.104 54523 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:28.181862 0.309520 udp 10.0.2.104 54523 <-> 24.232.163.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:29.171760 0.000000 udp 10.0.2.104 54523 -> 190.73.13.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:30.160740 0.041327 udp 10.0.2.104 54523 <-> 79.118.190.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:31.148506 0.336764 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:32.135180 0.529134 udp 10.0.2.104 54523 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:33.120876 0.337176 udp 10.0.2.104 54523 <-> 114.44.150.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:34.105326 0.335379 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:35.086285 0.049695 udp 10.0.2.104 54523 <-> 5.134.111.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:36.075937 0.040566 udp 10.0.2.104 54523 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:37.064958 0.175430 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:38.052658 0.000000 udp 10.0.2.104 54523 -> 85.232.150.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:39.039250 0.000000 udp 10.0.2.104 54523 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:40.025009 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:41.009412 2.959231 udp 10.0.2.104 54523 <-> 188.2.163.17 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:41.653114 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:25:41.881234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:25:41.990263 0.182920 udp 10.0.2.104 54523 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:42.980001 0.000000 udp 10.0.2.104 54523 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:44.956324 0.338558 udp 10.0.2.104 54523 <-> 211.209.63.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:45.942151 0.159102 udp 10.0.2.104 54523 <-> 173.218.51.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:46.927437 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:48.892365 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:49.881989 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:50.870802 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:51.858415 0.000083 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:51.858498 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:25:52.844982 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:25:53.830496 0.108829 udp 10.0.2.104 54523 <-> 84.108.234.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:54.815126 0.033856 udp 10.0.2.104 54523 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:55.795942 3.311193 udp 10.0.2.104 54523 <-> 113.252.190.54 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:56.785750 0.333083 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:57.774117 3.986099 udp 10.0.2.104 54523 <-> 46.40.96.88 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:25:59.748223 0.000000 udp 10.0.2.104 54523 -> 46.175.229.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:00.733359 2.084222 udp 10.0.2.104 54523 <-> 77.91.22.150 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:03.690345 0.036111 udp 10.0.2.104 54523 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:04.678697 0.066918 udp 10.0.2.104 54523 <-> 194.140.132.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:05.666183 4.930510 udp 10.0.2.104 54523 <-> 46.40.96.88 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:06.652308 0.116050 udp 10.0.2.104 54523 <-> 24.230.249.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:07.637744 0.000000 udp 10.0.2.104 54523 -> 79.118.241.128 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:08.622050 0.038306 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:09.607072 0.167251 udp 10.0.2.104 54523 <-> 96.20.36.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:11.317544 0.000000 udp 10.0.2.104 54523 <- 46.40.96.88 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:12.254948 2.642032 udp 10.0.2.104 54523 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:13.242367 0.301457 udp 10.0.2.104 54523 <-> 201.13.135.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:14.119593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:26:14.228588 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:15.214235 4.929190 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:16.198107 0.000000 udp 10.0.2.104 54523 -> 79.24.230.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:17.178567 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:18.168112 0.000000 udp 10.0.2.104 54523 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:19.156337 0.000000 udp 10.0.2.104 54523 -> 75.84.97.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:20.227568 0.000032 udp 10.0.2.104 54523 <- 94.41.58.2 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:21.129491 1.409353 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:22.115087 0.631364 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:23.099065 0.319269 udp 10.0.2.104 54523 <-> 187.35.107.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:24.079731 0.149311 udp 10.0.2.104 54523 <-> 69.63.231.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:25.068810 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:26.056919 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:27.043996 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:28.030202 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:28.678105 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:26:29.015226 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:29.999212 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:30.979517 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:31.968837 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:32.956949 0.334126 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:33.943952 0.184048 udp 10.0.2.104 54523 <-> 70.112.234.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:34.929665 0.355589 udp 10.0.2.104 54523 <-> 114.47.13.30 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:35.914603 0.321997 udp 10.0.2.104 54523 <-> 124.5.147.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:36.898619 2.957730 udp 10.0.2.104 54523 -> 192.168.1.54 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:37.879136 0.174741 udp 10.0.2.104 54523 <-> 69.193.106.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:38.868294 0.145700 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:40.843503 0.032961 udp 10.0.2.104 54523 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:41.829488 0.033377 udp 10.0.2.104 54523 <-> 89.187.226.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:42.814636 0.000000 udp 10.0.2.104 54523 -> 85.136.240.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:43.798535 0.221689 udp 10.0.2.104 54523 <-> 190.38.124.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:44.778993 0.186411 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:45.768620 0.133547 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:46.756779 0.224534 udp 10.0.2.104 54523 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:47.743730 0.000000 udp 10.0.2.104 54523 -> 79.140.165.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:48.729745 0.000000 udp 10.0.2.104 54523 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:49.715117 0.140736 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:50.699259 0.141364 udp 10.0.2.104 54523 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:51.679501 0.000000 udp 10.0.2.104 54523 -> 108.183.48.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:52.668754 0.148803 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:53.656915 0.126556 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:54.643468 0.085924 udp 10.0.2.104 54523 <-> 89.134.105.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:55.629579 0.141583 udp 10.0.2.104 54523 <-> 184.56.142.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:56.614314 0.035040 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:26:57.598155 0.000000 udp 10.0.2.104 54523 -> 114.37.15.246 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:58.578448 0.000000 udp 10.0.2.104 54523 -> 69.63.231.53 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:26:59.567626 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:00.557991 0.168977 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:01.544980 4.772158 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:02.531055 0.133388 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:04.499618 4.677463 udp 10.0.2.104 54523 <-> 62.93.121.248 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:05.479990 0.000000 udp 10.0.2.104 54523 -> 190.208.110.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:06.469481 0.630986 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:07.457351 0.031681 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:09.430249 2.267640 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:10.415120 0.378132 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:11.399079 0.169192 udp 10.0.2.104 54523 <-> 98.224.54.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:12.379407 0.062189 udp 10.0.2.104 54523 <-> 31.211.155.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:13.368404 0.161161 udp 10.0.2.104 54523 <-> 142.217.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:14.355903 0.000000 udp 10.0.2.104 54523 -> 190.75.98.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:15.005715 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:27:15.342809 0.299746 udp 10.0.2.104 54523 <-> 61.27.85.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:16.330521 0.042470 udp 10.0.2.104 54523 <-> 79.119.229.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:17.315124 0.339718 udp 10.0.2.104 54523 <-> 1.175.43.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:18.306081 0.333233 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:19.286349 0.046931 udp 10.0.2.104 54523 <-> 193.151.100.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:20.275379 0.000000 udp 10.0.2.104 54523 -> 94.21.162.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:21.263333 0.000000 udp 10.0.2.104 54523 -> 190.51.66.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:22.250192 0.050545 udp 10.0.2.104 54523 <-> 93.103.63.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:23.236265 0.135847 udp 10.0.2.104 54523 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:24.221313 0.178744 udp 10.0.2.104 54523 <-> 183.83.67.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:25.212399 0.135261 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:26.192482 0.164006 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:27.181361 4.956765 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:28.169152 0.000000 udp 10.0.2.104 54523 -> 190.110.186.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:29.156213 0.057387 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:30.141642 0.068065 udp 10.0.2.104 54523 <-> 188.2.163.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:31.126164 0.085479 udp 10.0.2.104 54523 <-> 95.74.171.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:33.097449 0.133446 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:34.086423 0.038353 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:35.074105 0.000000 udp 10.0.2.104 54523 -> 84.40.124.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:36.060632 0.149664 udp 10.0.2.104 54523 <-> 75.139.74.254 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:37.046216 0.000000 udp 10.0.2.104 54523 -> 158.123.159.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:38.030786 0.000000 udp 10.0.2.104 54523 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:39.021661 0.000000 udp 10.0.2.104 54523 -> 50.70.157.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:40.001967 0.000000 udp 10.0.2.104 54523 -> 217.18.251.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:40.991046 0.045301 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:41.979205 0.097929 udp 10.0.2.104 54523 <-> 62.83.45.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:42.966034 1.633018 arp 10.0.2.104 who 169.254.49.242 INT 3 126 flow=Background-ARP 1970/01/01 08:27:43.951653 0.286473 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:44.936047 0.241588 udp 10.0.2.104 54523 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:45.917353 1.248947 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:46.907235 0.264016 udp 10.0.2.104 54523 <-> 76.88.165.238 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:47.896164 0.121082 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:48.883941 0.439277 udp 10.0.2.104 54523 <-> 14.96.196.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:49.870632 0.000000 udp 10.0.2.104 54523 -> 93.137.161.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:50.856264 1.628215 arp 10.0.2.104 who 169.254.49.242 INT 3 126 flow=Background-ARP 1970/01/01 08:27:51.840620 0.000000 udp 10.0.2.104 54523 -> 98.116.205.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:52.821439 0.292738 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:53.810736 1.327058 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:54.799694 0.027611 udp 10.0.2.104 54523 <-> 82.72.62.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:55.787229 0.046771 udp 10.0.2.104 54523 <-> 86.125.184.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:56.773807 0.259023 udp 10.0.2.104 54523 <-> 117.194.240.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:57.759231 0.000000 udp 10.0.2.104 54523 -> 179.208.248.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:27:58.743813 0.934444 udp 10.0.2.104 54523 <-> 99.126.92.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:27:59.724655 0.000000 udp 10.0.2.104 54523 -> 59.190.46.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:00.714498 0.000000 udp 10.0.2.104 54523 -> 24.23.21.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:01.366078 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:28:01.703163 0.041975 udp 10.0.2.104 54523 <-> 79.119.229.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:02.690836 0.311049 udp 10.0.2.104 54523 <-> 175.193.245.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:03.677342 0.407360 udp 10.0.2.104 54523 <-> 218.102.238.254 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:04.662878 0.143650 udp 10.0.2.104 54523 <-> 107.16.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:05.647443 0.000000 udp 10.0.2.104 54523 -> 89.46.22.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:06.628561 0.381755 udp 10.0.2.104 54523 <-> 36.230.82.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:07.619602 0.204397 udp 10.0.2.104 54523 <-> 24.205.37.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:08.608352 0.154751 udp 10.0.2.104 54523 <-> 72.226.86.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:09.596063 0.055636 udp 10.0.2.104 54523 <-> 217.175.118.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:10.582641 0.000000 udp 10.0.2.104 54523 -> 180.215.60.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:11.568049 0.302143 udp 10.0.2.104 54523 <-> 119.25.93.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:12.552642 0.136041 udp 10.0.2.104 54523 <-> 67.81.98.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:13.533563 0.000000 udp 10.0.2.104 54523 -> 172.162.41.207 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:14.523220 0.052163 udp 10.0.2.104 54523 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:15.512011 0.177132 udp 10.0.2.104 54523 <-> 24.201.181.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:16.499671 0.017914 udp 10.0.2.104 54523 <-> 88.132.40.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:17.486154 0.189529 udp 10.0.2.104 54523 <-> 68.185.149.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:18.471811 0.376954 udp 10.0.2.104 54523 <-> 49.159.65.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:19.456138 2.959470 udp 10.0.2.104 54523 -> 76.169.197.34 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:20.437265 0.049417 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:20.929504 0.000000 udp 10.0.2.104 54523 <- 172.162.41.207 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:21.426967 0.151949 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:23.403007 0.000000 udp 10.0.2.104 54523 -> 82.38.6.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:24.389283 0.566762 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:25.374883 0.158213 udp 10.0.2.104 54523 <-> 70.189.41.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:26.359031 0.398639 udp 10.0.2.104 54523 <-> 61.62.110.92 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:27.339970 0.036916 udp 10.0.2.104 54523 <-> 85.229.11.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:28.329610 0.206845 udp 10.0.2.104 54523 <-> 68.35.78.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:29.323696 0.000000 udp 10.0.2.104 54523 -> 93.184.90.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:30.311880 0.304379 udp 10.0.2.104 54523 <-> 190.129.109.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:31.298139 0.608247 udp 10.0.2.104 54523 <-> 186.210.21.146 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:32.283633 0.303004 udp 10.0.2.104 54523 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:33.267935 0.035051 udp 10.0.2.104 54523 <-> 109.202.246.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:34.248615 0.208967 udp 10.0.2.104 54523 <-> 69.181.14.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:35.238324 0.055961 udp 10.0.2.104 54523 <-> 93.183.136.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:36.227073 0.150444 udp 10.0.2.104 54523 <-> 24.214.81.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:37.214474 0.303309 udp 10.0.2.104 54523 <-> 190.136.239.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:38.200975 0.036985 udp 10.0.2.104 54523 <-> 84.196.249.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:39.186067 0.031612 udp 10.0.2.104 54523 <-> 77.236.190.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:40.170656 0.203138 udp 10.0.2.104 54523 <-> 46.48.216.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:41.151250 0.155358 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:28:43.129332 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:44.116745 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:44.116791 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:28:45.103038 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:46.088135 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:47.072157 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:47.715697 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:28:48.052818 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:49.042309 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:50.030688 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:51.017976 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:52.004230 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:52.989022 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:53.973105 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:54.979104 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:55.971361 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:56.959467 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:57.946543 0.000000 udp 10.0.2.104 54523 -> 94.156.153.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:58.932617 0.000000 udp 10.0.2.104 54523 -> 201.68.33.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:28:59.917791 3.942694 udp 10.0.2.104 54523 -> 89.142.152.236 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:00.901932 0.311819 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:01.882646 0.110378 udp 10.0.2.104 54523 <-> 79.50.212.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:02.871990 0.224962 udp 10.0.2.104 54523 <-> 177.230.92.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:04.847785 0.157613 udp 10.0.2.104 54523 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:05.834309 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:06.819314 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:07.803392 0.000067 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:07.803459 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:29:08.784078 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:10.761645 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:11.748860 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:12.734992 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:13.720196 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:14.704334 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:15.684828 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:16.674124 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:17.662245 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:18.649200 0.231135 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:19.635228 0.157192 udp 10.0.2.104 54523 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:20.620266 1.122943 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:22.584714 0.137040 udp 10.0.2.104 54523 <-> 147.194.99.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:23.573855 0.154824 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:24.561969 0.772801 udp 10.0.2.104 54523 <-> 184.63.29.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:25.548895 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:26.535228 0.119776 udp 10.0.2.104 54523 <-> 24.122.170.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:27.520247 0.048460 udp 10.0.2.104 54523 <-> 31.11.133.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:28.504303 0.000000 udp 10.0.2.104 54523 -> 197.7.118.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:29.484744 0.055705 udp 10.0.2.104 54523 <-> 178.148.147.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:30.473890 0.148069 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:31.462131 0.147801 udp 10.0.2.104 54523 <-> 50.4.105.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:32.449189 0.178126 udp 10.0.2.104 54523 <-> 49.205.61.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:33.435207 0.055367 udp 10.0.2.104 54523 <-> 84.236.70.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:34.083201 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:29:34.420337 0.154506 udp 10.0.2.104 54523 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:35.405970 0.288840 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:36.386277 0.000000 udp 10.0.2.104 54523 -> 186.48.217.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:37.375482 2.420199 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:38.363613 0.000000 udp 10.0.2.104 54523 -> 14.97.81.179 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:40.336442 0.342472 udp 10.0.2.104 54523 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:41.321377 2.466758 udp 10.0.2.104 54523 <-> 115.240.5.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:42.305359 0.368063 udp 10.0.2.104 54523 <-> 122.107.150.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:43.285698 0.317875 udp 10.0.2.104 54523 <-> 14.97.65.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:44.275009 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:44.275064 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:29:45.263081 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:46.249757 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:47.235345 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:48.220032 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:49.211071 0.062495 udp 10.0.2.104 54523 <-> 91.90.2.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:50.191350 0.000000 udp 10.0.2.104 54523 -> 70.102.225.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:51.180563 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:52.168745 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:53.155424 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:54.141301 0.000109 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:54.141410 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:29:55.130679 0.284923 udp 10.0.2.104 54523 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:56.121761 0.151975 udp 10.0.2.104 54523 <-> 173.197.148.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:57.101743 0.000000 udp 10.0.2.104 54523 -> 190.201.102.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:29:58.090882 0.552760 udp 10.0.2.104 54523 <-> 92.249.152.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:29:59.078836 0.000000 udp 10.0.2.104 54523 -> 1.162.88.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:00.065618 0.337462 udp 10.0.2.104 54523 <-> 114.36.30.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:01.050924 0.122523 udp 10.0.2.104 54523 <-> 93.85.0.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:02.035658 0.000000 udp 10.0.2.104 54523 -> 117.203.51.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:03.026794 0.174166 udp 10.0.2.104 54523 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:04.007024 0.066072 udp 10.0.2.104 54523 <-> 91.90.2.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:04.995905 0.168662 udp 10.0.2.104 54523 <-> 72.51.46.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:05.983880 0.055205 udp 10.0.2.104 54523 <-> 193.106.25.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:06.970736 0.181920 udp 10.0.2.104 54523 <-> 124.123.172.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:07.956618 0.259196 udp 10.0.2.104 54523 <-> 190.75.83.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:08.941173 0.172469 udp 10.0.2.104 54523 <-> 108.242.151.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:09.932617 0.041744 udp 10.0.2.104 54523 <-> 195.34.119.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:10.912502 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:11.901493 0.137356 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:12.889407 0.000000 udp 10.0.2.104 54523 -> 202.78.81.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:13.876074 0.113804 udp 10.0.2.104 54523 <-> 93.116.24.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:14.861977 0.000000 udp 10.0.2.104 54523 -> 201.210.193.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:15.846625 0.091386 udp 10.0.2.104 54523 <-> 178.204.63.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:16.828560 0.061115 udp 10.0.2.104 54523 <-> 82.229.19.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:17.818312 0.024187 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:18.807214 0.506851 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:19.795110 0.321703 udp 10.0.2.104 54523 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:20.444534 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:30:20.781584 0.222202 udp 10.0.2.104 54523 <-> 71.92.129.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:21.767062 0.145425 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:22.751656 0.179641 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:23.732635 0.083173 udp 10.0.2.104 54523 <-> 85.210.234.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:24.722515 0.047431 udp 10.0.2.104 54523 <-> 77.244.194.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:25.711168 0.000000 udp 10.0.2.104 54523 -> 113.193.43.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:26.698748 0.083460 udp 10.0.2.104 54523 <-> 95.86.74.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:27.685252 0.162795 udp 10.0.2.104 54523 <-> 69.207.82.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:28.674326 0.360762 udp 10.0.2.104 54523 <-> 186.133.241.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:29.658873 0.152539 udp 10.0.2.104 54523 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:30.640256 0.367362 udp 10.0.2.104 54523 <-> 180.148.54.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:31.630028 0.414993 udp 10.0.2.104 54523 <-> 190.112.98.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:32.618720 0.346311 udp 10.0.2.104 54523 <-> 69.221.161.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:33.606389 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:34.593052 0.357114 udp 10.0.2.104 54523 <-> 115.241.150.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:35.578551 0.045938 udp 10.0.2.104 54523 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:36.563027 0.116803 udp 10.0.2.104 54523 <-> 24.141.79.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:37.543943 0.215386 udp 10.0.2.104 54523 <-> 76.87.85.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:38.533623 2.045799 udp 10.0.2.104 54523 <-> 83.97.131.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:39.522366 0.000000 udp 10.0.2.104 54523 -> 50.72.204.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:41.496591 0.000000 udp 10.0.2.104 54523 -> 71.33.134.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:42.482230 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:43.466749 0.000000 udp 10.0.2.104 54523 -> 14.96.48.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:44.447652 0.200305 udp 10.0.2.104 54523 <-> 66.189.217.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:45.437322 3.277375 udp 10.0.2.104 54523 <-> 14.99.37.64 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:46.426092 0.000000 udp 10.0.2.104 54523 -> 119.234.138.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:47.413837 0.165901 udp 10.0.2.104 54523 <-> 49.205.4.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:49.385829 4.005290 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:50.370344 4.933599 udp 10.0.2.104 54523 -> 65.93.171.99 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:51.351195 0.197634 udp 10.0.2.104 54523 <-> 92.224.15.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:52.340967 0.150627 udp 10.0.2.104 54523 <-> 75.180.55.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:54.317311 0.349034 udp 10.0.2.104 54523 <-> 186.89.101.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:56.289493 0.134965 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:30:57.273822 0.000000 udp 10.0.2.104 54523 -> 86.175.28.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:58.254394 0.000000 udp 10.0.2.104 54523 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:30:59.244064 0.000000 udp 10.0.2.104 54523 -> 96.26.92.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:00.232832 0.299325 udp 10.0.2.104 54523 <-> 187.35.225.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:01.220418 0.030321 udp 10.0.2.104 54523 <-> 91.106.225.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:02.206758 0.034357 udp 10.0.2.104 54523 <-> 89.187.226.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:03.192176 0.164839 udp 10.0.2.104 54523 <-> 78.206.76.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:04.176365 0.484499 udp 10.0.2.104 54523 <-> 185.29.13.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:05.156945 0.133361 udp 10.0.2.104 54523 <-> 68.84.122.109 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:06.146359 0.040943 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:06.797641 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:31:07.134919 0.165859 udp 10.0.2.104 54523 <-> 74.56.219.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:08.121966 0.381150 udp 10.0.2.104 54523 <-> 117.222.20.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:09.108455 0.000000 udp 10.0.2.104 54523 -> 223.225.141.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:10.093872 0.062515 udp 10.0.2.104 54523 <-> 194.140.132.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:11.078242 0.040952 udp 10.0.2.104 54523 <-> 178.79.29.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:12.060087 0.367018 udp 10.0.2.104 54523 <-> 114.37.125.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:13.049612 0.044056 udp 10.0.2.104 54523 <-> 5.13.20.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:14.038215 0.000000 udp 10.0.2.104 54523 -> 179.165.203.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:15.025655 0.000000 udp 10.0.2.104 54523 -> 76.226.213.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:16.012048 0.235943 udp 10.0.2.104 54523 <-> 190.72.55.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:16.996947 0.362066 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:17.981338 0.047906 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:18.961828 0.101264 udp 10.0.2.104 54523 <-> 82.102.108.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:19.951170 0.036806 udp 10.0.2.104 54523 <-> 94.21.162.26 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:20.939605 0.138884 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:21.926922 0.356728 udp 10.0.2.104 54523 <-> 37.190.195.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:22.913319 3.669718 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:23.898369 0.071504 udp 10.0.2.104 54523 <-> 79.109.248.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:24.882455 0.146149 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:26.852724 0.000000 udp 10.0.2.104 54523 -> 188.24.136.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:27.840556 0.000000 udp 10.0.2.104 54523 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:28.828050 0.123236 udp 10.0.2.104 54523 <-> 31.181.59.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:29.814431 0.037814 udp 10.0.2.104 54523 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:30.799415 2.353739 udp 10.0.2.104 54523 <-> 37.190.195.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:31.783388 0.046788 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:33.753236 0.201673 udp 10.0.2.104 54523 <-> 50.170.24.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:34.741669 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:35.728990 0.067880 udp 10.0.2.104 54523 <-> 79.109.248.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:36.715103 0.211468 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:37.700445 0.311069 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:38.684440 0.000000 udp 10.0.2.104 54523 -> 74.203.250.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:39.664840 0.000000 udp 10.0.2.104 54523 -> 124.121.79.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:40.654271 0.000000 udp 10.0.2.104 54523 -> 68.192.184.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:41.642359 0.322458 udp 10.0.2.104 54523 <-> 114.176.173.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:42.629294 0.317838 udp 10.0.2.104 54523 <-> 218.149.5.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:43.615407 0.197969 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:44.601786 0.051545 udp 10.0.2.104 54523 <-> 79.101.3.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:45.585503 0.000000 udp 10.0.2.104 54523 -> 114.37.125.76 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:46.565886 0.000000 udp 10.0.2.104 54523 -> 114.140.10.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:47.555105 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:48.543279 0.023431 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:49.530369 2.532500 udp 10.0.2.104 54523 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:50.514373 0.075911 udp 10.0.2.104 54523 <-> 95.95.72.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:51.499439 0.179663 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:52.483385 0.289961 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:53.126735 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:31:53.463785 0.137418 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:54.452993 0.336424 udp 10.0.2.104 54523 <-> 186.91.145.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:55.441163 0.067913 udp 10.0.2.104 54523 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:56.428522 0.238428 udp 10.0.2.104 54523 <-> 203.193.142.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:31:57.414446 0.000000 udp 10.0.2.104 54523 -> 86.168.156.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:58.399417 0.000000 udp 10.0.2.104 54523 -> 190.74.23.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:31:59.383695 3.266211 udp 10.0.2.104 54523 <-> 14.97.50.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:00.364010 0.000000 udp 10.0.2.104 54523 -> 177.51.236.178 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:01.353164 0.000000 udp 10.0.2.104 54523 -> 181.73.72.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:02.341153 0.304220 udp 10.0.2.104 54523 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:03.328286 0.000000 udp 10.0.2.104 54523 -> 177.224.86.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:04.314344 0.168045 udp 10.0.2.104 54523 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:05.299720 0.159402 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:06.283407 0.079097 udp 10.0.2.104 54523 <-> 80.117.95.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:07.263837 0.054135 udp 10.0.2.104 54523 <-> 217.10.134.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:08.252964 0.336848 udp 10.0.2.104 54523 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:09.241113 0.068913 udp 10.0.2.104 54523 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:10.228321 0.000000 udp 10.0.2.104 54523 -> 99.196.156.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:11.214367 0.155634 udp 10.0.2.104 54523 <-> 113.193.42.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:12.200823 0.170811 udp 10.0.2.104 54523 <-> 70.112.106.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:13.079668 2.963537 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:32:13.184904 0.061437 udp 10.0.2.104 54523 <-> 109.194.231.7 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:14.165298 1.891482 udp 10.0.2.104 54523 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:15.154296 0.387365 udp 10.0.2.104 54523 <-> 92.249.152.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:16.142352 0.068086 udp 10.0.2.104 54523 <-> 78.251.143.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:17.129329 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:18.115675 0.191415 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:19.101195 0.032473 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:19.993173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:32:20.092272 1.276814 udp 10.0.2.104 54523 <-> 201.81.27.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:21.072724 0.177974 udp 10.0.2.104 54523 <-> 184.170.169.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:21.589227 0.000000 udp 10.0.2.104 54523 <- 99.196.156.159 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:22.063866 0.271782 udp 10.0.2.104 54523 <-> 186.91.145.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:23.051766 0.067326 udp 10.0.2.104 54523 <-> 78.73.65.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:24.038848 0.036067 udp 10.0.2.104 54523 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:25.024814 0.039730 udp 10.0.2.104 54523 <-> 109.202.246.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:26.009796 0.000000 udp 10.0.2.104 54523 -> 50.143.3.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:27.001157 0.062683 udp 10.0.2.104 54523 <-> 188.24.136.26 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:27.892318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:32:27.981511 1.042657 udp 10.0.2.104 54523 <-> 89.156.165.215 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:29.958623 0.118658 udp 10.0.2.104 54523 <-> 95.59.166.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:30.945773 0.052959 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:31.931624 0.078093 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:32.918177 0.127322 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:33.909355 0.034761 udp 10.0.2.104 54523 <-> 95.88.79.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:34.889384 0.179709 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:35.881705 0.495976 udp 10.0.2.104 54523 <-> 27.3.64.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:36.869478 0.167283 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:37.856216 3.074635 udp 10.0.2.104 54523 <-> 169.244.248.127 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:39.489845 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:32:39.826876 0.353480 udp 10.0.2.104 54523 <-> 190.163.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:41.798038 0.159042 udp 10.0.2.104 54523 <-> 24.201.162.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:42.787122 0.061122 udp 10.0.2.104 54523 <-> 93.134.103.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:43.687727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:32:43.776914 0.175953 udp 10.0.2.104 54523 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:44.763783 0.233854 udp 10.0.2.104 54523 <-> 184.155.114.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:45.749519 0.065388 udp 10.0.2.104 54523 <-> 78.242.194.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:46.734026 0.000000 udp 10.0.2.104 54523 -> 213.192.3.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:47.715225 0.036398 udp 10.0.2.104 54523 <-> 87.207.149.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:48.705219 0.191076 udp 10.0.2.104 54523 <-> 113.193.107.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:49.694037 0.151765 udp 10.0.2.104 54523 <-> 74.195.167.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:50.681491 0.323277 udp 10.0.2.104 54523 <-> 186.91.145.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:51.668131 0.022446 udp 10.0.2.104 54523 <-> 37.24.57.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:52.653644 0.077965 udp 10.0.2.104 54523 <-> 46.118.11.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:53.638044 0.151545 udp 10.0.2.104 54523 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:54.619169 2.344394 udp 10.0.2.104 54523 <-> 183.179.33.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:55.608932 0.217674 udp 10.0.2.104 54523 <-> 186.95.75.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:57.585687 0.157893 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:32:58.572337 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:32:59.557845 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:00.542094 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:01.523105 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:02.512746 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:03.501587 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:04.489216 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:05.475768 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:06.461829 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:07.446167 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:08.426987 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:09.416359 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:10.405208 0.266963 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:11.392889 0.259248 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:12.379403 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:13.364974 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:14.349494 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:15.251087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:33:15.330324 0.154322 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:16.320114 0.298069 udp 10.0.2.104 54523 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:17.309342 0.289649 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:18.296980 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:19.283595 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:20.271808 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:21.256291 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:22.237195 4.938492 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:23.226909 4.933047 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:24.215585 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:24.215636 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:33:25.203294 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:25.852721 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:33:26.189825 0.166382 udp 10.0.2.104 54523 <-> 87.111.109.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:30.130522 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:30.130581 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:33:31.119173 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:32.106408 0.080568 udp 10.0.2.104 54523 <-> 78.251.241.194 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:33.092789 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:35.062844 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:36.043917 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:37.033673 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:38.022104 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:39.009583 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:39.995802 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:40.981131 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:41.965378 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:42.946038 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:43.934979 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:44.923642 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:45.911011 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:46.897455 0.000065 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:46.897520 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:33:47.882733 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:48.866881 1.093784 udp 10.0.2.104 54523 <-> 87.111.109.206 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:50.837059 0.000000 udp 10.0.2.104 54523 -> 217.18.251.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:51.825481 0.037821 udp 10.0.2.104 54523 <-> 89.137.133.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:52.812834 0.232135 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:53.798797 1.126578 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:55.768128 0.000000 udp 10.0.2.104 54523 -> 181.135.0.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:56.748936 0.000000 udp 10.0.2.104 54523 -> 5.103.62.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:33:57.738414 0.592979 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:58.726697 0.050861 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:33:59.713820 1.604089 udp 10.0.2.104 54523 <-> 98.80.235.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:00.702040 0.059117 udp 10.0.2.104 54523 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:01.687466 4.929486 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:02.671448 0.000000 udp 10.0.2.104 54523 -> 77.70.120.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:03.652049 0.989427 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:05.629871 0.040223 udp 10.0.2.104 54523 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:06.788250 0.000000 udp 10.0.2.104 54523 <- 67.167.170.6 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:07.603016 0.063040 udp 10.0.2.104 54523 <-> 78.251.241.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:08.587961 1.193664 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:10.552613 0.291469 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:11.541660 0.160212 udp 10.0.2.104 54523 <-> 50.143.3.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:12.192770 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:34:12.530039 0.000000 udp 10.0.2.104 54523 -> 37.145.43.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:13.516725 0.000000 udp 10.0.2.104 54523 -> 84.118.201.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:14.502904 0.323774 udp 10.0.2.104 54523 <-> 211.105.97.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:15.487937 0.000000 udp 10.0.2.104 54523 -> 31.147.129.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:16.471989 0.178617 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:17.452467 0.194822 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:18.441758 0.000000 udp 10.0.2.104 54523 -> 180.215.60.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:19.429902 0.000000 udp 10.0.2.104 54523 -> 88.16.192.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:20.417301 0.057726 udp 10.0.2.104 54523 <-> 94.176.156.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:21.403431 0.000000 udp 10.0.2.104 54523 -> 88.232.143.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:22.388459 0.301912 udp 10.0.2.104 54523 <-> 88.66.100.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:23.372457 0.358311 udp 10.0.2.104 54523 <-> 79.47.174.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:24.352868 0.539745 udp 10.0.2.104 54523 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:25.342011 0.057998 udp 10.0.2.104 54523 <-> 78.73.215.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:26.330207 0.238644 udp 10.0.2.104 54523 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:27.317325 2.118844 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:28.303390 1.969060 udp 10.0.2.104 54523 -> 181.135.0.72 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:31.252799 0.609464 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:32.242074 0.165386 udp 10.0.2.104 54523 <-> 106.51.31.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:33.230163 0.000000 udp 10.0.2.104 54523 -> 66.168.81.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:34.217340 0.232804 udp 10.0.2.104 54523 <-> 189.193.106.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:35.203431 1.120254 udp 10.0.2.104 54523 <-> 173.238.152.38 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:37.172445 3.018994 udp 10.0.2.104 54523 <-> 5.12.98.148 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:38.152792 0.319557 udp 10.0.2.104 54523 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:39.142010 0.079192 udp 10.0.2.104 54523 <-> 83.20.157.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:41.117093 0.202078 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:42.103406 0.029307 udp 10.0.2.104 54523 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:43.088216 0.024559 udp 10.0.2.104 54523 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:44.071950 0.061329 udp 10.0.2.104 54523 <-> 5.12.98.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:45.052248 0.319754 udp 10.0.2.104 54523 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:46.042021 0.000000 udp 10.0.2.104 54523 -> 173.188.128.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:47.030156 0.000000 udp 10.0.2.104 54523 -> 83.20.157.80 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:48.017293 0.569599 udp 10.0.2.104 54523 <-> 186.81.212.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:49.003088 0.274927 udp 10.0.2.104 54523 <-> 117.200.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:49.988017 0.050761 udp 10.0.2.104 54523 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:50.973004 4.929894 udp 10.0.2.104 54523 <-> 119.14.177.91 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:51.953055 0.000000 udp 10.0.2.104 54523 -> 223.225.141.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:52.941536 0.318116 udp 10.0.2.104 54523 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:53.929327 0.145354 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:54.916859 0.277007 udp 10.0.2.104 54523 <-> 186.81.212.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:56.222403 0.000000 udp 10.0.2.104 54523 <- 119.14.177.91 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:34:56.887643 0.048591 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:57.879688 0.053851 udp 10.0.2.104 54523 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:58.522460 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:34:58.859646 0.082410 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:34:59.848780 0.364829 udp 10.0.2.104 54523 <-> 119.235.84.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:00.836540 0.000000 udp 10.0.2.104 54523 -> 24.89.190.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:01.823320 0.000000 udp 10.0.2.104 54523 -> 50.134.240.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:02.809105 0.310349 udp 10.0.2.104 54523 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:03.793927 0.045475 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:04.784694 0.000000 udp 10.0.2.104 54523 -> 82.102.108.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:05.764777 0.111072 udp 10.0.2.104 54523 <-> 109.185.10.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:06.753757 0.360480 udp 10.0.2.104 54523 <-> 119.235.84.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:07.741657 0.000000 udp 10.0.2.104 54523 -> 187.11.186.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:08.728457 0.132828 udp 10.0.2.104 54523 <-> 24.91.138.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:09.714328 0.000000 udp 10.0.2.104 54523 -> 81.201.145.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:10.698889 0.139780 udp 10.0.2.104 54523 <-> 66.209.141.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:11.689945 0.312803 udp 10.0.2.104 54523 <-> 150.162.97.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:12.669994 1.028065 udp 10.0.2.104 54523 <-> 95.77.141.217 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:14.647580 0.000000 udp 10.0.2.104 54523 -> 76.99.43.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:15.634179 0.026275 udp 10.0.2.104 54523 <-> 149.172.182.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:16.619726 0.000000 udp 10.0.2.104 54523 -> 95.180.177.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:17.604119 0.000000 udp 10.0.2.104 54523 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:18.585194 0.040788 udp 10.0.2.104 54523 <-> 80.78.224.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:19.575264 2.963958 udp 10.0.2.104 54523 <-> 79.46.244.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:20.564093 0.000000 udp 10.0.2.104 54523 -> 181.54.23.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:21.552158 0.000000 udp 10.0.2.104 54523 -> 123.201.123.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:23.525306 0.073020 udp 10.0.2.104 54523 <-> 109.245.61.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:24.510019 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:25.490985 0.000000 udp 10.0.2.104 54523 -> 86.124.224.253 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:26.481534 0.402125 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:27.470252 0.176120 udp 10.0.2.104 54523 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:28.457891 0.172604 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:29.444510 0.061634 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:30.430092 0.165989 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:31.414584 1.128020 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:33.385204 2.963424 udp 10.0.2.104 54523 -> 5.158.15.143 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:34.373982 0.115939 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:35.362080 4.927835 udp 10.0.2.104 54523 <-> 64.53.138.163 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:37.334206 1.965856 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:38.318819 0.175271 udp 10.0.2.104 54523 <-> 49.204.142.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:40.433620 0.000000 udp 10.0.2.104 54523 <- 64.53.138.163 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:41.278692 0.064902 udp 10.0.2.104 54523 <-> 79.115.173.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:42.265931 0.069949 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:43.252890 0.157333 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:44.238408 0.000000 udp 10.0.2.104 54523 -> 66.60.211.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:44.885665 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:35:45.222879 0.442794 udp 10.0.2.104 54523 <-> 14.98.134.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:46.203967 0.225719 udp 10.0.2.104 54523 <-> 200.93.52.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:47.193947 0.090236 udp 10.0.2.104 54523 <-> 82.83.65.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:48.182650 0.335278 udp 10.0.2.104 54523 <-> 76.202.180.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:49.170364 0.055979 udp 10.0.2.104 54523 <-> 87.120.186.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:50.157056 0.507357 udp 10.0.2.104 54523 <-> 117.200.92.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:51.142542 0.000000 udp 10.0.2.104 54523 -> 201.127.143.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:35:52.126974 4.657211 udp 10.0.2.104 54523 <-> 190.249.30.173 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:53.107952 2.780116 udp 10.0.2.104 54523 <-> 200.122.103.137 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:54.100571 0.654662 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:57.560950 1.271465 udp 10.0.2.104 54523 <-> 95.74.171.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:35:59.530760 0.203630 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:00.511433 0.140730 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:01.500946 0.140779 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:02.489850 2.834022 udp 10.0.2.104 54523 <-> 180.215.60.20 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:03.477494 3.985287 udp 10.0.2.104 54523 <-> 193.151.100.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:04.464045 0.139796 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:05.450303 0.141747 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:06.434818 0.031084 udp 10.0.2.104 54523 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:08.405376 0.533677 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:09.396641 1.307764 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:11.374036 0.469351 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:12.359233 3.943852 udp 10.0.2.104 54523 -> 158.58.248.77 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:13.343602 0.000000 udp 10.0.2.104 54523 -> 179.109.142.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:14.324617 0.188620 udp 10.0.2.104 54523 <-> 72.193.224.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:15.314096 0.154377 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:17.289891 0.040730 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:18.279915 0.000000 udp 10.0.2.104 54523 -> 189.191.59.219 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:19.265647 0.044275 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:20.250237 0.297102 udp 10.0.2.104 54523 <-> 117.200.213.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:21.230739 0.000000 udp 10.0.2.104 54523 -> 75.84.97.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:22.220460 2.962482 udp 10.0.2.104 54523 -> 134.3.107.232 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:23.209173 0.119182 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:24.196657 0.409261 udp 10.0.2.104 54523 <-> 200.55.82.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:26.168148 0.101725 udp 10.0.2.104 54523 <-> 188.6.227.241 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:27.152478 0.290909 udp 10.0.2.104 54523 <-> 123.0.101.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:28.133070 0.773131 udp 10.0.2.104 54523 <-> 176.240.109.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:29.122558 0.143943 udp 10.0.2.104 54523 <-> 24.218.164.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:30.109163 0.129487 udp 10.0.2.104 54523 <-> 66.79.242.81 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:31.096732 0.040027 udp 10.0.2.104 54523 <-> 86.126.0.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:31.745959 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:36:32.083109 0.000000 udp 10.0.2.104 54523 -> 186.9.15.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:33.068255 0.000000 udp 10.0.2.104 54523 -> 213.133.17.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:34.052380 0.000000 udp 10.0.2.104 54523 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:35.032935 0.220944 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:36.022247 0.037849 udp 10.0.2.104 54523 <-> 77.242.145.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:37.010514 0.186187 udp 10.0.2.104 54523 <-> 188.2.105.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:37.997920 0.000000 udp 10.0.2.104 54523 -> 124.244.188.138 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:38.984105 0.052735 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:39.968953 0.000000 udp 10.0.2.104 54523 -> 109.67.99.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:40.952962 0.138220 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:41.933954 0.102374 udp 10.0.2.104 54523 <-> 77.40.71.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:42.923291 0.445067 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:43.911904 0.143922 udp 10.0.2.104 54523 <-> 79.31.178.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:44.899042 0.140825 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:45.885097 3.990004 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:46.870116 1.198218 udp 10.0.2.104 54523 <-> 81.201.145.41 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:48.834046 0.000000 udp 10.0.2.104 54523 -> 181.135.0.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:50.812475 0.000000 udp 10.0.2.104 54523 -> 76.110.62.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:51.799498 0.236757 udp 10.0.2.104 54523 <-> 188.53.70.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:52.785536 1.969050 udp 10.0.2.104 54523 -> 202.78.234.118 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:53.770768 0.070489 udp 10.0.2.104 54523 <-> 83.20.157.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:55.735035 0.163176 udp 10.0.2.104 54523 <-> 96.20.25.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:56.724377 0.000000 udp 10.0.2.104 54523 -> 37.254.45.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:57.712799 0.000000 udp 10.0.2.104 54523 -> 180.215.10.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:36:58.699916 0.074566 udp 10.0.2.104 54523 <-> 92.225.190.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:36:59.686051 0.140728 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:00.671057 0.000000 udp 10.0.2.104 54523 -> 192.168.245.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:01.655115 0.167554 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:02.635496 0.096649 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:03.624728 0.264859 udp 10.0.2.104 54523 <-> 115.253.96.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:04.612880 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:05.599981 0.273828 udp 10.0.2.104 54523 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:06.585995 0.100820 udp 10.0.2.104 54523 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:07.571037 0.008509 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:08.555124 0.254843 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:09.535519 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:09.535568 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:37:10.524720 0.046811 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:11.512827 0.000000 udp 10.0.2.104 54523 -> 106.196.68.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:12.499906 0.000000 udp 10.0.2.104 54523 -> 151.16.188.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:13.485980 0.116277 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:14.470711 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:15.454522 0.000000 udp 10.0.2.104 54523 -> 24.135.219.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:16.434974 0.298050 udp 10.0.2.104 54523 <-> 190.74.23.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:17.424250 0.351610 udp 10.0.2.104 54523 <-> 187.24.139.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:18.075345 0.000553 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:37:18.412433 0.144566 udp 10.0.2.104 54523 <-> 67.87.224.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:19.399364 0.153132 udp 10.0.2.104 54523 <-> 24.186.58.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:20.385264 0.347573 udp 10.0.2.104 54523 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:21.370311 1.078403 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:23.334322 0.186571 udp 10.0.2.104 54523 <-> 1.23.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:24.323613 0.080892 udp 10.0.2.104 54523 <-> 151.70.121.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:25.311794 0.051420 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:26.298688 0.195651 udp 10.0.2.104 54523 <-> 72.21.68.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:27.284600 0.000000 udp 10.0.2.104 54523 -> 46.35.110.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:28.269264 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:29.260328 0.176459 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:30.240642 0.443402 udp 10.0.2.104 54523 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:31.229825 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:32.217727 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:33.204425 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:34.190418 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:35.175339 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:36.166552 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:36.166613 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:37:38.135595 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:39.123609 0.341387 udp 10.0.2.104 54523 <-> 201.68.33.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:40.110334 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:41.096099 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:42.080348 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:43.071972 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:44.052144 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:45.041046 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:46.033186 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:47.020304 4.929896 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:48.005927 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:48.990613 0.122486 udp 10.0.2.104 54523 <-> 78.237.79.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:49.971607 0.051050 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:50.961267 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:52.938080 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:53.924424 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:54.910146 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:55.894726 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:37:56.875879 0.050967 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:57.865734 0.159735 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:58.854550 0.408077 udp 10.0.2.104 54523 <-> 201.68.33.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:37:59.842337 0.160669 udp 10.0.2.104 54523 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:00.829122 0.777351 udp 10.0.2.104 54523 <-> 192.95.208.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:01.814983 3.134077 udp 10.0.2.104 54523 <-> 179.44.1.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:02.799676 0.361805 udp 10.0.2.104 54523 <-> 107.28.19.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:03.780618 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:04.433789 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:38:04.770981 0.238176 udp 10.0.2.104 54523 <-> 201.209.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:05.763442 0.104471 udp 10.0.2.104 54523 <-> 87.99.108.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:06.754036 0.159217 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:07.742713 0.218623 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:08.440987 0.011311 udp 10.0.2.104 54585 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 08:38:08.452628 0.000000 udp 10.0.2.104 54586 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:08.728375 0.000000 udp 10.0.2.104 54523 -> 1.172.59.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:09.713105 0.036641 udp 10.0.2.104 54523 <-> 84.196.249.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:10.694719 0.048456 udp 10.0.2.104 54523 <-> 62.195.179.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:11.684638 0.046846 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:12.673328 0.075605 udp 10.0.2.104 54523 <-> 85.204.248.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:13.661045 0.229797 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:14.647646 0.000000 udp 10.0.2.104 54523 -> 187.184.253.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:15.633064 0.162791 udp 10.0.2.104 54523 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:16.617500 0.141452 udp 10.0.2.104 54523 <-> 184.57.25.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:17.600146 0.038581 udp 10.0.2.104 54523 <-> 86.124.7.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:18.590285 0.139958 udp 10.0.2.104 54523 <-> 67.86.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:19.578994 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:21.553131 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:22.538884 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:23.523293 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:24.504272 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:25.495916 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:26.484648 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:27.472422 0.031403 udp 10.0.2.104 54523 <-> 78.97.175.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:28.458988 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:29.444454 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:30.428716 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:31.409897 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:32.399636 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:33.388826 0.206629 udp 10.0.2.104 54523 <-> 98.242.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:34.376167 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:35.362619 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:36.348115 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:37.332473 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:37.332520 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:38:38.313450 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:39.303244 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:40.291957 0.333696 udp 10.0.2.104 54523 <-> 111.118.28.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:41.279598 0.320471 udp 10.0.2.104 54523 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:42.266228 0.145814 udp 10.0.2.104 54523 <-> 65.185.76.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:43.252347 0.141870 udp 10.0.2.104 54523 <-> 71.15.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:44.236561 0.037465 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:45.217415 0.027458 udp 10.0.2.104 54523 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:46.207021 0.268388 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:47.195307 0.000000 udp 10.0.2.104 54523 -> 188.2.254.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:48.182779 0.000000 udp 10.0.2.104 54523 -> 50.148.27.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:49.169348 0.032714 udp 10.0.2.104 54523 <-> 109.199.149.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:50.154726 0.000000 udp 10.0.2.104 54523 -> 2.223.235.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:50.791826 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:38:51.138889 0.299155 udp 10.0.2.104 54523 <-> 177.9.21.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:52.119761 0.000000 udp 10.0.2.104 54523 -> 78.50.27.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:53.109563 0.000000 udp 10.0.2.104 54523 -> 93.143.165.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:54.098249 0.357795 udp 10.0.2.104 54523 <-> 190.74.23.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:55.085527 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:56.071940 0.036323 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:57.057189 0.000000 udp 10.0.2.104 54523 -> 24.77.20.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:38:58.041544 0.141823 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:38:59.022381 0.039282 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:00.012013 0.151478 udp 10.0.2.104 54523 <-> 27.106.2.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:01.000526 0.056793 udp 10.0.2.104 54523 <-> 79.113.221.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:01.987702 0.371989 udp 10.0.2.104 54523 <-> 60.246.152.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:02.974030 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:03.959134 0.476274 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:04.943102 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:05.923314 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:06.912812 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:07.901307 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:08.888605 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:09.874882 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:10.860606 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:11.844673 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:12.825103 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:13.814511 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:14.726152 2.955808 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:39:14.802872 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:15.790155 0.000054 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:15.790209 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:39:16.776131 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:17.761254 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:18.745176 2.957817 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:19.725576 0.175544 udp 10.0.2.104 54523 <-> 142.165.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:20.714807 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:21.633644 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:39:22.690160 0.476069 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:23.676431 0.114227 udp 10.0.2.104 54523 <-> 92.115.249.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:24.661353 1.111372 udp 10.0.2.104 54523 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:25.645127 0.166035 udp 10.0.2.104 54523 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:26.625571 1.614390 udp 10.0.2.104 54523 <-> 84.182.163.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:27.614690 0.048098 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:28.602892 0.325268 udp 10.0.2.104 54523 <-> 92.249.152.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:29.520620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:39:29.590024 1.267910 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:30.576088 0.202767 udp 10.0.2.104 54523 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:31.561298 0.169034 udp 10.0.2.104 54523 <-> 75.66.130.254 16464 CON 0 0 2 388 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:32.545173 0.162788 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:33.525507 0.000000 udp 10.0.2.104 54523 -> 58.146.97.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:34.514755 0.772656 udp 10.0.2.104 54523 <-> 192.95.208.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:35.502891 0.570830 udp 10.0.2.104 54523 <-> 190.142.155.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:36.490037 0.043861 udp 10.0.2.104 54523 <-> 87.171.42.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:37.138991 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:39:37.476055 0.205045 udp 10.0.2.104 54523 <-> 67.168.98.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:38.461493 0.089346 udp 10.0.2.104 54523 <-> 86.104.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:39.445655 0.139448 udp 10.0.2.104 54523 <-> 65.189.203.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:40.425982 0.138456 udp 10.0.2.104 54523 <-> 37.250.73.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:41.415298 0.037709 udp 10.0.2.104 54523 <-> 84.196.249.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:42.403458 0.046424 udp 10.0.2.104 54523 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:43.390617 1.393307 udp 10.0.2.104 54523 <-> 116.202.5.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:44.376620 0.218178 udp 10.0.2.104 54523 <-> 76.170.240.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:45.293540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:39:45.363015 0.173146 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:46.346770 0.025218 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:47.327100 0.000000 udp 10.0.2.104 54523 -> 60.62.93.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:48.316319 2.334420 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:49.304396 0.051065 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:51.277463 0.000000 udp 10.0.2.104 54523 -> 109.194.231.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:52.262756 3.126823 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:53.246708 0.000000 udp 10.0.2.104 54523 -> 190.51.16.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:54.227077 0.286076 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:56.204513 0.000000 udp 10.0.2.104 54523 -> 186.66.206.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:39:57.191566 0.163047 udp 10.0.2.104 54523 <-> 84.240.224.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:58.177693 0.175813 udp 10.0.2.104 54523 <-> 98.165.79.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:39:59.162369 0.167133 udp 10.0.2.104 54523 <-> 69.209.207.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:00.153499 0.506699 udp 10.0.2.104 54523 <-> 124.11.173.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:01.133879 0.000000 udp 10.0.2.104 54523 -> 68.184.206.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:02.123085 0.159987 udp 10.0.2.104 54523 <-> 89.214.182.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:03.111207 0.172542 udp 10.0.2.104 54523 <-> 142.165.23.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:04.098107 0.154601 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:05.083705 0.000000 udp 10.0.2.104 54523 -> 5.13.105.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:06.067835 1.050823 udp 10.0.2.104 54523 <-> 109.60.31.97 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:08.039641 0.000000 udp 10.0.2.104 54523 -> 180.147.116.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:09.028704 0.044295 udp 10.0.2.104 54523 <-> 62.45.129.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:10.016617 0.207919 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:11.003627 0.169651 udp 10.0.2.104 54523 <-> 74.77.226.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:11.989362 0.142646 udp 10.0.2.104 54523 <-> 178.125.164.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:12.973925 0.907655 udp 10.0.2.104 54523 <-> 211.105.150.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:13.965019 0.340852 udp 10.0.2.104 54523 <-> 123.194.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:14.945034 0.152094 udp 10.0.2.104 54523 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:15.933953 0.158130 udp 10.0.2.104 54523 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:16.862475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:40:16.921916 0.384294 udp 10.0.2.104 54523 <-> 190.135.213.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:17.909303 0.353841 udp 10.0.2.104 54523 <-> 111.250.115.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:18.895127 0.312622 udp 10.0.2.104 54523 <-> 116.64.170.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:19.879560 0.145925 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:20.860712 0.000000 udp 10.0.2.104 54523 -> 173.197.240.203 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:21.850768 0.570510 udp 10.0.2.104 54523 <-> 202.29.179.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:22.839775 0.145656 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:23.490467 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:40:23.827513 0.061106 udp 10.0.2.104 54523 <-> 89.32.157.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:24.814264 0.000000 udp 10.0.2.104 54523 -> 114.27.218.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:25.800047 0.042274 udp 10.0.2.104 54523 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:26.784827 0.147165 udp 10.0.2.104 54523 <-> 75.109.133.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:27.765942 0.201106 udp 10.0.2.104 54523 <-> 70.70.162.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:28.756054 0.301934 udp 10.0.2.104 54523 <-> 121.80.163.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:29.745101 0.070990 udp 10.0.2.104 54523 <-> 213.141.44.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:30.732878 0.063450 udp 10.0.2.104 54523 <-> 84.55.12.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:31.719932 0.085510 udp 10.0.2.104 54523 <-> 46.120.136.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:32.705821 0.150194 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:33.690639 0.266585 udp 10.0.2.104 54523 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:34.671652 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:35.661211 0.136006 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:36.649851 0.328436 udp 10.0.2.104 54523 <-> 5.190.123.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:37.637500 0.000000 udp 10.0.2.104 54523 -> 70.83.116.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:38.623970 0.201328 udp 10.0.2.104 54523 <-> 186.85.219.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:39.609534 0.311790 udp 10.0.2.104 54523 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:40.594099 0.130877 udp 10.0.2.104 54523 <-> 216.145.87.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:41.575228 0.069950 udp 10.0.2.104 54523 <-> 84.125.117.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:42.564834 0.000000 udp 10.0.2.104 54523 -> 87.10.29.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:43.553663 0.000000 udp 10.0.2.104 54523 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:44.541470 0.213037 udp 10.0.2.104 54523 <-> 71.92.249.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:45.528111 0.034056 udp 10.0.2.104 54523 <-> 188.254.163.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:46.513660 0.115929 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:47.498197 0.218671 udp 10.0.2.104 54523 <-> 190.78.182.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:48.479615 0.000000 udp 10.0.2.104 54523 -> 213.240.217.135 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:49.469271 0.000000 udp 10.0.2.104 54523 -> 81.93.85.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:50.458062 0.000000 udp 10.0.2.104 54523 -> 175.41.115.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:51.445669 0.000000 udp 10.0.2.104 54523 -> 190.78.190.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:52.432268 0.085401 udp 10.0.2.104 54523 <-> 93.72.70.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:53.417684 0.373248 udp 10.0.2.104 54523 <-> 201.210.219.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:54.402359 0.000000 udp 10.0.2.104 54523 -> 24.22.89.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:55.383231 3.998969 udp 10.0.2.104 54523 <-> 89.46.84.98 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:40:56.372986 4.933051 udp 10.0.2.104 54523 -> 190.78.182.92 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:57.361665 0.000000 udp 10.0.2.104 54523 -> 74.50.139.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:40:58.349350 0.000000 udp 10.0.2.104 54523 -> 79.117.40.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:00.321551 0.024782 udp 10.0.2.104 54523 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:01.538197 0.000000 udp 10.0.2.104 54523 <- 190.78.182.92 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:02.286845 0.000000 udp 10.0.2.104 54523 -> 98.209.156.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:03.276630 0.000000 udp 10.0.2.104 54523 -> 67.8.71.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:04.265846 0.000000 udp 10.0.2.104 54523 -> 92.53.19.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:05.253829 0.092035 udp 10.0.2.104 54523 -> 84.15.55.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:05.345864 0.000000 icmp 84.15.55.41 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:41:06.240646 0.000000 udp 10.0.2.104 54523 -> 68.9.29.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:07.225918 0.115939 udp 10.0.2.104 54523 -> 24.54.63.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:07.341857 0.000000 icmp 24.54.63.108 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:41:08.210224 0.135289 udp 10.0.2.104 54523 -> 24.126.12.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:08.345513 0.000000 icmp 24.126.12.50 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:41:09.191036 0.000000 udp 10.0.2.104 54523 -> 74.50.139.52 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:09.844709 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:41:10.181775 0.133284 udp 10.0.2.104 54523 <-> 176.219.30.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:11.170550 0.000000 udp 10.0.2.104 54523 -> 178.127.188.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:12.158049 2.022121 udp 10.0.2.104 54523 <-> 82.17.168.108 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:13.144500 0.205459 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:15.114421 0.121156 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:16.095183 0.000000 udp 10.0.2.104 54523 -> 98.209.156.213 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:17.084712 0.000000 udp 10.0.2.104 54523 -> 174.36.227.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:18.073635 0.000000 udp 10.0.2.104 54523 -> 84.15.55.41 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:19.061294 0.000000 udp 10.0.2.104 54523 -> 24.54.63.108 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:20.047687 0.200397 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:21.033177 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:22.017291 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:22.017342 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:41:22.998443 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:23.988043 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:24.976749 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:25.964197 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:26.950481 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:27.935678 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:28.919851 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:29.900998 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:30.890737 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:31.879676 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:32.867277 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:33.853394 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:34.838465 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:35.822660 0.550042 udp 10.0.2.104 54523 <-> 92.229.49.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:36.803318 0.105707 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:37.792801 0.113586 udp 10.0.2.104 54523 <-> 82.59.53.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:38.781212 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:39.769164 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:40.755732 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:41.740795 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:42.724934 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:43.705418 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:44.694953 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:45.683229 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:46.670733 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:47.657436 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:48.642346 0.000086 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:48.642432 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:41:50.607010 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:51.596493 0.000000 udp 10.0.2.104 54523 -> 62.212.117.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:52.584662 0.000000 udp 10.0.2.104 54523 -> 109.55.252.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:53.573555 0.000000 udp 10.0.2.104 54523 -> 75.132.170.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:54.559653 1.387098 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:55.544581 0.000000 udp 10.0.2.104 54523 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:41:56.181439 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:41:56.528476 2.021068 udp 10.0.2.104 54523 <-> 86.126.97.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:57.509030 0.150574 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:41:59.486719 0.237591 udp 10.0.2.104 54523 <-> 186.95.70.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:00.473921 0.186259 udp 10.0.2.104 54523 <-> 223.233.244.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:01.460082 0.171029 udp 10.0.2.104 54523 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:02.445011 0.138986 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:03.428999 0.000000 udp 10.0.2.104 54523 -> 24.244.127.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:04.409415 0.170906 udp 10.0.2.104 54523 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:05.398833 0.083936 udp 10.0.2.104 54523 <-> 46.159.200.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:06.387236 0.000000 udp 10.0.2.104 54523 -> 192.95.208.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:07.374349 0.000000 udp 10.0.2.104 54523 -> 61.64.176.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:08.360497 0.000000 udp 10.0.2.104 54523 -> 68.13.253.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:09.346433 0.152151 udp 10.0.2.104 54523 <-> 74.133.226.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:10.330657 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:11.311072 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:12.300709 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:13.288806 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:14.275932 0.162585 udp 10.0.2.104 54523 <-> 72.23.77.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:15.262061 0.363411 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:16.247033 0.154717 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:17.232639 0.243593 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:18.214297 0.000000 udp 10.0.2.104 54523 -> 79.23.195.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:19.203367 0.000000 udp 10.0.2.104 54523 -> 71.59.124.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:20.192456 0.000000 udp 10.0.2.104 54523 -> 212.75.2.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:21.179324 0.000000 udp 10.0.2.104 54523 -> 60.246.187.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:22.167296 0.066103 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:23.152316 0.143915 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:24.143627 0.121473 udp 10.0.2.104 54523 <-> 70.181.57.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:25.124947 0.167346 udp 10.0.2.104 54523 <-> 67.80.121.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:26.114224 0.073655 udp 10.0.2.104 54523 <-> 46.185.23.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:27.102287 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:28.089448 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:29.075326 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:30.060123 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:31.045430 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:32.026159 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:33.015247 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:34.007677 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:34.007727 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:42:34.995042 0.308575 udp 10.0.2.104 54523 <-> 61.70.140.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:35.980577 0.000000 udp 10.0.2.104 54523 -> 95.192.51.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:36.965419 1.202218 udp 10.0.2.104 54523 <-> 71.92.249.207 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:38.936743 0.000000 udp 10.0.2.104 54523 -> 187.55.202.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:39.925694 0.172146 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:40.913706 0.658807 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:41.900934 0.075922 udp 10.0.2.104 54523 <-> 82.228.64.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:42.549695 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:42:42.886832 0.130611 udp 10.0.2.104 54523 <-> 217.203.18.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:43.871597 1.045396 udp 10.0.2.104 54523 <-> 184.63.214.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:44.863713 0.159965 udp 10.0.2.104 54523 <-> 76.188.221.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:45.843883 1.977015 udp 10.0.2.104 54523 <-> 24.164.171.64 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:46.832939 2.069071 udp 10.0.2.104 54523 <-> 213.39.227.60 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:49.793547 0.000000 udp 10.0.2.104 54523 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:50.778548 0.298768 udp 10.0.2.104 54523 <-> 186.138.52.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:51.759827 0.156591 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:52.753130 0.240007 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:53.741860 0.000000 udp 10.0.2.104 54523 -> 99.165.64.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:42:54.730027 0.171265 udp 10.0.2.104 54523 <-> 49.204.100.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:55.716880 0.168802 udp 10.0.2.104 54523 <-> 68.207.184.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:56.702093 0.326854 udp 10.0.2.104 54523 <-> 117.203.253.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:57.686181 0.058028 udp 10.0.2.104 54523 <-> 92.32.25.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:58.667370 0.278160 udp 10.0.2.104 54523 <-> 190.191.235.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:42:59.657433 0.211673 udp 10.0.2.104 54523 <-> 190.72.132.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:00.646272 0.165343 udp 10.0.2.104 54523 <-> 74.79.65.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:01.633947 0.045098 udp 10.0.2.104 54523 <-> 92.36.233.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:02.620809 0.099598 udp 10.0.2.104 54523 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:03.606627 0.537263 udp 10.0.2.104 54523 <-> 69.104.55.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:04.591016 0.372439 udp 10.0.2.104 54523 <-> 190.204.102.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:05.571750 0.053532 udp 10.0.2.104 54523 <-> 31.176.250.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:07.551063 0.206856 udp 10.0.2.104 54523 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:08.538993 0.000000 udp 10.0.2.104 54523 -> 82.238.129.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:09.526214 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:09.526325 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:43:10.511637 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:11.496941 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:12.477725 0.294350 udp 10.0.2.104 54523 <-> 190.191.235.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:13.467746 0.041855 udp 10.0.2.104 54523 <-> 85.228.202.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:14.456517 0.161183 udp 10.0.2.104 54523 <-> 178.122.189.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:15.443866 0.161869 udp 10.0.2.104 54523 <-> 67.166.246.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:16.430331 0.172674 udp 10.0.2.104 54523 <-> 184.49.122.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:17.415862 0.059527 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:18.400594 0.238689 udp 10.0.2.104 54523 <-> 186.89.74.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:19.381682 0.126946 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:20.371505 4.121251 udp 10.0.2.104 54523 <-> 103.250.145.20 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:21.361209 0.145981 udp 10.0.2.104 54523 <-> 174.99.84.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:22.349143 0.061345 udp 10.0.2.104 54523 <-> 93.73.2.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:23.335672 0.155443 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:25.305481 0.193514 udp 10.0.2.104 54523 <-> 1.186.49.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:26.286517 0.310999 udp 10.0.2.104 54523 <-> 81.172.41.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:27.276230 0.393728 udp 10.0.2.104 54523 <-> 49.158.158.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:28.264924 0.292394 udp 10.0.2.104 54523 <-> 187.21.207.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:28.915344 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:43:29.252539 0.166760 udp 10.0.2.104 54523 <-> 68.51.132.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:30.239075 0.166557 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:31.224643 3.376411 udp 10.0.2.104 54523 <-> 31.222.118.75 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:32.210747 0.000000 udp 10.0.2.104 54523 -> 60.34.242.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:33.191659 0.161730 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:35.170554 0.041895 udp 10.0.2.104 54523 <-> 46.40.96.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:36.158385 0.095811 udp 10.0.2.104 54523 <-> 95.74.73.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:37.145328 0.157742 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:38.130834 0.061826 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:39.115119 0.418940 udp 10.0.2.104 54523 <-> 117.203.72.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:40.096436 0.000000 udp 10.0.2.104 54523 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:41.086071 2.556725 udp 10.0.2.104 54523 <-> 200.125.109.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:42.074714 0.000000 udp 10.0.2.104 54523 -> 95.57.180.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:43.062324 0.036745 udp 10.0.2.104 54523 <-> 5.15.202.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:44.048957 0.046034 udp 10.0.2.104 54523 <-> 5.13.151.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:45.035127 0.137078 udp 10.0.2.104 54523 <-> 68.192.174.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:46.019266 0.308060 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:47.000574 0.068970 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:47.990209 0.721709 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:48.978206 0.166460 udp 10.0.2.104 54523 <-> 69.243.139.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:49.965496 0.342218 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:50.952100 0.082357 udp 10.0.2.104 54523 <-> 88.82.203.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:51.937433 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:52.921681 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:52.921741 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:43:54.892310 0.060013 udp 10.0.2.104 54523 <-> 86.124.236.232 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:55.881007 0.054142 udp 10.0.2.104 54523 <-> 79.117.163.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:43:56.868656 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:57.854919 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:58.840223 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:43:59.824558 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:00.805253 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:01.794645 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:02.783128 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:03.770384 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:04.756854 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:05.742181 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:05.742245 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:44:07.706635 0.000000 udp 10.0.2.104 54523 -> 86.124.236.232 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:08.696143 0.054936 udp 10.0.2.104 54523 <-> 79.117.163.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:09.684301 3.944963 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:10.673646 1.060649 udp 10.0.2.104 54523 <-> 201.210.29.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:11.660099 0.063986 udp 10.0.2.104 54523 <-> 79.114.167.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:12.645293 0.000000 udp 10.0.2.104 54523 -> 79.117.106.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:14.610092 0.079638 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:15.262309 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:44:15.599600 1.340575 udp 10.0.2.104 54523 <-> 46.225.93.160 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:17.577529 0.000000 udp 10.0.2.104 54523 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:18.563796 0.273923 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:19.548766 0.176321 udp 10.0.2.104 54523 <-> 71.81.156.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:20.532635 0.000000 udp 10.0.2.104 54523 -> 181.43.43.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:21.513201 0.000000 udp 10.0.2.104 54523 -> 188.49.44.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:22.502082 0.000000 udp 10.0.2.104 54523 -> 190.193.96.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:23.490438 0.060304 udp 10.0.2.104 54523 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:24.477610 0.127605 udp 10.0.2.104 54523 <-> 79.13.75.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:25.464919 0.091300 udp 10.0.2.104 54523 <-> 81.61.64.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:26.452018 0.000000 udp 10.0.2.104 54523 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:27.436304 0.177560 udp 10.0.2.104 54523 <-> 71.81.156.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:28.416768 0.211301 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:29.405964 0.350122 udp 10.0.2.104 54523 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:30.396192 0.275983 udp 10.0.2.104 54523 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:31.383748 0.000000 udp 10.0.2.104 54523 -> 79.113.175.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:32.372523 0.305608 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:33.362511 0.302711 udp 10.0.2.104 54523 <-> 124.123.111.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:34.346789 0.085217 udp 10.0.2.104 54523 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:35.327570 0.190025 udp 10.0.2.104 54523 <-> 75.135.53.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:36.317164 0.052873 udp 10.0.2.104 54523 <-> 94.156.86.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:37.308402 0.144510 udp 10.0.2.104 54523 <-> 65.185.76.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:38.295757 0.216449 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:39.281947 0.066157 udp 10.0.2.104 54523 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:40.267862 1.840544 udp 10.0.2.104 54523 <-> 186.22.10.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:41.251983 0.080061 udp 10.0.2.104 54523 <-> 79.118.138.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:42.232269 0.000000 udp 10.0.2.104 54523 -> 70.83.12.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:43.221676 0.000000 udp 10.0.2.104 54523 -> 67.248.215.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:44.209745 0.189150 udp 10.0.2.104 54523 <-> 209.106.45.86 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:45.197069 0.532486 udp 10.0.2.104 54523 <-> 182.237.185.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:46.183483 0.000000 udp 10.0.2.104 54523 -> 97.68.75.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:47.167915 1.135089 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:49.132969 3.790867 udp 10.0.2.104 54523 <-> 115.242.154.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:50.122060 0.189649 udp 10.0.2.104 54523 <-> 72.9.77.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:51.110295 0.292005 udp 10.0.2.104 54523 <-> 117.204.219.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:52.099044 0.282959 udp 10.0.2.104 54523 <-> 119.240.172.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:53.085980 0.301258 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:54.071071 0.167687 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:55.054749 0.143590 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:56.039304 0.140264 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:57.028799 0.058986 udp 10.0.2.104 54523 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:58.018105 0.229343 udp 10.0.2.104 54523 <-> 209.236.94.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:44:59.005163 0.000000 udp 10.0.2.104 54523 -> 190.103.194.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:44:59.990996 0.263145 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:00.975864 0.149327 udp 10.0.2.104 54523 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:01.612720 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:45:01.959766 1.000217 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:02.940105 0.000000 udp 10.0.2.104 54523 -> 186.147.207.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:03.932512 0.292550 udp 10.0.2.104 54523 <-> 110.233.68.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:04.923270 0.148156 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:05.912472 0.047796 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:06.898597 0.315551 udp 10.0.2.104 54523 <-> 110.134.54.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:07.883296 0.360256 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:08.874855 0.000000 udp 10.0.2.104 54523 -> 184.39.97.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:09.854956 0.071550 udp 10.0.2.104 54523 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:10.844039 0.000000 udp 10.0.2.104 54523 -> 69.24.168.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:11.832393 0.074211 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:12.819234 0.234233 udp 10.0.2.104 54523 <-> 186.92.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:13.805388 0.032035 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:14.790359 0.000000 udp 10.0.2.104 54523 -> 178.85.91.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:15.781181 0.028245 udp 10.0.2.104 54523 <-> 89.135.143.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:16.761157 0.169904 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:17.750197 1.526771 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:19.724989 0.348635 udp 10.0.2.104 54523 <-> 183.100.139.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:20.711595 4.933551 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:21.696279 0.000000 udp 10.0.2.104 54523 -> 95.60.247.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:22.677502 0.150883 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:23.668342 0.000000 udp 10.0.2.104 54523 -> 94.205.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:24.657288 0.073743 udp 10.0.2.104 54523 <-> 92.229.49.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:25.985611 0.000000 udp 10.0.2.104 54523 <- 177.227.216.250 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:26.631952 3.942569 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:27.617620 0.000000 udp 10.0.2.104 54523 -> 189.195.194.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:28.601450 0.162857 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:29.582989 0.000000 udp 10.0.2.104 54523 -> 95.60.247.7 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:31.563330 0.000000 udp 10.0.2.104 54523 -> 1.162.88.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:32.551082 0.000000 udp 10.0.2.104 54523 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:33.537742 0.048384 udp 10.0.2.104 54523 <-> 79.118.98.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:34.523265 0.161975 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:35.508659 0.027899 udp 10.0.2.104 54523 <-> 82.72.62.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:36.489581 0.872369 udp 10.0.2.104 54523 <-> 181.118.86.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:37.479661 0.267973 udp 10.0.2.104 54523 <-> 189.197.37.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:38.468500 0.604494 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:39.456021 0.264056 udp 10.0.2.104 54523 <-> 186.5.116.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:40.442652 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:41.428457 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:42.415516 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:43.396589 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:44.385549 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:45.376260 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:46.364709 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:47.351290 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:47.999592 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:45:48.336636 0.000000 udp 10.0.2.104 54523 -> 201.235.95.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:49.321161 0.052513 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:45:50.302047 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:51.291959 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:52.281008 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:53.268581 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:54.255342 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:55.240884 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:56.225456 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:57.206396 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:58.196530 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:45:59.185168 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:00.172913 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:01.159430 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:01.159486 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:46:03.129297 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:04.110062 0.087885 udp 10.0.2.104 54523 <-> 92.224.77.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:05.099622 0.498666 udp 10.0.2.104 54523 <-> 190.135.227.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:06.088383 0.272824 udp 10.0.2.104 54523 <-> 186.5.116.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:07.076405 0.000000 udp 10.0.2.104 54523 -> 46.37.84.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:08.062849 0.041393 udp 10.0.2.104 54523 <-> 188.99.85.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:09.048224 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:10.032623 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:11.013490 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:12.003613 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:12.992105 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:13.979667 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:14.966230 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:15.894727 2.962115 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:46:15.951610 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:16.935758 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:17.916625 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:18.906399 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:19.894887 4.051558 udp 10.0.2.104 54523 <-> 92.40.234.126 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:20.882175 0.073838 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:21.868818 0.416322 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:22.804515 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:46:22.854091 0.200897 udp 10.0.2.104 54523 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:24.819222 4.146124 udp 10.0.2.104 54523 <-> 49.205.62.126 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:25.809167 0.060626 udp 10.0.2.104 54523 <-> 93.73.2.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:27.785310 0.324947 udp 10.0.2.104 54523 <-> 75.228.14.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:29.756748 0.038429 udp 10.0.2.104 54523 <-> 86.124.250.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:30.691614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:46:30.741204 0.000000 udp 10.0.2.104 54523 -> 69.123.197.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:31.721917 0.090448 udp 10.0.2.104 54523 <-> 92.115.249.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:32.711627 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:33.700307 0.000000 udp 10.0.2.104 54523 -> 186.92.60.28 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:34.350997 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:46:34.688093 1.284348 udp 10.0.2.104 54523 <-> 89.141.65.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:35.674620 0.344202 udp 10.0.2.104 54523 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:36.659733 0.000000 udp 10.0.2.104 54523 -> 223.225.141.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:37.643771 0.225956 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:38.624483 0.186873 udp 10.0.2.104 54523 <-> 78.204.132.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:39.613907 0.000000 udp 10.0.2.104 54523 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:40.602107 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:41.589275 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:42.575399 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:43.560589 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:44.544688 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:45.525453 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:46.475582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:46:46.515204 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:47.503603 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:48.490787 0.000000 udp 10.0.2.104 54523 -> 186.92.60.28 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:49.476745 0.055280 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:50.461665 0.000000 udp 10.0.2.104 54523 -> 216.16.181.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:51.445715 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:52.426543 0.130544 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:53.420159 0.030110 udp 10.0.2.104 54523 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:54.408404 0.193689 udp 10.0.2.104 54523 <-> 72.193.224.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:55.395773 0.000000 udp 10.0.2.104 54523 -> 187.5.165.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:46:56.381936 0.278186 udp 10.0.2.104 54523 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:57.366884 0.183871 udp 10.0.2.104 54523 <-> 24.202.130.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:58.350885 0.312711 udp 10.0.2.104 54523 <-> 200.104.248.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:46:59.331364 0.000000 udp 10.0.2.104 54523 -> 77.52.79.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:00.320651 0.181653 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:01.308940 2.478827 udp 10.0.2.104 54523 <-> 181.53.224.22 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:02.296234 0.256323 udp 10.0.2.104 54523 <-> 117.220.49.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:04.268001 0.997833 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:05.251838 0.050627 udp 10.0.2.104 54523 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:06.232293 0.000000 udp 10.0.2.104 54523 -> 97.71.95.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:07.221694 0.204354 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:08.209725 0.081066 udp 10.0.2.104 54523 <-> 86.126.70.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:09.197468 0.044500 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:10.183484 0.000000 udp 10.0.2.104 54523 -> 80.55.55.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:11.168699 0.177818 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:12.154283 0.255639 udp 10.0.2.104 54523 <-> 201.164.238.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:13.134698 0.046917 udp 10.0.2.104 54523 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:14.123139 0.143465 udp 10.0.2.104 54523 <-> 78.237.79.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:15.111316 0.167896 udp 10.0.2.104 54523 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:16.098376 0.139662 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:17.084453 4.012502 udp 10.0.2.104 54523 <-> 79.115.173.230 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:18.029989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:47:18.069491 0.175575 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:19.053830 0.170816 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:20.034381 0.000000 udp 10.0.2.104 54523 -> 80.183.91.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:20.686462 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:47:22.011776 0.000000 udp 10.0.2.104 54523 -> 97.71.95.226 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:22.998908 0.171215 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:23.985035 0.134913 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:24.970070 0.160520 udp 10.0.2.104 54523 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:25.954032 0.282899 udp 10.0.2.104 54523 <-> 190.193.222.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:26.934442 0.024940 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:27.923617 0.054510 udp 10.0.2.104 54523 <-> 84.236.70.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:28.911913 0.000000 udp 10.0.2.104 54523 -> 5.237.114.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:29.898861 0.019472 udp 10.0.2.104 54523 <-> 161.53.202.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:30.884197 3.954993 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:31.870065 0.117473 udp 10.0.2.104 54523 <-> 92.229.49.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:32.854028 2.984881 udp 10.0.2.104 54523 <-> 89.135.143.58 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:33.834358 0.000000 udp 10.0.2.104 54523 -> 115.241.189.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:36.798395 0.160558 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:37.784511 0.000000 udp 10.0.2.104 54523 -> 91.112.150.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:38.769167 0.031721 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:39.760306 1.209552 udp 10.0.2.104 54523 <-> 31.147.115.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:40.740766 0.000000 udp 10.0.2.104 54523 -> 83.21.64.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:41.729994 0.226327 udp 10.0.2.104 54523 <-> 200.93.91.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:42.718120 1.008590 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:44.690953 0.051491 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:45.675739 0.340052 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:46.666635 0.044646 udp 10.0.2.104 54523 <-> 5.15.162.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:47.647449 0.076352 udp 10.0.2.104 54523 <-> 178.156.117.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:48.636582 0.081751 udp 10.0.2.104 54523 <-> 85.219.21.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:49.624404 0.097939 udp 10.0.2.104 54523 <-> 87.110.62.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:50.611034 0.430137 udp 10.0.2.104 54523 <-> 190.135.213.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:51.597206 0.000000 udp 10.0.2.104 54523 -> 72.199.138.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:52.582028 0.065230 udp 10.0.2.104 54523 <-> 79.115.173.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:53.563473 3.110810 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:54.553658 0.000000 udp 10.0.2.104 54523 -> 179.57.31.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:47:55.542491 0.353461 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:57.518220 0.034671 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:58.504237 0.146069 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:47:59.488921 0.145919 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:00.470194 0.352662 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:01.460045 0.074114 udp 10.0.2.104 54523 <-> 83.213.144.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:02.448978 1.003016 udp 10.0.2.104 54523 <-> 31.185.113.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:03.437027 0.073798 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:04.423909 0.165766 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:05.409602 0.143287 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:06.394174 0.236116 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:07.038195 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:48:07.375064 0.075187 udp 10.0.2.104 54523 <-> 83.213.144.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:08.365380 4.248435 udp 10.0.2.104 54523 <-> 186.136.207.233 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:09.354013 0.529751 udp 10.0.2.104 54523 <-> 92.224.77.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:10.341704 1.307233 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:13.298413 0.069111 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:14.279593 0.143140 udp 10.0.2.104 54523 <-> 70.26.75.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:15.269402 0.257012 udp 10.0.2.104 54523 <-> 186.90.31.45 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:16.258474 0.044485 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:17.246713 0.029154 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:18.233319 0.000000 udp 10.0.2.104 54523 -> 62.18.121.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:19.218774 0.424779 udp 10.0.2.104 54523 <-> 14.98.233.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:20.203401 0.295184 udp 10.0.2.104 54523 <-> 122.210.119.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:21.184374 0.053319 udp 10.0.2.104 54523 <-> 178.254.201.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:22.174371 0.054166 udp 10.0.2.104 54523 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:23.162800 0.000000 udp 10.0.2.104 54523 -> 188.246.92.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:24.150320 0.168158 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:25.137207 0.000000 udp 10.0.2.104 54523 -> 96.56.248.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:26.122721 0.000000 udp 10.0.2.104 54523 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:27.107004 0.682691 udp 10.0.2.104 54523 <-> 75.243.16.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:28.088102 0.141923 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:29.077781 0.000000 udp 10.0.2.104 54523 -> 201.210.246.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:30.066432 0.209247 udp 10.0.2.104 54523 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:31.053952 0.500421 udp 10.0.2.104 54523 <-> 190.51.16.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:32.040661 0.115257 udp 10.0.2.104 54523 <-> 24.36.173.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:33.026153 0.377258 udp 10.0.2.104 54523 <-> 27.2.158.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:34.010729 0.024301 udp 10.0.2.104 54523 <-> 85.130.46.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:34.991791 0.000000 udp 10.0.2.104 54523 -> 14.99.56.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:35.981480 0.000000 udp 10.0.2.104 54523 -> 82.244.177.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:36.969990 0.066165 udp 10.0.2.104 54523 <-> 94.176.156.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:37.959386 0.107759 udp 10.0.2.104 54523 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:38.945831 0.373623 udp 10.0.2.104 54523 <-> 27.2.158.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:39.931457 0.000000 udp 10.0.2.104 54523 -> 5.13.234.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:40.915898 0.000000 udp 10.0.2.104 54523 -> 188.158.227.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:41.896571 0.153035 udp 10.0.2.104 54523 <-> 207.180.74.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:42.886038 0.284692 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:43.875315 0.000000 udp 10.0.2.104 54523 -> 70.185.228.173 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:44.862962 0.058400 udp 10.0.2.104 54523 <-> 94.176.156.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:45.849458 0.000000 udp 10.0.2.104 54523 -> 79.163.35.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:46.834698 0.039926 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:47.820106 0.212232 udp 10.0.2.104 54523 <-> 92.224.77.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:48.803588 0.000000 udp 10.0.2.104 54523 -> 115.242.217.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:49.793380 0.000000 udp 10.0.2.104 54523 -> 71.90.71.217 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:48:50.781999 0.210639 udp 10.0.2.104 54523 <-> 189.193.106.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:51.771940 0.141767 udp 10.0.2.104 54523 <-> 24.148.90.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:52.758268 0.425395 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:53.408133 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:48:53.745214 0.147136 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:54.730349 0.179994 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:55.711416 3.982515 udp 10.0.2.104 54523 <-> 78.90.230.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:56.701182 0.135485 udp 10.0.2.104 54523 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:57.689654 0.029397 udp 10.0.2.104 54523 <-> 78.90.170.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:48:58.677189 0.215560 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:00.648835 0.283825 udp 10.0.2.104 54523 <-> 116.73.207.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:01.632791 4.248333 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:02.615653 0.430639 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:03.605135 0.000000 udp 10.0.2.104 54523 -> 97.106.251.17 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:04.594238 0.036928 udp 10.0.2.104 54523 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:06.568041 0.029583 udp 10.0.2.104 54523 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:07.554584 0.000000 udp 10.0.2.104 54523 -> 180.215.60.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:08.538984 0.064583 udp 10.0.2.104 54523 <-> 82.244.177.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:09.520285 0.060111 udp 10.0.2.104 54523 <-> 5.13.234.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:10.509773 0.411530 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:11.498521 0.126205 udp 10.0.2.104 54523 <-> 158.181.242.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:12.486006 0.163914 udp 10.0.2.104 54523 <-> 65.34.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:13.472323 0.153543 udp 10.0.2.104 54523 <-> 216.115.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:14.457622 0.068257 udp 10.0.2.104 54523 <-> 90.229.139.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:15.441674 0.000000 udp 10.0.2.104 54523 -> 187.25.181.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:16.422454 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:17.412366 0.000000 udp 10.0.2.104 54523 -> 62.21.14.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:18.401128 1.022342 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:20.374683 0.143470 udp 10.0.2.104 54523 <-> 74.78.52.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:21.359789 0.232896 udp 10.0.2.104 54523 <-> 62.31.91.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:22.343694 0.296932 udp 10.0.2.104 54523 <-> 181.31.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:23.324205 0.054261 udp 10.0.2.104 54523 <-> 78.154.189.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:24.313988 0.164599 udp 10.0.2.104 54523 <-> 24.201.181.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:25.302388 0.172283 udp 10.0.2.104 54523 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:26.289553 0.000000 udp 10.0.2.104 54523 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:27.275600 1.969123 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:28.260687 0.308811 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:30.225665 1.038132 udp 10.0.2.104 54523 <-> 78.88.88.154 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:32.203634 0.293008 udp 10.0.2.104 54523 <-> 218.40.70.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:33.190678 0.149811 udp 10.0.2.104 54523 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:34.176737 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:35.161726 0.307680 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:36.145674 0.082327 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:37.130246 0.000000 udp 10.0.2.104 54523 -> 24.178.45.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:38.119467 0.395599 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:39.107680 0.000000 udp 10.0.2.104 54523 -> 24.141.190.165 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:39.757656 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:49:40.094923 0.149549 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:41.080829 0.211399 udp 10.0.2.104 54523 <-> 186.89.101.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:42.065812 0.160829 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:49:43.049896 0.000000 udp 10.0.2.104 54523 -> 217.174.48.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:44.030430 0.000000 udp 10.0.2.104 54523 -> 14.96.34.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:46.008201 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:46.995204 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:46.995283 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:49:47.981412 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:48.965932 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:49.950004 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:50.930390 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:51.919663 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:52.909810 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:53.896850 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:54.883027 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:55.867924 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:56.852075 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:57.832417 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:58.821690 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:49:59.809714 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:00.796843 0.078910 udp 10.0.2.104 54523 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:01.782873 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:02.767826 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:03.751932 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:04.732246 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:05.721562 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:06.712038 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:07.698907 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:09.669463 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:10.653478 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:11.633837 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:12.623099 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:13.611218 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:14.598275 0.000058 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:14.598333 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:50:15.583904 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:16.568787 0.000000 udp 10.0.2.104 54523 -> 85.152.244.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:17.560067 0.035869 udp 10.0.2.104 54523 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:18.540201 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:19.529314 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:20.517257 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:21.504130 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:22.489814 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:23.474433 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:24.455575 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:25.445555 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:26.097523 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:50:26.434634 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:27.422727 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:28.409510 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:29.395208 0.000052 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:29.395260 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:50:30.380018 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:31.361292 0.035095 udp 10.0.2.104 54523 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:32.351262 0.076646 udp 10.0.2.104 54523 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:33.340189 0.000000 udp 10.0.2.104 54523 -> 84.224.226.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:34.328181 0.000000 udp 10.0.2.104 54523 -> 85.152.244.7 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:35.314790 0.139638 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:36.300636 4.124913 udp 10.0.2.104 54523 <-> 46.233.24.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:37.285137 4.017158 udp 10.0.2.104 54523 <-> 188.24.154.55 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:38.266144 0.210122 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:39.256160 0.034810 udp 10.0.2.104 54523 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:42.222858 0.034950 udp 10.0.2.104 54523 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:43.208700 4.931986 udp 10.0.2.104 54523 <-> 68.3.172.85 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:44.193186 0.063954 udp 10.0.2.104 54523 <-> 188.24.154.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:45.174409 0.293215 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:46.164235 0.136962 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:47.153012 0.000000 udp 10.0.2.104 54523 -> 76.115.145.87 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:49.127321 0.074767 udp 10.0.2.104 54523 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:49.508483 0.000000 udp 10.0.2.104 54523 <- 68.3.172.85 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:50.112687 0.206111 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:51.097281 0.052108 udp 10.0.2.104 54523 <-> 188.27.119.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:52.078268 0.000000 udp 10.0.2.104 54523 -> 101.63.75.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:53.068267 0.151593 udp 10.0.2.104 54523 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:54.057070 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:54.057147 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:50:55.044757 0.309473 udp 10.0.2.104 54523 <-> 58.68.94.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:56.031251 0.000000 udp 10.0.2.104 54523 -> 200.7.146.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:57.016744 0.171269 udp 10.0.2.104 54523 <-> 103.250.146.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:50:58.002441 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:58.986574 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:50:59.976386 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:00.966945 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:01.954644 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:02.941182 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:03.926692 0.216519 udp 10.0.2.104 54523 <-> 98.69.141.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:04.911284 0.149542 udp 10.0.2.104 54523 <-> 37.150.85.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:05.892636 0.175910 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:06.882383 3.711864 udp 10.0.2.104 54523 <-> 67.100.230.227 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:07.871069 0.047542 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:08.860522 0.000000 udp 10.0.2.104 54523 -> 200.109.62.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:10.832589 1.428028 udp 10.0.2.104 54523 <-> 201.187.117.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:11.817110 0.214532 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:12.463336 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:51:12.800485 0.034649 udp 10.0.2.104 54523 <-> 213.92.136.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:13.794571 0.132571 udp 10.0.2.104 54523 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:14.784574 0.070259 udp 10.0.2.104 54523 <-> 91.105.64.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:15.772256 0.240604 udp 10.0.2.104 54523 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:16.758061 2.448052 udp 10.0.2.104 54523 <-> 186.188.121.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:17.743453 0.047768 udp 10.0.2.104 54523 <-> 78.157.66.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:18.729619 0.000000 udp 10.0.2.104 54523 -> 86.127.19.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:19.710508 0.044509 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:20.704808 0.197431 udp 10.0.2.104 54523 <-> 98.69.141.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:21.696287 0.859565 udp 10.0.2.104 54523 <-> 80.140.179.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:22.683819 3.219193 udp 10.0.2.104 54523 <-> 71.22.186.158 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:23.672797 0.285793 udp 10.0.2.104 54523 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:24.658271 0.000000 udp 10.0.2.104 54523 -> 190.52.44.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:26.623423 0.366595 udp 10.0.2.104 54523 <-> 177.21.225.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:27.617343 0.108196 udp 10.0.2.104 54523 <-> 37.250.73.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:28.605759 0.108904 udp 10.0.2.104 54523 <-> 176.212.42.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:29.596299 0.996501 udp 10.0.2.104 54523 <-> 201.95.85.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:30.582761 0.368369 udp 10.0.2.104 54523 <-> 112.104.19.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:31.568432 0.129950 udp 10.0.2.104 54523 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:32.552661 3.721626 udp 10.0.2.104 54523 <-> 111.94.65.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:33.533830 0.143391 udp 10.0.2.104 54523 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:34.523410 0.132169 udp 10.0.2.104 54523 <-> 66.117.244.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:35.512260 0.271357 udp 10.0.2.104 54523 <-> 177.192.239.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:36.499717 3.535261 udp 10.0.2.104 54523 <-> 98.222.5.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:37.513911 0.090462 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:38.499180 0.140569 udp 10.0.2.104 54523 <-> 67.103.179.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:39.484751 0.246776 udp 10.0.2.104 54523 <-> 190.77.247.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:40.466295 0.298553 udp 10.0.2.104 54523 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:41.455598 0.000000 udp 10.0.2.104 54523 -> 80.97.242.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:42.443849 0.045683 udp 10.0.2.104 54523 <-> 77.87.8.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:43.432304 0.351221 udp 10.0.2.104 54523 <-> 118.171.79.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:44.418674 0.270557 udp 10.0.2.104 54523 <-> 190.218.165.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:45.404039 0.075574 udp 10.0.2.104 54523 <-> 83.213.199.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:46.388007 0.025938 udp 10.0.2.104 54523 <-> 109.192.130.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:47.371660 0.197324 udp 10.0.2.104 54523 <-> 183.83.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:48.361240 0.000000 udp 10.0.2.104 54523 -> 114.26.249.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:49.349530 0.000000 udp 10.0.2.104 54523 -> 37.212.22.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:50.336568 0.214762 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:51.322688 0.071734 udp 10.0.2.104 54523 <-> 85.225.159.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:52.308639 0.170444 udp 10.0.2.104 54523 <-> 106.51.51.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:53.292637 0.000000 udp 10.0.2.104 54523 -> 78.28.15.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:54.273225 0.858502 udp 10.0.2.104 54523 <-> 190.195.127.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:55.262682 0.120729 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:56.251435 0.194148 udp 10.0.2.104 54523 <-> 173.177.41.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:51:57.238544 0.000000 udp 10.0.2.104 54523 -> 115.242.85.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:58.225148 0.000000 udp 10.0.2.104 54523 -> 82.56.162.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:51:58.873072 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:51:59.210183 0.144831 udp 10.0.2.104 54523 <-> 78.62.30.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:00.197063 0.144844 udp 10.0.2.104 54523 <-> 24.188.50.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:01.177673 2.035371 udp 10.0.2.104 54523 <-> 79.117.216.81 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:02.168970 0.000000 udp 10.0.2.104 54523 -> 135.19.58.208 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:04.146907 0.351878 udp 10.0.2.104 54523 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:05.133044 0.038298 udp 10.0.2.104 54523 <-> 109.192.130.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:06.118050 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:07.102275 0.151317 udp 10.0.2.104 54523 <-> 87.111.111.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:08.082534 0.318093 udp 10.0.2.104 54523 <-> 189.103.8.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:09.071729 0.208902 udp 10.0.2.104 54523 <-> 69.181.14.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:10.059990 0.054134 udp 10.0.2.104 54523 <-> 188.121.26.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:11.046989 0.329262 udp 10.0.2.104 54523 <-> 101.63.72.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:12.032961 0.162213 udp 10.0.2.104 54523 <-> 65.27.180.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:13.018096 0.027693 udp 10.0.2.104 54523 <-> 84.30.232.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:14.001994 4.110291 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:14.982329 0.295149 udp 10.0.2.104 54523 <-> 79.47.174.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:15.971681 0.000000 udp 10.0.2.104 54523 -> 223.225.141.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:16.959914 0.062461 udp 10.0.2.104 54523 <-> 109.194.231.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:18.932997 0.000000 udp 10.0.2.104 54523 -> 188.27.82.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:19.922264 0.206652 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:20.906163 0.130951 udp 10.0.2.104 54523 <-> 79.42.179.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:21.886644 0.054873 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:22.876049 0.166269 udp 10.0.2.104 54523 <-> 106.51.61.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:23.864230 0.308881 udp 10.0.2.104 54523 <-> 119.201.78.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:24.851181 0.050771 udp 10.0.2.104 54523 <-> 89.43.213.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:25.837114 0.366478 udp 10.0.2.104 54523 <-> 2.185.38.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:26.822155 0.333704 udp 10.0.2.104 54523 <-> 114.24.119.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:27.806354 0.000000 udp 10.0.2.104 54523 -> 186.19.71.217 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:28.786732 0.247791 udp 10.0.2.104 54523 <-> 75.228.14.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:29.776288 0.154661 udp 10.0.2.104 54523 <-> 75.115.30.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:30.764463 0.322905 udp 10.0.2.104 54523 <-> 181.166.30.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:31.755288 0.000089 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:31.755377 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:52:32.746358 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:33.732566 0.278575 udp 10.0.2.104 54523 <-> 120.75.17.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:34.718954 0.171620 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:35.699624 0.047739 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:36.691844 0.198262 udp 10.0.2.104 54523 <-> 184.78.5.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:37.680237 0.045273 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:38.667227 0.032342 udp 10.0.2.104 54523 <-> 85.230.84.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:39.653321 0.042423 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:40.639882 0.162106 udp 10.0.2.104 54523 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:41.624049 0.181167 udp 10.0.2.104 54523 <-> 49.206.175.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:42.604807 0.284077 udp 10.0.2.104 54523 <-> 190.73.247.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:43.593922 0.058012 udp 10.0.2.104 54523 <-> 81.224.227.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:44.582405 0.612220 udp 10.0.2.104 54523 <-> 171.207.253.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:45.232279 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:52:45.569383 0.293553 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:46.555172 0.167799 udp 10.0.2.104 54523 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:47.539894 0.449076 udp 10.0.2.104 54523 <-> 190.206.235.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:48.531268 0.059097 udp 10.0.2.104 54523 <-> 46.35.97.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:49.511611 0.204732 udp 10.0.2.104 54523 <-> 190.36.226.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:50.500816 0.102378 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:51.488736 0.045420 udp 10.0.2.104 54523 <-> 178.148.151.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:52.476243 0.000000 udp 10.0.2.104 54523 -> 95.250.102.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:53.462007 0.033346 udp 10.0.2.104 54523 <-> 188.127.96.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:54.446977 4.097494 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:52:55.428127 0.000000 udp 10.0.2.104 54523 -> 85.230.84.251 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:56.130774 0.011517 udp 10.0.2.104 54587 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 08:52:56.142549 0.000000 udp 10.0.2.104 54588 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:57.407163 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:52:59.381472 0.148495 udp 10.0.2.104 54523 <-> 65.27.168.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:00.367393 0.059587 udp 10.0.2.104 54523 <-> 93.105.14.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:01.352128 1.173819 udp 10.0.2.104 54523 <-> 190.219.0.107 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:03.323285 0.050479 udp 10.0.2.104 54523 <-> 79.114.56.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:04.312304 0.000000 udp 10.0.2.104 54523 -> 75.80.119.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:05.300242 0.296837 udp 10.0.2.104 54523 <-> 184.56.142.17 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:06.287006 0.000000 udp 10.0.2.104 54523 -> 190.47.113.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:07.272666 0.000000 udp 10.0.2.104 54523 -> 189.1.24.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:08.257129 0.051976 udp 10.0.2.104 54523 <-> 85.202.146.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:09.237582 0.189911 udp 10.0.2.104 54523 <-> 49.207.219.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:10.227722 0.100584 udp 10.0.2.104 54523 <-> 109.182.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:11.216885 0.127211 udp 10.0.2.104 54523 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:12.203245 0.191019 udp 10.0.2.104 54523 <-> 72.175.118.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:13.190217 0.361206 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:14.178418 0.208729 udp 10.0.2.104 54523 <-> 76.172.91.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:15.167063 0.242823 udp 10.0.2.104 54523 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:16.148405 3.018405 udp 10.0.2.104 54523 <-> 78.28.15.56 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:17.111987 2.959539 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:53:17.138382 0.052039 udp 10.0.2.104 54523 <-> 5.14.170.91 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:18.127056 0.049456 udp 10.0.2.104 54523 <-> 46.9.150.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:20.101279 0.082688 udp 10.0.2.104 54523 <-> 79.108.10.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:21.086814 0.112991 udp 10.0.2.104 54523 <-> 82.48.217.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:22.071279 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:23.052188 0.668205 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:24.022118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:53:24.041952 0.275991 udp 10.0.2.104 54523 <-> 186.5.116.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:25.035203 0.000000 udp 10.0.2.104 54523 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:26.023031 0.059937 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:27.009702 0.036508 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:27.996224 0.000000 udp 10.0.2.104 54523 -> 62.31.91.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:28.982201 0.069454 udp 10.0.2.104 54523 <-> 178.156.117.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:29.964632 0.230728 udp 10.0.2.104 54523 <-> 49.203.247.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:30.954549 2.339419 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:31.606175 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:53:31.923341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:53:31.943165 0.157771 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:33.918880 0.029948 udp 10.0.2.104 54523 <-> 109.192.130.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:34.904417 0.058617 udp 10.0.2.104 54523 <-> 79.118.212.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:35.889043 0.097582 udp 10.0.2.104 54523 <-> 188.2.163.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:36.869936 0.047134 udp 10.0.2.104 54523 <-> 95.155.219.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:37.860560 0.057509 udp 10.0.2.104 54523 <-> 78.246.128.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:38.849410 2.051499 udp 10.0.2.104 54523 <-> 186.18.157.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:39.836933 0.142292 udp 10.0.2.104 54523 <-> 24.47.139.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:40.823601 0.000000 udp 10.0.2.104 54523 -> 189.93.77.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:41.811171 0.072677 udp 10.0.2.104 54523 <-> 90.230.7.90 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:42.795766 0.000000 udp 10.0.2.104 54523 -> 148.241.184.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:43.776716 0.000000 udp 10.0.2.104 54523 -> 122.163.27.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:44.766361 0.212890 udp 10.0.2.104 54523 <-> 190.78.21.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:45.755161 0.161166 udp 10.0.2.104 54523 <-> 75.67.29.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:46.742792 0.208423 udp 10.0.2.104 54523 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:47.709478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:53:47.729287 0.496621 udp 10.0.2.104 54523 <-> 117.195.152.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:48.714831 2.108365 udp 10.0.2.104 54523 <-> 118.136.1.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:49.699216 0.312108 udp 10.0.2.104 54523 <-> 101.63.197.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:50.680232 1.924676 udp 10.0.2.104 54523 <-> 177.106.0.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:51.670066 0.050327 udp 10.0.2.104 54523 <-> 5.14.170.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:52.658758 0.072468 udp 10.0.2.104 54523 <-> 90.229.232.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:53.646399 0.096220 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:54.632939 0.740026 udp 10.0.2.104 54523 <-> 181.165.132.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:55.622289 0.340087 udp 10.0.2.104 54523 <-> 220.142.70.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:56.606691 0.036663 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:53:58.577328 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:59.566010 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:53:59.566083 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:54:00.553661 0.401636 udp 10.0.2.104 54523 <-> 181.54.23.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:01.540383 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:02.525848 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:03.510189 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:04.490981 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:05.480415 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:06.468921 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:07.456549 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:08.442909 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:09.428166 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:10.412533 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:11.393596 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:12.383313 3.950405 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:13.371779 0.000000 udp 10.0.2.104 54523 -> 14.98.167.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:14.359192 0.251049 udp 10.0.2.104 54523 <-> 181.54.23.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:15.347228 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:17.317922 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:17.961765 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:54:18.298867 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:19.278155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:54:19.287982 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:20.277501 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:21.265286 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:22.251413 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:23.236845 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:24.221324 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:26.191096 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:27.179690 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:27.179738 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:54:28.166994 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:29.155627 0.152160 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:30.140684 0.031097 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:31.124617 0.000000 udp 10.0.2.104 54523 -> 14.98.167.245 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:32.105020 0.282760 udp 10.0.2.104 54523 <-> 181.29.200.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:33.094512 0.000000 udp 10.0.2.104 54523 -> 46.214.114.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:34.082838 0.208368 udp 10.0.2.104 54523 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:35.069964 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:36.056138 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:37.041250 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:38.025099 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:39.005586 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:39.994824 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:40.982837 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:41.969822 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:42.957596 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:43.942676 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:44.926594 3.993302 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:45.907041 0.000000 udp 10.0.2.104 54523 -> 111.250.172.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:46.896749 0.000000 udp 10.0.2.104 54523 -> 90.179.72.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:47.884864 2.958147 udp 10.0.2.104 54523 -> 70.76.138.152 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:49.858067 0.181208 udp 10.0.2.104 54523 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:51.827152 0.394485 udp 10.0.2.104 54523 <-> 114.76.142.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:52.807530 0.000000 udp 10.0.2.104 54523 -> 50.134.240.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:53.796699 1.046691 udp 10.0.2.104 54523 <-> 79.118.203.15 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:55.771901 0.157525 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:56.758092 1.968926 udp 10.0.2.104 54523 -> 95.142.184.21 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:54:57.742998 0.332088 udp 10.0.2.104 54523 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:54:59.707405 0.868942 udp 10.0.2.104 54523 <-> 182.188.192.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:00.696594 0.370102 udp 10.0.2.104 54523 <-> 114.76.142.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:01.684862 0.212169 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:02.671884 0.000000 udp 10.0.2.104 54523 -> 90.179.72.172 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:03.658067 0.047794 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:04.305769 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:55:04.643030 0.000000 udp 10.0.2.104 54523 -> 70.76.138.152 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:05.627047 0.345048 udp 10.0.2.104 54523 <-> 111.250.172.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:06.607384 0.256170 udp 10.0.2.104 54523 <-> 81.172.41.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:07.596767 0.067335 udp 10.0.2.104 54523 <-> 85.86.151.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:08.584904 0.000000 udp 10.0.2.104 54523 -> 190.36.123.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:09.571917 0.046122 udp 10.0.2.104 54523 <-> 5.13.20.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:10.557797 0.000000 udp 10.0.2.104 54523 -> 86.124.7.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:11.542637 2.341970 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:12.526300 0.000000 udp 10.0.2.104 54523 -> 82.244.92.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:14.495744 0.178634 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:15.483955 0.000000 udp 10.0.2.104 54523 -> 65.78.102.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:16.470901 0.305690 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:17.456728 0.000000 udp 10.0.2.104 54523 -> 78.130.6.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:18.441598 0.154758 udp 10.0.2.104 54523 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:19.422822 0.000000 udp 10.0.2.104 54523 -> 82.244.92.185 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:20.413096 0.060071 udp 10.0.2.104 54523 <-> 82.224.214.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:21.402430 3.179859 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:22.390183 0.000000 udp 10.0.2.104 54523 -> 65.78.102.25 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:23.377161 1.098484 udp 10.0.2.104 54523 <-> 182.188.192.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:25.347703 0.123499 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:26.328640 0.030675 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:27.318902 0.000000 udp 10.0.2.104 54523 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:28.307857 0.142852 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:29.295814 0.202473 udp 10.0.2.104 54523 <-> 216.105.77.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:30.282638 0.228011 udp 10.0.2.104 54523 <-> 66.186.166.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:31.268489 2.126774 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:32.253076 0.279915 udp 10.0.2.104 54523 <-> 190.245.43.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:34.224129 0.153561 udp 10.0.2.104 54523 <-> 24.154.191.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:35.213342 0.214452 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:36.201160 0.329240 udp 10.0.2.104 54523 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:37.187837 0.702584 udp 10.0.2.104 54523 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:38.173684 0.273832 udp 10.0.2.104 54523 <-> 115.241.171.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:39.158386 0.009751 udp 10.0.2.104 54523 <-> 46.47.161.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:40.139590 0.000000 udp 10.0.2.104 54523 -> 75.185.186.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:41.129462 0.257577 udp 10.0.2.104 54523 <-> 177.227.157.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:42.118576 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:43.106335 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:44.093309 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:45.079043 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:46.064498 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:46.064561 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:55:48.036365 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:49.025054 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:55:50.012712 0.433366 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:50.999606 0.172266 udp 10.0.2.104 54523 <-> 109.182.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:51.985131 2.022257 udp 10.0.2.104 54523 <-> 85.204.248.76 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:52.632624 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:55:52.969681 0.189597 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:54.940936 0.181834 udp 10.0.2.104 54523 <-> 49.207.221.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:55.929629 2.127039 udp 10.0.2.104 54523 <-> 49.204.142.144 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:56.917284 0.043941 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:58.889974 0.286362 udp 10.0.2.104 54523 <-> 110.132.54.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:55:59.874925 0.142531 udp 10.0.2.104 54523 <-> 74.59.191.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:00.855884 0.151878 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:01.845603 0.165331 udp 10.0.2.104 54523 <-> 135.19.188.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:02.834427 0.034551 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:03.822003 2.122080 udp 10.0.2.104 54523 <-> 88.57.184.106 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:04.808465 2.214632 udp 10.0.2.104 54523 <-> 36.86.156.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:07.759485 0.131615 udp 10.0.2.104 54523 <-> 147.194.99.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:08.749183 0.210614 udp 10.0.2.104 54523 <-> 189.194.83.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:09.737932 0.165241 udp 10.0.2.104 54523 <-> 207.134.187.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:10.725483 0.162211 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:11.712102 0.181724 udp 10.0.2.104 54523 <-> 72.197.28.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:12.697642 0.244389 udp 10.0.2.104 54523 <-> 27.106.35.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:13.682197 3.007861 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:14.663073 0.176202 udp 10.0.2.104 54523 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:15.652853 0.054198 udp 10.0.2.104 54523 <-> 84.236.70.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:17.629186 1.285838 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:19.601392 0.311372 udp 10.0.2.104 54523 <-> 75.180.55.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:20.585762 0.000000 udp 10.0.2.104 54523 -> 190.79.104.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:56:21.566717 0.146217 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:22.556421 0.156862 udp 10.0.2.104 54523 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:23.545153 1.019114 udp 10.0.2.104 54523 <-> 217.72.209.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:24.532822 0.182785 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:25.519435 0.000000 udp 10.0.2.104 54523 -> 79.2.136.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:56:26.504678 1.012765 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:28.469808 0.449252 udp 10.0.2.104 54523 <-> 1.186.109.115 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:29.459616 0.000000 udp 10.0.2.104 54523 -> 67.213.111.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:56:30.448301 0.163086 udp 10.0.2.104 54523 <-> 67.34.142.170 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:31.435707 0.323767 udp 10.0.2.104 54523 <-> 68.59.72.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:32.421959 0.000000 udp 10.0.2.104 54523 -> 78.134.0.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:56:33.407585 0.285521 udp 10.0.2.104 54523 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:34.391669 0.047228 udp 10.0.2.104 54523 <-> 130.204.159.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:35.372440 4.524709 udp 10.0.2.104 54523 <-> 109.122.75.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:36.362163 0.102736 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:37.350836 0.000000 udp 10.0.2.104 54523 -> 190.16.175.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:56:38.338600 0.045088 udp 10.0.2.104 54523 <-> 89.0.200.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:38.987773 0.000112 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:56:39.324930 0.248793 udp 10.0.2.104 54523 <-> 190.202.218.13 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:40.310306 0.079826 udp 10.0.2.104 54523 <-> 46.249.179.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:41.296320 0.143595 udp 10.0.2.104 54523 <-> 24.184.114.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:42.277211 0.179999 udp 10.0.2.104 54523 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:43.266917 0.039570 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:44.255345 2.374270 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:45.242762 0.157913 udp 10.0.2.104 54523 <-> 71.234.71.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:47.215962 0.000000 udp 10.0.2.104 54523 -> 87.198.109.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:56:48.200205 0.183548 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:49.180828 0.050228 udp 10.0.2.104 54523 <-> 88.223.54.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:50.170186 0.385833 udp 10.0.2.104 54523 <-> 14.96.48.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:51.158753 0.083475 udp 10.0.2.104 54523 <-> 78.230.89.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:52.146361 0.146495 udp 10.0.2.104 54523 <-> 1.186.109.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:53.132558 0.443754 udp 10.0.2.104 54523 <-> 75.248.210.40 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:54.117634 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:56:55.101526 0.034166 udp 10.0.2.104 54523 <-> 130.204.159.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:56.082006 1.978425 udp 10.0.2.104 54523 -> 61.70.234.252 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:56:57.071596 0.039746 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:56:59.047852 0.000000 udp 10.0.2.104 54523 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:00.033513 0.058513 udp 10.0.2.104 54523 <-> 88.169.89.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:01.019038 0.202881 udp 10.0.2.104 54523 <-> 50.68.79.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:02.003205 0.190602 udp 10.0.2.104 54523 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:02.983984 0.383860 udp 10.0.2.104 54523 <-> 219.77.35.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:03.973262 0.037227 udp 10.0.2.104 54523 <-> 213.114.157.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:04.961494 0.000000 udp 10.0.2.104 54523 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:05.948560 0.047989 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:06.934744 0.000000 udp 10.0.2.104 54523 -> 83.173.169.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:07.919605 0.000000 udp 10.0.2.104 54523 -> 86.121.24.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:08.903635 0.042057 udp 10.0.2.104 54523 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:09.884058 0.000000 udp 10.0.2.104 54523 -> 188.27.165.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:10.873463 0.038724 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:11.861914 0.049239 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:12.849297 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:13.835218 0.216124 udp 10.0.2.104 54523 <-> 177.230.92.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:14.820404 0.000000 udp 10.0.2.104 54523 -> 83.173.169.7 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:15.804765 0.099461 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:16.785205 0.151032 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:17.774680 0.000000 udp 10.0.2.104 54523 -> 173.214.226.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:18.762943 0.048291 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:19.760640 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:20.762402 0.000000 udp 10.0.2.104 54523 -> 89.228.127.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:21.763523 0.038533 udp 10.0.2.104 54523 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:22.764527 0.121981 udp 10.0.2.104 54523 <-> 109.185.10.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:23.756411 0.000000 udp 10.0.2.104 54523 -> 88.9.116.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:24.758034 0.171838 udp 10.0.2.104 54523 <-> 98.157.198.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:25.418600 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:57:25.759104 0.050826 udp 10.0.2.104 54523 <-> 86.123.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:26.760537 0.000000 udp 10.0.2.104 54523 -> 76.115.145.87 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:27.762029 0.073296 udp 10.0.2.104 54523 <-> 95.192.73.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:28.763053 0.213834 udp 10.0.2.104 54523 <-> 177.230.92.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:29.764846 0.000000 udp 10.0.2.104 54523 -> 216.121.192.14 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:30.756545 0.000000 udp 10.0.2.104 54523 -> 86.121.24.242 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:31.758070 0.000000 udp 10.0.2.104 54523 -> 173.214.226.239 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:32.759254 0.266263 udp 10.0.2.104 54523 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:33.761002 0.166433 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:34.762102 0.053565 udp 10.0.2.104 54523 <-> 79.117.146.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:35.763667 0.734332 udp 10.0.2.104 54523 <-> 190.189.201.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:36.764725 0.196259 udp 10.0.2.104 54523 <-> 176.201.221.219 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:37.756448 0.000000 udp 10.0.2.104 54523 -> 71.92.68.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:38.760022 0.130140 udp 10.0.2.104 54523 <-> 79.2.165.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:39.759964 0.000000 udp 10.0.2.104 54523 -> 37.212.22.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:57:40.760982 4.544298 udp 10.0.2.104 54523 <-> 181.225.32.166 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:41.762475 0.049980 udp 10.0.2.104 54523 <-> 91.233.179.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:42.763912 0.166071 udp 10.0.2.104 54523 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:43.765045 1.400095 udp 10.0.2.104 54523 <-> 14.97.212.133 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:45.758285 0.057069 udp 10.0.2.104 54523 <-> 79.116.142.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:46.759471 0.196251 udp 10.0.2.104 54523 <-> 1.186.49.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:47.761073 0.373407 udp 10.0.2.104 54523 <-> 61.59.225.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:48.762320 0.028767 udp 10.0.2.104 54523 <-> 178.48.110.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:49.763936 0.189004 udp 10.0.2.104 54523 <-> 68.2.250.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:50.754953 0.391805 udp 10.0.2.104 54523 <-> 14.99.34.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:51.756518 0.150246 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:52.758073 0.426535 udp 10.0.2.104 54523 <-> 149.172.89.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:53.759516 0.048166 udp 10.0.2.104 54523 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:54.760827 3.462094 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:55.762437 1.337818 udp 10.0.2.104 54523 <-> 118.169.110.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:58.760129 0.049091 udp 10.0.2.104 54523 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:57:59.760099 0.032630 udp 10.0.2.104 54523 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:00.759992 0.345869 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:01.760831 4.997368 udp 10.0.2.104 54523 -> 74.135.11.74 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:02.762560 1.531398 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:04.755588 0.000000 udp 10.0.2.104 54523 -> 74.56.219.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:05.757009 0.154527 udp 10.0.2.104 54523 <-> 50.172.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:07.019020 0.000000 udp 10.0.2.104 54523 <- 74.135.11.74 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:07.759710 0.032688 udp 10.0.2.104 54523 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:08.761290 0.201562 udp 10.0.2.104 54523 <-> 76.172.91.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:09.762491 0.092189 udp 10.0.2.104 54523 <-> 84.125.197.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:10.763986 0.138847 udp 10.0.2.104 54523 <-> 178.121.13.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:11.755179 0.945714 udp 10.0.2.104 54523 <-> 190.39.171.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:12.416045 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:58:12.756630 0.736043 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:13.758174 0.062488 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:14.759764 0.000000 udp 10.0.2.104 54523 -> 2.199.32.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:15.761054 0.177704 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:16.762516 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:17.764069 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:18.755373 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:19.756859 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:20.758379 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:21.759313 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:22.761121 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:23.762678 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:24.764336 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:25.755781 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:26.757052 2.113660 udp 10.0.2.104 54523 <-> 2.199.32.85 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:27.758754 0.000000 udp 10.0.2.104 54523 -> 79.47.59.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:29.761380 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:30.762933 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:31.764355 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:32.755833 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:33.756947 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:34.758713 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:35.759719 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:36.761374 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:37.762927 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:39.755837 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:40.756881 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:40.756963 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:58:41.758607 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:42.760138 0.143113 udp 10.0.2.104 54523 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:43.761239 0.164206 udp 10.0.2.104 54523 <-> 173.18.197.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:44.762780 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:45.764346 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:46.755729 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:47.757489 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:48.758641 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:49.759810 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:50.761802 0.200649 udp 10.0.2.104 54523 <-> 190.36.193.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:51.763017 0.478833 udp 10.0.2.104 54523 <-> 62.68.100.219 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:52.764585 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:53.755891 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:54.757237 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:55.758620 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:58:55.758693 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:58:56.760163 0.104004 udp 10.0.2.104 54523 <-> 94.78.184.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:57.762001 0.250492 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:58.763077 0.367399 udp 10.0.2.104 54523 <-> 189.107.130.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:58:59.413699 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:58:59.764649 0.812806 udp 10.0.2.104 54523 <-> 87.166.201.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:00.763130 0.043799 udp 10.0.2.104 54523 <-> 188.254.253.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:01.767010 0.000000 udp 10.0.2.104 54523 -> 180.215.10.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:03.764644 0.069497 udp 10.0.2.104 54523 <-> 94.78.184.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:04.769999 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:05.769813 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:06.766671 0.000000 udp 10.0.2.104 54523 -> 117.200.172.128 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:07.756112 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:08.757598 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:09.760314 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:10.762996 0.000057 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:10.763053 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:59:11.767411 0.188966 udp 10.0.2.104 54523 <-> 190.218.84.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:12.769372 0.145423 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:13.769029 0.038967 udp 10.0.2.104 54523 <-> 77.238.194.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:14.758317 0.363250 udp 10.0.2.104 54523 <-> 189.107.130.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:15.758534 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:16.758961 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:17.762820 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:18.761954 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:18.762016 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:59:19.766168 0.186948 udp 10.0.2.104 54523 <-> 190.218.84.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:20.765961 0.146423 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:21.756192 0.000000 udp 10.0.2.104 54523 -> 180.215.10.80 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:22.757820 0.000000 udp 10.0.2.104 54523 -> 94.78.184.117 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:23.763073 0.000000 udp 10.0.2.104 54523 -> 188.254.253.101 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:24.766851 0.804400 udp 10.0.2.104 54523 <-> 87.166.201.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:25.767841 0.051943 udp 10.0.2.104 54523 <-> 178.164.167.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:26.766673 0.000000 udp 10.0.2.104 54523 -> 79.163.37.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:27.767204 0.147745 udp 10.0.2.104 54523 <-> 88.169.29.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:28.756178 0.034681 udp 10.0.2.104 54523 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:29.762161 0.310213 udp 10.0.2.104 54523 <-> 61.70.94.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:30.762385 4.169516 udp 10.0.2.104 54523 <-> 188.58.233.106 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:31.762287 0.170505 udp 10.0.2.104 54523 <-> 72.51.46.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:32.761963 0.000000 udp 10.0.2.104 54523 -> 108.172.186.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:34.764774 1.080447 udp 10.0.2.104 54523 <-> 82.244.177.108 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:36.758303 0.239854 udp 10.0.2.104 54523 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:37.758867 0.000000 udp 10.0.2.104 54523 -> 84.54.174.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:38.760541 0.149758 udp 10.0.2.104 54523 <-> 24.225.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:39.761896 1.057189 udp 10.0.2.104 54523 <-> 70.237.37.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:40.763164 1.001623 udp 10.0.2.104 54523 -> 179.91.219.88 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:42.756165 0.315046 udp 10.0.2.104 54523 <-> 37.215.190.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:43.757940 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:44.758944 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:45.760720 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:46.423810 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:59:46.764220 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:47.763390 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:48.764824 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:49.756569 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:50.757535 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:51.759232 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:52.760527 3.995653 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:53.762350 0.427985 udp 10.0.2.104 54523 <-> 37.215.190.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 08:59:54.763585 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:55.764818 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:57.757938 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:58.759218 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 08:59:59.760840 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:00.762245 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:01.763720 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:02.764699 0.000075 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:02.764774 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:00:03.756338 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:04.758033 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:05.759110 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:06.760766 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:07.762311 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:08.763810 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:09.765034 0.000000 udp 10.0.2.104 54523 -> 92.129.11.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:10.758690 0.302284 udp 10.0.2.104 54523 <-> 189.111.16.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:11.758482 0.121117 udp 10.0.2.104 54523 <-> 24.122.51.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:12.759183 0.000000 udp 10.0.2.104 54523 -> 176.200.111.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:13.760759 0.134761 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:14.762169 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:15.763502 0.000000 udp 10.0.2.104 54523 -> 190.235.173.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:16.764808 0.031737 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:17.756718 0.163775 udp 10.0.2.104 54523 <-> 173.18.197.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:18.759903 0.048164 udp 10.0.2.104 54523 <-> 213.65.135.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:19.760048 0.000000 udp 10.0.2.104 54523 -> 89.99.86.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:20.760930 0.301554 udp 10.0.2.104 54523 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:21.762327 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:22.763169 0.123451 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:23.754963 0.041498 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:24.756685 0.000000 udp 10.0.2.104 54523 -> 179.216.83.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:25.758090 0.000000 udp 10.0.2.104 54523 -> 78.0.29.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:26.759506 0.064597 udp 10.0.2.104 54523 <-> 90.236.33.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:27.760992 0.931781 udp 10.0.2.104 54523 <-> 1.22.174.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:28.763524 0.192047 udp 10.0.2.104 54523 <-> 50.0.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:29.763875 0.162381 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:30.755143 0.164139 udp 10.0.2.104 54523 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:31.758367 0.482122 udp 10.0.2.104 54523 <-> 86.38.55.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:32.758296 0.000000 udp 10.0.2.104 54523 -> 76.183.28.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:33.419020 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:00:33.759653 0.157816 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:34.761061 0.000000 udp 10.0.2.104 54523 -> 189.79.96.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:35.762388 1.993410 udp 10.0.2.104 54523 -> 213.231.164.138 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:36.763755 0.058227 udp 10.0.2.104 54523 <-> 93.79.133.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:38.756908 1.663757 udp 10.0.2.104 54523 <-> 201.210.246.46 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:39.758138 0.156747 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:40.759090 0.094464 udp 10.0.2.104 54523 <-> 92.41.198.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:41.761478 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:42.762468 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:43.764036 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:43.766743 3.001353 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:00:44.755859 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:45.757252 0.000044 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:45.757296 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:00:47.759529 3.004445 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:48.761316 0.078544 udp 10.0.2.104 54523 <-> 89.132.33.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:49.762510 3.056103 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:00:50.773947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:00:51.755257 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:53.758386 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:54.759831 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:55.761498 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:56.762736 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:57.764063 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:00:58.775487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:00:59.756965 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:00.758517 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:01.759839 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:02.762965 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:02.763014 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:01:03.762605 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:04.767941 0.090495 udp 10.0.2.104 54523 <-> 89.132.33.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:05.758028 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:06.762196 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:07.762726 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:08.760118 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:09.761480 3.995676 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:10.762742 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:11.764632 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:11.764698 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:01:12.755769 0.061066 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:14.760979 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:14.780962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:01:15.763026 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:16.762897 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:17.763644 0.146183 udp 10.0.2.104 54523 <-> 74.59.191.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:18.764312 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:19.762001 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:20.420223 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:01:20.759400 0.000083 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:20.759483 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:01:21.758561 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:22.760079 3.996539 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:23.763333 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:24.767524 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:25.766953 0.298556 udp 10.0.2.104 54523 <-> 106.185.9.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:27.760435 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:28.767913 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:28.768001 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:01:29.775822 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:30.777715 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:31.777766 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:32.773815 3.986472 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:33.762579 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:34.760734 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:35.758741 0.060958 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:37.762089 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:38.763249 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:39.772322 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:39.772371 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:01:40.760577 0.000000 udp 10.0.2.104 54523 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:41.759242 0.298606 udp 10.0.2.104 54523 <-> 106.185.9.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:42.758522 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:43.763433 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:44.762510 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:45.768813 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:46.768048 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:01:46.788126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:01:47.758098 0.061711 udp 10.0.2.104 54523 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:48.758086 0.036056 udp 10.0.2.104 54523 <-> 130.204.64.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:49.758677 0.197892 udp 10.0.2.104 54523 <-> 50.0.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:50.760422 0.172095 udp 10.0.2.104 54523 <-> 49.205.61.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:51.761591 0.156579 udp 10.0.2.104 54523 <-> 24.148.135.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:52.763418 0.069316 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:53.764800 1.247970 udp 10.0.2.104 54523 <-> 187.18.151.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:54.756199 0.174765 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:55.757384 0.327006 udp 10.0.2.104 54523 <-> 190.190.110.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:56.758902 0.179513 udp 10.0.2.104 54523 <-> 76.92.224.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:57.760412 0.234880 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:58.761870 0.134024 udp 10.0.2.104 54523 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:01:59.763261 0.000000 udp 10.0.2.104 54523 -> 87.18.198.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:00.764813 0.044714 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:01.756725 0.333201 udp 10.0.2.104 54523 <-> 211.211.69.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:02.757823 0.192216 udp 10.0.2.104 54523 <-> 75.34.184.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:03.758796 0.350123 udp 10.0.2.104 54523 -> 113.182.171.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:04.108919 0.000000 icmp 113.182.171.180 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 09:02:04.760304 0.045455 udp 10.0.2.104 54523 <-> 5.13.105.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:05.761761 0.099944 udp 10.0.2.104 54523 <-> 77.121.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:06.763467 0.144420 udp 10.0.2.104 54523 <-> 67.80.121.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:07.413990 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:02:07.764669 0.122293 udp 10.0.2.104 54523 <-> 90.232.104.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:08.756084 0.404599 udp 10.0.2.104 54523 <-> 190.38.66.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:09.757791 0.179835 udp 10.0.2.104 54523 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:10.758978 0.138339 udp 10.0.2.104 54523 <-> 77.210.91.28 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:11.760406 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:12.761920 4.062776 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:13.763189 0.179130 udp 10.0.2.104 54523 <-> 24.200.185.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:14.764937 1.749031 udp 10.0.2.104 54523 <-> 182.188.192.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:17.759084 0.487271 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:18.760436 0.031673 udp 10.0.2.104 54523 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:19.762326 0.123218 udp 10.0.2.104 54523 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:20.763604 0.596168 udp 10.0.2.104 54523 <-> 115.240.43.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:21.764579 0.129000 udp 10.0.2.104 54523 <-> 174.66.197.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:22.756358 1.169549 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:24.759031 0.044437 udp 10.0.2.104 54523 <-> 77.88.129.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:25.760494 0.296000 udp 10.0.2.104 54523 <-> 153.164.223.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:26.762022 0.185888 udp 10.0.2.104 54523 <-> 76.92.224.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:27.763519 0.000000 udp 10.0.2.104 54523 -> 123.201.251.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:28.765160 0.498612 udp 10.0.2.104 54523 <-> 24.49.211.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:29.756613 0.346812 udp 10.0.2.104 54523 <-> 114.43.0.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:30.758163 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:31.758983 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:32.760955 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:33.762098 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:34.763509 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:35.764823 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:36.756430 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:37.758570 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:38.759334 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:39.760686 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:40.762419 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:41.763751 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:42.765099 0.175049 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:43.756478 0.382180 udp 10.0.2.104 54523 <-> 114.43.0.30 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:44.758095 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:45.759268 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:46.760866 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:47.762495 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:48.763443 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:49.765089 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:50.756539 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:51.758078 0.164248 udp 10.0.2.104 54523 <-> 71.234.71.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:52.759305 0.230261 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:53.760803 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:54.421111 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:02:54.762087 0.092480 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:02:55.763338 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:56.755128 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:56.755202 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:02:58.758238 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:02:59.759341 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:00.760980 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:01.762422 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:02.763663 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:03.755092 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:04.756724 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:05.758529 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:06.759643 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:07.760912 0.000000 udp 10.0.2.104 54523 -> 79.176.13.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:08.762757 0.142774 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:09.763200 4.997755 udp 10.0.2.104 54523 <-> 86.121.142.131 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:10.755320 0.053003 udp 10.0.2.104 54523 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:11.756704 0.263416 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:12.758015 0.000000 udp 10.0.2.104 54523 -> 190.207.157.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:13.759653 2.002747 udp 10.0.2.104 54523 <-> 79.176.13.149 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:16.764312 0.000000 udp 10.0.2.104 54523 -> 180.199.214.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:17.755480 0.166501 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:18.756938 2.025249 udp 10.0.2.104 54523 <-> 78.42.232.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:19.758058 0.000000 udp 10.0.2.104 54523 -> 40.134.64.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:21.761363 0.357331 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:22.763130 0.000000 udp 10.0.2.104 54523 -> 24.84.162.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:23.763721 0.049188 udp 10.0.2.104 54523 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:24.755286 0.140577 udp 10.0.2.104 54523 <-> 47.17.106.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:25.756809 2.037462 udp 10.0.2.104 54523 <-> 37.4.241.242 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:26.758520 0.154230 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:28.761225 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:29.762636 0.858487 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:30.764018 0.000000 udp 10.0.2.104 54523 -> 40.134.64.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:31.755720 0.080606 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:32.756777 0.230819 udp 10.0.2.104 54523 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:33.758738 0.000000 udp 10.0.2.104 54523 -> 46.214.114.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:34.759870 0.000000 udp 10.0.2.104 54523 -> 24.84.162.11 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:35.761493 3.389456 udp 10.0.2.104 54523 <-> 186.206.236.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:36.762733 0.000000 udp 10.0.2.104 54523 -> 49.203.247.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:38.755793 0.097925 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:39.757238 0.164884 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:40.758524 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:41.419344 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:03:41.760053 2.110081 udp 10.0.2.104 54523 <-> 186.136.183.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:42.761406 0.069543 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:43.762795 0.000000 udp 10.0.2.104 54523 -> 190.225.234.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:44.763921 0.053652 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:45.755569 0.000000 udp 10.0.2.104 54523 -> 72.199.138.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:46.757078 1.506010 udp 10.0.2.104 54523 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:47.758697 0.047058 udp 10.0.2.104 54523 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:48.760141 0.633808 udp 10.0.2.104 54523 <-> 65.15.129.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:49.761449 0.933315 udp 10.0.2.104 54523 <-> 62.93.121.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:50.762817 0.073349 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:51.764115 0.051501 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:52.755403 0.146044 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:53.757132 0.000000 udp 10.0.2.104 54523 -> 87.97.201.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:54.758751 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:55.759960 0.029891 udp 10.0.2.104 54523 <-> 77.238.194.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:56.761464 2.104057 udp 10.0.2.104 54523 <-> 190.150.96.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:57.762872 0.308078 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:03:58.764199 0.000000 udp 10.0.2.104 54523 -> 190.195.127.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:03:59.755852 0.416808 udp 10.0.2.104 54523 <-> 75.143.122.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:00.757183 0.595562 udp 10.0.2.104 54523 <-> 179.208.248.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:01.758727 1.147154 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:03.761345 0.000000 udp 10.0.2.104 54523 -> 41.102.155.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:04.762985 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:05.764407 0.211230 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:06.755712 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:07.757210 0.000000 udp 10.0.2.104 54523 -> 2.199.24.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:08.758748 0.146192 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:09.760384 0.266106 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:10.761379 0.968215 udp 10.0.2.104 54523 <-> 190.105.68.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:11.762983 0.198058 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:12.764318 0.073999 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:13.755834 0.000000 udp 10.0.2.104 54523 -> 46.35.173.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:14.757252 0.065421 udp 10.0.2.104 54523 <-> 77.47.75.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:15.758736 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:16.760214 0.384655 udp 10.0.2.104 54523 <-> 115.244.238.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:17.762175 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:18.763004 0.303580 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:19.764475 0.116984 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:20.756183 0.382167 udp 10.0.2.104 54523 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:21.757246 0.114925 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:22.759032 0.150041 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:23.760486 0.348803 udp 10.0.2.104 54523 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:24.761968 0.079375 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:25.762907 0.076161 udp 10.0.2.104 54523 <-> 78.204.132.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:26.764752 0.000000 udp 10.0.2.104 54523 -> 190.198.69.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:27.756327 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:28.416791 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:04:28.757391 0.359045 udp 10.0.2.104 54523 <-> 1.23.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:29.758864 0.135948 udp 10.0.2.104 54523 <-> 47.16.108.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:30.760328 0.151758 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:31.761729 0.000000 udp 10.0.2.104 54523 -> 84.123.105.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:32.763306 0.173665 udp 10.0.2.104 54523 <-> 72.183.243.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:33.764582 0.096981 udp 10.0.2.104 54523 <-> 81.61.64.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:34.756599 0.000000 udp 10.0.2.104 54523 -> 213.60.73.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:35.757812 0.000000 udp 10.0.2.104 54523 -> 81.227.139.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:36.758788 0.000000 udp 10.0.2.104 54523 -> 89.141.65.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:37.760347 0.000000 udp 10.0.2.104 54523 -> 173.8.32.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:38.761911 4.996824 udp 10.0.2.104 54523 -> 66.215.40.31 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:39.763179 0.000000 udp 10.0.2.104 54523 -> 85.48.232.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:40.764884 1.046418 udp 10.0.2.104 54523 <-> 85.122.141.77 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:41.756160 1.000900 udp 10.0.2.104 54523 -> 50.55.237.122 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:44.760323 0.033713 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:45.762117 0.043607 udp 10.0.2.104 54523 <-> 5.15.162.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:46.763237 0.196938 udp 10.0.2.104 54523 <-> 46.48.216.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:47.764648 0.136861 udp 10.0.2.104 54523 <-> 47.16.108.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:48.756300 1.026688 udp 10.0.2.104 54523 <-> 80.99.14.128 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:50.758971 0.037421 udp 10.0.2.104 54523 <-> 5.15.8.120 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:51.760596 0.117257 udp 10.0.2.104 54523 <-> 24.229.141.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:52.761537 0.000000 udp 10.0.2.104 54523 -> 5.66.231.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:53.763772 0.699924 udp 10.0.2.104 54523 <-> 190.39.171.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:54.764841 3.355550 udp 10.0.2.104 54523 <-> 89.141.65.240 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:55.756174 3.496531 udp 10.0.2.104 54523 <-> 85.122.141.77 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:04:57.759091 0.000000 udp 10.0.2.104 54523 -> 50.55.237.122 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:04:59.762046 0.024156 udp 10.0.2.104 54523 <-> 80.99.14.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:00.763511 0.000000 udp 10.0.2.104 54523 -> 66.215.40.31 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:01.764971 3.087297 udp 10.0.2.104 54523 <-> 89.141.65.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:02.756454 0.000000 udp 10.0.2.104 54523 -> 173.8.32.25 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:04.759014 0.000000 udp 10.0.2.104 54523 -> 190.121.66.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:05.760594 0.000000 udp 10.0.2.104 54523 -> 118.6.66.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:06.762442 0.000000 udp 10.0.2.104 54523 -> 213.60.73.101 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:07.762986 0.025049 udp 10.0.2.104 54523 <-> 62.45.13.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:08.764974 0.058060 udp 10.0.2.104 54523 <-> 78.203.12.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:09.756264 0.207600 udp 10.0.2.104 54523 <-> 190.38.83.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:10.758442 0.059933 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:11.759400 0.347469 udp 10.0.2.104 54523 <-> 39.1.3.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:12.760720 0.271885 udp 10.0.2.104 54523 <-> 201.209.247.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:13.762302 0.174605 udp 10.0.2.104 54523 <-> 98.223.2.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:14.763348 0.155935 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:15.432321 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:05:15.782077 3.031325 udp 10.0.2.104 54523 <-> 95.76.197.77 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:16.770183 3.417564 udp 10.0.2.104 54523 <-> 179.211.249.83 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:17.768047 0.298603 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:20.762356 0.038132 udp 10.0.2.104 54523 <-> 212.117.58.48 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:21.763661 0.000000 udp 10.0.2.104 54523 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:22.764642 0.193797 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:23.756400 1.014637 udp 10.0.2.104 54523 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:24.758100 0.075697 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:25.759406 0.000000 udp 10.0.2.104 54523 -> 46.176.76.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:26.761047 0.220786 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:27.762201 0.209752 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:28.763339 0.041315 udp 10.0.2.104 54523 <-> 83.253.100.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:29.754767 0.127701 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:30.756713 0.043473 udp 10.0.2.104 54523 <-> 46.35.173.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:31.758056 0.320980 udp 10.0.2.104 54523 <-> 186.92.139.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:32.759342 0.194638 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:33.761162 0.119829 udp 10.0.2.104 54523 <-> 89.229.49.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:34.762086 0.000000 udp 10.0.2.104 54523 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:35.763425 0.000000 udp 10.0.2.104 54523 -> 83.80.157.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:36.755007 0.144695 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:37.756504 0.237909 udp 10.0.2.104 54523 <-> 186.92.164.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:38.758100 0.179007 udp 10.0.2.104 54523 <-> 189.220.27.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:39.759476 2.050681 udp 10.0.2.104 54523 <-> 78.73.215.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:40.760886 0.000000 udp 10.0.2.104 54523 -> 208.125.109.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:42.764066 0.157038 udp 10.0.2.104 54523 <-> 75.108.181.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:43.755241 0.050715 udp 10.0.2.104 54523 <-> 86.126.97.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:44.756692 0.159639 udp 10.0.2.104 54523 <-> 98.223.2.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:45.758083 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:46.759712 3.998936 udp 10.0.2.104 54523 -> 86.124.151.247 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:47.761159 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:48.762284 0.000000 udp 10.0.2.104 54523 -> 190.103.194.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:49.764132 0.300193 udp 10.0.2.104 54523 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:51.758495 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:52.758082 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:53.759562 0.140045 udp 10.0.2.104 54523 <-> 151.63.121.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:54.761042 0.163793 udp 10.0.2.104 54523 <-> 78.251.168.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:55.762515 0.189046 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:56.766228 0.015683 udp 10.0.2.104 54523 <-> 164.8.214.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:57.756302 4.009570 udp 10.0.2.104 54523 -> 128.177.76.205 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:05:58.766596 0.052990 udp 10.0.2.104 54523 <-> 89.234.212.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:05:59.764569 0.302234 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:00.762258 4.994583 udp 10.0.2.104 54523 <-> 14.96.51.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:02.423792 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:06:02.763131 0.000000 udp 10.0.2.104 54523 -> 24.126.146.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:03.763978 0.152367 udp 10.0.2.104 54523 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:04.755678 0.137843 udp 10.0.2.104 54523 <-> 24.187.116.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:06.183852 0.000035 udp 10.0.2.104 54523 <- 14.96.51.28 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:06.758527 4.996835 udp 10.0.2.104 54523 -> 201.208.23.136 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:07.759626 0.062491 udp 10.0.2.104 54523 <-> 89.230.29.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:08.764361 0.080635 udp 10.0.2.104 54523 <-> 78.134.0.39 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:09.763991 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:10.764310 0.049805 udp 10.0.2.104 54523 <-> 212.45.82.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:12.757189 0.317242 udp 10.0.2.104 54523 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:13.758772 0.000000 udp 10.0.2.104 54523 -> 87.10.245.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:14.760185 0.147203 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:15.761102 0.579603 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:16.762851 0.406705 udp 10.0.2.104 54523 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:17.764359 2.112983 udp 10.0.2.104 54523 <-> 37.190.195.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:18.758019 0.127001 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:20.762497 0.094699 udp 10.0.2.104 54523 <-> 77.121.85.124 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:21.762441 1.043964 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:23.763081 4.997030 udp 10.0.2.104 54523 -> 91.116.202.247 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:24.764382 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:25.758559 0.194311 udp 10.0.2.104 54523 <-> 70.45.158.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:26.758383 0.622508 udp 10.0.2.104 54523 <-> 62.93.121.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:27.758578 3.150089 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:29.761120 0.044727 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:31.296209 0.000000 udp 10.0.2.104 54523 <- 91.116.202.247 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:31.764648 0.298499 udp 10.0.2.104 54523 <-> 49.206.8.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:32.756132 0.000000 udp 10.0.2.104 54523 -> 71.77.141.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:33.757013 0.150373 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:34.758510 0.281610 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:35.760203 1.251386 udp 10.0.2.104 54523 <-> 109.53.223.100 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:37.762801 0.023579 udp 10.0.2.104 54523 <-> 80.98.204.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:38.764313 0.000000 udp 10.0.2.104 54523 -> 80.164.97.146 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:39.756099 0.163683 udp 10.0.2.104 54523 <-> 67.247.169.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:40.757342 0.137590 udp 10.0.2.104 54523 <-> 98.27.34.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:41.758634 0.067831 udp 10.0.2.104 54523 <-> 84.126.54.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:42.760140 0.000000 udp 10.0.2.104 54523 -> 187.37.104.223 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:43.761874 0.074052 udp 10.0.2.104 54523 <-> 85.136.240.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:44.762965 0.140184 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:45.764548 0.000000 udp 10.0.2.104 54523 -> 187.74.184.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:46.756071 0.233144 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:47.757689 0.211244 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:48.758769 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:49.419690 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:06:49.760125 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:50.761522 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:51.762927 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:52.764517 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:53.755514 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:54.757423 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:55.758638 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:56.760387 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:57.761699 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:06:58.763272 0.561084 udp 10.0.2.104 54523 <-> 181.53.197.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:06:59.764752 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:00.756056 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:01.757325 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:02.758779 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:03.760367 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:05.763320 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:06.764766 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:07.756277 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:08.757208 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:09.758972 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:10.760285 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:11.762092 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:12.763005 0.000054 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:12.763059 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:07:13.764901 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:14.756001 1.211853 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:16.758876 0.173706 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:17.760452 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:18.762246 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:19.763178 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:20.764747 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:21.756360 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:22.757554 0.175752 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:23.759108 0.008468 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:24.760649 0.837938 udp 10.0.2.104 54523 <-> 62.93.121.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:25.761945 2.050173 udp 10.0.2.104 54523 <-> 62.31.91.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:26.763690 0.078207 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:28.756156 3.171770 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:29.757292 1.010373 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:32.762372 0.898739 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:33.763131 0.079644 udp 10.0.2.104 54523 <-> 62.31.91.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:34.764718 0.008657 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:35.756395 0.391818 udp 10.0.2.104 54523 <-> 181.53.197.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:36.417107 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:07:36.757851 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:37.759227 0.000000 udp 10.0.2.104 54523 -> 85.152.244.7 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:38.760649 0.000000 udp 10.0.2.104 54523 -> 92.224.77.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:39.762061 0.000000 udp 10.0.2.104 54523 -> 31.147.61.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:40.763359 0.000000 udp 10.0.2.104 54523 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:41.764909 0.299580 udp 10.0.2.104 54523 <-> 181.53.197.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:42.756276 0.547132 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:43.757710 0.168504 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:44.758897 0.884006 udp 10.0.2.104 54523 <-> 62.93.121.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:45.763924 0.368045 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:46.763903 3.158660 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:47.763701 0.000000 udp 10.0.2.104 54523 -> 190.208.110.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:48.764947 0.000000 udp 10.0.2.104 54523 -> 96.37.19.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:50.758022 0.032399 udp 10.0.2.104 54523 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:51.759417 0.168456 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:52.473062 0.010452 udp 10.0.2.104 54589 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 09:07:52.483810 0.000000 udp 10.0.2.104 54590 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:52.762830 0.000000 udp 10.0.2.104 54523 -> 31.147.61.243 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:07:53.763001 0.244560 udp 10.0.2.104 54523 <-> 181.53.197.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:54.763455 0.354924 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:55.764893 0.290066 udp 10.0.2.104 54523 <-> 181.166.30.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:56.756642 4.650321 udp 10.0.2.104 54523 <-> 181.164.188.247 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:56.799300 3.001476 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:07:57.758049 0.032372 udp 10.0.2.104 54523 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:07:58.759257 0.140125 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:00.766592 0.000000 udp 10.0.2.104 54523 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:01.765976 0.337452 udp 10.0.2.104 54523 <-> 186.123.130.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:02.755362 0.000000 udp 10.0.2.104 54523 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:03.756780 0.057942 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:03.806898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:08:03.910863 0.000000 udp 10.0.2.104 54523 <- 181.164.188.247 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:04.758184 0.141441 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:05.759494 0.300398 udp 10.0.2.104 54523 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:06.760895 0.284723 udp 10.0.2.104 54523 <-> 72.130.237.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:07.762299 0.162633 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:08.764151 0.000000 udp 10.0.2.104 54523 -> 97.107.107.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:09.755165 0.288405 udp 10.0.2.104 54523 <-> 190.217.162.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:10.756893 0.000000 udp 10.0.2.104 54523 -> 91.82.34.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:11.758631 0.139714 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:11.808677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:08:12.759697 0.000000 udp 10.0.2.104 54523 -> 66.68.188.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:13.761169 0.062978 udp 10.0.2.104 54523 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:14.762544 0.130133 udp 10.0.2.104 54523 <-> 95.251.35.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:15.763889 0.199809 udp 10.0.2.104 54523 <-> 71.237.245.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:16.755363 0.000000 udp 10.0.2.104 54523 -> 190.173.98.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:17.757876 0.000000 udp 10.0.2.104 54523 -> 186.95.207.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:18.758068 0.070452 udp 10.0.2.104 54523 <-> 84.125.117.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:19.759481 0.345492 udp 10.0.2.104 54523 <-> 118.232.13.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:20.764456 0.371608 udp 10.0.2.104 54523 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:21.763363 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:22.764261 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:23.414611 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:08:23.755178 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:24.756906 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:25.758077 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:26.764519 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:27.764288 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:27.814345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:08:28.764427 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:29.763999 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:29.764062 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:08:30.755263 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:31.758104 0.158833 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:32.758229 0.803059 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:33.759749 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:34.761105 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:36.771766 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:37.763736 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:38.761817 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:39.766207 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:40.764567 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:41.762041 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:41.762090 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:08:42.762615 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:43.763996 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:44.755876 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:45.756804 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:46.758415 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:47.759830 0.000000 udp 10.0.2.104 54523 -> 184.21.195.251 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:48.761390 0.000000 udp 10.0.2.104 54523 -> 112.119.99.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:49.762829 0.195044 udp 10.0.2.104 54523 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:08:50.764126 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:51.755927 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:52.757083 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:54.760180 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:55.760859 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:56.762713 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:57.764470 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:58.755624 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:59.756945 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:08:59.818282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:09:00.758745 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:00.758804 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:09:01.760196 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:02.761525 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:03.762752 0.000000 udp 10.0.2.104 54523 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:04.764391 0.040450 udp 10.0.2.104 54523 <-> 86.18.63.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:09:05.755946 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:06.757196 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:07.758646 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:08.760024 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:09.761576 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:10.422349 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:09:10.762750 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:11.764302 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:12.755959 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:12.756035 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:09:13.757478 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:14.758576 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:15.760251 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:17.763011 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:18.764587 0.000000 udp 10.0.2.104 54523 -> 86.18.63.38 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:19.755956 0.053548 udp 10.0.2.104 54523 <-> 95.168.240.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:09:20.757076 0.360606 udp 10.0.2.104 54523 <-> 112.119.99.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:09:21.758826 0.833731 udp 10.0.2.104 54523 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:09:22.760211 0.760837 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:09:23.761910 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:24.763231 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:25.764390 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:26.755910 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:27.757332 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:28.758889 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:29.760097 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:30.761533 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:31.763266 4.997060 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:32.764539 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:33.756206 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:33.756287 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:09:34.757222 0.843458 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:09:35.758843 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:37.761601 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:38.763205 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:39.764303 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:40.755997 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:41.757277 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:42.758896 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:43.760614 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:44.762336 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:45.763157 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:46.764792 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:46.764885 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:09:48.757791 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:49.758777 0.359759 udp 10.0.2.104 54523 <-> 112.119.99.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:09:50.760472 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:51.761885 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:52.763131 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:53.764982 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:54.756191 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:55.758103 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:56.762379 0.000000 udp 10.0.2.104 54523 -> 88.6.193.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:57.422652 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:09:57.762871 3.993483 udp 10.0.2.104 54523 -> 187.247.181.33 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:09:58.762237 0.359361 udp 10.0.2.104 54523 <-> 112.119.99.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:09:59.763296 0.030223 udp 10.0.2.104 54523 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:00.764959 0.000000 udp 10.0.2.104 54523 -> 181.53.224.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:02.757698 0.054414 udp 10.0.2.104 54523 <-> 95.168.240.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:03.758984 0.000000 udp 10.0.2.104 54523 -> 184.21.195.251 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:04.760014 0.153461 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:05.762238 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:06.800181 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:07.793160 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:08.779591 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:09.775638 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:10.771630 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:11.766569 0.164227 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:12.761946 0.000000 udp 10.0.2.104 54523 -> 181.53.224.22 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:13.763853 0.796159 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:14.765105 0.062002 udp 10.0.2.104 54523 <-> 79.116.234.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:15.756617 0.055842 udp 10.0.2.104 54523 <-> 178.148.147.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:16.757814 0.199086 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:17.759175 0.168197 udp 10.0.2.104 54523 <-> 24.113.136.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:18.764072 0.296009 udp 10.0.2.104 54523 <-> 24.232.15.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:19.767003 0.046560 udp 10.0.2.104 54523 <-> 77.96.67.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:20.766460 0.126863 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:21.766341 0.108889 udp 10.0.2.104 54523 <-> 178.42.151.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:22.756436 0.153822 udp 10.0.2.104 54523 <-> 68.57.213.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:23.758009 0.000000 udp 10.0.2.104 54523 -> 181.16.7.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:24.759786 0.179586 udp 10.0.2.104 54523 <-> 88.187.104.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:25.760633 0.000000 udp 10.0.2.104 54523 -> 46.248.74.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:26.768506 4.996930 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:27.768606 0.561899 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:28.768434 0.082966 udp 10.0.2.104 54523 <-> 2.92.89.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:29.759241 0.073777 udp 10.0.2.104 54523 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:30.760162 0.000000 udp 10.0.2.104 54523 -> 204.16.10.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:31.807691 3.990131 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:32.763887 0.178666 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:33.762140 4.997474 udp 10.0.2.104 54523 -> 46.248.74.20 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:36.756492 0.034337 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:37.758169 1.442462 udp 10.0.2.104 54523 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:39.760764 2.775445 udp 10.0.2.104 54523 <-> 27.107.220.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:39.853425 0.000000 udp 10.0.2.104 54523 <- 46.248.74.20 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:40.762667 0.024083 udp 10.0.2.104 54523 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:41.763756 0.000000 udp 10.0.2.104 54523 -> 204.16.10.14 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:42.755539 1.035072 udp 10.0.2.104 54523 <-> 5.53.200.174 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:44.417562 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:10:44.758275 0.051284 udp 10.0.2.104 54523 <-> 37.77.155.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:45.759815 0.102306 udp 10.0.2.104 54523 <-> 178.95.55.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:46.760888 0.421563 udp 10.0.2.104 54523 <-> 5.200.230.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:47.762817 0.171627 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:48.763903 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:49.755308 0.238680 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:50.756711 0.000000 udp 10.0.2.104 54523 -> 5.234.79.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:51.758371 1.001629 udp 10.0.2.104 54523 <-> 62.31.91.5 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:53.760984 0.000000 udp 10.0.2.104 54523 -> 74.132.164.239 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:10:54.762473 0.056839 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:55.764330 0.036210 udp 10.0.2.104 54523 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:56.755207 0.378484 udp 10.0.2.104 54523 <-> 121.245.134.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:57.756759 0.033690 udp 10.0.2.104 54523 <-> 188.254.174.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:58.758313 0.216918 udp 10.0.2.104 54523 <-> 68.186.62.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:10:59.760114 0.032387 udp 10.0.2.104 54523 <-> 78.97.218.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:00.761104 0.261089 udp 10.0.2.104 54523 <-> 117.207.220.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:01.762668 0.209487 udp 10.0.2.104 54523 <-> 98.230.212.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:02.764169 0.171209 udp 10.0.2.104 54523 <-> 98.200.250.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:03.755343 0.000000 udp 10.0.2.104 54523 -> 184.147.80.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:04.756913 0.000000 udp 10.0.2.104 54523 -> 217.203.49.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:05.758160 0.974421 udp 10.0.2.104 54523 <-> 190.105.68.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:06.759983 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:07.761271 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:08.762802 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:09.764079 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:10.755667 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:11.757282 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:12.758449 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:13.760008 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:14.761522 3.995848 udp 10.0.2.104 54523 <-> 174.109.199.62 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:15.762570 0.097419 udp 10.0.2.104 54523 <-> 80.117.95.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:16.764309 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:16.764380 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:11:17.755732 0.000000 udp 10.0.2.104 54523 -> 2.184.241.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:19.758223 0.323101 udp 10.0.2.104 54523 <-> 184.147.80.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:20.760368 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:21.761244 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:22.762830 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:23.764163 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:24.756176 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:25.757167 0.281630 udp 10.0.2.104 54523 <-> 190.188.203.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:26.758518 0.000000 udp 10.0.2.104 54523 -> 2.180.100.200 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:27.760100 0.088712 udp 10.0.2.104 54523 <-> 188.77.37.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:28.761196 0.047648 udp 10.0.2.104 54523 <-> 31.11.172.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:29.762644 2.114843 udp 10.0.2.104 54523 <-> 24.75.190.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:30.764138 0.359728 udp 10.0.2.104 54523 <-> 114.37.203.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:31.415005 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:11:32.757159 0.032246 udp 10.0.2.104 54523 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:33.758835 0.068845 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:34.759950 0.300593 udp 10.0.2.104 54523 <-> 27.127.165.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:35.761472 0.000097 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:35.761569 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:11:36.763350 0.000000 udp 10.0.2.104 54523 -> 201.242.70.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:37.764307 0.055456 udp 10.0.2.104 54523 <-> 88.161.54.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:38.756186 0.060339 udp 10.0.2.104 54523 <-> 85.182.33.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:39.757153 0.135315 udp 10.0.2.104 54523 <-> 68.191.53.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:40.758478 3.153241 udp 10.0.2.104 54523 <-> 2.192.174.224 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:41.759953 0.000000 udp 10.0.2.104 54523 -> 180.215.208.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:42.761945 0.044507 udp 10.0.2.104 54523 <-> 89.160.39.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:44.764250 0.362625 udp 10.0.2.104 54523 <-> 111.249.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:45.756206 0.050818 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:46.757469 0.929976 udp 10.0.2.104 54523 <-> 86.56.0.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:47.758917 0.193923 udp 10.0.2.104 54523 <-> 114.143.82.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:48.760250 0.000000 udp 10.0.2.104 54523 -> 173.200.18.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:49.761625 0.138126 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:50.763266 0.036538 udp 10.0.2.104 54523 <-> 89.137.133.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:51.764525 0.060690 udp 10.0.2.104 54523 <-> 92.32.95.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:52.755976 0.275801 udp 10.0.2.104 54523 <-> 117.203.57.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:53.757227 0.165163 udp 10.0.2.104 54523 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:54.760801 0.289608 udp 10.0.2.104 54523 <-> 186.94.161.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:55.762611 0.062347 udp 10.0.2.104 54523 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:56.762904 0.252786 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:11:57.763279 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:58.764555 0.000000 udp 10.0.2.104 54523 -> 123.108.227.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:11:59.756454 0.033983 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:00.757247 0.280258 udp 10.0.2.104 54523 <-> 66.131.122.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:01.758856 0.333602 udp 10.0.2.104 54523 <-> 190.183.18.208 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:02.761161 0.163205 udp 10.0.2.104 54523 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:03.761945 0.167450 udp 10.0.2.104 54523 <-> 68.59.245.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:04.763101 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:05.764679 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:06.756377 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:07.757621 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:08.758814 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:09.760773 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:10.761989 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:12.764874 0.000153 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:12.765027 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:12:13.756122 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:14.757452 0.149568 udp 10.0.2.104 54523 <-> 69.142.3.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:15.759066 0.056884 udp 10.0.2.104 54523 <-> 81.196.136.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:16.760494 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:17.762018 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:18.422566 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:12:18.763522 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:19.764646 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:21.757585 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:22.758871 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:23.760485 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:24.762229 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:25.763310 0.000128 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:25.763438 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:12:26.765234 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:27.756306 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:28.757548 0.818855 udp 10.0.2.104 54523 <-> 172.242.177.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:29.759175 0.166789 udp 10.0.2.104 54523 <-> 66.131.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:30.760925 0.434765 udp 10.0.2.104 54523 <-> 61.227.20.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:31.762271 2.062669 udp 10.0.2.104 54523 <-> 5.43.88.212 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:32.763764 0.128224 udp 10.0.2.104 54523 <-> 85.85.12.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:34.756411 0.309015 udp 10.0.2.104 54523 <-> 106.215.0.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:35.758044 0.134876 udp 10.0.2.104 54523 <-> 71.206.33.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:36.759105 0.336081 udp 10.0.2.104 54523 <-> 1.23.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:37.760460 0.062606 udp 10.0.2.104 54523 <-> 178.159.162.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:38.761985 0.552504 udp 10.0.2.104 54523 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:39.763693 0.000000 udp 10.0.2.104 54523 -> 200.125.109.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:40.764822 0.058373 udp 10.0.2.104 54523 <-> 85.224.154.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:41.756295 0.000000 udp 10.0.2.104 54523 -> 49.249.97.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:42.758498 0.503686 udp 10.0.2.104 54523 <-> 68.96.178.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:43.759251 0.401732 udp 10.0.2.104 54523 <-> 59.94.19.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:44.760695 0.000000 udp 10.0.2.104 54523 -> 207.6.7.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:45.761970 0.159881 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:46.763892 1.001163 udp 10.0.2.104 54523 <-> 79.117.216.81 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:48.756393 0.052738 udp 10.0.2.104 54523 <-> 95.158.180.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:49.758149 0.330895 udp 10.0.2.104 54523 <-> 190.179.8.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:50.759290 0.743489 udp 10.0.2.104 54523 <-> 70.241.74.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:12:51.760802 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:52.762184 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:53.763820 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:54.764888 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:55.756371 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:56.758546 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:57.759657 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:58.761324 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:59.762264 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:12:59.762340 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:13:01.766507 0.000000 udp 10.0.2.104 54523 -> 111.92.100.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:02.756835 2.867916 udp 10.0.2.104 54523 <-> 201.210.215.132 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:03.758170 0.330072 udp 10.0.2.104 54523 <-> 190.179.8.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:05.761266 2.993727 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:06.421960 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:13:06.762665 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:07.763964 0.397901 udp 10.0.2.104 54523 <-> 99.126.92.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:09.756490 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:10.757628 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:12.760809 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:13.767108 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:14.766306 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:15.756506 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:16.756801 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:17.758557 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:18.759644 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:18.759752 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:13:19.761253 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:20.762934 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:21.764342 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:22.755734 0.000000 udp 10.0.2.104 54523 -> 68.48.58.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:23.756687 0.329762 udp 10.0.2.104 54523 <-> 190.179.8.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:24.758082 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:25.759508 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:26.762047 0.116145 udp 10.0.2.104 54523 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:27.762746 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:28.766924 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:29.757108 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:30.756907 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:31.758136 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:32.759951 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:33.761080 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:34.762587 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:35.764260 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:36.755499 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:37.757023 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:38.758335 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:39.760094 0.000043 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:39.760137 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:13:41.762632 4.294797 udp 10.0.2.104 54523 <-> 111.92.100.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:42.764116 0.061292 udp 10.0.2.104 54523 <-> 82.235.193.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:43.755784 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:44.757140 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:45.758525 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:46.759637 0.177515 udp 10.0.2.104 54523 <-> 76.92.224.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:47.761171 0.000000 udp 10.0.2.104 54523 -> 108.18.215.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:13:48.762726 0.042714 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:49.764167 2.177743 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:50.755987 0.142954 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:52.758547 0.217499 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:53.419421 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:13:53.759916 4.042639 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 6 3676 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:54.761241 0.121760 udp 10.0.2.104 54523 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:55.762661 0.059540 udp 10.0.2.104 54523 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:56.764235 0.045697 udp 10.0.2.104 54523 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:58.757181 0.177406 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:13:59.758259 0.000000 udp 10.0.2.104 54523 -> 201.210.246.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:00.760331 0.157659 udp 10.0.2.104 54523 <-> 24.214.81.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:01.761423 3.502679 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:02.762762 0.011811 udp 10.0.2.104 54523 <-> 93.103.161.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:03.764231 0.034980 udp 10.0.2.104 54523 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:05.757184 0.933142 udp 10.0.2.104 54523 <-> 87.97.118.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:06.758584 2.002886 udp 10.0.2.104 54523 <-> 68.117.185.142 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:09.762561 2.311959 udp 10.0.2.104 54523 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:10.764593 0.563503 udp 10.0.2.104 54523 <-> 200.63.36.74 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:11.756186 0.155158 udp 10.0.2.104 54523 <-> 68.11.139.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:12.757116 0.194612 udp 10.0.2.104 54523 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:13.758361 0.081710 udp 10.0.2.104 54523 <-> 31.131.108.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:14.759812 0.370168 udp 10.0.2.104 54523 <-> 24.49.211.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:15.762005 4.996662 udp 10.0.2.104 54523 <-> 14.54.173.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:16.763053 0.000000 udp 10.0.2.104 54523 -> 76.16.28.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:17.764474 0.000000 udp 10.0.2.104 54523 -> 190.78.188.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:18.756058 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:19.757204 0.000000 udp 10.0.2.104 54523 -> 207.6.7.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:21.061969 0.000000 udp 10.0.2.104 54523 <- 14.54.173.2 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:21.760336 0.051637 udp 10.0.2.104 54523 <-> 79.113.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:22.761473 0.147494 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:23.762992 0.158663 udp 10.0.2.104 54523 <-> 74.77.32.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:24.764873 0.049689 udp 10.0.2.104 54523 <-> 80.243.20.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:25.756046 0.169543 udp 10.0.2.104 54523 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:26.757096 0.051445 udp 10.0.2.104 54523 <-> 85.194.157.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:27.758772 3.799559 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:28.760358 0.158562 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:29.761817 0.174362 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:31.764438 0.000000 udp 10.0.2.104 54523 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:32.756144 0.393732 udp 10.0.2.104 54523 <-> 115.241.35.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:33.757455 0.050588 udp 10.0.2.104 54523 <-> 79.113.241.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:34.758723 0.000000 udp 10.0.2.104 54523 -> 178.166.124.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:35.760465 1.215239 udp 10.0.2.104 54523 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:36.762018 0.043582 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:37.763208 0.359920 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:38.764617 0.124556 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:39.756156 0.171304 udp 10.0.2.104 54523 <-> 98.215.30.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:40.420411 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:14:40.760842 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:41.761787 0.083281 udp 10.0.2.104 54523 <-> 79.235.71.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:42.762784 0.161274 udp 10.0.2.104 54523 <-> 203.194.109.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:43.762772 0.054515 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:44.763145 4.997094 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:45.764684 0.275831 udp 10.0.2.104 54523 <-> 60.62.152.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:46.756256 4.005802 udp 10.0.2.104 54523 -> 190.198.69.160 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:47.757338 1.662662 arp 10.0.2.104 who 169.254.157.175 INT 3 126 flow=Background-ARP 1970/01/01 09:14:48.759312 0.065208 udp 10.0.2.104 54523 <-> 79.119.248.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:50.934152 0.000000 udp 10.0.2.104 54523 <- 181.166.124.51 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:51.763313 0.000000 udp 10.0.2.104 54523 -> 60.62.152.55 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:52.764686 0.000000 udp 10.0.2.104 54523 -> 109.53.221.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:14:53.756464 1.483942 udp 10.0.2.104 54523 <-> 217.203.49.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:54.757297 0.158720 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:55.759161 0.211742 udp 10.0.2.104 54523 <-> 189.193.106.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:56.761093 0.093050 udp 10.0.2.104 54523 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:57.762291 0.115598 udp 10.0.2.104 54523 <-> 87.7.139.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:58.763209 0.373022 udp 10.0.2.104 54523 <-> 117.199.7.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:14:59.764599 0.000000 udp 10.0.2.104 54523 -> 212.92.251.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:00.756031 0.038238 udp 10.0.2.104 54523 <-> 92.233.16.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:01.757301 0.140594 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:02.759319 0.669691 udp 10.0.2.104 54523 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:03.760585 0.043067 udp 10.0.2.104 54523 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:04.762191 0.129472 udp 10.0.2.104 54523 <-> 24.222.116.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:05.763331 0.285079 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:05.826305 3.001534 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:15:06.764983 0.059342 udp 10.0.2.104 54523 <-> 178.75.248.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:07.756416 0.132763 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:08.757543 0.000000 udp 10.0.2.104 54523 -> 65.8.167.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:09.759009 0.142484 udp 10.0.2.104 54523 <-> 68.197.223.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:10.760448 0.286685 udp 10.0.2.104 54523 <-> 119.230.147.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:11.762586 0.075176 udp 10.0.2.104 54523 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:12.763606 0.039840 udp 10.0.2.104 54523 <-> 188.254.253.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:12.833650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:15:13.764797 0.141867 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:15.757650 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:16.759048 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:16.759096 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:15:17.760529 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:18.763107 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:19.763861 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:20.764881 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:20.835060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:15:21.756345 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:22.757743 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:23.759266 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:24.760748 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:25.762230 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:26.763692 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:27.414277 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:15:27.765155 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:28.756435 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:29.758036 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:30.759178 0.162639 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:31.761079 0.000091 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:31.761170 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:15:32.762221 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:33.763637 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:34.765079 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:35.758503 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:36.758998 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:36.839113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:15:37.760756 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:38.760877 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:39.762537 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:40.763848 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:41.756058 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:42.756422 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:43.757887 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:44.759619 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:46.762872 0.044526 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:47.763998 0.175773 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:48.755370 0.141480 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:15:49.756614 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:50.758147 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:51.760092 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:52.760887 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:53.762577 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:54.763618 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:55.755088 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:55.755154 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:15:56.756459 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:57.758064 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:58.759872 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:15:59.760952 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:00.762954 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:01.764200 0.096367 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:02.755791 0.130783 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:03.756815 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:04.758045 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:05.759714 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:06.761375 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:07.762731 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:08.764004 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:08.844257 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:16:09.755933 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:10.757203 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:11.758223 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:12.759963 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:13.761111 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:14.421452 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:16:14.762494 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:15.764135 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:16.758647 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:16.758729 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:16:17.758047 0.033702 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:18.758404 0.000000 udp 10.0.2.104 54523 -> 201.252.48.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:19.759593 0.356695 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:20.761346 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:21.762597 0.000128 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:21.762725 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:16:22.764222 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:23.756077 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:24.757196 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:25.758800 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:26.760142 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:27.761174 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:28.763020 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:29.764361 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:30.757212 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:31.757113 0.032751 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:32.758711 0.000000 udp 10.0.2.104 54523 -> 24.244.127.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:33.759859 0.000000 udp 10.0.2.104 54523 -> 192.168.200.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:34.761685 0.131765 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:35.763037 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:36.764065 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:37.755891 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:38.756923 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:39.758958 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:40.759751 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:41.761584 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:41.761629 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:16:42.762752 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:43.764407 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:44.755738 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:45.756961 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:46.758760 0.233887 udp 10.0.2.104 54523 <-> 79.13.223.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:47.760509 0.356164 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:48.761330 0.213821 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:49.762837 0.033301 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:50.764544 4.996921 udp 10.0.2.104 54523 -> 209.173.40.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:51.755847 0.052069 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:52.757177 0.000000 udp 10.0.2.104 54523 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:53.758794 3.151135 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:54.760294 0.144325 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:57.764553 0.166494 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:16:58.756636 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:16:59.757155 0.096514 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:00.758736 0.000000 udp 10.0.2.104 54523 -> 192.168.200.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:01.419620 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:17:01.760258 0.147224 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:02.761576 0.302126 udp 10.0.2.104 54523 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:03.763091 0.708266 udp 10.0.2.104 54523 <-> 87.97.118.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:04.764421 0.249920 udp 10.0.2.104 54523 <-> 67.55.177.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:05.756471 0.000000 udp 10.0.2.104 54523 -> 85.100.78.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:06.757413 0.169878 udp 10.0.2.104 54523 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:07.758927 0.206133 udp 10.0.2.104 54523 <-> 24.2.42.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:08.760123 0.000000 udp 10.0.2.104 54523 -> 82.130.171.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:09.761732 0.000000 udp 10.0.2.104 54523 -> 180.199.214.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:10.762988 0.035808 udp 10.0.2.104 54523 <-> 92.76.248.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:11.764672 1.120035 udp 10.0.2.104 54523 <-> 95.74.171.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:13.762885 0.000000 udp 10.0.2.104 54523 -> 14.97.53.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:14.763652 4.995114 udp 10.0.2.104 54523 <-> 62.93.121.248 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:15.765001 0.000000 udp 10.0.2.104 54523 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:16.765757 0.229401 udp 10.0.2.104 54523 <-> 95.74.171.8 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:17.766448 0.052268 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:18.766064 0.000000 udp 10.0.2.104 54523 -> 14.97.53.251 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:20.680705 0.000000 udp 10.0.2.104 54523 <- 62.93.121.248 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:20.759233 0.000000 udp 10.0.2.104 54523 -> 24.193.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:21.760280 0.135746 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:22.760961 0.170365 udp 10.0.2.104 54523 <-> 68.59.249.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:23.762057 0.000000 udp 10.0.2.104 54523 -> 204.184.70.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:24.763261 0.711725 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:25.764767 0.170394 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:26.755952 0.146807 udp 10.0.2.104 54523 <-> 69.124.254.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:27.757459 0.343314 udp 10.0.2.104 54523 <-> 178.173.226.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:28.759001 0.667290 udp 10.0.2.104 54523 <-> 92.224.77.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:29.760749 0.269737 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:30.762046 0.035434 udp 10.0.2.104 54523 <-> 92.76.248.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:31.763442 0.235297 udp 10.0.2.104 54523 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:32.764756 0.000000 udp 10.0.2.104 54523 -> 190.79.104.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:33.756427 0.351784 udp 10.0.2.104 54523 <-> 200.93.68.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:34.757382 0.163607 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:35.758852 0.117055 udp 10.0.2.104 54523 <-> 24.254.149.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:36.760458 1.001441 udp 10.0.2.104 54523 <-> 189.193.106.58 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:38.763841 0.387440 udp 10.0.2.104 54523 <-> 115.245.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:39.764643 4.997093 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 3 726 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:40.756234 0.346076 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:41.757584 0.109016 udp 10.0.2.104 54523 <-> 94.180.57.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:42.759031 0.163357 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:43.760953 0.056158 udp 10.0.2.104 54523 <-> 217.174.48.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:45.763251 0.141883 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:46.765123 0.148768 udp 10.0.2.104 54523 <-> 24.212.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:47.758663 2.153608 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:48.418732 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:17:48.759180 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:50.760486 0.748573 udp 10.0.2.104 54523 <-> 62.93.121.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:51.761923 0.044129 udp 10.0.2.104 54523 <-> 77.76.177.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:52.763847 0.000000 udp 10.0.2.104 54523 -> 177.35.80.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:53.765071 0.000000 udp 10.0.2.104 54523 -> 75.84.97.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:54.756232 0.065573 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:55.757730 0.060450 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:56.759206 0.322741 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:57.760667 0.000000 udp 10.0.2.104 54523 -> 206.110.193.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:17:58.762092 0.138679 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:17:59.763321 0.350051 udp 10.0.2.104 54523 <-> 61.227.163.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:00.766487 0.167729 udp 10.0.2.104 54523 <-> 204.116.75.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:01.756998 0.000000 udp 10.0.2.104 54523 -> 114.26.55.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:18:02.758140 0.342603 udp 10.0.2.104 54523 <-> 201.209.247.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:03.759201 0.051639 udp 10.0.2.104 54523 <-> 86.125.226.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:04.760781 0.457168 udp 10.0.2.104 54523 <-> 187.66.42.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:05.762458 0.000000 udp 10.0.2.104 54523 -> 158.58.248.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:18:06.764186 0.369929 udp 10.0.2.104 54523 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:07.764970 3.070906 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:08.756452 0.154109 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:09.758181 0.293890 udp 10.0.2.104 54523 <-> 201.27.127.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:11.760966 0.336056 udp 10.0.2.104 54523 <-> 111.252.37.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:12.762320 1.170063 udp 10.0.2.104 54523 <-> 24.182.108.170 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:14.755062 0.107072 udp 10.0.2.104 54523 <-> 89.126.6.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:15.756744 0.278963 udp 10.0.2.104 54523 <-> 5.190.115.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:16.758120 3.024250 udp 10.0.2.104 54523 <-> 31.185.115.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:17.759912 0.326512 udp 10.0.2.104 54523 <-> 58.230.46.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:18.760700 0.164150 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:19.762536 0.150556 udp 10.0.2.104 54523 <-> 216.168.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:20.763859 0.000000 udp 10.0.2.104 54523 -> 94.74.184.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:18:21.755194 0.000000 udp 10.0.2.104 54523 -> 109.194.231.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:18:22.756495 0.175088 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:23.758281 0.161780 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:24.759459 0.159224 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:25.760908 0.153224 udp 10.0.2.104 54523 <-> 103.5.186.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:26.762790 0.285841 udp 10.0.2.104 54523 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:27.764039 0.034334 udp 10.0.2.104 54523 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:28.755008 1.461674 udp 10.0.2.104 54523 <-> 90.137.188.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:29.756447 0.239586 udp 10.0.2.104 54523 <-> 177.226.26.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:30.758476 0.294608 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:31.759550 0.054307 udp 10.0.2.104 54523 <-> 188.121.26.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:32.760723 0.090525 udp 10.0.2.104 54523 <-> 87.110.62.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:33.762489 0.457979 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:34.764018 4.570434 udp 10.0.2.104 54523 <-> 90.137.188.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:35.414599 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:18:35.755472 2.383870 udp 10.0.2.104 54523 <-> 77.126.38.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:36.756814 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:18:37.758367 0.059848 udp 10.0.2.104 54523 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:38.760061 0.053678 udp 10.0.2.104 54523 <-> 95.168.240.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:39.761195 0.000000 udp 10.0.2.104 54523 -> 178.149.14.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:18:40.762387 0.000000 udp 10.0.2.104 54523 -> 75.84.97.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:18:41.763754 0.459128 udp 10.0.2.104 54523 <-> 186.123.130.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:42.755289 0.058067 udp 10.0.2.104 54523 <-> 82.159.28.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:43.757151 0.000000 udp 10.0.2.104 54523 -> 76.232.176.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:18:44.758784 0.130910 udp 10.0.2.104 54523 <-> 72.39.122.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:45.759988 0.143960 udp 10.0.2.104 54523 <-> 24.184.114.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:46.761077 0.346236 udp 10.0.2.104 54523 <-> 114.42.212.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:47.762519 0.330385 udp 10.0.2.104 54523 <-> 190.203.136.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:48.763856 0.164480 udp 10.0.2.104 54523 <-> 68.102.200.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:49.755733 3.167384 udp 10.0.2.104 54523 <-> 180.149.221.83 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:50.756832 3.205565 udp 10.0.2.104 54523 <-> 14.194.51.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:51.758250 0.025125 udp 10.0.2.104 54523 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:53.761349 0.170490 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:54.762616 0.131544 udp 10.0.2.104 54523 <-> 24.3.193.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:55.769921 0.544364 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:56.760870 0.383703 udp 10.0.2.104 54523 <-> 190.110.186.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:57.762512 0.344234 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:58.763114 0.082454 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:18:59.764430 0.327370 udp 10.0.2.104 54523 <-> 177.138.136.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:00.764752 0.192351 udp 10.0.2.104 54523 <-> 68.16.236.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:01.765368 1.139123 udp 10.0.2.104 54523 <-> 181.16.28.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:02.766516 0.071271 udp 10.0.2.104 54523 <-> 93.176.193.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:03.756454 0.649698 udp 10.0.2.104 54523 <-> 190.124.145.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:04.757004 4.050332 udp 10.0.2.104 54523 <-> 85.229.221.92 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:05.759545 0.000000 udp 10.0.2.104 54523 -> 195.70.108.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:06.760415 0.053137 udp 10.0.2.104 54523 <-> 188.24.16.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:07.761841 0.169980 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:09.767308 0.136604 udp 10.0.2.104 54523 <-> 24.149.57.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:10.756995 0.256458 udp 10.0.2.104 54523 <-> 71.22.186.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:11.757087 0.115856 udp 10.0.2.104 54523 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:12.758716 0.045652 udp 10.0.2.104 54523 <-> 77.96.67.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:13.759921 0.331959 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:14.761476 1.429979 udp 10.0.2.104 54523 <-> 187.18.151.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:15.762769 1.281306 udp 10.0.2.104 54523 <-> 177.100.110.31 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:17.756281 0.064226 udp 10.0.2.104 54523 <-> 82.238.239.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:18.757248 0.132037 udp 10.0.2.104 54523 <-> 24.3.193.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:19.758765 0.000000 udp 10.0.2.104 54523 -> 50.14.9.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:20.760168 0.000000 udp 10.0.2.104 54523 -> 76.246.157.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:21.761583 0.164755 udp 10.0.2.104 54523 <-> 98.208.189.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:22.422237 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:19:22.762857 0.137694 udp 10.0.2.104 54523 <-> 68.83.76.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:23.764483 2.045856 udp 10.0.2.104 54523 <-> 83.249.8.194 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:24.756195 0.046767 udp 10.0.2.104 54523 <-> 176.10.236.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:26.758418 1.170294 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:28.761371 2.430579 udp 10.0.2.104 54523 <-> 101.59.143.243 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:29.762778 0.046163 udp 10.0.2.104 54523 <-> 92.76.248.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:31.756735 0.156507 udp 10.0.2.104 54523 <-> 24.202.178.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:32.757038 0.482567 udp 10.0.2.104 54523 <-> 190.39.204.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:33.758869 0.127808 udp 10.0.2.104 54523 <-> 72.38.48.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:34.760525 0.287224 udp 10.0.2.104 54523 <-> 61.21.52.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:35.762086 0.046386 udp 10.0.2.104 54523 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:36.763106 0.068888 udp 10.0.2.104 54523 <-> 78.251.174.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:37.764418 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:38.756366 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:39.757299 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:40.758771 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:41.760387 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:42.761246 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:43.762868 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:44.764745 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:45.756352 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:46.757225 0.135294 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:47.758918 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:48.760260 1.160317 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:19:50.763041 0.000066 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:50.763107 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:19:51.764593 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:52.755706 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:53.757371 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:54.759001 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:55.760607 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:56.762040 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:58.764454 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:19:59.756513 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:00.757355 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:01.758720 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:02.760544 0.079277 udp 10.0.2.104 54523 <-> 78.251.174.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:03.761522 0.183719 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:04.763145 0.000000 udp 10.0.2.104 54523 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:05.764780 0.069536 udp 10.0.2.104 54523 <-> 85.152.239.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:06.756307 0.000000 udp 10.0.2.104 54523 -> 86.125.244.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:07.757643 3.004315 udp 10.0.2.104 54523 -> 64.179.116.26 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:08.759009 0.000000 udp 10.0.2.104 54523 -> 89.182.189.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:09.420204 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:20:09.760498 3.004030 udp 10.0.2.104 54523 <-> 177.138.96.92 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:11.763836 0.000000 udp 10.0.2.104 54523 -> 190.78.142.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:13.756388 0.157426 udp 10.0.2.104 54523 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:14.757736 0.051016 udp 10.0.2.104 54523 <-> 86.125.244.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:15.759186 0.152765 udp 10.0.2.104 54523 <-> 75.109.202.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:16.760937 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:17.762400 0.674682 udp 10.0.2.104 54523 <-> 60.250.101.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:18.763310 0.143898 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:19.764472 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:20.756329 0.150011 udp 10.0.2.104 54523 <-> 77.45.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:21.757825 0.170143 udp 10.0.2.104 54523 <-> 70.131.157.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:22.759020 0.555914 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:23.760477 0.000000 udp 10.0.2.104 54523 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:24.762665 0.267134 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:25.763900 0.209900 udp 10.0.2.104 54523 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:26.765583 0.055867 udp 10.0.2.104 54523 <-> 79.117.151.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:27.756203 0.047788 udp 10.0.2.104 54523 <-> 5.13.214.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:28.757926 0.075156 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:29.759259 0.198316 udp 10.0.2.104 54523 <-> 70.69.191.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:30.760982 0.149399 udp 10.0.2.104 54523 <-> 37.45.40.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:31.762260 0.000000 udp 10.0.2.104 54523 -> 187.19.211.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:32.763714 0.045220 udp 10.0.2.104 54523 <-> 5.13.105.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:33.765133 1.016916 udp 10.0.2.104 54523 <-> 181.118.86.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:34.758423 0.128704 udp 10.0.2.104 54523 <-> 72.240.249.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:35.761067 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:36.761010 0.290486 udp 10.0.2.104 54523 <-> 42.124.159.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:37.761101 2.313727 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:38.762262 0.151971 udp 10.0.2.104 54523 <-> 27.106.2.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:40.765006 0.054279 udp 10.0.2.104 54523 <-> 62.182.64.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:41.756336 0.000000 udp 10.0.2.104 54523 -> 108.185.42.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:42.758165 0.000000 udp 10.0.2.104 54523 -> 87.139.120.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:43.759292 4.175885 udp 10.0.2.104 54523 <-> 49.204.142.144 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:44.760779 0.000000 udp 10.0.2.104 54523 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:45.762325 0.213563 udp 10.0.2.104 54523 <-> 50.68.79.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:46.763990 0.047576 udp 10.0.2.104 54523 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:48.756490 0.000000 udp 10.0.2.104 54523 -> 106.215.12.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:49.758080 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:50.759351 0.505574 udp 10.0.2.104 54523 <-> 69.228.96.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:51.760679 0.537107 udp 10.0.2.104 54523 <-> 117.203.221.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:52.762824 0.240399 udp 10.0.2.104 54523 <-> 117.198.12.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:53.764186 0.139828 udp 10.0.2.104 54523 <-> 203.192.228.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:54.754802 0.401842 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:55.756611 0.151958 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:56.417497 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:20:56.758291 0.143434 udp 10.0.2.104 54523 <-> 67.81.98.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:57.759355 0.000000 udp 10.0.2.104 54523 -> 24.228.86.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:20:58.761112 0.280673 udp 10.0.2.104 54523 <-> 187.247.181.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:20:59.762547 0.000000 udp 10.0.2.104 54523 -> 207.160.47.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:00.764158 0.469505 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:01.755265 0.402797 udp 10.0.2.104 54523 <-> 117.194.195.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:02.756666 0.359131 udp 10.0.2.104 54523 <-> 115.132.177.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:03.758186 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:04.759321 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:05.760874 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:06.762557 0.155892 udp 10.0.2.104 54523 <-> 98.224.237.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:07.763519 0.000000 udp 10.0.2.104 54523 -> 81.198.233.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:08.755365 0.000000 udp 10.0.2.104 54523 -> 186.93.166.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:09.756767 0.140630 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:10.758433 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:11.759833 0.000085 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:11.759918 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:21:12.761142 0.168970 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:13.762969 0.281634 udp 10.0.2.104 54523 <-> 200.84.68.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:14.763901 0.042826 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:15.755442 0.000000 udp 10.0.2.104 54523 -> 202.78.234.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:16.756884 0.115561 udp 10.0.2.104 54523 <-> 95.133.193.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:17.758292 0.267378 udp 10.0.2.104 54523 <-> 37.213.44.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:18.760229 0.000000 udp 10.0.2.104 54523 -> 64.9.20.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:19.761011 0.149537 udp 10.0.2.104 54523 <-> 67.248.85.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:20.762690 0.167337 udp 10.0.2.104 54523 <-> 72.191.6.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:21.764042 0.157522 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:22.755960 0.256719 udp 10.0.2.104 54523 <-> 117.203.57.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:23.757165 1.278978 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:25.760023 0.162325 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:26.761597 0.000000 udp 10.0.2.104 54523 -> 68.114.151.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:27.762545 0.000000 udp 10.0.2.104 54523 -> 187.213.210.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:28.764018 0.171244 udp 10.0.2.104 54523 <-> 24.94.123.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:29.757906 0.338545 udp 10.0.2.104 54523 <-> 177.107.240.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:30.757040 0.341253 udp 10.0.2.104 54523 <-> 115.244.238.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:31.758382 0.000000 udp 10.0.2.104 54523 -> 46.175.229.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:32.759992 0.000000 udp 10.0.2.104 54523 -> 187.138.70.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:33.761375 0.038887 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:34.762766 0.162461 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:35.765439 0.176118 udp 10.0.2.104 54523 <-> 173.23.103.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:36.756727 0.164641 udp 10.0.2.104 54523 <-> 68.56.21.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:37.757082 1.083728 udp 10.0.2.104 54523 <-> 76.87.27.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:38.758392 0.000000 udp 10.0.2.104 54523 -> 14.97.198.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:39.760321 0.000000 udp 10.0.2.104 54523 -> 79.13.223.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:40.761167 0.143791 udp 10.0.2.104 54523 <-> 66.26.224.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:41.762975 0.355201 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:42.764242 4.997963 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:43.414902 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:21:43.755814 0.133821 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:44.757102 0.296873 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:45.761283 0.160527 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:46.761769 0.141912 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:47.911430 0.000000 udp 10.0.2.104 54523 <- 71.12.81.250 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:48.762742 4.997447 udp 10.0.2.104 54523 <-> 89.65.83.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:49.764563 0.000000 udp 10.0.2.104 54523 -> 202.29.179.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:50.755827 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:51.757248 1.165590 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:53.802230 0.000000 udp 10.0.2.104 54523 <- 89.65.83.245 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:54.761552 0.000000 udp 10.0.2.104 54523 -> 65.93.79.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:55.762733 0.000000 udp 10.0.2.104 54523 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:21:56.764409 0.028196 udp 10.0.2.104 54523 <-> 95.76.74.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:57.755850 0.023429 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:58.757248 0.249250 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:21:59.758537 0.295515 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:00.760153 4.996843 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:01.761529 0.000000 udp 10.0.2.104 54523 -> 202.29.179.249 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:02.763193 0.057682 udp 10.0.2.104 54523 <-> 77.76.177.251 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:03.764320 0.165562 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:04.756008 3.004628 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:06.758641 0.136488 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:08.761488 0.219109 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:09.762728 0.084507 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:10.764561 0.188991 udp 10.0.2.104 54523 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:11.755726 0.038385 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:12.757246 0.264859 udp 10.0.2.104 54523 <-> 59.90.194.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:12.849703 3.002239 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:22:13.758698 0.102176 udp 10.0.2.104 54523 <-> 92.41.243.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:14.760760 0.000000 udp 10.0.2.104 54523 -> 89.74.113.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:15.761756 0.058701 udp 10.0.2.104 54523 <-> 78.247.174.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:16.762898 0.000000 udp 10.0.2.104 54523 -> 188.2.254.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:17.764622 0.157181 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:18.756540 0.045482 udp 10.0.2.104 54523 <-> 88.216.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:19.757806 0.347395 udp 10.0.2.104 54523 <-> 180.70.39.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:19.857763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:22:20.759542 0.042228 udp 10.0.2.104 54523 <-> 80.78.224.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:21.761107 0.042125 udp 10.0.2.104 54523 <-> 85.229.11.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:22.762343 0.087025 udp 10.0.2.104 54523 <-> 46.191.148.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:23.763279 0.208641 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:24.764890 0.000000 udp 10.0.2.104 54523 -> 77.76.177.251 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:25.756156 0.294034 udp 10.0.2.104 54523 <-> 190.206.231.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:26.757853 0.056263 udp 10.0.2.104 54523 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:27.759218 0.000000 udp 10.0.2.104 54523 -> 178.172.245.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:27.859291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:22:28.760722 0.151781 udp 10.0.2.104 54523 <-> 68.204.134.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:29.762112 0.231905 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:30.422564 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:22:30.763114 3.995720 udp 10.0.2.104 54523 -> 190.79.250.42 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:31.764775 1.016034 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:33.757835 0.000000 udp 10.0.2.104 54523 -> 190.174.242.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:35.760612 0.000000 udp 10.0.2.104 54523 -> 188.158.227.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:36.761758 0.210338 udp 10.0.2.104 54523 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:37.763490 0.022078 udp 10.0.2.104 54523 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:38.764667 0.177999 udp 10.0.2.104 54523 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:39.756200 0.185962 udp 10.0.2.104 54523 <-> 207.160.47.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:40.757733 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:41.758994 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:42.760847 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:43.762391 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:43.862572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:22:44.763053 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:45.764730 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:46.756099 0.000000 udp 10.0.2.104 54523 -> 92.41.243.192 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:47.757597 0.142612 udp 10.0.2.104 54523 <-> 97.80.121.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:48.758840 0.346928 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:49.761197 0.214560 udp 10.0.2.104 54523 <-> 72.172.107.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:50.761733 0.977400 udp 10.0.2.104 54523 <-> 93.102.10.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:51.763313 0.065110 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:52.464004 0.013074 udp 10.0.2.104 54591 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 09:22:52.477313 0.000000 udp 10.0.2.104 54592 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:52.764788 0.320308 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:53.756277 0.337858 udp 10.0.2.104 54523 <-> 186.136.194.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:54.757813 0.000000 udp 10.0.2.104 54523 -> 74.61.123.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:22:55.758969 0.135265 udp 10.0.2.104 54523 <-> 50.95.150.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:56.760691 0.163421 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:57.762211 0.277131 udp 10.0.2.104 54523 <-> 190.38.83.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:58.764119 0.160670 udp 10.0.2.104 54523 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:22:59.764718 0.000000 udp 10.0.2.104 54523 -> 75.180.55.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:00.756369 0.099072 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:01.757924 0.312487 udp 10.0.2.104 54523 <-> 175.210.26.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:02.758985 0.436744 udp 10.0.2.104 54523 <-> 186.92.209.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:03.761227 0.000000 udp 10.0.2.104 54523 -> 87.18.198.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:04.762158 0.161743 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:05.764035 1.300991 udp 10.0.2.104 54523 <-> 186.68.6.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:07.756393 0.170994 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:08.757903 0.311099 udp 10.0.2.104 54523 <-> 14.49.173.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:09.759472 0.054426 udp 10.0.2.104 54523 <-> 89.136.64.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:10.760920 0.240019 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:11.762345 0.309804 udp 10.0.2.104 54523 <-> 117.206.164.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:12.763899 0.039967 udp 10.0.2.104 54523 <-> 82.41.9.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:13.764893 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:14.756500 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:15.757900 0.000000 udp 10.0.2.104 54523 -> 69.31.160.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:15.868206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:23:16.759304 0.255616 udp 10.0.2.104 54523 <-> 201.17.131.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:17.420366 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:23:17.761124 0.151801 udp 10.0.2.104 54523 <-> 75.108.181.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:18.762064 0.361762 udp 10.0.2.104 54523 <-> 124.11.140.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:19.764116 0.136663 udp 10.0.2.104 54523 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:20.754462 0.349646 udp 10.0.2.104 54523 <-> 14.97.128.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:21.756392 0.262291 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:22.757883 0.200983 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:23.759227 0.221850 udp 10.0.2.104 54523 <-> 177.228.74.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:24.760985 0.041257 udp 10.0.2.104 54523 <-> 79.117.112.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:25.762506 0.177242 udp 10.0.2.104 54523 <-> 72.172.193.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:26.763643 0.894676 udp 10.0.2.104 54523 <-> 181.43.67.27 16464 CON 0 0 7 5398 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:27.755186 0.069860 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:28.756473 0.302008 udp 10.0.2.104 54523 <-> 181.226.107.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:29.758037 0.159797 udp 10.0.2.104 54523 <-> 66.168.217.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:30.759680 0.000000 udp 10.0.2.104 54523 -> 117.213.217.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:31.760961 0.026757 udp 10.0.2.104 54523 <-> 80.98.70.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:32.762233 1.113789 udp 10.0.2.104 54523 <-> 182.237.180.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:33.763852 0.000000 udp 10.0.2.104 54523 -> 176.219.30.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:34.755244 0.164097 udp 10.0.2.104 54523 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:35.756335 0.387991 udp 10.0.2.104 54523 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:36.758089 0.038607 udp 10.0.2.104 54523 <-> 5.15.211.181 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:37.759453 0.224630 udp 10.0.2.104 54523 <-> 201.209.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:38.761427 0.555710 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:39.762235 0.000000 udp 10.0.2.104 54523 -> 5.58.18.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:40.763898 0.000000 udp 10.0.2.104 54523 -> 79.163.41.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:41.755288 0.617229 udp 10.0.2.104 54523 <-> 24.72.12.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:42.756417 0.000000 udp 10.0.2.104 54523 -> 190.79.250.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:43.758065 0.000000 udp 10.0.2.104 54523 -> 122.99.102.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:44.759397 0.676284 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:45.761079 1.621822 udp 10.0.2.104 54523 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:46.765302 0.039660 udp 10.0.2.104 54523 <-> 5.15.211.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:47.765268 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:48.755572 0.000000 udp 10.0.2.104 54523 -> 201.19.246.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:49.756894 0.095478 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:50.758181 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:51.759696 0.164313 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:23:52.760872 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:53.762725 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:54.764029 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:55.755264 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:56.756953 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:57.758111 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:58.759783 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:23:59.761848 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:00.762608 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:01.763869 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:02.755337 0.305257 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:03.757085 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:04.417949 0.000165 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:24:04.758100 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:05.759714 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:06.761394 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:07.762649 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:08.764208 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:09.756017 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:10.757271 0.152720 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:11.758434 0.000000 udp 10.0.2.104 54523 -> 174.103.239.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:12.760237 0.000110 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:12.760347 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:24:13.760965 0.000000 udp 10.0.2.104 54523 -> 80.185.62.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:14.763181 0.000000 udp 10.0.2.104 54523 -> 87.220.97.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:15.764770 0.049891 udp 10.0.2.104 54523 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:17.756777 0.000000 udp 10.0.2.104 54523 -> 78.188.164.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:18.758438 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:19.759940 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:20.761728 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:21.765079 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:22.765033 0.317079 udp 10.0.2.104 54523 <-> 115.253.96.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:23.756436 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:24.757140 0.000000 udp 10.0.2.104 54523 -> 174.103.239.19 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:25.758516 0.034910 udp 10.0.2.104 54523 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:26.759994 0.325447 udp 10.0.2.104 54523 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:27.761345 0.184536 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:28.763134 0.153276 udp 10.0.2.104 54523 <-> 216.115.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:29.763992 0.120315 udp 10.0.2.104 54523 <-> 95.235.98.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:30.755735 0.000000 udp 10.0.2.104 54523 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:31.757167 0.175763 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:32.758321 0.000000 udp 10.0.2.104 54523 -> 217.197.141.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:33.760244 0.409094 udp 10.0.2.104 54523 <-> 186.89.74.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:34.761569 0.162503 udp 10.0.2.104 54523 <-> 67.34.142.170 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:35.763400 0.208109 udp 10.0.2.104 54523 <-> 37.213.12.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:36.764407 0.639460 udp 10.0.2.104 54523 <-> 190.174.118.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:37.755955 0.168020 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:38.757177 0.142946 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:39.758511 0.174202 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:40.760435 0.163796 udp 10.0.2.104 54523 <-> 68.103.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:41.761439 0.059704 udp 10.0.2.104 54523 <-> 93.183.148.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:42.762889 0.000000 udp 10.0.2.104 54523 -> 68.34.31.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:43.764712 0.000000 udp 10.0.2.104 54523 -> 190.198.231.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:44.756147 0.000000 udp 10.0.2.104 54523 -> 187.57.60.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:45.757332 0.175273 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:46.758551 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:47.760428 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:48.761640 4.996969 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:49.762845 0.278801 udp 10.0.2.104 54523 <-> 201.80.112.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:50.764596 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:51.415535 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:24:51.756446 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:52.757323 0.000000 udp 10.0.2.104 54523 -> 87.110.22.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:54.760676 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:55.762414 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:56.765368 4.995187 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:57.770332 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:24:58.758799 0.166582 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:24:59.757208 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:00.758830 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:02.762013 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:03.763035 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:04.764875 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:05.756522 3.777921 udp 10.0.2.104 54523 <-> 202.140.211.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:06.757261 0.161016 udp 10.0.2.104 54523 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:07.765257 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:08.766128 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:09.766310 0.055745 udp 10.0.2.104 54523 <-> 93.183.148.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:10.766232 0.133674 udp 10.0.2.104 54523 <-> 176.240.25.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:11.766461 0.535398 udp 10.0.2.104 54523 <-> 181.54.23.247 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:12.756390 0.717551 udp 10.0.2.104 54523 <-> 67.100.230.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:13.757644 0.155057 udp 10.0.2.104 54523 <-> 96.28.143.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:14.758851 0.067247 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:15.760542 0.180159 udp 10.0.2.104 54523 <-> 173.16.136.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:16.761994 0.000000 udp 10.0.2.104 54523 -> 108.181.202.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:17.763784 0.306375 udp 10.0.2.104 54523 <-> 153.132.3.163 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:18.765026 0.157386 udp 10.0.2.104 54523 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:19.756464 0.161037 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:20.757247 0.071560 udp 10.0.2.104 54523 <-> 92.36.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:21.758961 0.155024 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:22.760605 0.210210 udp 10.0.2.104 54523 <-> 125.63.83.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:23.762297 3.080770 udp 10.0.2.104 54523 <-> 5.34.141.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:24.763321 1.052734 udp 10.0.2.104 54523 <-> 200.44.254.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:25.764585 0.287531 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:27.757800 0.046337 udp 10.0.2.104 54523 <-> 193.106.145.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:28.759012 0.045621 udp 10.0.2.104 54523 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:29.760998 0.000000 udp 10.0.2.104 54523 -> 117.245.35.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:30.761918 0.000000 udp 10.0.2.104 54523 -> 79.36.252.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:31.763573 0.110754 udp 10.0.2.104 54523 <-> 31.223.219.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:32.764894 0.041039 udp 10.0.2.104 54523 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:33.756487 0.116212 udp 10.0.2.104 54523 <-> 24.122.208.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:34.758633 0.046948 udp 10.0.2.104 54523 <-> 178.148.74.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:35.759092 0.209960 udp 10.0.2.104 54523 <-> 189.192.237.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:36.760530 0.223688 udp 10.0.2.104 54523 <-> 186.93.205.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:37.762134 0.203139 udp 10.0.2.104 54523 <-> 50.0.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:38.422984 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:25:38.763639 0.152849 udp 10.0.2.104 54523 <-> 27.106.2.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:39.766064 3.252951 udp 10.0.2.104 54523 <-> 201.17.131.137 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:40.756491 0.359196 udp 10.0.2.104 54523 <-> 111.249.141.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:41.757820 0.045321 udp 10.0.2.104 54523 <-> 88.216.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:43.760387 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:44.762154 0.128355 udp 10.0.2.104 54523 <-> 74.65.222.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:45.763449 0.168426 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:46.765079 4.996879 udp 10.0.2.104 54523 <-> 188.241.10.7 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:47.756157 0.055456 udp 10.0.2.104 54523 <-> 84.236.102.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:48.758268 0.056488 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:49.759312 0.168853 udp 10.0.2.104 54523 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:50.760747 0.030283 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:51.814975 0.000000 udp 10.0.2.104 54523 <- 188.241.10.7 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:52.764021 0.063994 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:53.754486 0.073766 udp 10.0.2.104 54523 <-> 188.171.7.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:54.756508 4.260653 udp 10.0.2.104 54523 <-> 176.240.90.48 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:55.757915 0.153350 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:57.760820 0.000000 udp 10.0.2.104 54523 -> 201.209.115.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:25:58.762277 0.093121 udp 10.0.2.104 54523 <-> 62.10.135.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:25:59.763640 0.199995 udp 10.0.2.104 54523 <-> 50.0.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:00.755580 0.252050 udp 10.0.2.104 54523 <-> 190.77.102.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:01.756587 2.163208 udp 10.0.2.104 54523 <-> 186.30.192.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:02.757900 0.159636 udp 10.0.2.104 54523 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:03.759174 0.237777 udp 10.0.2.104 54523 <-> 24.134.185.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:04.760818 0.273504 udp 10.0.2.104 54523 <-> 190.206.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:05.762659 0.000000 udp 10.0.2.104 54523 -> 5.15.162.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:06.764494 0.000000 udp 10.0.2.104 54523 -> 79.0.94.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:07.755013 0.056517 udp 10.0.2.104 54523 <-> 77.121.209.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:08.756988 0.161884 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:09.758283 0.183296 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:10.759404 0.161004 udp 10.0.2.104 54523 <-> 24.94.123.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:11.761155 1.828442 udp 10.0.2.104 54523 <-> 209.102.248.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:12.762349 0.063420 udp 10.0.2.104 54523 <-> 89.28.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:13.767049 0.000000 udp 10.0.2.104 54523 -> 201.0.15.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:14.756506 0.153743 udp 10.0.2.104 54523 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:15.756392 0.161531 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:16.758039 0.000000 udp 10.0.2.104 54523 -> 86.199.95.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:17.760211 0.000000 udp 10.0.2.104 54523 -> 76.27.32.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:18.761039 0.181815 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:19.762283 1.992858 udp 10.0.2.104 54523 -> 24.84.162.11 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:20.764016 0.174784 udp 10.0.2.104 54523 <-> 67.11.181.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:22.756611 0.000000 udp 10.0.2.104 54523 -> 84.124.229.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:23.758193 0.081674 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:24.760129 0.000000 udp 10.0.2.104 54523 -> 201.0.15.6 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:25.420797 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:26:25.761329 0.000000 udp 10.0.2.104 54523 -> 24.94.123.9 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:26.763047 0.601038 udp 10.0.2.104 54523 <-> 200.104.248.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:27.764155 0.000000 udp 10.0.2.104 54523 -> 86.199.95.12 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:28.755322 0.218001 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:29.757280 0.049018 udp 10.0.2.104 54523 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:30.758362 0.056111 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:31.759498 0.000000 udp 10.0.2.104 54523 -> 79.9.188.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:32.761892 0.101712 udp 10.0.2.104 54523 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:33.762789 0.143372 udp 10.0.2.104 54523 <-> 174.44.41.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:34.764061 0.357292 udp 10.0.2.104 54523 <-> 118.161.50.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:35.755374 0.000000 udp 10.0.2.104 54523 -> 80.97.242.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:36.756861 1.793209 udp 10.0.2.104 54523 <-> 31.185.116.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:37.758536 0.151055 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:38.759914 0.000000 udp 10.0.2.104 54523 -> 87.216.98.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:39.761354 2.031283 udp 10.0.2.104 54523 <-> 80.99.49.236 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:40.762491 0.041521 udp 10.0.2.104 54523 <-> 80.78.224.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:42.755280 0.000000 udp 10.0.2.104 54523 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:43.757187 0.151760 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:44.758466 0.000000 udp 10.0.2.104 54523 -> 216.161.212.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:45.759998 0.456732 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:46.761449 0.317212 udp 10.0.2.104 54523 <-> 201.213.14.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:47.762871 3.160782 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:48.764486 0.000000 udp 10.0.2.104 54523 -> 84.55.62.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:51.758477 0.062363 udp 10.0.2.104 54523 <-> 79.116.203.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:52.760209 0.000000 udp 10.0.2.104 54523 -> 59.99.238.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:53.761217 0.147932 udp 10.0.2.104 54523 <-> 98.212.63.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:54.762520 0.213386 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:55.764212 0.335256 udp 10.0.2.104 54523 <-> 1.173.218.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:26:56.755443 0.000000 udp 10.0.2.104 54523 -> 184.35.95.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:57.757322 0.000000 udp 10.0.2.104 54523 -> 64.219.232.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:58.758278 4.005955 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:26:59.759989 1.049468 udp 10.0.2.104 54523 <-> 62.195.179.53 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:01.763151 0.179991 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:03.756322 0.157161 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:04.757185 0.087241 udp 10.0.2.104 54523 <-> 128.70.65.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:05.759160 0.320532 udp 10.0.2.104 54523 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:06.760701 0.000000 udp 10.0.2.104 54523 -> 85.84.235.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:07.761801 0.083239 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:08.763100 0.310838 udp 10.0.2.104 54523 <-> 150.162.122.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:09.764194 0.052431 udp 10.0.2.104 54523 <-> 85.11.180.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:10.755999 0.000000 udp 10.0.2.104 54523 -> 103.251.81.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:11.757106 0.063184 udp 10.0.2.104 54523 <-> 86.122.232.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:12.418361 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:27:12.758852 1.218235 udp 10.0.2.104 54523 <-> 183.83.32.66 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:14.764934 0.253618 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:15.765022 0.000000 udp 10.0.2.104 54523 -> 158.108.164.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:16.766456 0.000000 udp 10.0.2.104 54523 -> 74.57.244.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:17.757036 3.147841 udp 10.0.2.104 54523 <-> 88.183.173.131 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:18.757257 0.000000 udp 10.0.2.104 54523 -> 173.238.13.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:19.758468 0.343231 udp 10.0.2.104 54523 <-> 114.24.22.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:21.762055 0.040102 udp 10.0.2.104 54523 <-> 89.215.64.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:22.763289 0.000000 udp 10.0.2.104 54523 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:23.764366 0.033688 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:24.756113 0.153381 udp 10.0.2.104 54523 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:25.757164 0.151522 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:26.758740 0.259886 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:27.760825 3.995846 udp 10.0.2.104 54523 -> 94.197.234.60 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:28.761658 0.042475 udp 10.0.2.104 54523 <-> 46.35.173.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:29.762887 0.030046 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:30.764543 0.000000 udp 10.0.2.104 54523 -> 82.242.39.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:32.757240 0.233113 udp 10.0.2.104 54523 <-> 190.77.247.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:33.758813 0.284545 udp 10.0.2.104 54523 <-> 190.163.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:34.760392 0.556772 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:35.761692 0.165349 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:36.762833 1.300097 udp 10.0.2.104 54523 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:37.766562 0.061040 udp 10.0.2.104 54523 <-> 79.113.187.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:38.757084 0.050880 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:39.757169 0.353528 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:40.759804 3.192108 udp 10.0.2.104 54523 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:41.760437 0.161077 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:42.762098 1.170595 udp 10.0.2.104 54523 <-> 74.143.231.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:44.764612 0.281420 udp 10.0.2.104 54523 <-> 190.16.249.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:45.756373 0.000000 udp 10.0.2.104 54523 -> 186.188.24.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:46.757669 0.000000 udp 10.0.2.104 54523 -> 71.89.50.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:47.758706 0.143605 udp 10.0.2.104 54523 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:48.760396 0.174139 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:49.761895 0.236147 udp 10.0.2.104 54523 <-> 203.193.142.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:50.763634 0.322330 udp 10.0.2.104 54523 <-> 114.176.173.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:51.764605 0.350406 udp 10.0.2.104 54523 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:52.756486 0.122323 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:53.757492 0.206223 udp 10.0.2.104 54523 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:54.759328 0.000000 udp 10.0.2.104 54523 -> 68.113.165.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:55.760534 0.000000 udp 10.0.2.104 54523 -> 178.79.29.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:56.761921 0.194955 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:57.763576 1.995643 udp 10.0.2.104 54523 <-> 181.208.87.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:27:58.764741 0.000000 udp 10.0.2.104 54523 -> 78.90.230.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:27:59.416185 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:27:59.756761 1.661844 arp 10.0.2.104 who 169.254.195.33 INT 3 126 flow=Background-ARP 1970/01/01 09:28:00.758053 0.389493 udp 10.0.2.104 54523 <-> 112.118.16.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:01.759093 0.000000 udp 10.0.2.104 54523 -> 5.15.145.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:03.762201 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:04.764053 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:04.764129 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:28:05.764798 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:06.756372 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:07.758105 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:08.758923 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:09.760777 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:10.762272 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:11.763741 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:12.764874 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:13.756224 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:14.757781 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:15.759095 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:16.761052 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:17.762778 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:18.763337 1.120061 udp 10.0.2.104 54523 <-> 186.66.29.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:19.765206 0.049397 udp 10.0.2.104 54523 <-> 88.222.170.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:20.756662 1.968416 udp 10.0.2.104 54523 <-> 72.220.6.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:21.757340 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:22.759209 0.078258 udp 10.0.2.104 54523 <-> 188.2.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:23.761014 0.265650 udp 10.0.2.104 54523 <-> 190.204.32.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:24.762373 0.035398 udp 10.0.2.104 54523 <-> 188.254.221.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:25.763932 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:26.756338 0.052152 udp 10.0.2.104 54523 <-> 188.27.211.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:27.756559 0.122641 udp 10.0.2.104 54523 <-> 79.31.178.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:28.757843 3.437501 udp 10.0.2.104 54523 <-> 200.125.109.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:29.759289 0.305936 udp 10.0.2.104 54523 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:31.762664 0.254391 udp 10.0.2.104 54523 <-> 183.83.99.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:32.763748 0.168097 udp 10.0.2.104 54523 <-> 173.172.19.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:33.755385 0.054351 udp 10.0.2.104 54523 <-> 78.73.215.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:34.756513 0.197165 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:35.758057 0.000000 udp 10.0.2.104 54523 -> 78.22.176.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:36.759633 2.557203 udp 10.0.2.104 54523 <-> 200.125.109.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:37.760787 0.066373 udp 10.0.2.104 54523 <-> 83.213.201.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:38.762219 0.164241 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:39.763956 4.997019 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:40.755676 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:41.756437 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:42.757966 0.000000 udp 10.0.2.104 54523 -> 187.25.181.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:43.759364 0.154132 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:45.762443 0.000000 udp 10.0.2.104 54523 -> 122.25.137.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:46.423374 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:28:46.763816 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:47.755324 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:48.756496 0.000000 udp 10.0.2.104 54523 -> 188.230.145.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:49.758197 0.059008 udp 10.0.2.104 54523 <-> 37.146.145.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:50.759800 0.262212 udp 10.0.2.104 54523 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:51.761203 0.215795 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:52.762511 0.313349 udp 10.0.2.104 54523 <-> 31.147.62.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:53.764599 2.322217 udp 10.0.2.104 54523 <-> 190.206.217.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:54.756246 0.726752 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:56.758175 0.028324 udp 10.0.2.104 54523 <-> 86.101.244.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:57.759387 0.211870 udp 10.0.2.104 54523 <-> 108.185.229.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:28:58.761087 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:28:59.762577 0.161058 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:00.763778 0.067125 udp 10.0.2.104 54523 <-> 88.167.163.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:01.756036 0.044687 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:02.756948 0.138698 udp 10.0.2.104 54523 <-> 31.147.62.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:03.758152 0.042476 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:04.759488 0.046441 udp 10.0.2.104 54523 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:05.761381 0.139295 udp 10.0.2.104 54523 <-> 71.76.197.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:06.762658 0.000000 udp 10.0.2.104 54523 -> 77.23.110.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:07.763460 0.000000 udp 10.0.2.104 54523 -> 217.174.48.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:08.755695 0.000000 udp 10.0.2.104 54523 -> 31.147.129.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:09.757019 0.498236 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:10.758246 0.986477 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:11.760227 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:12.761668 0.000000 udp 10.0.2.104 54523 -> 87.6.60.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:13.762879 0.025218 udp 10.0.2.104 54523 <-> 86.101.244.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:14.764203 0.310587 udp 10.0.2.104 54523 <-> 190.136.239.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:15.755612 0.339831 udp 10.0.2.104 54523 <-> 31.147.104.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:16.757163 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:17.758194 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:18.759850 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:19.760982 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:19.874074 3.002005 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:29:20.762903 3.995548 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:21.764185 0.000000 udp 10.0.2.104 54523 -> 186.134.140.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:22.755683 0.355548 udp 10.0.2.104 54523 <-> 114.38.103.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:23.756995 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:25.760019 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:26.761239 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:26.881639 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:29:27.762779 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:28.764671 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:29.755943 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:30.756822 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:31.758413 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:32.759980 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:33.420857 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:29:33.762195 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:34.762892 4.997399 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:34.763047 4.997244 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 09:29:34.883036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:29:35.764570 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:36.756323 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:37.757114 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:38.758394 0.049663 udp 10.0.2.104 54523 <-> 80.243.20.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:40.761349 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:41.762857 0.292301 udp 10.0.2.104 54523 <-> 201.241.2.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:42.764264 0.179175 udp 10.0.2.104 54523 <-> 76.30.191.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:43.756218 0.293001 udp 10.0.2.104 54523 <-> 186.93.166.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:44.757291 0.000000 udp 10.0.2.104 54523 -> 190.230.196.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:45.758614 0.038228 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:46.760802 0.000000 udp 10.0.2.104 54523 -> 187.37.104.223 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:47.761566 0.000000 udp 10.0.2.104 54523 -> 108.176.74.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:48.762828 0.458827 udp 10.0.2.104 54523 <-> 190.135.227.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:49.764413 0.279819 udp 10.0.2.104 54523 <-> 75.120.2.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:50.756504 0.165637 udp 10.0.2.104 54523 <-> 42.201.183.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:50.886485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:29:51.758120 0.304509 udp 10.0.2.104 54523 <-> 219.121.216.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:52.759418 0.298841 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:53.760330 0.000000 udp 10.0.2.104 54523 -> 46.196.126.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:54.761378 0.145589 udp 10.0.2.104 54523 <-> 71.65.107.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:55.763352 3.150205 udp 10.0.2.104 54523 <-> 74.77.40.18 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:29:57.757092 0.000000 udp 10.0.2.104 54523 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:29:59.758807 0.247082 udp 10.0.2.104 54523 <-> 122.99.102.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:00.760229 0.268001 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:01.761480 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:02.763133 0.305476 udp 10.0.2.104 54523 <-> 201.93.44.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:03.764552 0.030534 udp 10.0.2.104 54523 <-> 212.186.12.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:04.756057 1.273822 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:05.757558 0.000000 udp 10.0.2.104 54523 -> 63.169.196.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:06.759132 0.059165 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:07.760525 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:08.761880 0.000000 udp 10.0.2.104 54523 -> 207.6.7.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:09.763025 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:10.764709 0.045705 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:11.756214 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:13.758931 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:14.760288 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:15.761972 0.287075 udp 10.0.2.104 54523 <-> 181.166.65.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:16.763272 0.199972 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:17.764669 0.155388 udp 10.0.2.104 54523 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:18.756136 0.317905 udp 10.0.2.104 54523 <-> 71.155.230.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:19.757532 0.141856 udp 10.0.2.104 54523 <-> 173.220.221.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:20.418734 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:30:20.758811 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:21.760717 0.160562 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:22.762100 0.000000 udp 10.0.2.104 54523 -> 74.193.210.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:22.892420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:30:23.763242 0.008716 udp 10.0.2.104 54523 <-> 152.66.15.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:24.765251 0.174213 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:25.755856 0.000000 udp 10.0.2.104 54523 -> 24.19.142.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:26.757932 0.201974 udp 10.0.2.104 54523 <-> 87.13.102.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:27.759053 3.799062 udp 10.0.2.104 54523 <-> 186.18.175.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:28.760395 0.025180 udp 10.0.2.104 54523 <-> 109.192.130.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:29.761905 0.169449 udp 10.0.2.104 54523 <-> 174.54.53.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:30.763604 0.154979 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:31.766417 0.359853 udp 10.0.2.104 54523 <-> 118.168.193.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:32.756481 0.039219 udp 10.0.2.104 54523 <-> 5.15.195.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:33.757549 0.000000 udp 10.0.2.104 54523 -> 189.47.29.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:34.758915 0.076122 udp 10.0.2.104 54523 <-> 80.108.38.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:35.760486 0.018164 udp 10.0.2.104 54523 <-> 176.198.111.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:36.761905 0.319855 udp 10.0.2.104 54523 <-> 59.0.192.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:37.763378 0.052448 udp 10.0.2.104 54523 <-> 79.113.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:38.764695 0.052142 udp 10.0.2.104 54523 <-> 89.234.212.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:39.756456 0.183166 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:40.757586 0.142672 udp 10.0.2.104 54523 <-> 105.137.79.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:41.758888 0.000000 udp 10.0.2.104 54523 -> 142.166.235.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:42.760550 0.922844 udp 10.0.2.104 54523 <-> 14.99.86.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:43.762131 0.169096 udp 10.0.2.104 54523 <-> 106.51.82.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:44.763709 0.126872 udp 10.0.2.104 54523 <-> 24.75.177.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:45.765190 0.167564 udp 10.0.2.104 54523 <-> 24.203.38.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:46.756910 0.000000 udp 10.0.2.104 54523 -> 205.237.176.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:47.757515 0.220451 udp 10.0.2.104 54523 <-> 71.228.145.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:48.759196 0.080269 udp 10.0.2.104 54523 <-> 176.8.201.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:49.761376 0.168067 udp 10.0.2.104 54523 <-> 103.7.80.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:50.765907 0.058051 udp 10.0.2.104 54523 <-> 213.37.198.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:51.763901 0.000000 udp 10.0.2.104 54523 -> 186.94.25.214 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:52.764809 0.163620 udp 10.0.2.104 54523 <-> 109.55.244.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:53.756408 0.098871 udp 10.0.2.104 54523 <-> 128.143.29.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:54.758278 0.298009 udp 10.0.2.104 54523 <-> 187.101.238.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:55.759357 0.165330 udp 10.0.2.104 54523 <-> 96.42.70.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:56.760635 0.014984 udp 10.0.2.104 54523 <-> 188.230.247.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:57.762238 0.164219 udp 10.0.2.104 54523 <-> 75.68.73.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:30:58.763382 0.000000 udp 10.0.2.104 54523 -> 117.205.11.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:30:59.755026 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:00.756260 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:01.758665 3.158788 udp 10.0.2.104 54523 <-> 37.212.32.203 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:02.759956 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:03.761312 0.000000 udp 10.0.2.104 54523 -> 98.203.24.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:05.763957 0.000000 udp 10.0.2.104 54523 -> 93.134.103.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:06.755138 0.149850 udp 10.0.2.104 54523 <-> 68.12.124.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:07.417166 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:31:07.757225 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:08.758246 0.000000 udp 10.0.2.104 54523 -> 190.52.44.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:09.759127 0.092372 udp 10.0.2.104 54523 <-> 84.122.212.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:10.760936 0.040233 udp 10.0.2.104 54523 <-> 91.218.81.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:11.762254 0.109517 udp 10.0.2.104 54523 <-> 85.65.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:12.764050 0.000000 udp 10.0.2.104 54523 -> 79.13.223.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:13.755110 0.000000 udp 10.0.2.104 54523 -> 84.1.20.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:14.756785 0.197892 udp 10.0.2.104 54523 <-> 66.184.241.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:15.757995 1.572690 udp 10.0.2.104 54523 <-> 94.47.119.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:16.760699 0.154968 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:17.760845 0.000000 udp 10.0.2.104 54523 -> 5.250.106.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:18.762219 0.075556 udp 10.0.2.104 54523 <-> 62.42.133.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:19.764013 0.066209 udp 10.0.2.104 54523 <-> 90.236.33.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:20.755435 0.369293 udp 10.0.2.104 54523 <-> 111.248.97.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:21.756546 0.159345 udp 10.0.2.104 54523 <-> 70.92.245.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:22.758339 0.047116 udp 10.0.2.104 54523 <-> 5.13.20.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:23.760409 0.349281 udp 10.0.2.104 54523 <-> 121.133.29.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:24.761675 0.000000 udp 10.0.2.104 54523 -> 92.229.38.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:25.762427 0.052486 udp 10.0.2.104 54523 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:26.763970 1.345629 udp 10.0.2.104 54523 <-> 60.238.117.126 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:28.756538 0.053689 udp 10.0.2.104 54523 <-> 5.14.214.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:29.758658 0.000000 udp 10.0.2.104 54523 -> 187.19.211.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:30.760026 0.267691 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:31.761244 0.922683 udp 10.0.2.104 54523 <-> 186.66.29.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:32.767118 0.314618 udp 10.0.2.104 54523 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:33.766443 0.307733 udp 10.0.2.104 54523 <-> 220.116.148.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:34.759080 0.166232 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:35.760442 0.054912 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:36.761909 0.103906 udp 10.0.2.104 54523 <-> 188.47.247.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:37.763060 0.000000 udp 10.0.2.104 54523 -> 122.169.92.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:38.764156 4.781808 udp 10.0.2.104 54523 <-> 62.117.133.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:39.765675 0.169268 udp 10.0.2.104 54523 <-> 103.250.146.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:40.766540 0.111540 udp 10.0.2.104 54523 <-> 79.50.212.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:41.756450 0.069448 udp 10.0.2.104 54523 <-> 46.185.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:42.756910 0.037851 udp 10.0.2.104 54523 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:43.758253 0.000000 udp 10.0.2.104 54523 -> 79.113.241.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:44.759766 2.290801 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:45.761468 0.000000 udp 10.0.2.104 54523 -> 78.183.137.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:47.764660 0.257862 udp 10.0.2.104 54523 <-> 177.182.86.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:48.755974 0.058677 udp 10.0.2.104 54523 <-> 188.2.117.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:49.757127 0.057462 udp 10.0.2.104 54523 <-> 89.136.64.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:50.758859 0.330886 udp 10.0.2.104 54523 <-> 103.249.248.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:51.760250 0.164500 udp 10.0.2.104 54523 <-> 70.182.166.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:52.761154 0.000000 udp 10.0.2.104 54523 -> 178.79.27.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:53.762605 1.546462 udp 10.0.2.104 54523 <-> 186.136.183.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:54.413738 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:31:54.764284 0.163901 udp 10.0.2.104 54523 <-> 74.142.131.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:55.755832 0.224497 udp 10.0.2.104 54523 <-> 189.197.164.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:56.757340 0.261327 udp 10.0.2.104 54523 <-> 181.166.240.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:31:57.758503 0.000000 udp 10.0.2.104 54523 -> 31.220.228.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:58.759963 4.997123 udp 10.0.2.104 54523 -> 188.230.65.186 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:31:59.761076 0.163139 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:00.762675 0.162514 udp 10.0.2.104 54523 <-> 142.217.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:01.764631 0.132782 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:02.755486 4.730260 udp 10.0.2.104 54523 <-> 190.39.171.142 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:03.799845 0.000000 udp 10.0.2.104 54523 <- 188.230.65.186 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:04.759045 0.000000 udp 10.0.2.104 54523 -> 31.220.228.194 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:05.760136 0.305352 udp 10.0.2.104 54523 <-> 189.47.29.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:07.762795 0.175170 udp 10.0.2.104 54523 <-> 82.130.178.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:08.764190 0.150603 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:09.757179 1.166578 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:11.758623 0.215387 udp 10.0.2.104 54523 <-> 178.79.27.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:12.760117 0.340643 udp 10.0.2.104 54523 <-> 115.241.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:13.762007 0.000000 udp 10.0.2.104 54523 -> 108.199.45.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:14.763073 0.153653 udp 10.0.2.104 54523 <-> 24.231.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:15.764301 0.056547 udp 10.0.2.104 54523 <-> 86.124.222.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:16.756127 0.000000 udp 10.0.2.104 54523 -> 190.74.80.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:17.757854 0.281863 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:19.760265 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:20.761574 0.000151 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:20.761725 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:32:21.762970 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:22.764250 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:23.755956 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:24.757908 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:25.758517 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:26.760592 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:27.761520 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:28.763000 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:29.764784 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:30.756325 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:31.757452 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:32.758969 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:33.760042 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:34.761702 0.347748 udp 10.0.2.104 54523 <-> 49.107.6.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:35.763611 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:36.764594 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:37.756400 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:38.758007 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:39.758972 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:40.760094 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:41.420969 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:32:41.762048 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:42.763205 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:44.756179 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:45.757805 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:46.758928 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:47.760221 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:48.762293 0.000103 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:48.762396 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:32:49.763226 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:50.764644 0.120885 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:51.756170 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:52.757640 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:53.758834 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:54.760464 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:55.762271 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:56.763230 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:57.764463 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:32:58.756214 0.157082 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:32:59.758135 0.000000 udp 10.0.2.104 54523 -> 95.25.29.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:00.759096 0.067789 udp 10.0.2.104 54523 <-> 86.104.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:01.760898 2.579086 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:02.762586 0.024304 udp 10.0.2.104 54523 <-> 178.48.110.137 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:04.764831 0.991498 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:06.757760 0.131109 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:07.759105 1.297994 udp 10.0.2.104 54523 <-> 190.39.82.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:08.760602 0.156768 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:09.761964 4.996976 udp 10.0.2.104 54523 <-> 201.249.10.40 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:10.763371 0.000000 udp 10.0.2.104 54523 -> 93.102.10.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:11.765008 4.997123 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:12.756338 0.047806 udp 10.0.2.104 54523 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:13.757843 0.302395 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:15.118630 0.000000 udp 10.0.2.104 54523 <- 201.249.10.40 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:15.760810 0.000000 udp 10.0.2.104 54523 -> 94.21.162.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:16.823888 0.000000 udp 10.0.2.104 54523 <- 128.68.67.11 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:17.763721 0.044163 udp 10.0.2.104 54523 <-> 212.200.157.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:18.764909 0.048940 udp 10.0.2.104 54523 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:19.757053 0.034287 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:20.757841 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:21.759104 1.633257 udp 10.0.2.104 54523 <-> 187.18.249.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:22.760441 0.039941 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:23.762126 1.072320 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:25.764924 1.475829 udp 10.0.2.104 54523 <-> 24.101.248.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:26.756337 0.000000 udp 10.0.2.104 54523 -> 92.244.2.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:27.757952 0.146678 udp 10.0.2.104 54523 <-> 75.109.199.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:28.418720 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:33:28.759172 0.113972 udp 10.0.2.104 54523 <-> 78.249.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:29.761031 0.000000 udp 10.0.2.104 54523 -> 78.137.212.231 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:30.762760 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:31.763899 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:32.755052 0.000122 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:32.755174 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:33:33.756476 0.163747 udp 10.0.2.104 54523 <-> 98.215.30.230 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:34.758197 0.117673 udp 10.0.2.104 54523 <-> 178.79.27.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:35.759167 0.056264 udp 10.0.2.104 54523 <-> 77.121.209.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:36.760562 0.169048 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:37.762399 2.175893 udp 10.0.2.104 54523 <-> 179.209.194.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:38.763637 0.217911 udp 10.0.2.104 54523 <-> 181.53.75.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:39.755322 0.363652 udp 10.0.2.104 54523 <-> 186.123.130.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:40.756455 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:41.758537 0.282659 udp 10.0.2.104 54523 <-> 189.33.207.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:43.761257 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:44.762589 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:45.763222 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:46.755592 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:47.756850 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:48.757879 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:49.760080 0.000000 udp 10.0.2.104 54523 -> 72.39.122.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:50.761035 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:51.762566 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:52.763879 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:53.755330 0.868698 udp 10.0.2.104 54523 <-> 14.96.176.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:54.756494 0.041612 udp 10.0.2.104 54523 <-> 78.90.253.110 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:55.758173 0.154566 udp 10.0.2.104 54523 <-> 75.115.30.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:56.760241 0.000000 udp 10.0.2.104 54523 -> 79.112.228.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:57.761181 0.027340 udp 10.0.2.104 54523 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:33:58.762559 0.000000 udp 10.0.2.104 54523 -> 187.69.115.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:33:59.764148 0.000000 udp 10.0.2.104 54523 -> 186.92.22.179 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:00.755218 1.033439 udp 10.0.2.104 54523 <-> 27.106.41.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:01.756568 0.332329 udp 10.0.2.104 54523 <-> 114.37.56.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:02.758558 0.000000 udp 10.0.2.104 54523 -> 124.122.2.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:03.759920 0.000000 udp 10.0.2.104 54523 -> 96.30.129.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:04.761207 0.346458 udp 10.0.2.104 54523 <-> 190.91.73.103 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:05.763385 0.163612 udp 10.0.2.104 54523 <-> 74.77.32.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:06.763960 0.000000 udp 10.0.2.104 54523 -> 184.63.78.210 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:07.755186 3.127397 udp 10.0.2.104 54523 <-> 175.100.158.68 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:08.758605 0.129237 udp 10.0.2.104 54523 <-> 5.240.191.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:09.758720 0.201093 udp 10.0.2.104 54523 <-> 67.183.78.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:10.759587 0.159677 udp 10.0.2.104 54523 <-> 67.167.82.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:11.761203 0.044889 udp 10.0.2.104 54523 <-> 178.74.27.134 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:12.762611 0.304044 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:13.763971 0.157424 udp 10.0.2.104 54523 <-> 70.81.218.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:14.755644 0.285208 udp 10.0.2.104 54523 <-> 190.204.135.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:15.416404 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:34:15.757055 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:16.758364 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:17.759957 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:18.257921 0.000000 udp 10.0.2.104 54523 <- 184.63.78.210 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:18.762124 0.054314 udp 10.0.2.104 54523 <-> 77.53.222.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:19.762932 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:21.755353 0.065301 udp 10.0.2.104 54523 <-> 77.244.39.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:22.757311 0.243307 udp 10.0.2.104 54523 <-> 186.95.159.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:23.758487 0.116813 udp 10.0.2.104 54523 <-> 193.30.248.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:24.759696 0.266385 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:25.761004 0.150424 udp 10.0.2.104 54523 <-> 65.93.131.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:26.762667 0.000000 udp 10.0.2.104 54523 -> 217.18.251.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:27.764084 1.957760 udp 10.0.2.104 54523 <-> 70.41.145.122 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:28.755599 0.179459 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:29.757043 0.140005 udp 10.0.2.104 54523 <-> 37.45.182.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:30.758304 1.454733 udp 10.0.2.104 54523 <-> 103.24.85.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:31.760232 0.170759 udp 10.0.2.104 54523 <-> 68.51.133.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:32.761554 0.211958 udp 10.0.2.104 54523 <-> 190.206.219.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:33.762607 0.065180 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:34.764361 0.043986 udp 10.0.2.104 54523 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:35.755987 0.343744 udp 10.0.2.104 54523 <-> 114.47.7.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:36.757144 0.000000 udp 10.0.2.104 54523 -> 124.171.169.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:37.758432 0.206787 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:38.759520 0.288850 udp 10.0.2.104 54523 <-> 190.191.235.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:39.761654 0.211558 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:40.762881 0.008676 udp 10.0.2.104 54523 <-> 89.176.244.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:41.764153 0.437246 udp 10.0.2.104 54523 <-> 179.211.249.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:42.755826 0.068861 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:43.757650 0.050286 udp 10.0.2.104 54523 <-> 109.241.49.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:44.758599 0.310129 udp 10.0.2.104 54523 <-> 124.123.157.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:45.759950 0.306719 udp 10.0.2.104 54523 <-> 187.84.77.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:46.761427 0.178252 udp 10.0.2.104 54523 <-> 76.30.230.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:47.763081 0.338655 udp 10.0.2.104 54523 <-> 114.46.100.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:48.764246 0.246170 udp 10.0.2.104 54523 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:49.756440 0.000000 udp 10.0.2.104 54523 -> 62.83.45.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:34:50.757954 0.289863 udp 10.0.2.104 54523 <-> 61.21.52.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:51.758586 0.313639 udp 10.0.2.104 54523 <-> 121.152.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:52.760213 0.320741 udp 10.0.2.104 54523 <-> 101.0.73.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:53.761809 3.978764 udp 10.0.2.104 54523 <-> 46.196.151.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:54.763198 0.149767 udp 10.0.2.104 54523 <-> 24.74.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:55.764153 1.062836 udp 10.0.2.104 54523 <-> 94.155.181.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:57.757367 0.141743 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:58.758695 0.056177 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:34:59.760309 0.000000 udp 10.0.2.104 54523 -> 92.250.7.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:00.761601 0.307557 udp 10.0.2.104 54523 <-> 24.133.71.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:01.762782 0.067639 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:02.413709 0.000032 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:35:02.764399 0.052284 udp 10.0.2.104 54523 <-> 88.223.54.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:03.756157 0.000000 udp 10.0.2.104 54523 -> 27.107.147.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:04.757264 0.256100 udp 10.0.2.104 54523 <-> 75.50.181.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:05.758548 0.098770 udp 10.0.2.104 54523 <-> 188.29.220.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:06.760116 1.282698 udp 10.0.2.104 54523 <-> 190.193.86.78 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:08.763159 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:09.764632 0.045862 udp 10.0.2.104 54523 <-> 86.63.86.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:10.756307 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:11.757625 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:12.758840 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:13.760060 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:14.761332 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:15.762407 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:16.764416 4.996991 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:17.756018 2.002771 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:18.757335 0.300000 udp 10.0.2.104 54523 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:20.760172 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:22.763299 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:23.764912 0.288333 udp 10.0.2.104 54523 <-> 190.38.83.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:24.756218 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:25.757227 0.073643 udp 10.0.2.104 54523 <-> 79.113.187.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:26.759010 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:27.506583 0.000000 udp 10.0.2.104 54523 <- 27.107.147.175 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:27.760778 0.205102 udp 10.0.2.104 54523 <-> 174.45.179.206 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:28.761892 0.085666 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:29.763121 0.155973 udp 10.0.2.104 54523 <-> 74.131.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:30.764376 1.028840 udp 10.0.2.104 54523 <-> 69.59.89.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:31.756145 0.152842 udp 10.0.2.104 54523 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:32.757465 1.291966 udp 10.0.2.104 54523 <-> 201.213.50.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:33.759014 0.000000 udp 10.0.2.104 54523 -> 111.191.15.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:34.760736 2.002688 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 6 3676 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:35.761960 0.136827 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:37.764796 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:38.756153 0.108708 udp 10.0.2.104 54523 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:39.757596 0.139910 udp 10.0.2.104 54523 <-> 71.76.197.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:40.759175 0.288110 udp 10.0.2.104 54523 <-> 201.27.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:41.760535 0.209129 udp 10.0.2.104 54523 <-> 76.93.174.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:42.761856 0.246642 udp 10.0.2.104 54523 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:43.763154 0.302286 udp 10.0.2.104 54523 <-> 187.15.59.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:44.764829 0.324486 udp 10.0.2.104 54523 <-> 117.203.235.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:45.756327 0.161770 udp 10.0.2.104 54523 <-> 173.179.146.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:46.757760 0.000000 udp 10.0.2.104 54523 -> 2.179.0.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:47.758858 0.363676 udp 10.0.2.104 54523 <-> 1.168.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:48.760552 0.135569 udp 10.0.2.104 54523 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:49.421387 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:35:49.762014 0.341968 udp 10.0.2.104 54523 <-> 111.249.244.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:50.763353 0.136495 udp 10.0.2.104 54523 <-> 68.193.33.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:51.765055 0.091407 udp 10.0.2.104 54523 <-> 95.74.171.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:52.756394 0.159735 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:53.757598 0.000000 udp 10.0.2.104 54523 -> 190.235.173.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:54.759802 0.093481 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:55.760321 0.039009 udp 10.0.2.104 54523 <-> 5.15.99.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:56.762059 0.160375 udp 10.0.2.104 54523 <-> 66.56.172.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:57.763399 0.191562 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:35:58.765143 0.000000 udp 10.0.2.104 54523 -> 95.60.75.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:35:59.756277 1.001610 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:01.759218 3.004184 udp 10.0.2.104 54523 -> 24.102.154.241 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:02.760791 0.054460 udp 10.0.2.104 54523 <-> 87.97.246.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:03.762193 4.997024 udp 10.0.2.104 54523 <-> 192.253.210.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:05.755019 0.053158 udp 10.0.2.104 54523 <-> 78.8.65.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:06.756425 0.064999 udp 10.0.2.104 54523 <-> 188.24.154.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:07.757992 0.232395 udp 10.0.2.104 54523 <-> 63.147.47.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:09.760827 3.995634 udp 10.0.2.104 54523 -> 95.60.75.60 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:10.762158 0.000000 udp 10.0.2.104 54523 -> 78.8.65.60 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:11.763894 0.060571 udp 10.0.2.104 54523 <-> 188.24.154.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:12.755104 0.341005 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:14.757978 0.143108 udp 10.0.2.104 54523 <-> 178.121.187.72 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:15.759838 0.100241 udp 10.0.2.104 54523 <-> 2.92.180.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:16.760770 1.087753 udp 10.0.2.104 54523 <-> 117.204.146.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:17.762607 0.074152 udp 10.0.2.104 54523 <-> 78.69.117.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:18.763321 0.044375 udp 10.0.2.104 54523 <-> 78.56.205.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:19.755004 0.354676 udp 10.0.2.104 54523 <-> 218.173.72.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:20.756417 0.314646 udp 10.0.2.104 54523 <-> 187.104.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:21.758259 0.342887 udp 10.0.2.104 54523 <-> 182.225.0.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:22.759415 0.149301 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:23.760789 0.000000 udp 10.0.2.104 54523 -> 86.127.19.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:24.762626 0.339332 udp 10.0.2.104 54523 <-> 27.105.20.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:25.764112 0.033696 udp 10.0.2.104 54523 <-> 188.254.163.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:26.754971 0.063802 udp 10.0.2.104 54523 <-> 151.64.32.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:26.898062 3.001876 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:36:27.756506 0.030368 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:28.758175 0.346576 udp 10.0.2.104 54523 <-> 111.249.244.142 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:29.759313 0.169071 udp 10.0.2.104 54523 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:30.760899 0.086345 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:31.762294 0.000000 udp 10.0.2.104 54523 -> 178.254.205.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:32.763877 0.121199 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:33.755354 0.121315 udp 10.0.2.104 54523 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:33.905659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:36:34.756741 0.331130 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:35.758292 0.492388 udp 10.0.2.104 54523 <-> 190.204.22.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:36.418766 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:36:36.759648 0.000000 udp 10.0.2.104 54523 -> 204.16.10.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:37.761038 0.000000 udp 10.0.2.104 54523 -> 90.137.188.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:38.762377 0.154629 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:39.763946 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:40.755089 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:41.756415 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:41.907154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:36:42.758126 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:43.760097 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:44.761172 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:45.762745 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:46.763804 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:47.755590 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:48.756829 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:49.758049 4.997496 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:50.759537 0.763853 udp 10.0.2.104 54523 <-> 190.204.22.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:51.760940 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:52.762491 0.091947 udp 10.0.2.104 54523 <-> 89.134.21.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:36:53.764142 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:55.757033 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:56.758080 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:57.759833 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:57.910197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:36:58.761192 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:36:59.762644 0.296146 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:01.755307 0.155820 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:02.756967 1.375209 udp 10.0.2.104 54523 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:03.758452 0.382442 udp 10.0.2.104 54523 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:04.759900 0.223097 udp 10.0.2.104 54523 <-> 142.136.98.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:05.761341 0.051660 udp 10.0.2.104 54523 <-> 86.123.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:06.762892 0.144996 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:07.764172 0.000000 udp 10.0.2.104 54523 -> 81.37.138.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:08.755526 1.188163 udp 10.0.2.104 54523 <-> 49.207.221.102 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:10.758289 0.078316 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:11.759889 0.244493 udp 10.0.2.104 54523 <-> 190.37.143.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:12.761670 0.218556 udp 10.0.2.104 54523 <-> 75.85.75.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:13.762716 0.243226 udp 10.0.2.104 54523 <-> 89.230.129.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:14.764155 0.168950 udp 10.0.2.104 54523 <-> 74.196.148.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:15.755874 0.059807 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:16.757309 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:17.758455 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:18.760231 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:19.761252 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:20.762911 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:21.764391 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:22.755872 2.226909 udp 10.0.2.104 54523 <-> 142.136.98.87 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:23.417000 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:37:23.757210 0.000000 udp 10.0.2.104 54523 -> 81.37.138.100 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:25.760056 0.061790 udp 10.0.2.104 54523 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:26.761402 0.115251 udp 10.0.2.104 54523 <-> 31.147.145.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:27.762817 0.000000 udp 10.0.2.104 54523 -> 200.59.249.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:28.764184 0.370680 udp 10.0.2.104 54523 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:29.755786 0.000000 udp 10.0.2.104 54523 -> 81.37.138.100 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:29.916270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:37:30.757164 0.177278 udp 10.0.2.104 54523 <-> 49.207.221.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:31.758423 0.000000 udp 10.0.2.104 54523 -> 93.150.136.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:32.760221 0.173668 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:33.761518 0.282057 udp 10.0.2.104 54523 <-> 190.185.220.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:34.762748 0.115508 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:35.764695 1.127018 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:37.757388 0.062224 udp 10.0.2.104 54523 <-> 5.12.98.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:38.758428 0.057773 udp 10.0.2.104 54523 <-> 86.124.224.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:39.760535 0.000000 udp 10.0.2.104 54523 -> 190.204.99.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:40.762070 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:41.763076 0.318438 udp 10.0.2.104 54523 <-> 187.10.81.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:42.764678 0.000000 udp 10.0.2.104 54523 -> 89.136.139.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:43.755927 0.501937 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:44.757451 1.298308 udp 10.0.2.104 54523 <-> 200.104.248.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:46.759919 0.127176 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:47.761241 0.000000 udp 10.0.2.104 54523 -> 83.45.40.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:48.763390 0.000000 udp 10.0.2.104 54523 -> 91.112.150.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:49.764494 0.151278 udp 10.0.2.104 54523 <-> 24.184.224.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:50.756174 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:51.757192 0.046923 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:52.468650 0.011146 udp 10.0.2.104 54593 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 09:37:52.480118 0.000000 udp 10.0.2.104 54594 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:52.758755 0.000101 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:52.758856 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:37:53.760238 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:54.761584 0.167854 udp 10.0.2.104 54523 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:55.763249 0.075764 udp 10.0.2.104 54523 <-> 79.117.151.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:56.764779 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:57.756372 0.000000 udp 10.0.2.104 54523 -> 2.88.98.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:37:58.757185 0.182514 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:37:59.758913 0.162738 udp 10.0.2.104 54523 <-> 178.90.11.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:00.760339 0.299447 udp 10.0.2.104 54523 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:01.761678 0.214713 udp 10.0.2.104 54523 <-> 189.198.171.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:02.763095 0.786072 udp 10.0.2.104 54523 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:03.764661 0.142075 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:04.756068 0.000000 udp 10.0.2.104 54523 -> 84.45.155.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:05.757309 0.179602 udp 10.0.2.104 54523 <-> 68.207.245.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:06.759189 0.217838 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:07.760449 0.000000 udp 10.0.2.104 54523 -> 31.222.103.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:08.761808 0.049489 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:09.763205 0.002710 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:09.765915 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.104 0x9efe URN 192 1 110 flow=Background 1970/01/01 09:38:10.413451 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:38:10.764511 0.000000 udp 10.0.2.104 54523 -> 112.110.57.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:11.756256 3.063141 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:12.757569 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:13.758950 2.003187 udp 10.0.2.104 54523 -> 37.231.17.32 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:16.763270 0.327789 udp 10.0.2.104 54523 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:17.764836 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:18.756516 2.002403 udp 10.0.2.104 54523 -> 190.120.66.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:19.757425 3.063735 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:21.760711 0.330083 udp 10.0.2.104 54523 <-> 181.166.65.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:23.763995 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:24.764762 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:25.756442 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:26.757941 4.942583 udp 10.0.2.104 54523 <-> 112.110.57.54 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:27.758975 0.283641 udp 10.0.2.104 54523 <-> 181.166.65.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:28.760497 0.000000 udp 10.0.2.104 54523 -> 37.231.17.32 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:30.763436 0.060047 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:31.765216 0.320504 udp 10.0.2.104 54523 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:32.756427 0.145670 udp 10.0.2.104 54523 <-> 65.189.57.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:33.757908 0.333947 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:34.759375 0.182073 udp 10.0.2.104 54523 <-> 37.72.21.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:35.760545 0.000000 udp 10.0.2.104 54523 -> 190.78.142.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:36.762573 0.000000 udp 10.0.2.104 54523 -> 79.51.215.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:37.763277 0.160366 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:38.755260 0.060033 udp 10.0.2.104 54523 <-> 80.183.28.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:39.756374 2.518044 udp 10.0.2.104 54523 <-> 89.229.238.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:40.757714 2.591617 udp 10.0.2.104 54523 <-> 82.119.19.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:41.759013 0.222960 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:42.760612 0.035776 udp 10.0.2.104 54523 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:43.762371 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:44.763375 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:45.754744 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:46.756491 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:47.757633 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:48.759318 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:49.760787 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:49.760867 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:38:51.763568 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:52.755598 0.284726 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:53.756485 0.000000 udp 10.0.2.104 54523 -> 192.95.208.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:54.757961 0.218547 udp 10.0.2.104 54523 <-> 177.230.92.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:55.759537 0.945693 udp 10.0.2.104 54523 <-> 187.10.24.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:56.761167 0.000000 udp 10.0.2.104 54523 -> 162.226.165.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:38:57.421698 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:38:57.762179 0.254727 udp 10.0.2.104 54523 <-> 93.184.85.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:58.763805 0.056991 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:38:59.755116 0.130380 udp 10.0.2.104 54523 <-> 24.230.249.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:00.756481 0.304535 udp 10.0.2.104 54523 <-> 220.100.40.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:01.757937 0.037692 udp 10.0.2.104 54523 <-> 5.15.99.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:02.759792 0.000000 udp 10.0.2.104 54523 -> 24.145.54.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:03.761287 0.178560 udp 10.0.2.104 54523 <-> 66.131.122.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:04.762358 0.000000 udp 10.0.2.104 54523 -> 24.176.139.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:05.763776 0.281316 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:06.755238 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:07.756469 0.009809 udp 10.0.2.104 54523 <-> 46.47.161.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:08.757939 0.188111 udp 10.0.2.104 54523 <-> 72.193.224.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:09.759763 0.191610 udp 10.0.2.104 54523 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:10.760732 0.123025 udp 10.0.2.104 54523 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:11.762572 0.000000 udp 10.0.2.104 54523 -> 5.237.114.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:12.763917 0.039444 udp 10.0.2.104 54523 <-> 85.229.221.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:13.755361 0.110030 udp 10.0.2.104 54523 <-> 78.131.17.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:14.756818 0.163868 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:15.758265 4.318070 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:16.759783 0.176781 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:17.761226 0.159993 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:18.762682 0.188304 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:20.755088 0.279245 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:21.756579 0.145120 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:22.758001 0.289159 udp 10.0.2.104 54523 <-> 42.148.109.230 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:23.759981 0.769091 udp 10.0.2.104 54523 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:24.760945 0.051997 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:25.762784 4.087335 udp 10.0.2.104 54523 <-> 2.68.0.64 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:26.763921 0.050864 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:27.755625 0.210741 udp 10.0.2.104 54523 <-> 50.168.104.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:28.756882 0.073039 udp 10.0.2.104 54523 <-> 5.34.141.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:30.759931 0.040887 udp 10.0.2.104 54523 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:31.761786 4.996946 udp 10.0.2.104 54523 <-> 91.244.184.120 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:32.762661 0.000000 udp 10.0.2.104 54523 -> 158.58.248.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:33.763824 0.286778 udp 10.0.2.104 54523 <-> 190.208.123.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:34.755662 0.258034 udp 10.0.2.104 54523 <-> 108.185.42.188 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:35.757225 0.000000 udp 10.0.2.104 54523 -> 190.173.60.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:36.829809 0.000000 udp 10.0.2.104 54523 <- 91.244.184.120 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:37.759514 2.028435 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:38.761188 0.591117 udp 10.0.2.104 54523 <-> 89.229.162.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:40.764069 0.000000 udp 10.0.2.104 54523 -> 83.230.230.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:41.755582 0.399346 udp 10.0.2.104 54523 <-> 176.237.204.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:42.757158 0.000000 udp 10.0.2.104 54523 -> 166.159.168.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:43.758408 0.098978 udp 10.0.2.104 54523 <-> 87.19.5.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:44.419344 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:39:44.759960 0.524490 udp 10.0.2.104 54523 <-> 190.124.145.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:45.761272 0.052608 udp 10.0.2.104 54523 <-> 88.168.232.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:46.762415 0.342255 udp 10.0.2.104 54523 <-> 211.62.215.58 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:47.764052 0.059348 udp 10.0.2.104 54523 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:48.755681 0.055369 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:49.756497 0.158325 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:50.758448 0.301134 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:51.760241 0.140390 udp 10.0.2.104 54523 <-> 24.3.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:52.761104 0.084672 udp 10.0.2.104 54523 <-> 145.236.151.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:53.763085 0.170987 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:54.764047 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:39:55.755891 0.054256 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:56.756979 0.080945 udp 10.0.2.104 54523 <-> 5.34.141.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:57.758626 0.038369 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:58.760178 0.031284 udp 10.0.2.104 54523 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:39:59.761575 0.051499 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:00.763165 0.163655 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:01.764266 0.000000 udp 10.0.2.104 54523 -> 78.219.76.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:02.755967 0.322605 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:03.757066 0.066157 udp 10.0.2.104 54523 <-> 178.156.117.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:04.758536 0.148219 udp 10.0.2.104 54523 <-> 37.123.55.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:05.760220 0.059210 udp 10.0.2.104 54523 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:06.761544 0.309345 udp 10.0.2.104 54523 <-> 201.46.181.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:07.762821 0.221725 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:08.764401 0.295809 udp 10.0.2.104 54523 <-> 125.4.9.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:09.755875 0.000000 udp 10.0.2.104 54523 -> 37.214.58.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:10.757246 0.271160 udp 10.0.2.104 54523 <-> 179.211.249.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:11.758580 0.134897 udp 10.0.2.104 54523 <-> 50.95.150.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:12.759927 0.349199 udp 10.0.2.104 54523 <-> 1.162.251.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:13.761511 0.044920 udp 10.0.2.104 54523 <-> 5.13.11.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:14.762936 0.000000 udp 10.0.2.104 54523 -> 184.229.182.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:15.764581 1.041561 udp 10.0.2.104 54523 <-> 92.36.144.82 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:17.757007 1.206687 udp 10.0.2.104 54523 <-> 189.121.42.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:18.758723 0.176950 udp 10.0.2.104 54523 <-> 75.65.7.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:19.760076 0.301182 udp 10.0.2.104 54523 <-> 179.219.214.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:20.761363 0.294317 udp 10.0.2.104 54523 <-> 42.148.35.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:21.763052 0.236053 udp 10.0.2.104 54523 <-> 208.84.200.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:22.764276 0.131491 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:23.756186 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:24.757134 0.065636 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:25.758637 0.432395 udp 10.0.2.104 54523 <-> 70.69.191.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:26.760336 0.000000 udp 10.0.2.104 54523 -> 194.224.232.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:27.761965 0.348342 udp 10.0.2.104 54523 <-> 121.133.29.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:28.763240 1.158670 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:30.756135 0.000000 udp 10.0.2.104 54523 -> 95.77.237.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:31.417022 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:40:31.757519 0.040183 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:32.758999 0.205093 udp 10.0.2.104 54523 <-> 75.84.97.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:33.760245 0.287057 udp 10.0.2.104 54523 <-> 223.133.79.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:34.761663 0.115755 udp 10.0.2.104 54523 <-> 37.237.51.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:35.763673 0.000000 udp 10.0.2.104 54523 -> 63.254.145.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:36.764867 4.997176 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:38.757237 0.000000 udp 10.0.2.104 54523 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:39.758892 0.358363 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:40.760430 0.148567 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:41.804722 0.000000 udp 10.0.2.104 54523 <- 89.253.133.12 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:42.763274 0.141707 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:43.764672 0.211904 udp 10.0.2.104 54523 <-> 1.22.169.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:44.756019 0.051209 udp 10.0.2.104 54523 <-> 5.12.11.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:45.758109 3.297585 udp 10.0.2.104 54523 <-> 189.6.137.102 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:46.758944 0.000000 udp 10.0.2.104 54523 -> 178.78.186.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:47.760464 0.052996 udp 10.0.2.104 54523 <-> 89.160.39.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:49.763057 3.172132 udp 10.0.2.104 54523 <-> 69.59.85.23 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:50.764557 0.000000 udp 10.0.2.104 54523 -> 186.138.52.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:51.756315 1.247823 udp 10.0.2.104 54523 <-> 116.73.54.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:53.759291 1.243361 udp 10.0.2.104 54523 <-> 31.147.115.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:54.760804 0.295702 udp 10.0.2.104 54523 <-> 1.23.229.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:55.762296 0.069420 udp 10.0.2.104 54523 <-> 78.136.104.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:56.763739 0.000000 udp 10.0.2.104 54523 -> 81.61.64.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:40:57.764912 0.071456 udp 10.0.2.104 54523 <-> 176.195.242.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:58.756518 0.249934 udp 10.0.2.104 54523 <-> 37.214.92.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:40:59.757949 0.010958 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:00.759048 0.039682 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:01.760796 0.065046 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:02.762099 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:03.763460 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:04.764746 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:05.756414 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:06.757851 0.000000 udp 10.0.2.104 54523 -> 79.119.35.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:07.759030 0.158605 udp 10.0.2.104 54523 <-> 66.176.196.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:08.760907 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:09.762062 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:10.763819 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:11.754920 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:12.756508 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:14.759300 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:15.760790 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:16.762061 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:17.763209 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:18.754805 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:19.415865 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:41:19.756333 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:20.757874 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:20.757956 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:41:21.759231 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:22.760727 0.000000 udp 10.0.2.104 54523 -> 176.13.171.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:23.762382 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:24.763499 0.039819 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:25.755166 0.336779 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:26.756458 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:27.758189 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:28.759334 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:29.760798 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:30.762638 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:31.763326 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:32.755165 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:33.756445 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:34.757958 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:35.759435 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:36.760874 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:36.760924 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:41:37.762540 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:38.763646 0.065750 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:39.754859 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:40.756606 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:41.758517 0.117605 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:42.759806 0.326258 udp 10.0.2.104 54523 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:43.760721 0.343453 udp 10.0.2.104 54523 <-> 1.172.166.20 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:44.762512 0.040819 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:45.764044 0.120141 udp 10.0.2.104 54523 <-> 82.49.55.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:46.755322 0.160015 udp 10.0.2.104 54523 <-> 71.13.218.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:47.756508 0.000000 udp 10.0.2.104 54523 -> 93.77.169.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:48.758750 0.047651 udp 10.0.2.104 54523 <-> 81.226.52.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:49.759615 3.033668 udp 10.0.2.104 54523 <-> 190.107.103.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:50.760879 0.162032 udp 10.0.2.104 54523 <-> 71.16.80.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:51.762678 0.000090 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:51.762768 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:41:52.763692 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:53.755549 0.000000 udp 10.0.2.104 54523 -> 86.125.184.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:41:54.756835 0.327748 udp 10.0.2.104 54523 <-> 58.230.46.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:55.758454 0.333946 udp 10.0.2.104 54523 <-> 190.110.186.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:56.759531 0.110428 udp 10.0.2.104 54523 <-> 88.166.83.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:57.761085 0.168830 udp 10.0.2.104 54523 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:58.762505 0.145110 udp 10.0.2.104 54523 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:41:59.763388 0.086518 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:00.755408 0.063826 udp 10.0.2.104 54523 <-> 85.84.46.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:01.756711 0.185512 udp 10.0.2.104 54523 <-> 70.45.158.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:02.758576 0.000000 udp 10.0.2.104 54523 -> 178.121.187.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:03.759669 0.120878 udp 10.0.2.104 54523 <-> 159.205.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:05.762456 0.458488 udp 10.0.2.104 54523 <-> 186.94.66.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:06.413290 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:42:06.764588 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:07.755232 0.155309 udp 10.0.2.104 54523 <-> 203.187.233.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:08.756724 0.054483 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:09.758811 0.430218 udp 10.0.2.104 54523 <-> 183.179.52.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:10.760003 0.159163 udp 10.0.2.104 54523 <-> 66.177.33.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:11.761405 0.000000 udp 10.0.2.104 54523 -> 83.173.151.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:12.762597 0.113612 udp 10.0.2.104 54523 <-> 90.233.162.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:13.764170 0.091130 udp 10.0.2.104 54523 <-> 78.78.35.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:14.755532 3.004518 udp 10.0.2.104 54523 -> 24.44.107.170 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:15.757153 0.066282 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:16.758527 0.048001 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:18.761089 0.000000 udp 10.0.2.104 54523 -> 95.74.171.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:19.762519 2.119962 udp 10.0.2.104 54523 <-> 76.169.87.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:20.763956 0.149635 udp 10.0.2.104 54523 <-> 98.236.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:21.756094 0.063841 udp 10.0.2.104 54523 <-> 88.165.102.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:22.756980 0.209415 udp 10.0.2.104 54523 <-> 76.91.133.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:23.764798 0.141402 udp 10.0.2.104 54523 <-> 78.78.35.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:24.766724 0.000000 udp 10.0.2.104 54523 -> 177.206.13.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:25.768176 0.053370 udp 10.0.2.104 54523 <-> 79.113.175.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:26.765947 0.000000 udp 10.0.2.104 54523 -> 186.58.178.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:27.765686 0.151165 udp 10.0.2.104 54523 <-> 192.226.164.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:28.756900 0.120145 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:29.757214 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:30.758837 0.114646 udp 10.0.2.104 54523 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:31.760262 0.019796 udp 10.0.2.104 54523 <-> 81.210.166.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:32.762747 0.293770 udp 10.0.2.104 54523 <-> 59.147.239.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:33.766074 0.148303 udp 10.0.2.104 54523 <-> 70.15.122.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:34.768319 0.098506 udp 10.0.2.104 54523 <-> 92.241.129.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:35.762260 0.297435 udp 10.0.2.104 54523 <-> 211.7.6.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:36.762200 0.413275 udp 10.0.2.104 54523 <-> 201.71.53.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:37.766168 0.167557 udp 10.0.2.104 54523 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:38.763822 2.001208 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:39.762331 0.000000 udp 10.0.2.104 54523 -> 75.19.115.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:41.764493 0.038349 udp 10.0.2.104 54523 <-> 213.92.136.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:42.755810 0.055490 udp 10.0.2.104 54523 <-> 77.121.209.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:43.757149 0.056405 udp 10.0.2.104 54523 <-> 78.157.66.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:44.758660 0.272587 udp 10.0.2.104 54523 <-> 70.80.122.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:45.760159 4.070177 udp 10.0.2.104 54523 <-> 88.207.58.21 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:46.761257 0.037793 udp 10.0.2.104 54523 <-> 87.116.117.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:47.763058 0.000000 udp 10.0.2.104 54523 -> 123.225.58.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:48.764162 0.173598 udp 10.0.2.104 54523 <-> 173.176.228.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:50.757326 0.046969 udp 10.0.2.104 54523 <-> 31.41.137.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:51.760268 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:52.760422 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:53.420982 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:42:53.761797 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:54.765892 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:55.767774 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:42:56.757792 0.157037 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:57.760150 0.239727 udp 10.0.2.104 54523 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:58.762075 0.148255 udp 10.0.2.104 54523 <-> 71.80.67.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:42:59.762836 0.153376 udp 10.0.2.104 54523 <-> 24.101.81.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:00.764522 0.138496 udp 10.0.2.104 54523 <-> 111.91.126.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:01.764572 0.000000 udp 10.0.2.104 54523 -> 76.15.189.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:02.764515 0.000000 udp 10.0.2.104 54523 -> 59.183.165.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:03.756199 0.907071 udp 10.0.2.104 54523 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:04.757243 0.278017 udp 10.0.2.104 54523 <-> 111.125.229.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:05.758934 0.309020 udp 10.0.2.104 54523 <-> 181.166.30.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:06.760139 0.143878 udp 10.0.2.104 54523 <-> 67.85.14.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:07.761438 0.000000 udp 10.0.2.104 54523 -> 74.12.117.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:08.763059 0.219711 udp 10.0.2.104 54523 <-> 190.203.238.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:09.764585 0.068770 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:10.756192 0.083186 udp 10.0.2.104 54523 <-> 84.90.235.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:11.757334 0.072013 udp 10.0.2.104 54523 <-> 90.236.11.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:12.758799 0.140642 udp 10.0.2.104 54523 <-> 71.86.96.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:13.760272 3.995759 udp 10.0.2.104 54523 <-> 178.79.32.44 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:15.764134 0.000000 udp 10.0.2.104 54523 -> 190.51.21.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:16.764665 0.000000 udp 10.0.2.104 54523 -> 79.117.112.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:18.757413 0.000000 udp 10.0.2.104 54523 -> 14.96.169.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:19.758838 0.563935 udp 10.0.2.104 54523 <-> 201.209.188.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:20.760527 0.000000 udp 10.0.2.104 54523 -> 77.23.110.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:21.761857 0.306676 udp 10.0.2.104 54523 <-> 181.164.145.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:22.763255 0.300648 udp 10.0.2.104 54523 <-> 117.203.57.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:23.764915 0.234553 udp 10.0.2.104 54523 <-> 63.147.47.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:24.756192 0.234517 udp 10.0.2.104 54523 <-> 186.89.103.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:25.757547 0.016975 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:26.758804 0.171090 udp 10.0.2.104 54523 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:27.760800 0.000000 udp 10.0.2.104 54523 -> 179.85.246.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:28.762071 0.034117 udp 10.0.2.104 54523 <-> 87.78.41.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:29.763374 0.379957 udp 10.0.2.104 54523 <-> 190.202.218.13 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:30.765095 0.156164 udp 10.0.2.104 54523 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:31.756105 0.230183 udp 10.0.2.104 54523 <-> 71.80.148.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:32.757600 0.177092 udp 10.0.2.104 54523 <-> 151.74.35.117 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:33.758961 0.565752 udp 10.0.2.104 54523 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:33.921852 3.002047 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:43:34.760389 0.058632 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:35.762081 0.043560 udp 10.0.2.104 54523 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:36.763484 0.000000 udp 10.0.2.104 54523 -> 5.234.92.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:37.764813 0.259059 udp 10.0.2.104 54523 <-> 69.209.207.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:38.756344 3.141398 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:39.757954 3.061734 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:40.418632 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:43:40.759207 0.059884 udp 10.0.2.104 54523 <-> 79.118.203.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:40.929317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:43:43.763485 0.086580 udp 10.0.2.104 54523 <-> 88.184.199.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:44.755213 0.203516 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:45.756385 0.000000 udp 10.0.2.104 54523 -> 98.184.128.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:46.757827 2.329907 udp 10.0.2.104 54523 <-> 82.119.19.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:47.759044 0.144484 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:48.760685 0.071112 udp 10.0.2.104 54523 <-> 82.128.198.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:48.936206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:43:49.766315 0.035944 udp 10.0.2.104 54523 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:50.766149 0.044308 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:51.756336 0.000000 udp 10.0.2.104 54523 -> 80.130.230.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:52.756402 1.182207 udp 10.0.2.104 54523 <-> 187.25.153.130 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:53.761001 0.000000 udp 10.0.2.104 54523 -> 62.98.165.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:54.760589 0.000000 udp 10.0.2.104 54523 -> 84.2.254.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:55.760638 0.000000 udp 10.0.2.104 54523 -> 190.51.16.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:43:56.762269 0.160732 udp 10.0.2.104 54523 <-> 65.32.237.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:57.764083 0.149746 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:58.755220 0.152932 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:43:59.756449 0.155530 udp 10.0.2.104 54523 <-> 76.180.211.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:00.757829 0.416460 udp 10.0.2.104 54523 <-> 113.196.145.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:01.759190 0.180322 udp 10.0.2.104 54523 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:02.760900 0.000000 udp 10.0.2.104 54523 -> 24.84.162.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:03.762162 3.995834 udp 10.0.2.104 54523 -> 74.93.127.245 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:04.763637 0.000000 udp 10.0.2.104 54523 -> 151.74.35.117 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:04.934291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:44:05.755081 1.049139 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:08.759141 0.136546 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:09.760767 0.000000 udp 10.0.2.104 54523 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:10.762222 4.696079 udp 10.0.2.104 54523 <-> 109.122.73.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:11.763383 0.211065 udp 10.0.2.104 54523 <-> 50.168.18.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:12.754995 0.050658 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:13.756447 0.000000 udp 10.0.2.104 54523 -> 74.93.127.245 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:14.758099 0.000000 udp 10.0.2.104 54523 -> 193.151.100.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:15.759333 0.166391 udp 10.0.2.104 54523 <-> 74.194.166.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:16.761038 0.261794 udp 10.0.2.104 54523 <-> 190.206.6.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:17.762697 0.162173 udp 10.0.2.104 54523 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:18.763440 0.000000 udp 10.0.2.104 54523 -> 187.109.4.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:19.755316 0.048023 udp 10.0.2.104 54523 <-> 5.14.7.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:20.756722 0.000000 udp 10.0.2.104 54523 -> 188.230.145.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:21.758202 1.064258 udp 10.0.2.104 54523 <-> 82.242.39.127 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:23.760803 0.081445 udp 10.0.2.104 54523 <-> 85.86.103.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:24.761723 0.578896 udp 10.0.2.104 54523 <-> 14.96.196.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:25.763259 0.049082 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:26.755262 0.028719 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:27.416303 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:44:27.756469 0.000000 udp 10.0.2.104 54523 -> 84.238.30.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:28.758100 0.000000 udp 10.0.2.104 54523 -> 62.98.45.142 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:29.759938 0.035415 udp 10.0.2.104 54523 <-> 82.192.44.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:30.761408 1.709174 udp 10.0.2.104 54523 <-> 189.54.80.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:31.762501 0.333165 udp 10.0.2.104 54523 <-> 201.13.135.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:32.764066 0.000000 udp 10.0.2.104 54523 -> 87.18.54.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:33.755382 0.000000 udp 10.0.2.104 54523 -> 77.78.239.64 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:34.756867 0.355657 udp 10.0.2.104 54523 <-> 189.93.77.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:35.760695 3.007588 udp 10.0.2.104 54523 -> 2.68.0.64 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:36.760848 0.000000 udp 10.0.2.104 54523 -> 85.173.107.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:36.941513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:44:37.761016 0.319270 udp 10.0.2.104 54523 <-> 201.13.135.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:39.767428 0.049537 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:40.758874 0.404331 udp 10.0.2.104 54523 <-> 189.93.77.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:41.758940 0.000000 udp 10.0.2.104 54523 -> 64.26.169.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:42.758094 0.000000 udp 10.0.2.104 54523 -> 62.98.45.142 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:43.759491 0.033637 udp 10.0.2.104 54523 <-> 84.238.30.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:44.761381 0.000000 udp 10.0.2.104 54523 -> 87.18.54.195 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:45.969138 0.148475 udp 10.0.2.104 54523 <-> 24.208.178.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:46.963255 2.452381 udp 10.0.2.104 54523 <-> 190.78.121.133 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:47.947111 0.028961 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:49.932724 0.000000 udp 10.0.2.104 54523 -> 64.26.169.74 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:50.929426 2.074027 udp 10.0.2.104 54523 <-> 79.126.201.164 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:51.920290 0.151500 udp 10.0.2.104 54523 <-> 24.208.178.212 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:53.905374 0.000000 udp 10.0.2.104 54523 -> 87.18.54.195 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:54.889702 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:55.883325 0.000000 udp 10.0.2.104 54523 -> 62.98.45.142 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:56.875687 0.214217 udp 10.0.2.104 54523 <-> 190.78.121.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:57.867625 0.000000 udp 10.0.2.104 54523 -> 201.37.234.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:44:58.862332 0.251888 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:44:59.855449 0.000000 udp 10.0.2.104 54523 -> 101.59.16.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:00.845465 0.042848 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:01.829508 0.311038 udp 10.0.2.104 54523 <-> 180.18.8.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:02.822562 0.295405 udp 10.0.2.104 54523 <-> 200.30.233.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:03.814964 0.000000 udp 10.0.2.104 54523 -> 23.25.165.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:04.808002 0.150817 udp 10.0.2.104 54523 <-> 24.236.189.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:05.799635 0.801001 udp 10.0.2.104 54523 <-> 89.229.238.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:06.791437 0.245058 udp 10.0.2.104 54523 <-> 186.221.99.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:08.765915 0.043861 udp 10.0.2.104 54523 <-> 86.56.97.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:09.758919 0.000000 udp 10.0.2.104 54523 -> 82.64.233.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:10.762796 0.179850 udp 10.0.2.104 54523 <-> 216.45.73.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:11.766024 0.176252 udp 10.0.2.104 54523 <-> 75.111.203.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:12.766282 0.149032 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:13.765800 0.444323 udp 10.0.2.104 54523 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:14.415063 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:45:14.764946 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:15.755767 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:16.757339 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:17.758604 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:18.760025 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:19.761046 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:20.762943 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:21.764428 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:22.758260 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:23.758736 3.307450 udp 10.0.2.104 54523 <-> 114.180.118.181 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:24.758745 1.312102 udp 10.0.2.104 54523 <-> 181.226.152.52 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:27.762986 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:28.764674 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:29.756486 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:30.757431 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:31.758920 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:33.762108 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:34.763206 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:35.764552 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:36.756064 0.000057 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:36.756121 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:45:37.757306 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:38.758933 0.315720 udp 10.0.2.104 54523 <-> 114.174.40.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:39.760285 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:40.764961 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:41.764280 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:43.755990 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:44.757567 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:45.758764 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:46.760233 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:47.762765 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:48.763066 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:49.765049 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:50.778892 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:50.778963 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:45:51.777132 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:52.774381 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:53.771683 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:54.769532 0.316585 udp 10.0.2.104 54523 <-> 114.174.40.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:45:55.765796 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:56.764592 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:57.756376 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:58.757859 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:45:59.764391 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:00.764789 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:01.425962 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:46:01.765803 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:02.763446 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:03.764638 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:04.756497 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:05.757631 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:06.759085 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:07.760389 0.000085 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:07.760474 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:46:09.763162 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:10.754994 0.672076 udp 10.0.2.104 54523 <-> 111.184.101.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:11.756275 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:12.757637 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:13.758949 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:14.760720 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:15.762377 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:16.763365 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:18.756508 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:18.756589 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:46:19.757831 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:20.759187 0.354698 udp 10.0.2.104 54523 <-> 111.249.244.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:21.760494 0.282875 udp 10.0.2.104 54523 <-> 190.52.60.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:22.762116 0.310039 udp 10.0.2.104 54523 <-> 119.201.78.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:23.766310 0.000000 udp 10.0.2.104 54523 -> 61.227.76.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:24.756923 0.124439 udp 10.0.2.104 54523 <-> 24.146.12.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:25.757301 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:26.757485 0.725392 udp 10.0.2.104 54523 <-> 14.97.186.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:27.759228 0.660118 udp 10.0.2.104 54523 <-> 111.184.101.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:28.760506 0.374075 udp 10.0.2.104 54523 <-> 186.123.130.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:29.762455 0.421221 udp 10.0.2.104 54523 <-> 101.63.197.122 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:30.763610 0.144274 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:31.755172 1.653970 udp 10.0.2.104 54523 <-> 187.69.168.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:32.756548 0.134435 udp 10.0.2.104 54523 <-> 46.167.88.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:33.757859 0.285997 udp 10.0.2.104 54523 <-> 27.107.221.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:34.759274 0.000000 udp 10.0.2.104 54523 -> 193.32.81.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:35.760796 0.326959 udp 10.0.2.104 54523 <-> 58.115.235.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:36.762291 0.123360 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:37.763863 0.147300 udp 10.0.2.104 54523 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:38.755094 0.183944 udp 10.0.2.104 54523 <-> 166.230.66.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:39.756690 0.000000 udp 10.0.2.104 54523 -> 203.129.196.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:40.758070 1.053353 udp 10.0.2.104 54523 <-> 83.250.76.130 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:42.760807 0.030898 udp 10.0.2.104 54523 <-> 81.226.88.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:43.762318 0.134822 udp 10.0.2.104 54523 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:44.764194 0.293319 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:45.754970 0.123571 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:46.756554 0.000000 udp 10.0.2.104 54523 -> 24.224.168.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:47.758306 0.284388 udp 10.0.2.104 54523 <-> 2.185.118.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:48.418933 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:46:48.759748 0.585692 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:49.760881 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:50.762393 0.292330 udp 10.0.2.104 54523 <-> 106.185.9.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:51.763763 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:52.755383 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:46:53.756379 0.185502 udp 10.0.2.104 54523 <-> 100.44.116.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:54.758004 0.345596 udp 10.0.2.104 54523 <-> 114.42.212.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:55.759264 2.260671 udp 10.0.2.104 54523 <-> 77.121.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:56.760867 0.175108 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:57.762465 0.105516 udp 10.0.2.104 54523 <-> 206.71.247.150 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:58.763923 0.169363 udp 10.0.2.104 54523 <-> 79.50.212.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:46:59.755156 0.093379 udp 10.0.2.104 54523 <-> 188.171.29.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:00.764704 0.364203 udp 10.0.2.104 54523 <-> 201.239.103.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:01.762292 0.041885 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:02.759905 0.283944 udp 10.0.2.104 54523 <-> 59.190.37.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:03.760925 0.377186 udp 10.0.2.104 54523 <-> 180.218.89.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:04.762753 0.000000 udp 10.0.2.104 54523 -> 93.155.208.207 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:05.764078 0.649660 udp 10.0.2.104 54523 <-> 190.75.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:06.755366 0.000000 udp 10.0.2.104 54523 -> 207.42.135.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:07.756921 0.039874 udp 10.0.2.104 54523 <-> 178.165.25.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:08.758226 0.359235 udp 10.0.2.104 54523 <-> 118.160.153.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:09.759842 0.177676 udp 10.0.2.104 54523 <-> 24.13.129.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:10.760815 0.308639 udp 10.0.2.104 54523 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:11.762468 3.995895 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:12.764205 0.065548 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:13.755259 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:14.756892 0.000000 udp 10.0.2.104 54523 -> 184.21.195.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:16.759867 0.065302 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:17.761356 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:18.762410 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:19.763775 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:20.755806 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:21.756883 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:22.758205 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:23.760093 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:24.761296 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:24.761378 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:47:25.762518 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:26.764167 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:27.755992 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:28.756852 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:29.758320 2.107903 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:30.760049 0.338380 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:32.762837 0.045456 udp 10.0.2.104 54523 <-> 5.13.11.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:33.764092 0.029564 udp 10.0.2.104 54523 <-> 79.136.87.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:34.755409 0.033468 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:35.416458 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:47:35.756868 0.000000 udp 10.0.2.104 54523 -> 78.90.253.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:36.758285 0.050921 udp 10.0.2.104 54523 <-> 31.129.21.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:37.759883 2.233115 udp 10.0.2.104 54523 <-> 202.140.211.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:38.761901 0.310718 udp 10.0.2.104 54523 <-> 150.162.122.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:39.762709 0.195055 udp 10.0.2.104 54523 <-> 64.139.119.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:40.763972 0.000000 udp 10.0.2.104 54523 -> 14.96.169.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:41.755671 0.068268 udp 10.0.2.104 54523 <-> 83.97.251.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:42.756921 2.074813 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:43.758519 0.060134 udp 10.0.2.104 54523 <-> 89.32.157.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:45.765334 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:46.765203 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:47.765751 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:48.756836 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:49.757880 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:50.758498 2.003074 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:51.760247 0.061779 udp 10.0.2.104 54523 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:53.763095 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:54.764205 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:55.756186 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:56.760915 0.039677 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:47:57.763666 0.000000 udp 10.0.2.104 54523 -> 140.211.34.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:58.766024 0.000000 udp 10.0.2.104 54523 -> 186.95.43.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:47:59.763826 0.000000 udp 10.0.2.104 54523 -> 88.6.54.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:00.763017 0.096871 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:01.764552 0.104255 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:02.755830 0.359001 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:03.763412 0.024659 udp 10.0.2.104 54523 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:04.764679 0.000000 udp 10.0.2.104 54523 -> 186.95.43.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:05.764773 0.000000 udp 10.0.2.104 54523 -> 88.6.54.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:06.764591 0.096948 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:07.764866 0.159907 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:08.764452 0.096723 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:09.756096 0.158207 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:10.757601 0.033022 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:11.758820 1.155573 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:13.761504 0.000000 udp 10.0.2.104 54523 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:14.763259 0.000078 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:14.763337 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:48:15.764420 0.000000 udp 10.0.2.104 54523 -> 186.91.102.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:16.756375 0.362323 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:17.757990 0.000000 udp 10.0.2.104 54523 -> 84.119.41.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:18.758776 1.494796 udp 10.0.2.104 54523 <-> 186.95.43.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:19.760152 0.095650 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:20.762033 0.000000 udp 10.0.2.104 54523 -> 140.211.34.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:21.763038 0.168435 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:22.413814 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:48:22.764738 0.096637 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:23.759384 0.000000 udp 10.0.2.104 54523 -> 59.95.147.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:24.760445 0.000000 udp 10.0.2.104 54523 -> 220.142.70.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:25.760421 0.000000 udp 10.0.2.104 54523 -> 70.112.193.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:26.760477 0.328904 udp 10.0.2.104 54523 <-> 118.6.66.92 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:27.761872 0.220329 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:28.763101 0.000000 udp 10.0.2.104 54523 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:29.764739 0.342337 udp 10.0.2.104 54523 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:31.757712 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:32.758909 0.067938 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:33.760520 0.154735 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:34.761812 0.871797 udp 10.0.2.104 54523 <-> 14.98.171.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:35.763356 0.168617 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:36.764806 0.151304 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:37.756588 0.231344 udp 10.0.2.104 54523 <-> 190.36.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:38.757804 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:39.759222 0.000000 udp 10.0.2.104 54523 -> 79.117.112.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:40.760361 1.748883 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:41.762221 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:42.763366 0.165892 udp 10.0.2.104 54523 <-> 178.90.236.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:43.754652 0.133164 udp 10.0.2.104 54523 <-> 78.236.112.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:44.756374 0.133166 udp 10.0.2.104 54523 <-> 64.131.160.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:45.757866 0.000000 udp 10.0.2.104 54523 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:46.759154 1.343229 udp 10.0.2.104 54523 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:47.760480 0.659767 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:48.762278 0.133634 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:49.763197 0.449916 udp 10.0.2.104 54523 <-> 190.79.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:50.795613 0.510588 udp 10.0.2.104 54523 <-> 177.29.103.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:51.791824 0.027897 udp 10.0.2.104 54523 <-> 85.130.43.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:52.787704 0.030142 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:53.783086 0.000000 udp 10.0.2.104 54523 -> 24.0.29.18 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:48:54.778083 0.039419 udp 10.0.2.104 54523 <-> 77.222.231.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:55.772442 0.993087 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:57.755084 0.045420 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:58.756547 4.005466 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:48:59.758312 4.004655 udp 10.0.2.104 54523 -> 189.45.132.8 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:01.760721 0.035404 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:04.755433 0.000000 udp 10.0.2.104 54523 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:05.756343 0.000000 udp 10.0.2.104 54523 -> 85.230.84.251 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:06.758079 0.135774 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:07.759410 0.000000 udp 10.0.2.104 54523 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:08.760813 0.054557 udp 10.0.2.104 54523 <-> 188.27.119.238 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:09.421475 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:49:09.764015 0.153144 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 3 438 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:10.764713 0.075340 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:11.760919 3.053567 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:12.769888 0.000000 udp 10.0.2.104 54523 -> 142.136.206.4 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:13.768428 0.000000 udp 10.0.2.104 54523 -> 88.241.158.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:15.765151 0.134109 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:16.762094 0.192500 udp 10.0.2.104 54523 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:17.763479 0.106616 udp 10.0.2.104 54523 <-> 87.110.62.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:18.755591 0.000000 udp 10.0.2.104 54523 -> 106.68.165.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:19.756600 0.000000 udp 10.0.2.104 54523 -> 201.81.27.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:20.758087 0.313712 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:21.759987 0.108427 udp 10.0.2.104 54523 <-> 85.86.73.137 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:22.766236 0.151400 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:24.765877 0.051974 udp 10.0.2.104 54523 <-> 5.14.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:25.755698 0.000000 udp 10.0.2.104 54523 -> 24.222.17.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:26.756357 2.003160 udp 10.0.2.104 54523 -> 46.35.110.44 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:27.758021 0.034068 udp 10.0.2.104 54523 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:29.760916 0.220052 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:30.762251 0.015404 udp 10.0.2.104 54523 <-> 164.8.214.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:31.763544 0.054062 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:32.755529 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:33.756646 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:34.757914 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:35.759311 3.999697 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:36.760925 4.998149 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:37.762290 2.996625 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:38.769242 0.021645 udp 10.0.2.104 54523 <-> 84.118.75.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:42.762891 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:43.766781 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:44.766075 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:45.766118 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:46.756566 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:47.757781 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:48.758357 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:49.759976 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:51.762519 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:52.763556 0.000075 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:52.763631 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:49:53.755428 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:54.756760 0.076533 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:55.758319 0.160496 udp 10.0.2.104 54523 <-> 96.21.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:49:56.418979 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:49:56.760059 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:57.761092 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:58.764921 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:49:59.764499 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:00.812999 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:01.809443 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:02.804940 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:03.799987 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:04.793851 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:05.787951 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:06.781407 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:07.767895 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:07.767958 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:50:08.763790 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:10.760129 0.052415 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:50:11.761388 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:12.762627 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:13.764281 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:14.762858 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:15.762692 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:16.762591 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:18.762836 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:19.763226 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:20.764309 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:21.756016 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:21.756071 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:50:22.757452 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:23.758658 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:24.760115 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:25.761238 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:26.762896 0.139938 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:50:27.764414 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:28.756061 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:29.757352 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:30.759228 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:30.759283 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:50:31.760046 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:32.761763 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:33.762916 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:34.764520 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:35.756060 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:36.757316 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:38.760295 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:39.761874 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:40.763063 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:41.764488 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:42.756027 0.017875 udp 10.0.2.104 54523 <-> 84.118.75.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:50:43.416704 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:50:43.757476 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:44.758653 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:46.762088 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:47.762904 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:48.764539 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:49.755987 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:50.757206 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:51.758672 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:52.764388 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:53.764650 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:54.765421 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:55.768126 0.000075 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:55.768201 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:50:56.757572 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:57.757485 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:50:58.758667 1.495406 udp 10.0.2.104 54523 <-> 184.35.95.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:50:59.760455 0.056238 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:00.761836 0.223014 udp 10.0.2.104 54523 <-> 186.91.104.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:01.763176 0.056850 udp 10.0.2.104 54523 <-> 80.80.40.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:02.764492 0.131236 udp 10.0.2.104 54523 <-> 79.31.178.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:03.756139 0.167477 udp 10.0.2.104 54523 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:04.757301 0.163459 udp 10.0.2.104 54523 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:05.759058 0.690087 udp 10.0.2.104 54523 <-> 187.71.116.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:06.760266 0.602955 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:07.761856 0.000000 udp 10.0.2.104 54523 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:08.763225 0.257090 udp 10.0.2.104 54523 <-> 190.38.124.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:09.764886 0.411736 udp 10.0.2.104 54523 <-> 189.93.140.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:10.756062 0.112179 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:11.759763 0.051089 udp 10.0.2.104 54523 <-> 89.45.109.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:12.760640 0.170763 udp 10.0.2.104 54523 <-> 74.143.231.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:13.762905 0.037874 udp 10.0.2.104 54523 <-> 87.116.117.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:14.763606 0.176098 udp 10.0.2.104 54523 <-> 97.85.148.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:15.764175 1.148572 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:16.754930 0.030281 udp 10.0.2.104 54523 <-> 95.111.26.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:17.756105 0.000000 udp 10.0.2.104 54523 -> 46.63.71.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:18.761361 0.435846 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:19.761198 0.000000 udp 10.0.2.104 54523 -> 46.196.126.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:20.762606 0.166783 udp 10.0.2.104 54523 <-> 68.53.137.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:21.766264 0.110117 udp 10.0.2.104 54523 <-> 85.130.182.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:22.769957 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:23.756942 0.350430 udp 10.0.2.104 54523 <-> 118.161.50.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:24.756283 0.206334 udp 10.0.2.104 54523 <-> 109.52.12.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:25.757944 0.052390 udp 10.0.2.104 54523 <-> 188.173.49.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:26.758961 0.029557 udp 10.0.2.104 54523 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:27.760667 0.131792 udp 10.0.2.104 54523 <-> 68.169.187.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:28.761820 0.066816 udp 10.0.2.104 54523 <-> 83.213.199.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:28.954922 3.001733 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:51:29.763818 0.143855 udp 10.0.2.104 54523 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:30.414216 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:51:30.754912 0.091488 udp 10.0.2.104 54523 <-> 84.122.212.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:31.756524 0.059178 udp 10.0.2.104 54523 <-> 81.190.211.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:32.760031 0.522370 udp 10.0.2.104 54523 <-> 95.188.171.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:33.760684 0.142312 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:34.762070 0.000000 udp 10.0.2.104 54523 -> 74.161.16.231 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:35.764974 1.099061 udp 10.0.2.104 54523 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:35.964728 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:51:36.764498 0.000000 udp 10.0.2.104 54523 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:37.755242 0.284307 udp 10.0.2.104 54523 <-> 210.194.167.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:38.756330 0.060216 udp 10.0.2.104 54523 <-> 81.190.211.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:39.762131 0.054531 udp 10.0.2.104 54523 <-> 82.245.150.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:40.766129 0.422635 udp 10.0.2.104 54523 <-> 46.48.216.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:41.766311 0.974893 udp 10.0.2.104 54523 <-> 179.120.232.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:42.774983 0.000000 udp 10.0.2.104 54523 -> 180.149.221.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:43.778013 0.264383 udp 10.0.2.104 54523 <-> 117.194.195.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:43.977843 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:51:44.765109 0.152432 udp 10.0.2.104 54523 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:45.763738 0.584328 udp 10.0.2.104 54523 <-> 158.148.174.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:46.765799 0.049075 udp 10.0.2.104 54523 <-> 83.251.35.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:47.764044 0.494402 udp 10.0.2.104 54523 <-> 107.223.54.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:48.762370 0.000000 udp 10.0.2.104 54523 -> 95.77.135.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:49.761960 0.157664 udp 10.0.2.104 54523 <-> 24.240.26.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:50.764316 0.000000 udp 10.0.2.104 54523 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:51.768297 0.322187 udp 10.0.2.104 54523 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:52.769336 3.993017 udp 10.0.2.104 54523 -> 152.34.149.254 16464 INT 0 3 174 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:51:53.767705 0.338401 udp 10.0.2.104 54523 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:55.764366 0.945926 udp 10.0.2.104 54523 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:57.764014 0.508583 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:58.758368 0.353588 udp 10.0.2.104 54523 <-> 187.84.77.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:59.758952 0.197308 udp 10.0.2.104 54523 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:51:59.968797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:52:00.758662 0.382550 udp 10.0.2.104 54523 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:01.759607 0.042982 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:02.760960 0.000000 udp 10.0.2.104 54523 -> 115.187.33.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:03.762302 0.000000 udp 10.0.2.104 54523 -> 72.199.138.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:04.763290 0.756706 udp 10.0.2.104 54523 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:05.755380 0.000000 udp 10.0.2.104 54523 -> 60.62.93.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:06.756474 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:07.758137 2.338354 udp 10.0.2.104 54523 <-> 77.210.91.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:08.759312 0.062813 udp 10.0.2.104 54523 <-> 188.27.46.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:10.762444 0.322370 udp 10.0.2.104 54523 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:11.763828 0.161717 udp 10.0.2.104 54523 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:12.755220 0.300458 udp 10.0.2.104 54523 <-> 201.1.12.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:13.757239 0.000000 udp 10.0.2.104 54523 -> 178.148.147.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:14.758172 0.058290 udp 10.0.2.104 54523 <-> 79.115.74.59 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:15.759857 0.000000 udp 10.0.2.104 54523 -> 69.70.226.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:16.761192 1.004073 udp 10.0.2.104 54523 <-> 217.72.209.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:17.422037 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:52:17.762484 0.096367 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:18.763530 0.044616 udp 10.0.2.104 54523 <-> 87.192.17.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:19.755215 0.264045 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:20.756747 0.062276 udp 10.0.2.104 54523 <-> 95.180.171.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:21.758139 0.153083 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:22.759970 0.218350 udp 10.0.2.104 54523 <-> 142.129.158.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:23.761214 0.064980 udp 10.0.2.104 54523 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:24.762534 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:25.763783 0.256068 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:26.755121 0.000000 udp 10.0.2.104 54523 -> 174.103.239.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:27.756721 0.385469 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:28.758340 0.160143 udp 10.0.2.104 54523 <-> 68.112.135.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:29.760122 0.141491 udp 10.0.2.104 54523 <-> 184.56.26.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:30.761248 0.145635 udp 10.0.2.104 54523 <-> 24.240.26.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:31.762634 0.205678 udp 10.0.2.104 54523 <-> 50.149.114.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:31.972832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:52:32.764088 0.592783 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:33.755572 0.154224 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:34.756725 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:35.758897 1.693145 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:36.759441 1.056515 udp 10.0.2.104 54523 <-> 219.91.143.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:37.761252 0.312209 udp 10.0.2.104 54523 <-> 122.131.251.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:38.762746 0.149122 udp 10.0.2.104 54523 <-> 124.123.225.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:39.763604 0.055760 udp 10.0.2.104 54523 <-> 83.250.76.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:40.755727 0.081582 udp 10.0.2.104 54523 <-> 109.110.18.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:41.756708 0.022754 udp 10.0.2.104 54523 <-> 89.142.152.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:42.758265 0.051940 udp 10.0.2.104 54523 <-> 89.234.212.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:43.759979 0.139729 udp 10.0.2.104 54523 <-> 82.38.6.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:44.761484 0.151715 udp 10.0.2.104 54523 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:45.762900 0.167185 udp 10.0.2.104 54523 <-> 24.207.155.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:46.764216 0.222935 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:47.755974 0.307833 udp 10.0.2.104 54523 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:48.757184 0.069739 udp 10.0.2.104 54523 <-> 77.23.110.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:49.758585 0.710558 udp 10.0.2.104 54523 <-> 188.22.155.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:50.760148 1.059476 udp 10.0.2.104 54523 <-> 24.133.35.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:51.761305 0.152647 udp 10.0.2.104 54523 <-> 74.221.196.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:52.472417 0.025336 udp 10.0.2.104 54595 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 09:52:52.498060 0.000000 udp 10.0.2.104 54596 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:52.762530 0.162576 udp 10.0.2.104 54523 <-> 71.56.68.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:53.764247 0.000000 udp 10.0.2.104 54523 -> 88.245.27.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:54.755887 0.011362 udp 10.0.2.104 54523 <-> 89.103.132.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:55.757230 0.198282 udp 10.0.2.104 54523 <-> 116.68.242.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:56.758517 0.431662 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:57.760034 0.037545 udp 10.0.2.104 54523 <-> 213.114.157.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:52:58.761346 0.000000 udp 10.0.2.104 54523 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:52:59.762789 0.000000 udp 10.0.2.104 54523 -> 79.117.151.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:00.764142 0.083571 udp 10.0.2.104 54523 <-> 178.148.147.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:01.755886 2.071244 udp 10.0.2.104 54523 <-> 81.203.204.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:02.757243 0.322411 udp 10.0.2.104 54523 <-> 201.241.75.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:04.419793 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:53:04.760752 0.049086 udp 10.0.2.104 54523 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:05.761519 0.157332 udp 10.0.2.104 54523 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:06.762754 0.040792 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:07.764593 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:08.756275 0.039493 udp 10.0.2.104 54523 <-> 82.35.177.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:09.757341 2.059160 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:10.758670 0.061477 udp 10.0.2.104 54523 <-> 188.24.136.26 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:12.761769 0.138517 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:13.762893 0.048924 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:14.764396 0.135023 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:15.756148 0.192404 udp 10.0.2.104 54523 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:16.757475 0.000000 udp 10.0.2.104 54523 -> 82.224.214.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:17.758691 0.157615 udp 10.0.2.104 54523 <-> 69.14.223.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:18.760213 0.000000 udp 10.0.2.104 54523 -> 95.18.192.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:19.762051 0.000000 udp 10.0.2.104 54523 -> 24.84.162.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:20.763216 0.322322 udp 10.0.2.104 54523 <-> 115.241.194.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:21.764607 0.358235 udp 10.0.2.104 54523 <-> 223.17.75.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:22.756261 0.159861 udp 10.0.2.104 54523 <-> 37.14.140.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:23.757481 0.042854 udp 10.0.2.104 54523 <-> 84.196.174.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:24.758814 0.146846 udp 10.0.2.104 54523 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:25.759867 0.361620 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:26.761783 0.160927 udp 10.0.2.104 54523 <-> 96.59.16.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:27.763031 0.000000 udp 10.0.2.104 54523 -> 74.131.29.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:28.764487 3.065966 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:29.756592 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:30.757198 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:32.760269 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:33.762255 0.908238 udp 10.0.2.104 54523 <-> 79.51.146.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:34.763678 0.209604 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:35.764510 0.042527 udp 10.0.2.104 54523 <-> 87.254.183.172 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:36.756065 0.206449 udp 10.0.2.104 54523 <-> 66.75.62.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:37.757580 0.269019 udp 10.0.2.104 54523 <-> 187.22.25.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:38.758835 0.053549 udp 10.0.2.104 54523 <-> 79.118.178.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:39.760196 0.270545 udp 10.0.2.104 54523 <-> 201.208.192.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:40.761643 0.000000 udp 10.0.2.104 54523 -> 84.236.102.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:41.762692 1.736439 udp 10.0.2.104 54523 <-> 78.136.101.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:42.764725 0.066933 udp 10.0.2.104 54523 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:43.756200 0.000000 udp 10.0.2.104 54523 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:44.757598 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:45.758860 0.136871 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:46.760398 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:47.761993 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:48.763132 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:49.754630 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:50.756224 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:51.417202 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:53:51.757291 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:52.759021 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:53.760505 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:54.762017 0.138148 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:55.763448 0.000000 udp 10.0.2.104 54523 -> 95.76.74.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:56.754642 0.736881 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:57.756210 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:53:58.760588 0.699102 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:53:59.760654 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:00.760921 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:01.762094 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:02.763295 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:03.754777 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:04.756521 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:05.758028 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:06.759269 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:07.760758 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:08.762353 0.000105 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:08.762458 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:54:09.763412 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:10.754616 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:11.756337 2.002904 udp 10.0.2.104 54523 -> 213.231.166.253 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:12.757949 0.030529 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:14.761019 1.140051 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:16.763812 0.000000 udp 10.0.2.104 54523 -> 81.190.155.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:17.755012 0.051964 udp 10.0.2.104 54523 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:18.756714 0.216901 udp 10.0.2.104 54523 <-> 190.79.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:19.757670 0.000000 udp 10.0.2.104 54523 -> 89.32.157.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:20.759474 0.213177 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:21.760958 0.158266 udp 10.0.2.104 54523 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:22.762193 0.376961 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:23.763753 3.152521 udp 10.0.2.104 54523 <-> 174.102.183.176 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:24.755005 0.000044 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:24.755049 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:54:25.756335 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:27.759362 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:28.761294 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:29.762159 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:30.763200 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:31.754684 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:33.758059 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:34.759321 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:35.760721 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:36.762513 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:37.763157 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:38.413942 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:54:38.755381 0.000105 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:38.755486 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:54:39.756413 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:40.758061 0.000000 udp 10.0.2.104 54523 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:41.759399 0.000000 udp 10.0.2.104 54523 -> 77.184.157.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:42.760830 0.145523 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:43.762571 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:44.763716 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:45.755484 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:46.756644 0.000100 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:46.756744 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:54:47.758179 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:48.759715 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:49.761173 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:50.762698 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:51.763372 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:52.755315 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:53.756773 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:54.758317 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:55.759411 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:56.761797 0.000000 udp 10.0.2.104 54523 -> 178.127.188.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:57.762392 0.207447 udp 10.0.2.104 54523 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:54:58.763532 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:54:59.755431 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:00.756849 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:01.758283 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:02.759793 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:03.761310 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:04.762679 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:04.762756 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:55:05.764276 0.045917 udp 10.0.2.104 54523 <-> 95.76.68.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:06.755440 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:07.756813 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:08.758387 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:09.760036 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:10.761040 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:11.762956 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:12.764115 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:13.756017 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:14.756743 0.378480 udp 10.0.2.104 54523 <-> 77.184.157.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:15.758372 0.000000 udp 10.0.2.104 54523 -> 173.218.218.19 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:16.759489 0.141388 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:17.761620 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:18.762777 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:19.764165 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:20.757168 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:21.757189 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:21.757268 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:55:22.758308 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:23.759816 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:24.761193 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:25.421548 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:55:25.762627 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:26.764085 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:27.756000 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:28.757815 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:29.758453 0.000000 udp 10.0.2.104 54523 -> 77.184.157.125 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:30.760237 0.161445 udp 10.0.2.104 54523 <-> 50.128.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:31.761382 0.000000 udp 10.0.2.104 54523 -> 178.127.188.111 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:32.762828 0.226696 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:33.764233 0.000000 udp 10.0.2.104 54523 -> 14.198.30.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:34.755916 0.122606 udp 10.0.2.104 54523 <-> 72.39.122.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:35.757157 0.377145 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:36.758477 0.000000 udp 10.0.2.104 54523 -> 186.206.236.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:37.759992 0.043016 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:38.761435 0.349025 udp 10.0.2.104 54523 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:39.762672 0.000000 udp 10.0.2.104 54523 -> 78.96.30.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:40.764489 4.996499 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:41.756024 0.430867 udp 10.0.2.104 54523 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:42.757328 0.037669 udp 10.0.2.104 54523 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:43.758631 0.000000 udp 10.0.2.104 54523 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:44.760082 0.275755 udp 10.0.2.104 54523 <-> 201.187.117.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:46.062772 1.994801 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:46.762844 0.000000 udp 10.0.2.104 54523 -> 179.45.48.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:48.756021 0.000000 udp 10.0.2.104 54523 -> 201.1.80.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:49.757239 0.315874 udp 10.0.2.104 54523 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:50.758799 0.285330 udp 10.0.2.104 54523 <-> 201.187.117.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:51.760171 0.325389 udp 10.0.2.104 54523 <-> 179.211.249.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:52.760907 0.000000 udp 10.0.2.104 54523 -> 177.130.148.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:53.763218 0.054084 udp 10.0.2.104 54523 <-> 5.103.62.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:54.764408 0.000000 udp 10.0.2.104 54523 -> 216.121.192.14 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:55.755994 0.314136 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:56.757413 0.131034 udp 10.0.2.104 54523 <-> 2.192.21.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:55:57.758847 0.000000 udp 10.0.2.104 54523 -> 218.227.188.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:58.760245 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:55:59.761894 0.000000 udp 10.0.2.104 54523 -> 77.88.129.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:00.763077 0.000000 udp 10.0.2.104 54523 -> 86.126.0.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:01.764689 0.038697 udp 10.0.2.104 54523 <-> 89.215.31.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:02.756013 0.478858 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:03.757598 0.340125 udp 10.0.2.104 54523 <-> 190.95.125.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:04.758648 0.098725 udp 10.0.2.104 54523 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:05.760582 4.997464 udp 10.0.2.104 54523 <-> 89.234.212.63 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:06.761589 0.372560 udp 10.0.2.104 54523 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:07.763063 0.162402 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:08.764747 0.145751 udp 10.0.2.104 54523 <-> 24.167.187.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:09.756358 0.000000 udp 10.0.2.104 54523 -> 213.231.102.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:10.810154 0.948696 udp 10.0.2.104 54523 <-> 89.234.212.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:12.419980 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:56:12.760595 0.059411 udp 10.0.2.104 54523 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:13.761831 0.160484 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:14.763261 0.050774 udp 10.0.2.104 54523 <-> 109.199.236.29 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:15.764598 3.069222 udp 10.0.2.104 54523 <-> 109.182.53.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:16.756306 0.338715 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:17.757820 0.000000 udp 10.0.2.104 54523 -> 93.72.46.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:19.760925 0.000000 udp 10.0.2.104 54523 -> 95.252.63.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:20.762040 3.046673 udp 10.0.2.104 54523 <-> 86.126.97.64 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:21.763341 0.280181 udp 10.0.2.104 54523 <-> 190.74.23.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:22.755078 0.000000 udp 10.0.2.104 54523 -> 153.135.189.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:24.758036 3.086668 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:25.759044 0.199451 udp 10.0.2.104 54523 <-> 37.214.92.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:26.760482 0.156042 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:28.763329 0.079509 udp 10.0.2.104 54523 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:29.754889 0.148638 udp 10.0.2.104 54523 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:30.756514 0.224384 udp 10.0.2.104 54523 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:31.757585 0.061189 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:32.758946 0.139542 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:33.760822 0.035586 udp 10.0.2.104 54523 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:34.761319 1.351939 udp 10.0.2.104 54523 <-> 190.38.39.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:36.754876 0.000000 udp 10.0.2.104 54523 -> 24.57.19.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:37.756251 0.084330 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:38.757749 0.066464 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:39.759045 0.000000 udp 10.0.2.104 54523 -> 186.206.236.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:40.760612 0.361416 udp 10.0.2.104 54523 <-> 101.63.239.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:41.762152 0.077859 udp 10.0.2.104 54523 <-> 84.113.37.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:42.764366 0.174409 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:43.755297 0.000000 udp 10.0.2.104 54523 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:44.756779 0.228301 udp 10.0.2.104 54523 <-> 190.37.221.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:45.757928 0.071161 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:46.759218 0.409829 udp 10.0.2.104 54523 <-> 186.123.130.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:47.760859 0.427630 udp 10.0.2.104 54523 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:48.762370 0.000000 udp 10.0.2.104 54523 -> 80.42.65.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:49.763277 0.000000 udp 10.0.2.104 54523 -> 50.73.156.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:50.754975 0.262624 udp 10.0.2.104 54523 <-> 186.92.81.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:51.756333 4.006031 udp 10.0.2.104 54523 <-> 82.242.39.127 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:52.758207 4.320300 udp 10.0.2.104 54523 <-> 187.1.104.125 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:53.759218 0.056669 udp 10.0.2.104 54523 <-> 212.233.133.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:54.760608 0.050600 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:57.755421 0.083443 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:56:58.756408 0.000000 udp 10.0.2.104 54523 -> 24.117.40.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:56:59.417286 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:56:59.758006 1.337421 udp 10.0.2.104 54523 <-> 24.101.248.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:00.759794 0.103608 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:01.760910 0.162273 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:02.762374 0.035982 udp 10.0.2.104 54523 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:03.764081 0.051289 udp 10.0.2.104 54523 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:04.755456 1.071754 udp 10.0.2.104 54523 <-> 188.99.115.114 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:06.764862 0.059108 udp 10.0.2.104 54523 <-> 178.119.171.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:07.765132 0.287493 udp 10.0.2.104 54523 <-> 189.111.225.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:08.765420 0.079917 udp 10.0.2.104 54523 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:09.765227 0.116203 udp 10.0.2.104 54523 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:10.764330 0.000000 udp 10.0.2.104 54523 -> 66.115.88.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:11.755104 0.053598 udp 10.0.2.104 54523 <-> 95.43.101.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:12.756723 0.166190 udp 10.0.2.104 54523 <-> 74.58.240.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:13.757868 0.000000 udp 10.0.2.104 54523 -> 72.65.231.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:14.759348 0.223792 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:15.761244 0.000000 udp 10.0.2.104 54523 -> 189.215.42.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:16.762226 0.123993 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:17.763915 0.000000 udp 10.0.2.104 54523 -> 190.36.123.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:18.755225 0.000000 udp 10.0.2.104 54523 -> 190.51.66.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:19.756582 2.190298 udp 10.0.2.104 54523 <-> 24.148.90.94 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:20.758370 0.192399 udp 10.0.2.104 54523 <-> 190.218.84.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:22.766693 0.649713 udp 10.0.2.104 54523 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:23.763803 0.000000 udp 10.0.2.104 54523 -> 80.54.213.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:24.763693 2.566951 udp 10.0.2.104 54523 <-> 190.36.123.115 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:25.755682 0.324484 udp 10.0.2.104 54523 <-> 179.211.249.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:27.758309 3.737305 udp 10.0.2.104 54523 <-> 189.215.42.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:28.760063 0.442675 udp 10.0.2.104 54523 <-> 82.124.235.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:29.760958 0.000000 udp 10.0.2.104 54523 -> 190.51.66.112 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:30.762768 4.997951 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:31.763866 0.188810 udp 10.0.2.104 54523 <-> 190.218.84.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:32.754954 0.207803 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:33.756627 0.235457 udp 10.0.2.104 54523 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:34.760425 0.000000 udp 10.0.2.104 54523 -> 80.54.213.23 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:35.790547 0.000000 udp 10.0.2.104 54523 <- 31.17.92.120 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:36.761197 0.355279 udp 10.0.2.104 54523 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:37.762545 0.000000 udp 10.0.2.104 54523 -> 79.117.151.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:38.764245 2.031694 udp 10.0.2.104 54523 <-> 212.117.58.48 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:39.755529 0.234154 udp 10.0.2.104 54523 <-> 161.200.125.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:41.758127 0.153484 udp 10.0.2.104 54523 <-> 203.187.213.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:42.759942 0.333800 udp 10.0.2.104 54523 <-> 37.190.195.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:43.761110 0.134972 udp 10.0.2.104 54523 <-> 71.225.111.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:44.762715 0.305120 udp 10.0.2.104 54523 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:45.763501 0.158619 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:46.415124 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:57:46.755996 0.165398 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:47.757112 0.053844 udp 10.0.2.104 54523 <-> 95.180.191.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:48.758377 3.004425 udp 10.0.2.104 54523 -> 192.168.1.33 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:49.759907 1.001340 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:52.764550 0.142660 udp 10.0.2.104 54523 <-> 208.53.224.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:53.755780 0.165408 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:54.756729 0.337285 udp 10.0.2.104 54523 <-> 119.236.63.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:55.758454 1.328430 udp 10.0.2.104 54523 <-> 216.222.167.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:56.759964 0.000000 udp 10.0.2.104 54523 -> 179.223.86.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:57.761399 0.000000 udp 10.0.2.104 54523 -> 79.179.19.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:57:58.762899 0.162600 udp 10.0.2.104 54523 <-> 68.102.125.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:57:59.764237 0.000000 udp 10.0.2.104 54523 -> 190.52.44.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:00.755837 0.157417 udp 10.0.2.104 54523 <-> 24.202.178.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:01.757127 0.124242 udp 10.0.2.104 54523 <-> 90.23.92.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:02.758440 0.152699 udp 10.0.2.104 54523 <-> 50.202.4.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:03.760030 0.307369 udp 10.0.2.104 54523 <-> 14.45.89.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:04.762078 0.336318 udp 10.0.2.104 54523 <-> 114.39.150.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:05.762761 0.118425 udp 10.0.2.104 54523 <-> 24.229.176.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:06.764620 0.041071 udp 10.0.2.104 54523 <-> 89.137.195.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:07.756472 0.000000 udp 10.0.2.104 54523 -> 89.229.29.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:08.757015 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:09.758631 0.331197 udp 10.0.2.104 54523 <-> 1.161.56.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:10.760145 0.136235 udp 10.0.2.104 54523 <-> 142.105.11.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:11.764910 0.075182 udp 10.0.2.104 54523 <-> 85.84.87.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:12.764943 0.165031 udp 10.0.2.104 54523 <-> 198.251.45.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:13.764543 0.060941 udp 10.0.2.104 54523 <-> 109.121.207.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:14.756114 0.164049 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:15.757285 0.000000 udp 10.0.2.104 54523 -> 80.117.95.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:16.758399 0.283996 udp 10.0.2.104 54523 <-> 201.46.239.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:18.761311 0.524762 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:19.762802 0.610298 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:20.764394 0.135245 udp 10.0.2.104 54523 <-> 37.214.92.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:21.756256 0.294250 udp 10.0.2.104 54523 <-> 189.110.71.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:22.757334 0.088192 udp 10.0.2.104 54523 <-> 87.15.200.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:23.758541 0.184202 udp 10.0.2.104 54523 <-> 174.3.76.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:24.760185 1.910354 udp 10.0.2.104 54523 <-> 89.229.238.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:25.761345 0.466220 udp 10.0.2.104 54523 <-> 98.150.103.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:26.763071 0.146603 udp 10.0.2.104 54523 <-> 67.85.14.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:27.764608 0.193090 udp 10.0.2.104 54523 <-> 216.197.194.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:28.756266 0.222941 udp 10.0.2.104 54523 <-> 181.53.75.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:29.757632 0.570543 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:30.758654 0.156452 udp 10.0.2.104 54523 <-> 68.54.122.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:31.760422 0.152888 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:32.761741 0.079821 udp 10.0.2.104 54523 <-> 84.54.166.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:33.422350 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:58:33.763012 0.172721 udp 10.0.2.104 54523 <-> 69.137.7.210 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:34.764446 0.042736 udp 10.0.2.104 54523 <-> 213.231.163.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:35.755737 0.872672 udp 10.0.2.104 54523 <-> 182.237.180.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:35.978774 3.002056 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:58:36.757279 1.158053 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:38.760455 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:39.761588 0.133060 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:40.763302 0.347061 udp 10.0.2.104 54523 <-> 76.169.87.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:41.764554 0.162148 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:42.756523 0.000000 udp 10.0.2.104 54523 -> 187.19.211.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:42.986859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:58:43.757278 0.235445 udp 10.0.2.104 54523 <-> 187.247.181.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:44.758878 0.064068 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:45.760944 0.371874 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:46.762095 0.249625 udp 10.0.2.104 54523 <-> 46.35.110.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:47.763438 0.169484 udp 10.0.2.104 54523 <-> 198.251.45.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:48.764596 0.000000 udp 10.0.2.104 54523 -> 190.79.104.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:49.757872 0.147602 udp 10.0.2.104 54523 <-> 24.99.130.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:50.758516 0.158215 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:50.988797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:58:51.759148 0.159067 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:52.760547 0.056948 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:53.761420 2.637487 udp 10.0.2.104 54523 <-> 186.19.134.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:54.763396 0.000000 udp 10.0.2.104 54523 -> 178.36.6.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:55.754736 0.038882 udp 10.0.2.104 54523 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:56.756431 0.065801 udp 10.0.2.104 54523 <-> 93.72.46.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:57.757575 0.176221 udp 10.0.2.104 54523 <-> 74.62.165.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:58:58.758828 0.000000 udp 10.0.2.104 54523 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:58:59.760584 0.155157 udp 10.0.2.104 54523 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:00.761894 0.024319 udp 10.0.2.104 54523 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:01.763231 0.000000 udp 10.0.2.104 54523 -> 71.203.5.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:02.754683 1.053554 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:04.757443 0.065135 udp 10.0.2.104 54523 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:05.761321 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:06.762127 0.000000 udp 10.0.2.104 54523 -> 204.16.10.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:06.992452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:59:07.768589 0.124426 udp 10.0.2.104 54523 <-> 84.113.37.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:08.765181 0.514955 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:09.755017 0.000000 udp 10.0.2.104 54523 -> 190.110.238.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:10.756185 0.249559 udp 10.0.2.104 54523 <-> 87.17.240.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:11.757623 0.367057 udp 10.0.2.104 54523 <-> 116.203.129.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:12.760930 0.068456 udp 10.0.2.104 54523 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:13.760696 0.052904 udp 10.0.2.104 54523 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:14.769055 0.000000 udp 10.0.2.104 54523 -> 204.16.10.14 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:15.767520 0.223855 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:16.754828 0.183075 udp 10.0.2.104 54523 <-> 49.205.61.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:17.760352 0.159324 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:18.760860 0.061393 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:19.765878 0.437410 udp 10.0.2.104 54523 <-> 177.180.205.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:20.423930 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:59:20.763796 0.000000 udp 10.0.2.104 54523 -> 109.23.224.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:21.763899 0.158866 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:22.764303 1.170506 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:23.756907 0.312825 udp 10.0.2.104 54523 <-> 187.247.181.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:24.758156 3.343696 udp 10.0.2.104 54523 <-> 14.96.232.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:25.758946 0.036492 udp 10.0.2.104 54523 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:26.764419 0.000000 udp 10.0.2.104 54523 -> 201.242.45.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:27.766153 0.000000 udp 10.0.2.104 54523 -> 72.199.138.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:28.770718 0.050287 udp 10.0.2.104 54523 <-> 62.195.179.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:29.770217 0.150930 udp 10.0.2.104 54523 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:30.759737 0.000000 udp 10.0.2.104 54523 -> 85.178.130.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:31.757737 0.000000 udp 10.0.2.104 54523 -> 173.199.217.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:32.758025 0.068753 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:33.766056 2.535043 udp 10.0.2.104 54523 <-> 186.19.134.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:34.766251 0.070889 udp 10.0.2.104 54523 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:35.766343 0.149559 udp 10.0.2.104 54523 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:36.766599 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:37.756083 0.163712 udp 10.0.2.104 54523 <-> 27.106.26.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:38.756614 0.000000 udp 10.0.2.104 54523 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:38.996826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:59:39.758142 0.593812 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:40.761877 0.114099 udp 10.0.2.104 54523 <-> 5.13.113.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:41.762712 0.129817 udp 10.0.2.104 54523 <-> 98.204.116.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:42.762942 0.405782 udp 10.0.2.104 54523 <-> 37.19.196.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:43.763714 0.000000 udp 10.0.2.104 54523 -> 188.254.170.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:44.755054 0.314775 udp 10.0.2.104 54523 <-> 180.215.6.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:45.756579 0.614361 udp 10.0.2.104 54523 <-> 189.106.52.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:46.757878 0.031405 udp 10.0.2.104 54523 <-> 86.101.158.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:47.759459 1.255139 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:48.760925 0.040045 udp 10.0.2.104 54523 <-> 178.116.209.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:49.762378 0.049027 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:50.763417 0.000000 udp 10.0.2.104 54523 -> 190.79.12.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:51.755382 0.065180 udp 10.0.2.104 54523 <-> 188.27.46.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:52.756501 0.149656 udp 10.0.2.104 54523 <-> 188.54.124.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:53.758087 0.168713 udp 10.0.2.104 54523 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:54.760031 0.128128 udp 10.0.2.104 54523 <-> 71.230.91.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:55.760804 0.054813 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:56.762330 0.000000 udp 10.0.2.104 54523 -> 78.146.226.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 09:59:57.764664 0.038228 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:58.755189 0.164527 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 09:59:59.756645 0.389056 udp 10.0.2.104 54523 <-> 177.106.47.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:00.758290 0.000000 udp 10.0.2.104 54523 -> 79.115.173.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:01.760534 0.023370 udp 10.0.2.104 54523 <-> 91.89.202.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:02.761108 0.175941 udp 10.0.2.104 54523 <-> 108.242.151.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:03.762361 0.275475 udp 10.0.2.104 54523 <-> 66.115.84.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:04.764152 0.285112 udp 10.0.2.104 54523 <-> 42.148.109.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:05.755319 0.149032 udp 10.0.2.104 54523 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:06.757115 0.344365 udp 10.0.2.104 54523 <-> 61.61.228.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:07.417786 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:00:07.758176 0.000000 udp 10.0.2.104 54523 -> 89.133.236.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:08.759858 0.017072 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:09.761043 0.000000 udp 10.0.2.104 54523 -> 82.245.78.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:10.763019 0.000000 udp 10.0.2.104 54523 -> 220.129.1.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:11.763957 0.041744 udp 10.0.2.104 54523 <-> 78.97.224.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:12.755512 0.136651 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:13.756950 0.170654 udp 10.0.2.104 54523 <-> 178.90.236.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:14.758250 0.435631 udp 10.0.2.104 54523 <-> 107.9.137.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:15.759860 0.227410 udp 10.0.2.104 54523 <-> 190.39.135.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:16.761187 4.238142 udp 10.0.2.104 54523 <-> 2.178.162.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:17.762868 0.177695 udp 10.0.2.104 54523 <-> 79.56.209.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:18.764220 0.074013 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:19.755767 0.078115 udp 10.0.2.104 54523 <-> 217.208.123.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:20.756795 0.213316 udp 10.0.2.104 54523 <-> 1.22.190.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:21.758491 0.732732 udp 10.0.2.104 54523 <-> 115.240.91.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:22.759982 0.176473 udp 10.0.2.104 54523 <-> 75.135.210.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:23.761391 0.265416 udp 10.0.2.104 54523 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:24.763073 0.198564 udp 10.0.2.104 54523 <-> 208.99.142.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:25.764073 0.132713 udp 10.0.2.104 54523 <-> 68.174.186.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:26.755819 0.165798 udp 10.0.2.104 54523 <-> 24.40.246.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:27.757036 0.055812 udp 10.0.2.104 54523 <-> 79.98.138.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:28.758250 0.163803 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:29.760096 0.319789 udp 10.0.2.104 54523 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:30.761379 0.060521 udp 10.0.2.104 54523 <-> 89.32.157.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:31.763057 0.000000 udp 10.0.2.104 54523 -> 86.57.191.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:32.764387 0.374544 udp 10.0.2.104 54523 <-> 218.37.235.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:33.755733 0.000000 udp 10.0.2.104 54523 -> 77.225.54.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:34.756942 0.174783 udp 10.0.2.104 54523 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:35.758257 0.047985 udp 10.0.2.104 54523 <-> 213.46.47.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:36.759929 1.233084 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:37.761234 0.161197 udp 10.0.2.104 54523 <-> 69.249.214.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:38.762728 0.087553 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:39.764244 0.168839 udp 10.0.2.104 54523 <-> 24.202.178.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:40.756222 0.207079 udp 10.0.2.104 54523 <-> 71.237.245.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:41.757063 0.206580 udp 10.0.2.104 54523 <-> 67.160.130.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:42.758677 0.000000 udp 10.0.2.104 54523 -> 188.114.139.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:43.760131 0.166602 udp 10.0.2.104 54523 <-> 75.66.130.254 16464 CON 0 0 2 388 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:44.761534 0.817207 udp 10.0.2.104 54523 <-> 116.75.42.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:45.763072 0.144418 udp 10.0.2.104 54523 <-> 71.71.254.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:46.764699 0.131914 udp 10.0.2.104 54523 <-> 68.174.186.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:47.756016 0.000000 udp 10.0.2.104 54523 -> 190.207.231.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:48.757272 0.116080 udp 10.0.2.104 54523 <-> 24.122.170.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:49.758623 0.100971 udp 10.0.2.104 54523 <-> 95.133.220.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:50.760461 0.230390 udp 10.0.2.104 54523 <-> 203.193.142.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:51.761443 4.997294 udp 10.0.2.104 54523 <-> 188.254.170.36 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:52.763369 0.353530 udp 10.0.2.104 54523 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:53.764448 4.997353 udp 10.0.2.104 54523 -> 108.230.246.250 16464 INT 0 3 174 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:54.415263 0.000141 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:00:54.756189 0.138189 udp 10.0.2.104 54523 <-> 37.212.32.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:56.796295 0.000000 udp 10.0.2.104 54523 <- 188.254.170.36 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:57.760211 0.052874 udp 10.0.2.104 54523 <-> 91.134.65.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:00:59.280543 0.000000 udp 10.0.2.104 54523 <- 108.230.246.250 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:00:59.762860 0.000000 udp 10.0.2.104 54523 -> 72.197.244.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:00.764415 3.148318 udp 10.0.2.104 54523 <-> 174.99.98.125 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:01.756035 0.000000 udp 10.0.2.104 54523 -> 72.242.16.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:02.757349 0.033034 udp 10.0.2.104 54523 <-> 85.230.84.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:04.760486 0.035863 udp 10.0.2.104 54523 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:05.761501 2.175381 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:08.756024 0.056038 udp 10.0.2.104 54523 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:09.757102 0.449123 udp 10.0.2.104 54523 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:10.758757 0.047757 udp 10.0.2.104 54523 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:11.760407 0.160604 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:12.761617 0.157998 udp 10.0.2.104 54523 <-> 71.235.176.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:13.763321 0.149756 udp 10.0.2.104 54523 <-> 68.193.113.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:14.764558 0.177406 udp 10.0.2.104 54523 <-> 72.201.215.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:15.756074 0.053101 udp 10.0.2.104 54523 <-> 77.85.172.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:16.757536 0.039611 udp 10.0.2.104 54523 <-> 109.87.128.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:17.758927 0.173193 udp 10.0.2.104 54523 <-> 98.200.250.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:18.760364 0.057348 udp 10.0.2.104 54523 <-> 89.78.202.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:19.762103 0.293115 udp 10.0.2.104 54523 <-> 125.4.9.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:20.763119 0.000000 udp 10.0.2.104 54523 -> 70.83.116.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:21.764540 0.241085 udp 10.0.2.104 54523 <-> 187.63.102.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:22.758312 0.152155 udp 10.0.2.104 54523 <-> 24.158.210.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:23.758489 0.000000 udp 10.0.2.104 54523 -> 173.55.187.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:24.760954 2.004642 udp 10.0.2.104 54523 -> 72.222.72.67 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:25.764249 0.173001 udp 10.0.2.104 54523 <-> 49.207.111.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:27.766172 3.992830 udp 10.0.2.104 54523 -> 86.121.43.152 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:28.757676 2.160559 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:29.756111 0.000000 udp 10.0.2.104 54523 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:32.760605 0.000000 udp 10.0.2.104 54523 -> 72.222.72.67 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:33.761429 0.041293 udp 10.0.2.104 54523 <-> 5.15.135.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:34.763349 0.000000 udp 10.0.2.104 54523 -> 95.59.21.62 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:35.754622 0.306365 udp 10.0.2.104 54523 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:36.756065 0.028927 udp 10.0.2.104 54523 <-> 86.101.158.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:37.757633 0.163285 udp 10.0.2.104 54523 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:38.759183 0.219120 udp 10.0.2.104 54523 <-> 68.93.156.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:39.760328 0.337999 udp 10.0.2.104 54523 <-> 190.177.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:40.763333 0.143832 udp 10.0.2.104 54523 <-> 79.50.19.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:41.425480 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:01:41.766236 0.165936 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:42.755237 0.096058 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:43.756405 0.285500 udp 10.0.2.104 54523 <-> 98.140.199.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:44.757703 2.062314 udp 10.0.2.104 54523 <-> 87.121.26.230 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:45.759993 0.000000 udp 10.0.2.104 54523 -> 67.248.209.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:47.762018 0.185185 udp 10.0.2.104 54523 <-> 69.193.106.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:48.763237 0.120448 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:49.755172 0.097052 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:50.756406 0.306468 udp 10.0.2.104 54523 <-> 75.246.251.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:51.757811 0.000000 udp 10.0.2.104 54523 -> 190.245.43.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:52.758977 0.145401 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:53.760647 0.000000 udp 10.0.2.104 54523 -> 123.110.35.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:01:54.762368 0.232548 udp 10.0.2.104 54523 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:55.764043 0.143976 udp 10.0.2.104 54523 <-> 24.190.186.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:56.754424 0.294734 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:57.756282 0.068850 udp 10.0.2.104 54523 <-> 79.109.137.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:58.758088 0.505921 udp 10.0.2.104 54523 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:01:59.759247 0.083650 udp 10.0.2.104 54523 <-> 78.251.241.129 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:00.760821 0.000000 udp 10.0.2.104 54523 -> 204.16.10.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:01.762277 0.033657 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:02.763705 0.059646 udp 10.0.2.104 54523 <-> 109.121.207.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:03.755083 3.309118 udp 10.0.2.104 54523 <-> 183.87.71.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:04.756462 0.000000 udp 10.0.2.104 54523 -> 78.131.17.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:05.758180 0.048348 udp 10.0.2.104 54523 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:07.760645 0.000000 udp 10.0.2.104 54523 -> 113.193.96.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:08.762090 0.135542 udp 10.0.2.104 54523 <-> 74.64.73.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:09.764068 0.061075 udp 10.0.2.104 54523 <-> 89.40.192.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:10.755203 0.033597 udp 10.0.2.104 54523 <-> 89.41.36.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:11.756759 0.060455 udp 10.0.2.104 54523 <-> 82.137.57.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:12.758024 0.000078 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:12.758102 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:02:13.759398 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:13.833296 0.000000 udp 10.0.2.104 54523 <- 113.193.96.149 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:14.760788 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:15.762397 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:16.763764 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:17.755463 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:18.756605 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:19.757515 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:20.759149 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:21.760950 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:22.762518 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:23.764022 3.995860 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:24.757276 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:25.757349 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:26.758072 0.155077 udp 10.0.2.104 54523 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:28.420367 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:02:28.760735 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:29.762538 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:29.762585 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:02:30.763928 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:31.755121 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:32.756525 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:33.758364 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:34.759468 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:35.761265 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:36.762571 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:37.763677 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:38.755377 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:39.756724 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:40.758138 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:42.761015 0.000000 udp 10.0.2.104 54523 -> 89.41.36.239 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:43.768568 0.060970 udp 10.0.2.104 54523 <-> 82.137.57.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:44.767892 0.000000 udp 10.0.2.104 54523 -> 79.119.35.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:45.757863 0.351574 udp 10.0.2.104 54523 <-> 125.224.37.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:46.757287 0.158559 udp 10.0.2.104 54523 <-> 79.2.118.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:47.758311 0.036081 udp 10.0.2.104 54523 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:02:48.759417 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:49.760882 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:50.762473 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:52.755666 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:53.756760 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:54.758530 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:55.759813 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:56.761268 2.995346 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:56.761363 2.995251 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 10:02:57.765412 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:02:58.765787 0.151841 udp 10.0.2.104 54523 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:03:00.756991 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:01.758475 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:02.760154 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:03.761350 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:04.762760 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:05.764454 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:06.755918 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:07.756988 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:08.760812 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:09.760379 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:10.761416 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:11.762777 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:12.764219 2.995061 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:13.756999 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:14.757207 0.112823 udp 10.0.2.104 54523 <-> 95.133.220.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:03:15.417902 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:03:16.759872 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:17.761440 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:18.762893 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:19.764167 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:20.758104 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:21.757195 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:22.758367 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:23.760221 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:24.761013 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:25.763245 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:26.764504 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:27.755826 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:28.757174 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:28.757236 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:03:30.760057 2.043386 udp 10.0.2.104 54523 <-> 189.78.6.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:03:31.764986 0.039813 udp 10.0.2.104 54523 <-> 109.87.128.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:03:32.764682 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:33.764744 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:34.755960 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:35.757497 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:36.758702 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:37.760514 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:38.761757 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:39.762809 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:40.764592 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:41.756171 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:42.757181 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:43.758655 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:44.760414 3.995603 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:45.761640 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:46.763055 0.148302 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:03:47.764818 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:49.757554 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:50.758669 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:51.760261 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:52.762221 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:53.763048 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:54.764388 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:55.756212 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:56.757466 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:57.758899 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:58.760723 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:03:59.762007 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:00.763050 0.000000 udp 10.0.2.104 54523 -> 14.96.196.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:01.754636 3.670360 udp 10.0.2.104 54523 <-> 189.78.6.57 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:02.415908 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:04:02.756457 0.058906 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:04.759374 0.000000 udp 10.0.2.104 54523 -> 178.148.154.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:05.760451 0.342066 udp 10.0.2.104 54523 <-> 186.11.18.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:06.761648 0.138531 udp 10.0.2.104 54523 <-> 71.206.33.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:07.763079 0.170605 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:08.754828 0.056006 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:09.756068 0.374754 udp 10.0.2.104 54523 <-> 201.14.147.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:10.757680 0.058639 udp 10.0.2.104 54523 <-> 217.174.48.38 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:11.759107 0.044129 udp 10.0.2.104 54523 <-> 188.6.228.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:12.760468 0.157742 udp 10.0.2.104 54523 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:13.761833 0.000000 udp 10.0.2.104 54523 -> 190.142.92.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:14.763440 0.341541 udp 10.0.2.104 54523 <-> 1.22.174.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:15.754668 0.098069 udp 10.0.2.104 54523 <-> 213.231.117.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:16.756017 0.051952 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:17.757548 0.097121 udp 10.0.2.104 54523 <-> 82.38.6.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:18.759080 0.273448 udp 10.0.2.104 54523 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:19.760642 0.041522 udp 10.0.2.104 54523 <-> 94.156.86.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:20.762103 0.047265 udp 10.0.2.104 54523 <-> 77.77.42.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:21.763401 0.141619 udp 10.0.2.104 54523 <-> 24.188.69.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:22.755157 0.059467 udp 10.0.2.104 54523 <-> 86.127.129.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:23.756593 0.251256 udp 10.0.2.104 54523 <-> 72.137.144.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:24.757876 3.213815 udp 10.0.2.104 54523 <-> 67.185.146.161 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:25.759140 0.000000 udp 10.0.2.104 54523 -> 190.28.166.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:26.760619 0.294728 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:28.763717 0.164777 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:29.754730 0.931860 udp 10.0.2.104 54523 <-> 89.231.196.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:30.756509 0.365588 udp 10.0.2.104 54523 <-> 218.43.177.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:31.757942 0.294413 udp 10.0.2.104 54523 <-> 189.19.128.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:32.759641 0.000000 udp 10.0.2.104 54523 -> 107.221.236.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:33.760867 0.297467 udp 10.0.2.104 54523 <-> 125.195.179.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:34.762229 0.129773 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:35.763221 0.278484 udp 10.0.2.104 54523 <-> 79.47.174.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:36.754990 0.072950 udp 10.0.2.104 54523 <-> 77.78.219.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:37.756747 0.172425 udp 10.0.2.104 54523 <-> 184.49.122.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:38.757668 0.073233 udp 10.0.2.104 54523 <-> 109.98.76.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:39.759294 0.305557 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:40.760767 1.243140 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:42.763825 4.170391 udp 10.0.2.104 54523 -> 159.0.209.22 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:46.934216 0.000000 icmp 159.0.209.22 0x0303 -> 10.0.2.104 0x5040 URP 192 1 70 flow=Background 1970/01/01 10:04:43.755043 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:44.756535 0.144255 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:45.758098 1.091193 udp 10.0.2.104 54523 <-> 79.18.102.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:47.760688 0.306287 udp 10.0.2.104 54523 <-> 190.186.103.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:48.762333 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:49.423249 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:04:49.763642 0.195797 udp 10.0.2.104 54523 <-> 75.119.124.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:50.755236 0.115768 udp 10.0.2.104 54523 <-> 2.192.21.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:51.756569 0.083451 udp 10.0.2.104 54523 <-> 37.235.189.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:52.758077 0.319851 udp 10.0.2.104 54523 <-> 115.240.22.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:53.759901 0.568058 udp 10.0.2.104 54523 <-> 201.74.108.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:54.760820 0.250878 udp 10.0.2.104 54523 <-> 2.182.24.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:55.762298 0.000000 udp 10.0.2.104 54523 -> 79.117.112.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:56.763728 0.135359 udp 10.0.2.104 54523 <-> 72.226.4.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:57.755031 0.136756 udp 10.0.2.104 54523 <-> 151.74.35.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:04:58.756581 0.000000 udp 10.0.2.104 54523 -> 87.121.26.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:04:59.758166 0.035218 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:00.759635 0.592508 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:01.760904 2.180808 udp 10.0.2.104 54523 <-> 109.133.55.148 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:02.762197 0.057832 udp 10.0.2.104 54523 <-> 152.66.219.240 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:04.757102 0.157895 udp 10.0.2.104 54523 <-> 24.252.126.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:05.756997 1.355519 udp 10.0.2.104 54523 <-> 201.213.50.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:06.758398 0.172487 udp 10.0.2.104 54523 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:07.759408 0.181513 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:08.761479 0.000000 udp 10.0.2.104 54523 -> 188.31.22.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:09.762198 0.008602 udp 10.0.2.104 54523 <-> 152.66.15.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:10.764017 0.147975 udp 10.0.2.104 54523 <-> 71.65.107.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:11.755808 0.117930 udp 10.0.2.104 54523 <-> 87.121.26.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:12.756748 0.164587 udp 10.0.2.104 54523 <-> 72.230.110.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:13.758363 1.053241 udp 10.0.2.104 54523 <-> 109.133.55.148 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:15.761240 2.994011 udp 10.0.2.104 54523 -> 152.66.219.240 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:16.762519 2.994198 udp 10.0.2.104 54523 <-> 186.206.236.5 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:17.764296 0.000000 udp 10.0.2.104 54523 -> 126.130.237.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:20.758191 0.000000 udp 10.0.2.104 54523 -> 202.29.178.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:21.760032 0.000000 udp 10.0.2.104 54523 -> 174.61.59.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:22.762287 0.189432 udp 10.0.2.104 54523 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:23.762324 0.182086 udp 10.0.2.104 54523 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:24.764010 0.025653 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:25.755471 0.069923 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:26.756766 0.000000 udp 10.0.2.104 54523 -> 126.130.237.26 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:27.758407 0.130875 udp 10.0.2.104 54523 <-> 109.133.55.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:28.759922 3.004258 udp 10.0.2.104 54523 -> 72.230.110.82 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:29.761180 3.061905 udp 10.0.2.104 54523 <-> 93.105.14.115 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:30.762859 0.000000 udp 10.0.2.104 54523 -> 188.31.22.169 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:33.756656 0.192955 udp 10.0.2.104 54523 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:34.758230 0.178078 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:35.759857 1.445494 udp 10.0.2.104 54523 <-> 201.213.50.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:36.420713 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:05:36.761266 0.065757 udp 10.0.2.104 54523 <-> 87.121.26.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:37.762745 0.000000 udp 10.0.2.104 54523 -> 70.112.193.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:38.763968 1.992973 udp 10.0.2.104 54523 <-> 118.171.112.186 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:39.755625 0.167321 udp 10.0.2.104 54523 <-> 72.230.110.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:41.758337 0.174572 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:42.759914 0.164706 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:43.002486 3.004103 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:05:43.763053 0.143473 udp 10.0.2.104 54523 <-> 71.65.107.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:44.767474 2.091620 udp 10.0.2.104 54523 <-> 79.176.13.149 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:45.766577 0.603156 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:47.760955 0.139448 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:48.761793 0.080298 udp 10.0.2.104 54523 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:49.761878 0.354414 udp 10.0.2.104 54523 <-> 46.225.35.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:50.018498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:05:50.768599 0.000000 udp 10.0.2.104 54523 -> 68.151.195.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:05:51.768467 1.141872 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:53.755566 2.246504 udp 10.0.2.104 54523 <-> 190.207.251.135 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:54.758938 1.320932 udp 10.0.2.104 54523 <-> 62.57.201.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:56.762018 0.289585 udp 10.0.2.104 54523 <-> 59.190.37.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:57.761384 0.370708 udp 10.0.2.104 54523 <-> 75.246.251.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:58.012054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:05:58.762891 3.157655 udp 10.0.2.104 54523 <-> 124.123.207.98 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:05:59.764408 0.000000 udp 10.0.2.104 54523 -> 101.217.86.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:00.756917 0.171559 udp 10.0.2.104 54523 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:02.758152 0.101114 udp 10.0.2.104 54523 <-> 37.229.98.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:03.760305 2.002979 udp 10.0.2.104 54523 <-> 82.56.138.112 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:04.761790 0.000000 udp 10.0.2.104 54523 -> 92.228.51.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:06.764417 0.000000 udp 10.0.2.104 54523 -> 5.15.56.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:07.758338 1.351655 udp 10.0.2.104 54523 <-> 190.95.125.114 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:09.769525 0.622087 udp 10.0.2.104 54523 <-> 201.209.188.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:10.771748 0.348071 udp 10.0.2.104 54523 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:11.768808 0.182087 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:12.765827 0.000000 udp 10.0.2.104 54523 -> 201.43.188.193 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:13.764420 0.000000 udp 10.0.2.104 54523 -> 200.80.180.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:14.014930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:06:14.756077 0.000000 udp 10.0.2.104 54523 -> 75.108.63.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:15.757393 0.000000 udp 10.0.2.104 54523 -> 95.57.180.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:16.758604 0.000000 udp 10.0.2.104 54523 -> 89.215.64.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:17.759957 0.000000 udp 10.0.2.104 54523 -> 178.74.27.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:18.761187 0.265739 udp 10.0.2.104 54523 <-> 92.228.51.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:19.763173 0.078373 udp 10.0.2.104 54523 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:20.765012 0.347000 udp 10.0.2.104 54523 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:21.756056 0.167799 udp 10.0.2.104 54523 <-> 192.253.210.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:22.757344 0.168401 udp 10.0.2.104 54523 <-> 183.83.165.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:23.418120 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:06:23.758834 0.000000 udp 10.0.2.104 54523 -> 79.31.178.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:24.760357 0.174457 udp 10.0.2.104 54523 <-> 76.107.65.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:25.762400 0.323543 udp 10.0.2.104 54523 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:26.763308 0.154725 udp 10.0.2.104 54523 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:27.764487 0.047785 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:28.755804 0.304031 udp 10.0.2.104 54523 <-> 201.27.127.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:29.757339 0.159637 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:30.759145 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:31.760218 4.997142 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:32.761761 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:33.763068 3.995749 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:34.754766 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:35.756218 0.160708 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:38.760458 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:39.761896 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:40.763412 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:40.763457 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:06:42.756111 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:43.757425 0.353853 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:44.759018 0.196125 udp 10.0.2.104 54523 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:45.760476 0.123114 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:46.020566 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:06:46.762010 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:47.763334 0.325128 udp 10.0.2.104 54523 <-> 5.190.123.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:48.754944 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:49.756339 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:50.758168 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:51.759084 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:53.762075 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:54.763413 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:55.754941 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:56.756104 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:56.756166 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:06:57.757920 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:06:58.759115 0.314184 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:06:59.760476 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:00.762378 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:01.763179 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:02.754701 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:03.756636 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:05.759368 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:06.760470 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:07.761990 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:08.763329 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:09.754785 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:10.415937 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:07:10.756593 0.000091 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:10.756684 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:07:11.757843 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:12.759415 3.004054 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:13.760757 0.879998 udp 10.0.2.104 54523 <-> 202.123.139.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:07:14.762086 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:16.755079 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:17.756740 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:18.758057 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:19.759487 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:20.760871 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:21.762378 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:22.763840 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:23.755044 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:24.756543 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:25.757858 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:26.759324 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:26.759384 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:07:27.761023 4.997391 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:29.763980 0.600014 udp 10.0.2.104 54523 <-> 202.123.139.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:07:30.755356 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:31.756434 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:33.759888 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:34.760901 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:35.762045 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:36.766557 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:38.756410 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:39.758004 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:40.760033 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:41.760808 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:42.762716 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:43.768070 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:43.768150 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:07:44.760853 3.013174 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:45.762258 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:46.776065 0.092033 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:07:48.771601 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:49.769282 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:50.765766 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:51.755370 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:52.466359 0.011629 udp 10.0.2.104 54597 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 10:07:52.478288 0.000000 udp 10.0.2.104 54598 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:52.756676 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:53.758414 1.187888 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:07:54.760055 0.000000 udp 10.0.2.104 54523 -> 98.217.103.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:55.761196 0.072298 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:07:56.769779 0.169506 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:07:57.416217 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:07:57.765742 0.000000 udp 10.0.2.104 54523 -> 151.50.126.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:07:58.759558 2.001724 udp 10.0.2.104 54523 <-> 5.190.123.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:07:59.763732 0.125862 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:01.759829 0.000000 udp 10.0.2.104 54523 -> 178.21.51.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:02.761106 0.121069 udp 10.0.2.104 54523 <-> 92.36.247.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:03.762706 0.000000 udp 10.0.2.104 54523 -> 190.74.80.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:04.765449 0.163919 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:05.772264 0.039115 udp 10.0.2.104 54523 <-> 89.65.132.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:06.775668 0.213920 udp 10.0.2.104 54523 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:07.773736 0.238475 udp 10.0.2.104 54523 <-> 186.95.67.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:08.771075 0.000000 udp 10.0.2.104 54523 -> 186.105.86.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:09.767985 0.146512 udp 10.0.2.104 54523 <-> 67.242.194.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:10.765807 3.122644 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:11.766055 0.383955 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:12.755807 0.000000 udp 10.0.2.104 54523 -> 70.184.178.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:14.764286 0.053929 udp 10.0.2.104 54523 <-> 188.121.26.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:15.764824 0.000000 udp 10.0.2.104 54523 -> 68.98.20.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:16.764402 0.270731 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:17.765845 0.051041 udp 10.0.2.104 54523 <-> 78.61.221.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:18.765306 0.000000 udp 10.0.2.104 54523 -> 171.98.179.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:19.757750 0.501941 udp 10.0.2.104 54523 <-> 179.211.249.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:20.759320 0.000000 udp 10.0.2.104 54523 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:21.758829 1.663158 arp 10.0.2.104 who 169.254.239.0 INT 3 126 flow=Background-ARP 1970/01/01 10:08:22.761661 0.000000 udp 10.0.2.104 54523 -> 64.183.48.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:23.764084 0.054239 udp 10.0.2.104 54523 <-> 37.145.43.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:24.764511 0.391196 udp 10.0.2.104 54523 <-> 179.211.249.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:25.768183 1.475592 udp 10.0.2.104 54523 <-> 87.166.201.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:26.757692 0.309661 udp 10.0.2.104 54523 <-> 180.19.158.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:27.758061 0.818943 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:28.758641 1.150147 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:30.762002 0.166563 udp 10.0.2.104 54523 <-> 76.187.122.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:31.762978 0.471578 udp 10.0.2.104 54523 <-> 190.206.231.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:32.768004 0.000000 udp 10.0.2.104 54523 -> 109.53.229.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:33.757992 0.232139 udp 10.0.2.104 54523 <-> 186.95.67.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:34.757818 0.022103 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:35.758804 0.000000 udp 10.0.2.104 54523 -> 89.73.207.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:36.760044 1.283920 udp 10.0.2.104 54523 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:37.761900 0.054709 udp 10.0.2.104 54523 <-> 136.169.21.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:38.763024 0.225220 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:39.764392 0.051739 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:40.756026 0.000000 udp 10.0.2.104 54523 -> 105.235.31.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:41.757506 0.410959 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:42.758962 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:43.760129 0.753752 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:44.420533 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:08:44.762007 0.000000 udp 10.0.2.104 54523 -> 85.1.111.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:45.763071 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:46.765002 4.996875 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 4 1064 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:47.756306 0.055782 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:49.758829 0.257999 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:50.760390 0.000000 udp 10.0.2.104 54523 -> 41.133.140.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:08:52.762992 0.372145 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:53.764428 0.364517 udp 10.0.2.104 54523 <-> 201.211.121.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:54.755857 0.238545 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:55.757275 0.078242 udp 10.0.2.104 54523 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:56.758925 0.156564 udp 10.0.2.104 54523 <-> 24.154.41.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:57.760409 1.294634 udp 10.0.2.104 54523 <-> 116.202.123.195 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:58.762074 0.134722 udp 10.0.2.104 54523 <-> 69.121.211.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:08:59.762974 0.159759 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:00.764640 0.776944 udp 10.0.2.104 54523 <-> 184.63.28.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:01.755973 0.179817 udp 10.0.2.104 54523 <-> 140.193.57.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:02.757355 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:09:03.758979 0.060785 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:04.760330 0.120005 udp 10.0.2.104 54523 <-> 78.251.171.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:05.761544 0.150260 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:06.763217 0.602443 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:07.754540 3.160041 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:08.756262 0.212957 udp 10.0.2.104 54523 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:09.757839 0.143944 udp 10.0.2.104 54523 <-> 184.57.25.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:11.760581 1.367168 udp 10.0.2.104 54523 <-> 190.198.137.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:12.762159 0.158491 udp 10.0.2.104 54523 <-> 65.93.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:13.763030 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:09:14.754673 0.000000 udp 10.0.2.104 54523 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:09:15.756280 0.334112 udp 10.0.2.104 54523 <-> 119.157.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:16.757350 0.255197 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:17.758850 0.080150 udp 10.0.2.104 54523 <-> 88.222.170.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:18.760373 0.265914 udp 10.0.2.104 54523 <-> 201.211.121.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:19.761922 0.564289 udp 10.0.2.104 54523 <-> 190.17.37.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:20.763615 0.048708 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:21.754713 0.326662 udp 10.0.2.104 54523 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:22.756229 0.000000 udp 10.0.2.104 54523 -> 78.45.223.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:09:23.757824 0.052452 udp 10.0.2.104 54523 <-> 213.190.57.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:24.759287 3.819323 udp 10.0.2.104 54523 <-> 96.44.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:25.760287 0.155264 udp 10.0.2.104 54523 <-> 1.186.124.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:26.762334 0.056167 udp 10.0.2.104 54523 <-> 94.177.14.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:27.763239 0.151251 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:28.754876 1.423713 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:29.756337 0.271568 udp 10.0.2.104 54523 <-> 201.208.196.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:30.757741 0.109516 udp 10.0.2.104 54523 <-> 90.231.116.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:31.418759 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:09:31.758972 0.207400 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:32.760570 0.039113 udp 10.0.2.104 54523 <-> 178.79.27.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:33.762361 1.206330 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:34.763253 0.320789 udp 10.0.2.104 54523 <-> 87.10.29.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:35.754907 0.244146 udp 10.0.2.104 54523 <-> 187.247.105.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:36.756332 0.646482 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:37.757313 0.052365 udp 10.0.2.104 54523 <-> 217.10.134.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:38.759207 0.260887 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:39.760675 0.000000 udp 10.0.2.104 54523 -> 220.239.112.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:09:40.767736 0.907431 udp 10.0.2.104 54523 <-> 173.230.174.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:41.766815 3.020151 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:42.756243 2.229735 udp 10.0.2.104 54523 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:43.756671 0.149072 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:45.759361 2.002919 udp 10.0.2.104 54523 -> 71.77.141.55 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:09:46.760665 0.030382 udp 10.0.2.104 54523 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:48.763459 0.058876 udp 10.0.2.104 54523 <-> 5.15.195.36 16464 CON 0 0 7 5398 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:49.755001 0.160716 udp 10.0.2.104 54523 <-> 107.10.72.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:50.756306 0.000000 udp 10.0.2.104 54523 -> 76.110.62.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:09:51.758344 0.054249 udp 10.0.2.104 54523 <-> 85.229.221.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:52.759234 0.217993 udp 10.0.2.104 54523 <-> 201.132.213.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:53.760761 0.821721 udp 10.0.2.104 54523 <-> 198.45.191.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:54.762314 0.055428 udp 10.0.2.104 54523 <-> 94.177.14.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:55.763628 0.357547 udp 10.0.2.104 54523 <-> 125.128.173.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:56.754953 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:09:57.756384 3.338026 udp 10.0.2.104 54523 <-> 177.192.55.19 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:09:59.759465 2.188444 udp 10.0.2.104 54523 <-> 186.188.24.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:01.762222 0.000000 udp 10.0.2.104 54523 -> 190.52.44.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:02.763795 0.035581 udp 10.0.2.104 54523 <-> 188.142.191.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:03.755132 1.122718 udp 10.0.2.104 54523 <-> 72.242.83.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:04.757004 0.000000 udp 10.0.2.104 54523 -> 201.0.15.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:05.758377 3.361989 udp 10.0.2.104 54523 <-> 97.107.107.80 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:06.759281 0.132035 udp 10.0.2.104 54523 <-> 79.49.174.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:07.760938 0.155570 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:09.763627 0.084345 udp 10.0.2.104 54523 <-> 87.53.130.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:10.755075 0.499122 udp 10.0.2.104 54523 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:11.757098 0.148505 udp 10.0.2.104 54523 <-> 75.190.183.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:12.758545 0.162670 udp 10.0.2.104 54523 <-> 70.92.245.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:13.759403 3.330554 udp 10.0.2.104 54523 <-> 190.73.186.63 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:14.761140 0.164602 udp 10.0.2.104 54523 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:15.762615 0.196645 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:17.757822 0.065786 udp 10.0.2.104 54523 <-> 195.228.131.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:18.417826 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:10:18.758073 0.227958 udp 10.0.2.104 54523 <-> 190.39.135.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:19.758159 0.058710 udp 10.0.2.104 54523 <-> 5.15.162.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:20.759674 0.069465 udp 10.0.2.104 54523 <-> 81.190.211.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:21.760955 0.051879 udp 10.0.2.104 54523 <-> 92.36.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:22.762752 0.181296 udp 10.0.2.104 54523 <-> 65.28.83.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:23.768228 0.327212 udp 10.0.2.104 54523 <-> 27.106.63.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:24.758038 0.155582 udp 10.0.2.104 54523 <-> 62.18.106.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:25.758025 1.226675 udp 10.0.2.104 54523 <-> 76.178.38.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:27.760432 0.104254 udp 10.0.2.104 54523 <-> 176.73.209.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:28.760870 0.174047 udp 10.0.2.104 54523 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:29.762848 0.054621 udp 10.0.2.104 54523 <-> 84.195.90.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:30.764126 0.309778 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:31.756290 0.074714 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:32.757492 0.000000 udp 10.0.2.104 54523 -> 84.118.201.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:33.758375 0.148808 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:34.759725 0.176017 udp 10.0.2.104 54523 <-> 1.186.127.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:35.761657 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:36.762520 0.171387 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:37.764082 0.000000 udp 10.0.2.104 54523 -> 109.0.152.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:38.755462 0.706722 udp 10.0.2.104 54523 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:39.756867 1.001597 udp 10.0.2.104 54523 <-> 97.102.73.130 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:41.760271 0.068346 udp 10.0.2.104 54523 <-> 78.72.59.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:42.761038 0.241443 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:43.762959 0.000000 udp 10.0.2.104 54523 -> 85.204.248.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:44.764268 0.000000 udp 10.0.2.104 54523 -> 98.166.225.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:45.756088 0.088373 udp 10.0.2.104 54523 <-> 84.237.172.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:46.757477 0.041571 udp 10.0.2.104 54523 <-> 87.97.246.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:47.758364 0.212037 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:48.759947 0.000000 udp 10.0.2.104 54523 -> 190.110.186.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:49.761777 0.150941 udp 10.0.2.104 54523 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:50.762761 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:51.764258 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:52.755886 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:53.757039 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:54.759024 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:55.760006 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:56.761505 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:57.762854 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:10:58.764650 0.748564 udp 10.0.2.104 54523 <-> 1.186.113.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:10:59.755744 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:00.757172 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:01.760570 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:02.760539 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:03.761407 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:04.762990 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:05.413419 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:11:06.756361 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:07.757850 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:08.758705 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:09.760068 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:10.761644 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:11.763177 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:12.764702 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:12.764813 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:11:13.756110 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:14.757448 0.086108 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:15.758809 0.000000 udp 10.0.2.104 54523 -> 201.242.45.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:16.760140 0.188743 udp 10.0.2.104 54523 <-> 49.206.17.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:17.762030 0.710718 udp 10.0.2.104 54523 <-> 213.133.17.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:18.763388 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:19.764499 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:20.756120 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:21.757231 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:22.758954 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:23.760278 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:24.761669 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:25.763764 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:26.764984 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:27.756198 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:29.759198 0.214316 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:30.760421 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:31.761691 0.130577 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:32.763695 0.767533 udp 10.0.2.104 54523 <-> 213.133.17.151 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:33.764542 0.000000 udp 10.0.2.104 54523 -> 114.24.22.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:34.755906 0.135181 udp 10.0.2.104 54523 <-> 207.180.74.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:35.757368 0.226887 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:36.759060 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:37.760557 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:38.761864 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:39.763393 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:40.754687 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:41.756479 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:42.757541 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:43.759049 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:43.759126 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:11:44.760729 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:45.762028 0.000000 udp 10.0.2.104 54523 -> 88.232.230.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:46.763593 0.343988 udp 10.0.2.104 54523 <-> 114.24.22.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:47.754751 0.000000 udp 10.0.2.104 54523 -> 111.119.245.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:48.756508 0.322855 udp 10.0.2.104 54523 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:49.758156 0.071978 udp 10.0.2.104 54523 <-> 128.71.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:50.759137 0.000000 udp 10.0.2.104 54523 -> 152.66.219.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:11:51.760567 0.138480 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:52.421265 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:11:52.762152 0.176451 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:53.763387 0.167069 udp 10.0.2.104 54523 <-> 66.190.120.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:54.754628 0.054529 udp 10.0.2.104 54523 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:55.756221 1.253117 udp 10.0.2.104 54523 <-> 190.254.197.42 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:57.759053 0.049480 udp 10.0.2.104 54523 <-> 78.96.104.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:58.760783 0.178546 udp 10.0.2.104 54523 <-> 106.51.51.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:11:59.762344 0.442477 udp 10.0.2.104 54523 <-> 88.236.248.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:00.763515 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:01.754893 0.344580 udp 10.0.2.104 54523 <-> 218.173.72.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:02.756246 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:03.757786 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:04.758915 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:05.760272 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:06.762545 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:07.763301 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:08.754969 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:09.756465 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:10.758349 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:11.758918 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:12.760579 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:13.762328 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:14.763802 4.996833 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:15.754974 0.000105 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:15.755079 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:12:17.758387 0.000000 udp 10.0.2.104 54523 -> 24.232.163.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:18.759620 0.356031 udp 10.0.2.104 54523 <-> 218.173.72.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:20.762112 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:21.763413 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:22.754929 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:23.756530 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:24.758352 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:25.759264 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:26.760647 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:27.762574 0.295852 udp 10.0.2.104 54523 <-> 24.232.163.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:28.763885 0.343635 udp 10.0.2.104 54523 <-> 14.99.71.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:29.754980 0.132919 udp 10.0.2.104 54523 <-> 24.57.20.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:30.756448 0.221761 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:31.758550 0.393742 udp 10.0.2.104 54523 <-> 70.184.95.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:32.759281 0.326128 udp 10.0.2.104 54523 <-> 14.98.192.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:33.760777 0.083858 udp 10.0.2.104 54523 <-> 178.79.27.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:34.762764 0.000000 udp 10.0.2.104 54523 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:35.764060 0.055142 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:36.755428 0.717694 udp 10.0.2.104 54523 <-> 37.63.209.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:37.756877 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:38.758717 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:39.418312 0.000133 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:12:39.759623 0.011552 udp 10.0.2.104 54523 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:40.760902 0.386777 udp 10.0.2.104 54523 <-> 178.26.138.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:41.762901 0.333453 udp 10.0.2.104 54523 <-> 190.173.98.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:42.764294 0.282690 udp 10.0.2.104 54523 <-> 201.95.31.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:43.755218 2.003433 udp 10.0.2.104 54523 -> 37.123.35.148 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:44.756648 3.159337 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:46.759420 0.325956 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:48.762725 0.138986 udp 10.0.2.104 54523 <-> 203.187.213.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:49.764106 0.223671 udp 10.0.2.104 54523 <-> 200.82.151.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:50.027254 3.001160 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:12:50.755391 0.138019 udp 10.0.2.104 54523 <-> 85.130.182.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:51.757421 0.210716 udp 10.0.2.104 54523 <-> 75.63.54.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:52.758285 0.314469 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:53.759354 0.142355 udp 10.0.2.104 54523 <-> 209.195.123.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:54.761037 0.151062 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:55.762747 0.061836 udp 10.0.2.104 54523 <-> 213.100.250.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:56.764354 0.123422 udp 10.0.2.104 54523 <-> 178.66.63.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:57.034586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:12:57.755319 0.000000 udp 10.0.2.104 54523 -> 96.37.19.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:12:58.756914 0.148981 udp 10.0.2.104 54523 <-> 65.28.245.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:12:59.758746 0.000000 udp 10.0.2.104 54523 -> 179.91.219.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:00.759923 0.162932 udp 10.0.2.104 54523 <-> 98.219.90.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:01.761258 0.312366 udp 10.0.2.104 54523 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:02.762458 0.131017 udp 10.0.2.104 54523 <-> 98.204.116.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:03.764230 0.078945 udp 10.0.2.104 54523 <-> 46.72.172.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:04.755686 0.066276 udp 10.0.2.104 54523 <-> 85.230.179.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:05.036381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:13:05.756883 0.000120 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:05.757003 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:13:06.758371 0.122415 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:07.759490 0.044249 udp 10.0.2.104 54523 <-> 77.76.177.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:08.762003 0.324062 udp 10.0.2.104 54523 <-> 14.98.61.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:09.763157 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:10.764230 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:11.756368 0.093246 udp 10.0.2.104 54523 <-> 151.74.93.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:12.757285 0.000000 udp 10.0.2.104 54523 -> 76.11.8.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:13.758347 0.352360 udp 10.0.2.104 54523 <-> 112.104.19.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:14.759540 0.000000 udp 10.0.2.104 54523 -> 2.68.20.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:15.764595 0.264629 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:16.764291 0.397248 udp 10.0.2.104 54523 <-> 181.186.247.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:17.764318 0.311382 udp 10.0.2.104 54523 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:18.755951 0.550077 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:19.756978 4.040573 udp 10.0.2.104 54523 <-> 109.199.149.91 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:21.038888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:13:21.760189 0.132279 udp 10.0.2.104 54523 <-> 77.126.103.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:22.761090 0.144153 udp 10.0.2.104 54523 <-> 65.24.58.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:24.764071 0.177338 udp 10.0.2.104 54523 <-> 76.107.45.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:25.755835 0.673233 udp 10.0.2.104 54523 <-> 200.126.150.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:26.416601 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:13:26.757351 0.156252 udp 10.0.2.104 54523 <-> 173.23.103.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:27.758396 0.038363 udp 10.0.2.104 54523 <-> 89.71.59.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:28.759906 0.545299 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:29.761548 0.138374 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:30.762576 0.150923 udp 10.0.2.104 54523 <-> 192.226.164.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:31.764412 0.227206 udp 10.0.2.104 54523 <-> 107.213.251.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:32.755822 0.281358 udp 10.0.2.104 54523 <-> 42.125.56.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:33.756980 0.000000 udp 10.0.2.104 54523 -> 78.182.21.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:34.758363 0.035855 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:35.760213 0.000000 udp 10.0.2.104 54523 -> 85.84.235.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:36.761390 3.915965 udp 10.0.2.104 54523 <-> 200.91.50.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:37.762520 0.045145 udp 10.0.2.104 54523 <-> 85.130.4.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:38.764370 0.462766 udp 10.0.2.104 54523 <-> 64.13.69.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:39.756185 1.724796 udp 10.0.2.104 54523 <-> 113.193.139.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:40.757173 0.074583 udp 10.0.2.104 54523 <-> 84.236.57.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:41.758465 0.146943 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:42.760274 0.094437 udp 10.0.2.104 54523 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:43.761638 0.074340 udp 10.0.2.104 54523 <-> 86.122.232.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:44.763025 0.000000 udp 10.0.2.104 54523 -> 88.135.201.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:45.764821 0.105349 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:46.756618 0.000000 udp 10.0.2.104 54523 -> 2.180.93.228 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:47.758793 0.313000 udp 10.0.2.104 54523 <-> 110.134.54.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:48.760945 0.000000 udp 10.0.2.104 54523 -> 46.35.110.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:49.762379 4.239634 udp 10.0.2.104 54523 <-> 190.198.137.68 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:50.766444 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:51.767347 0.252280 udp 10.0.2.104 54523 <-> 190.37.32.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:53.047856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:13:53.758059 0.000000 udp 10.0.2.104 54523 -> 180.215.199.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:54.758001 0.160688 udp 10.0.2.104 54523 <-> 74.142.131.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:55.758575 0.383168 udp 10.0.2.104 54523 <-> 201.210.193.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:56.760372 0.300014 udp 10.0.2.104 54523 <-> 110.132.54.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:57.761544 0.149705 udp 10.0.2.104 54523 <-> 71.80.67.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:13:58.776471 0.000000 udp 10.0.2.104 54523 -> 79.101.3.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:13:59.773823 0.170321 udp 10.0.2.104 54523 <-> 183.87.124.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:00.762524 1.996029 udp 10.0.2.104 54523 -> 189.214.10.102 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:01.761090 0.169111 udp 10.0.2.104 54523 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:03.760277 0.074370 udp 10.0.2.104 54523 <-> 213.164.122.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:04.761948 0.167785 udp 10.0.2.104 54523 <-> 70.83.12.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:05.763194 0.163532 udp 10.0.2.104 54523 <-> 68.187.152.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:06.764807 0.000000 udp 10.0.2.104 54523 -> 67.100.230.227 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:07.756359 0.131290 udp 10.0.2.104 54523 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:08.758044 0.153824 udp 10.0.2.104 54523 <-> 74.131.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:09.759231 0.000000 udp 10.0.2.104 54523 -> 68.225.217.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:10.760345 0.021349 udp 10.0.2.104 54523 <-> 159.149.85.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:11.761772 0.262763 udp 10.0.2.104 54523 <-> 2.185.118.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:12.762969 2.102305 udp 10.0.2.104 54523 <-> 82.233.157.185 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:13.414070 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:14:13.754718 0.101791 udp 10.0.2.104 54523 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:15.758989 0.176914 udp 10.0.2.104 54523 <-> 74.12.109.132 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:16.758964 0.151524 udp 10.0.2.104 54523 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:17.760478 0.157415 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:18.762105 0.173326 udp 10.0.2.104 54523 <-> 70.30.90.88 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:19.763258 0.061053 udp 10.0.2.104 54523 <-> 213.64.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:20.754727 0.160303 udp 10.0.2.104 54523 <-> 97.68.127.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:21.756562 1.850022 udp 10.0.2.104 54523 <-> 182.188.192.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:23.758857 0.000000 udp 10.0.2.104 54523 -> 125.16.73.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:24.760375 0.271179 udp 10.0.2.104 54523 <-> 58.11.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:25.761905 0.208934 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:26.763882 0.221920 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:27.757831 0.399557 udp 10.0.2.104 54523 <-> 190.245.135.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:28.757841 0.201446 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:29.758068 0.182949 udp 10.0.2.104 54523 <-> 71.91.45.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:30.759419 0.251351 udp 10.0.2.104 54523 <-> 200.84.142.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:31.760448 0.444167 udp 10.0.2.104 54523 <-> 64.110.249.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:32.762568 1.171382 udp 10.0.2.104 54523 <-> 24.182.105.127 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:34.755183 0.000000 udp 10.0.2.104 54523 -> 90.130.133.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:35.756608 0.061929 udp 10.0.2.104 54523 <-> 86.122.238.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:36.758362 0.000000 udp 10.0.2.104 54523 -> 151.238.233.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:37.759102 0.607348 udp 10.0.2.104 54523 <-> 14.96.204.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:38.760483 0.162950 udp 10.0.2.104 54523 <-> 76.123.228.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:39.762105 0.793019 udp 10.0.2.104 54523 <-> 115.242.122.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:40.763342 0.178791 udp 10.0.2.104 54523 <-> 98.165.79.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:41.754974 0.189789 udp 10.0.2.104 54523 <-> 88.149.170.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:42.756171 0.000000 udp 10.0.2.104 54523 -> 179.98.253.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:43.757542 0.428810 udp 10.0.2.104 54523 <-> 190.185.220.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:44.761874 0.224864 udp 10.0.2.104 54523 <-> 186.95.110.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:45.762819 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:46.763805 2.068123 udp 10.0.2.104 54523 <-> 88.129.222.153 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:47.764782 0.000000 udp 10.0.2.104 54523 -> 182.74.40.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:49.756240 0.163940 udp 10.0.2.104 54523 <-> 12.39.137.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:50.758336 3.058868 udp 10.0.2.104 54523 <-> 91.112.150.234 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:51.759170 0.000000 udp 10.0.2.104 54523 -> 178.150.91.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:14:52.760569 0.055222 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:54.763493 0.257431 udp 10.0.2.104 54523 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:55.754853 0.141730 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:56.757027 0.172803 udp 10.0.2.104 54523 <-> 107.10.65.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:57.758165 0.153099 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:14:59.760737 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:00.421751 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:15:00.762304 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:00.762400 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:15:01.763856 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:02.755210 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:03.756782 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:04.758325 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:05.759375 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:06.760910 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:07.762378 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:08.766108 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:09.757452 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:10.757976 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:11.758060 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:12.759202 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:13.761289 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:14.762501 0.000000 udp 10.0.2.104 54523 -> 66.63.76.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:15.764121 0.387673 udp 10.0.2.104 54523 <-> 190.79.50.14 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:15:16.755122 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:17.757052 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:18.758315 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:19.759617 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:20.760969 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:22.764317 0.053626 udp 10.0.2.104 54523 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:15:23.755158 0.247562 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:15:24.756650 0.115211 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:15:25.758391 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:26.759585 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:28.762847 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:28.762927 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:15:29.763878 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:30.755486 0.326075 udp 10.0.2.104 54523 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:15:31.756930 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:32.758223 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:33.759820 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:34.761026 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:35.763036 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:37.755749 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:38.757104 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:39.758482 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:40.759529 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:41.760872 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:42.763045 0.157954 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:15:43.764507 0.051671 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:15:44.755439 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:45.757113 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:46.758676 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:47.419056 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:15:47.760037 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:48.760924 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:49.762281 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:51.755817 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:52.756991 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:53.758216 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:54.759831 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:54.759904 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:15:55.761275 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:56.762950 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:57.764304 0.298362 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:15:58.755403 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:15:59.757033 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:00.758362 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:01.759721 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:02.761303 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:03.762685 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:04.767900 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:05.757974 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:06.758103 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:07.758385 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:09.762038 0.000098 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:09.762136 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:16:10.762739 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:11.764283 0.250387 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:12.756239 0.377504 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:13.757825 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:14.758416 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:15.760241 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:16.761573 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:17.762963 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:18.764245 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:19.755904 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:20.757375 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:22.759973 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:23.762478 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:24.763028 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:25.764430 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:25.764525 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:16:26.756070 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:27.757943 0.183892 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:28.764483 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:29.764811 0.000000 udp 10.0.2.104 54523 -> 186.94.17.11 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:30.766384 0.346961 udp 10.0.2.104 54523 <-> 111.254.184.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:31.767024 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:32.768097 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:33.758347 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:34.418276 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:16:34.758201 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:35.758932 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:36.760479 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:38.768318 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:39.768174 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:40.758073 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:41.758149 0.000090 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:41.758239 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:16:42.758978 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:43.760468 2.002763 udp 10.0.2.104 54523 -> 186.94.17.11 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:44.761792 0.356019 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:46.754599 0.236862 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:47.756371 0.068550 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:48.757477 0.000000 udp 10.0.2.104 54523 -> 49.107.6.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:49.758897 0.141800 udp 10.0.2.104 54523 <-> 37.190.195.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:51.762259 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:52.763126 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:53.755097 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:54.757990 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:54.758064 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:16:55.758084 4.996882 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:56.759157 0.068624 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:57.760324 0.159134 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:16:58.762069 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:16:59.763334 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:01.756511 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:02.758029 0.360092 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:03.759107 0.169625 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:04.760272 0.352617 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:05.762044 0.144559 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:06.763665 0.165585 udp 10.0.2.104 54523 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:07.754840 0.025910 udp 10.0.2.104 54523 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:08.756409 0.000000 udp 10.0.2.104 54523 -> 71.203.5.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:09.757762 0.448538 udp 10.0.2.104 54523 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:10.759065 0.032142 udp 10.0.2.104 54523 <-> 178.79.27.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:11.760562 0.141978 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:12.761936 0.296654 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:13.763205 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:14.754705 0.000000 udp 10.0.2.104 54523 -> 115.241.171.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:15.756767 0.034731 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:16.757915 0.085072 udp 10.0.2.104 54523 <-> 79.49.174.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:17.759224 0.156131 udp 10.0.2.104 54523 <-> 69.118.76.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:18.760743 0.290688 udp 10.0.2.104 54523 <-> 87.6.66.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:19.762573 0.494786 udp 10.0.2.104 54523 <-> 75.214.226.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:20.763718 0.065186 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:21.414465 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:17:21.754776 4.005650 udp 10.0.2.104 54523 -> 190.79.124.245 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:22.757134 0.267932 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:23.758099 0.141481 udp 10.0.2.104 54523 <-> 75.185.186.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:24.759128 0.000000 udp 10.0.2.104 54523 -> 5.13.57.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:26.762264 0.064267 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:27.451264 0.000000 udp 10.0.2.104 54523 <- 190.79.124.245 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:27.763485 0.051778 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:28.755050 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:29.757336 1.253513 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:31.759204 0.292563 udp 10.0.2.104 54523 <-> 60.47.222.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:32.760640 2.128742 udp 10.0.2.104 54523 <-> 187.18.249.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:33.762366 0.279961 udp 10.0.2.104 54523 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:34.763788 0.086223 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:35.755140 0.000000 udp 10.0.2.104 54523 -> 2.176.37.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:36.757313 0.000000 udp 10.0.2.104 54523 -> 114.51.132.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:37.758042 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:38.759365 0.555417 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:39.760964 0.742230 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:40.762716 0.000000 udp 10.0.2.104 54523 -> 187.18.249.249 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:41.764048 0.048812 udp 10.0.2.104 54523 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:42.755073 0.086335 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:43.756968 0.000000 udp 10.0.2.104 54523 -> 24.159.153.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:44.758281 0.518137 udp 10.0.2.104 54523 <-> 189.110.82.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:45.759286 0.034659 udp 10.0.2.104 54523 <-> 158.181.66.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:46.761208 4.997155 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:47.762474 1.992526 udp 10.0.2.104 54523 <-> 111.242.5.146 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:48.763903 0.000000 udp 10.0.2.104 54523 -> 2.176.37.80 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:50.756803 0.364151 udp 10.0.2.104 54523 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:51.916488 0.000000 udp 10.0.2.104 54523 <- 50.158.209.132 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:52.759433 0.141366 udp 10.0.2.104 54523 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:53.760914 0.355794 udp 10.0.2.104 54523 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:54.762336 0.000000 udp 10.0.2.104 54523 -> 84.224.192.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:17:55.764275 0.142432 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:56.755524 0.159814 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:57.756733 0.141112 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:58.758372 0.144567 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:17:59.759456 0.163671 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:00.761285 1.054472 udp 10.0.2.104 54523 <-> 95.168.240.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:02.763972 1.423938 udp 10.0.2.104 54523 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:03.755375 0.000000 udp 10.0.2.104 54523 -> 176.199.74.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:04.758180 0.030294 udp 10.0.2.104 54523 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:05.759036 0.075021 udp 10.0.2.104 54523 <-> 5.12.237.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:06.759449 0.000000 udp 10.0.2.104 54523 -> 91.120.99.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:07.760900 0.174031 udp 10.0.2.104 54523 <-> 173.23.208.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:08.422158 0.000103 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:18:08.762596 0.347054 udp 10.0.2.104 54523 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:09.764306 0.411861 udp 10.0.2.104 54523 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:10.756196 0.028692 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:11.757271 0.000000 udp 10.0.2.104 54523 -> 95.42.253.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:12.758368 0.789559 udp 10.0.2.104 54523 <-> 1.186.189.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:13.765054 0.000000 udp 10.0.2.104 54523 -> 66.186.245.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:14.764967 0.267638 udp 10.0.2.104 54523 <-> 117.207.154.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:15.766165 0.059221 udp 10.0.2.104 54523 <-> 31.11.215.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:16.765473 0.161576 udp 10.0.2.104 54523 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:17.756498 0.151551 udp 10.0.2.104 54523 <-> 72.23.159.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:18.756999 0.139740 udp 10.0.2.104 54523 <-> 24.151.86.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:19.758187 0.288607 udp 10.0.2.104 54523 <-> 190.198.144.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:20.759608 0.180138 udp 10.0.2.104 54523 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:21.761181 0.125945 udp 10.0.2.104 54523 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:22.762599 0.140770 udp 10.0.2.104 54523 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:23.764032 0.061174 udp 10.0.2.104 54523 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:24.755443 0.065619 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:25.757159 1.468955 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:26.758676 0.284277 udp 10.0.2.104 54523 <-> 186.94.231.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:27.759831 0.205448 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:28.761326 0.207647 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:29.762982 0.129751 udp 10.0.2.104 54523 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:30.764409 0.154030 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:31.755902 0.000000 udp 10.0.2.104 54523 -> 41.211.70.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:32.757241 0.000000 udp 10.0.2.104 54523 -> 142.166.235.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:33.758610 0.179753 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:34.759958 0.151818 udp 10.0.2.104 54523 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:35.761154 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:36.763283 0.000000 udp 10.0.2.104 54523 -> 89.253.133.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:37.764018 0.065025 udp 10.0.2.104 54523 <-> 80.238.126.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:38.756425 1.214326 udp 10.0.2.104 54523 <-> 76.90.73.101 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:40.758764 0.052673 udp 10.0.2.104 54523 <-> 188.173.49.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:41.760004 0.000000 udp 10.0.2.104 54523 -> 72.0.251.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:42.761461 0.154197 udp 10.0.2.104 54523 <-> 75.115.30.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:43.762616 0.158241 udp 10.0.2.104 54523 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:44.764140 0.184183 udp 10.0.2.104 54523 <-> 173.22.218.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:45.756099 0.135984 udp 10.0.2.104 54523 <-> 24.229.228.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:46.757281 0.142889 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:47.759409 0.065700 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:48.760272 0.000000 udp 10.0.2.104 54523 -> 204.187.93.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:49.761192 0.000000 udp 10.0.2.104 54523 -> 115.241.171.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:50.762967 0.054571 udp 10.0.2.104 54523 <-> 95.43.101.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:51.764445 0.053241 udp 10.0.2.104 54523 <-> 89.137.133.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:52.756056 0.113128 udp 10.0.2.104 54523 <-> 82.56.138.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:53.757903 0.173417 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:54.758857 0.150934 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:55.419024 0.000125 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:18:55.760178 0.262815 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:56.761555 0.122583 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:57.762849 0.068983 udp 10.0.2.104 54523 <-> 188.27.119.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:18:58.764697 0.000000 udp 10.0.2.104 54523 -> 178.21.51.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:18:59.755823 0.318519 udp 10.0.2.104 54523 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:00.757964 0.000000 udp 10.0.2.104 54523 -> 190.49.14.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:01.758996 0.211898 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:02.760134 0.300000 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:03.762150 1.561141 udp 10.0.2.104 54523 <-> 61.27.135.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:04.762834 0.352356 udp 10.0.2.104 54523 <-> 183.179.52.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:05.764675 0.062618 udp 10.0.2.104 54523 <-> 95.27.8.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:06.756431 3.155650 udp 10.0.2.104 54523 <-> 209.33.123.143 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:07.757803 0.159751 udp 10.0.2.104 54523 <-> 46.189.197.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:08.758705 0.164983 udp 10.0.2.104 54523 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:10.762382 0.061785 udp 10.0.2.104 54523 <-> 89.40.192.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:11.762990 0.135089 udp 10.0.2.104 54523 <-> 79.117.151.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:12.372639 0.000000 udp 10.0.2.104 54523 <- 209.33.123.143 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:12.764453 0.000000 udp 10.0.2.104 54523 -> 177.180.127.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:13.756273 0.156199 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:14.757367 0.070496 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:15.758926 0.079594 udp 10.0.2.104 54523 <-> 188.27.46.40 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:16.760484 0.000160 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:16.760644 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:19:17.762551 1.653997 arp 10.0.2.104 who 169.254.90.254 INT 3 126 flow=Background-ARP 1970/01/01 10:19:18.766345 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:19.756719 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:20.758166 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:21.758233 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:22.758807 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:23.760372 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:24.761929 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:25.763040 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:26.754679 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:27.756062 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:28.758229 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:29.758872 4.997177 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:30.760284 0.051540 udp 10.0.2.104 54523 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:31.762191 0.070281 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:32.763922 0.000110 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:32.764032 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:19:33.754887 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:34.816268 3.003816 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:35.757906 0.216660 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:36.759215 0.093799 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:38.761885 0.302004 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:39.763558 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:40.755027 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:41.756371 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:42.417181 0.000137 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:19:42.757626 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:43.759200 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:44.760327 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:45.762191 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:46.763215 0.129003 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:47.754692 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:48.756116 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:49.757821 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:50.758922 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:51.760440 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:52.762806 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:53.763818 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:54.754920 0.190077 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:55.756240 0.426199 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:56.758342 0.000000 udp 10.0.2.104 54523 -> 109.122.73.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:57.050643 3.001885 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:19:57.759166 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:19:58.760746 0.411179 udp 10.0.2.104 54523 <-> 46.248.34.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:19:59.762070 0.047045 udp 10.0.2.104 54523 <-> 84.40.69.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:00.763521 0.632961 udp 10.0.2.104 54523 <-> 190.190.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:01.755370 0.000000 udp 10.0.2.104 54523 -> 24.101.81.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:02.756758 0.140289 udp 10.0.2.104 54523 <-> 71.199.116.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:03.757871 0.184869 udp 10.0.2.104 54523 <-> 207.180.74.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:04.058202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:20:04.759317 0.287635 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:05.760861 0.000000 udp 10.0.2.104 54523 -> 67.59.37.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:06.762260 0.157789 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:07.763737 0.055021 udp 10.0.2.104 54523 <-> 188.121.26.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:08.754843 0.514476 udp 10.0.2.104 54523 <-> 187.83.142.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:09.756662 0.157318 udp 10.0.2.104 54523 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:10.758117 0.472287 udp 10.0.2.104 54523 <-> 75.211.149.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:11.759188 0.000154 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:11.759342 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:20:12.059818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:20:12.760951 0.000000 udp 10.0.2.104 54523 -> 76.226.213.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:13.762620 0.000000 udp 10.0.2.104 54523 -> 189.93.13.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:14.763868 0.068831 udp 10.0.2.104 54523 <-> 217.175.118.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:15.755189 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:16.756877 0.275160 udp 10.0.2.104 54523 <-> 75.221.131.74 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:17.758496 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:18.759701 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:19.760857 0.283322 udp 10.0.2.104 54523 <-> 75.248.206.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:20.762652 0.209942 udp 10.0.2.104 54523 <-> 76.166.193.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:21.763724 0.136571 udp 10.0.2.104 54523 <-> 24.190.212.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:22.427458 0.000000 udp 10.0.2.104 54523 <- 189.93.13.118 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:22.755151 0.521516 udp 10.0.2.104 54523 <-> 75.211.149.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:23.757519 0.065761 udp 10.0.2.104 54523 <-> 79.114.56.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:24.758027 0.161324 udp 10.0.2.104 54523 <-> 75.133.239.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:25.759487 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:26.760952 0.000104 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:26.761056 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:20:27.762536 2.994383 udp 10.0.2.104 54523 <-> 201.68.242.217 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:28.063152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:20:28.763615 0.160597 udp 10.0.2.104 54523 <-> 188.17.160.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:29.414658 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:20:29.755262 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:31.757916 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:32.759617 0.000000 udp 10.0.2.104 54523 -> 66.19.62.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:33.760925 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:34.762266 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:35.764010 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:36.755537 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:37.757817 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:38.758105 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:39.760022 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:40.760826 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:41.762554 4.996907 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:42.764000 0.000000 udp 10.0.2.104 54523 -> 179.175.230.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:43.755199 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:44.756870 0.162043 udp 10.0.2.104 54523 <-> 188.17.160.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:20:45.758287 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:47.760890 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:48.762710 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:49.764034 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:50.755454 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:51.756776 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:52.758780 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:53.760098 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:54.760892 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:55.762560 0.000000 udp 10.0.2.104 54523 -> 66.19.62.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:56.764257 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:57.756054 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:58.756824 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:20:58.756932 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:20:59.758812 0.299774 udp 10.0.2.104 54523 <-> 201.68.242.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:00.068977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:21:00.759872 0.157163 udp 10.0.2.104 54523 <-> 188.17.160.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:01.760934 0.443166 udp 10.0.2.104 54523 <-> 179.175.230.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:02.763348 0.138607 udp 10.0.2.104 54523 <-> 24.190.212.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:03.764084 0.682618 udp 10.0.2.104 54523 <-> 31.166.157.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:04.755797 0.167111 udp 10.0.2.104 54523 <-> 184.160.62.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:05.757511 0.107946 udp 10.0.2.104 54523 <-> 95.248.33.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:06.758357 0.173861 udp 10.0.2.104 54523 <-> 24.217.52.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:07.759678 0.192825 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:08.761774 0.354725 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:09.762726 0.000000 udp 10.0.2.104 54523 -> 98.177.241.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:10.764190 0.146343 udp 10.0.2.104 54523 <-> 216.36.152.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:11.755955 0.118960 udp 10.0.2.104 54523 <-> 84.229.39.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:12.757200 0.536003 udp 10.0.2.104 54523 <-> 2.190.235.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:13.758780 0.355721 udp 10.0.2.104 54523 <-> 179.175.230.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:14.760071 0.069437 udp 10.0.2.104 54523 <-> 79.132.77.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:15.761439 0.336261 udp 10.0.2.104 54523 <-> 186.10.30.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:16.422196 0.000160 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:21:16.762904 0.000000 udp 10.0.2.104 54523 -> 31.147.115.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:17.764223 0.163243 udp 10.0.2.104 54523 <-> 107.9.137.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:18.755651 0.247884 udp 10.0.2.104 54523 <-> 177.228.74.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:19.757235 1.167816 udp 10.0.2.104 54523 <-> 72.137.144.197 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:21.760251 0.152708 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:22.761489 1.135162 udp 10.0.2.104 54523 <-> 186.90.249.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:23.763198 0.262173 udp 10.0.2.104 54523 <-> 186.93.97.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:24.764306 1.256799 udp 10.0.2.104 54523 <-> 186.88.42.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:26.758063 0.000000 udp 10.0.2.104 54523 -> 14.97.19.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:27.758520 0.060285 udp 10.0.2.104 54523 <-> 94.156.86.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:28.760147 0.167556 udp 10.0.2.104 54523 <-> 67.11.181.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:29.761285 0.217277 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:30.763061 0.255713 udp 10.0.2.104 54523 <-> 190.206.37.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:31.764061 0.822601 udp 10.0.2.104 54523 <-> 116.75.42.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:32.756564 0.111189 udp 10.0.2.104 54523 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:33.757340 0.107164 udp 10.0.2.104 54523 <-> 109.182.87.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:34.758717 0.068658 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:35.760102 0.433619 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:36.761607 0.356989 udp 10.0.2.104 54523 <-> 111.250.219.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:37.762900 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:38.764806 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:39.762893 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:40.761403 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:41.759255 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:42.760298 0.000000 udp 10.0.2.104 54523 -> 189.103.84.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:43.762079 0.119765 udp 10.0.2.104 54523 <-> 80.116.10.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:44.762928 0.122098 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:45.764337 0.176191 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:46.756452 0.055826 udp 10.0.2.104 54523 <-> 79.115.87.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:47.758104 0.033532 udp 10.0.2.104 54523 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:48.759128 0.141695 udp 10.0.2.104 54523 <-> 24.184.71.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:49.760371 0.272789 udp 10.0.2.104 54523 <-> 189.61.212.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:50.761567 2.165347 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:51.763375 0.169520 udp 10.0.2.104 54523 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:53.756437 0.029645 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:54.757339 0.465865 udp 10.0.2.104 54523 <-> 201.209.247.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:55.759043 0.000000 udp 10.0.2.104 54523 -> 24.37.68.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:56.762382 0.000000 udp 10.0.2.104 54523 -> 212.108.245.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:21:57.762327 0.343019 udp 10.0.2.104 54523 <-> 111.246.102.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:58.764060 0.141382 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:21:59.754887 0.074359 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:00.756209 0.157445 udp 10.0.2.104 54523 <-> 69.140.208.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:01.757385 0.213668 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:02.759033 0.044351 udp 10.0.2.104 54523 <-> 77.76.177.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:03.419692 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:22:03.760468 0.182180 udp 10.0.2.104 54523 <-> 70.75.88.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:04.761788 0.000000 udp 10.0.2.104 54523 -> 171.78.192.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:05.763769 0.376966 udp 10.0.2.104 54523 <-> 186.91.145.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:06.754736 0.041364 udp 10.0.2.104 54523 <-> 83.84.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:07.756714 0.813819 udp 10.0.2.104 54523 <-> 184.63.14.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:08.757792 0.134417 udp 10.0.2.104 54523 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:09.759048 0.000000 udp 10.0.2.104 54523 -> 190.73.13.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:10.760484 0.168455 udp 10.0.2.104 54523 <-> 70.80.99.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:11.762461 0.000000 udp 10.0.2.104 54523 -> 151.29.151.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:12.763574 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:13.754964 0.194877 udp 10.0.2.104 54523 <-> 68.8.70.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:14.757178 0.053439 udp 10.0.2.104 54523 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:15.757979 0.321994 udp 10.0.2.104 54523 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:16.759394 0.000000 udp 10.0.2.104 54523 -> 109.182.230.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:17.760444 0.292835 udp 10.0.2.104 54523 <-> 126.86.87.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:18.762449 0.000000 udp 10.0.2.104 54523 -> 66.165.198.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:19.763650 0.066698 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:20.754687 0.143744 udp 10.0.2.104 54523 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:21.756930 0.000000 udp 10.0.2.104 54523 -> 118.169.130.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:22.758335 1.010982 udp 10.0.2.104 54523 <-> 190.55.128.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:23.759329 0.325718 udp 10.0.2.104 54523 <-> 117.206.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:24.760755 0.000000 udp 10.0.2.104 54523 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:25.761525 0.162203 udp 10.0.2.104 54523 <-> 66.30.24.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:26.763348 0.100308 udp 10.0.2.104 54523 <-> 88.169.89.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:27.754826 0.139882 udp 10.0.2.104 54523 <-> 68.197.121.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:28.756581 0.000000 udp 10.0.2.104 54523 -> 24.220.225.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:29.758157 0.159486 udp 10.0.2.104 54523 <-> 67.190.245.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:30.759187 0.137741 udp 10.0.2.104 54523 <-> 74.57.193.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:31.760997 0.044284 udp 10.0.2.104 54523 <-> 5.105.109.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:32.761495 0.153388 udp 10.0.2.104 54523 <-> 24.148.135.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:33.763410 2.321987 udp 10.0.2.104 54523 <-> 200.30.233.129 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:34.754806 0.040011 udp 10.0.2.104 54523 <-> 130.204.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:36.758081 0.000000 udp 10.0.2.104 54523 -> 173.199.217.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:37.759259 0.096223 udp 10.0.2.104 54523 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:38.760860 0.260681 udp 10.0.2.104 54523 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:39.762330 0.152017 udp 10.0.2.104 54523 <-> 216.81.125.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:40.763685 0.060839 udp 10.0.2.104 54523 <-> 81.190.233.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:41.754960 0.276742 udp 10.0.2.104 54523 <-> 179.209.249.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:42.756616 0.158391 udp 10.0.2.104 54523 <-> 111.125.203.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:43.758945 0.000000 udp 10.0.2.104 54523 -> 92.225.190.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:44.759359 0.000000 udp 10.0.2.104 54523 -> 94.244.102.91 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:45.763116 0.090402 udp 10.0.2.104 54523 <-> 88.174.239.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:46.764819 0.029043 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:47.765922 0.054068 udp 10.0.2.104 54523 <-> 85.231.33.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:48.756577 0.139507 udp 10.0.2.104 54523 <-> 71.85.48.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:49.758204 0.123857 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:50.417723 0.000140 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:22:50.758058 0.144882 udp 10.0.2.104 54523 <-> 67.189.167.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:51.759320 0.000000 udp 10.0.2.104 54523 -> 188.47.233.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:52.470437 0.011568 udp 10.0.2.104 54599 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 10:22:52.482323 0.000000 udp 10.0.2.104 54600 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:22:52.760797 0.042645 udp 10.0.2.104 54523 <-> 81.15.191.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:53.762262 0.121727 udp 10.0.2.104 54523 <-> 208.88.5.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:54.764097 0.050118 udp 10.0.2.104 54523 <-> 79.173.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:55.754974 0.096205 udp 10.0.2.104 54523 <-> 88.167.163.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:56.756524 2.511615 udp 10.0.2.104 54523 <-> 116.203.101.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:57.758378 0.089637 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:58.759474 0.011785 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:22:59.761098 0.964496 udp 10.0.2.104 54523 <-> 118.167.224.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:00.762244 0.233523 udp 10.0.2.104 54523 <-> 189.193.101.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:01.763962 0.161490 udp 10.0.2.104 54523 <-> 24.15.28.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:02.754631 0.120513 udp 10.0.2.104 54523 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:03.756357 0.073121 udp 10.0.2.104 54523 <-> 188.171.7.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:04.758404 0.176132 udp 10.0.2.104 54523 <-> 173.177.19.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:05.759346 0.147346 udp 10.0.2.104 54523 <-> 108.176.96.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:06.760950 0.173166 udp 10.0.2.104 54523 <-> 176.200.97.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:07.762431 0.142032 udp 10.0.2.104 54523 <-> 178.79.27.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:08.764058 0.159090 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:09.755268 0.061749 udp 10.0.2.104 54523 <-> 91.82.39.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:10.756601 0.206302 udp 10.0.2.104 54523 <-> 66.26.224.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:11.758107 0.353322 udp 10.0.2.104 54523 <-> 187.10.81.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:12.759439 0.299648 udp 10.0.2.104 54523 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:13.761161 0.000000 udp 10.0.2.104 54523 -> 179.109.142.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:14.762820 0.351959 udp 10.0.2.104 54523 <-> 117.196.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:15.768074 0.119406 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:16.757412 0.146281 udp 10.0.2.104 54523 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:17.758160 1.002558 udp 10.0.2.104 54523 <-> 37.123.3.59 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:19.760458 0.141634 udp 10.0.2.104 54523 <-> 77.106.75.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:20.761283 0.350807 udp 10.0.2.104 54523 <-> 114.39.150.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:21.762624 0.054949 udp 10.0.2.104 54523 <-> 95.180.111.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:22.763978 0.293907 udp 10.0.2.104 54523 <-> 95.252.151.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:23.756164 0.147398 udp 10.0.2.104 54523 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:24.757846 0.214051 udp 10.0.2.104 54523 <-> 186.91.104.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:25.758051 0.000000 udp 10.0.2.104 54523 -> 24.207.57.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:26.759713 0.160071 udp 10.0.2.104 54523 <-> 24.154.41.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:27.761101 0.163639 udp 10.0.2.104 54523 <-> 66.72.190.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:28.762773 1.160056 udp 10.0.2.104 54523 <-> 50.128.173.120 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:30.755413 0.391781 udp 10.0.2.104 54523 <-> 190.198.162.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:31.757208 0.369426 udp 10.0.2.104 54523 <-> 186.36.70.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:32.758610 0.000099 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:32.758709 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:23:33.760003 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:34.761578 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:35.762650 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:36.764291 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:37.758817 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:38.418849 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:23:38.759090 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:39.758578 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:40.759375 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:41.761331 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:42.762672 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:43.763944 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:44.755981 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:45.756864 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:46.759107 0.193345 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:23:47.759892 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:48.761620 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:50.764516 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:51.756558 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:52.757616 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:53.758314 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:54.760235 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:55.761322 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:56.762907 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:57.764208 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:58.756123 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:23:59.756958 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:00.759199 0.000197 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:00.759396 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:24:01.760106 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:02.762146 0.216671 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:03.762906 0.188435 udp 10.0.2.104 54523 <-> 77.45.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:04.764785 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:05.755779 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:06.757346 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:07.758904 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:09.761650 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:10.763047 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:11.764743 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:12.756132 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:13.758057 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:14.758899 0.000100 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:14.758999 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:24:15.760208 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:16.761904 0.064027 udp 10.0.2.104 54523 <-> 77.78.219.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:17.763128 0.119621 udp 10.0.2.104 54523 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:18.764979 0.000000 udp 10.0.2.104 54523 -> 105.235.31.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:19.755961 0.316262 udp 10.0.2.104 54523 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:20.757405 0.000000 udp 10.0.2.104 54523 -> 199.167.165.34 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:21.759081 0.159030 udp 10.0.2.104 54523 -> 198.211.209.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:21.918111 0.000000 icmp 198.211.209.66 0x0d03 -> 10.0.2.104 0x0000 URFIL 192 1 70 flow=Background 1970/01/01 10:24:22.763036 0.163665 udp 10.0.2.104 54523 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:23.763299 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:24.764683 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:25.413822 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:24:25.755346 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:26.759048 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:27.758964 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:28.759034 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:29.762300 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:30.763088 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:31.764517 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:32.755241 0.000000 udp 10.0.2.104 54523 -> 208.101.81.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:33.756040 1.200725 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:35.759242 0.000000 udp 10.0.2.104 54523 -> 106.79.170.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:36.760361 0.000000 udp 10.0.2.104 54523 -> 105.235.31.5 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:37.761448 0.318768 udp 10.0.2.104 54523 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:38.763302 0.000000 udp 10.0.2.104 54523 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:39.755008 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:40.756181 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:41.757838 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:42.758782 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:43.760408 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:44.761824 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:45.763307 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:46.754650 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:47.756520 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:48.758008 0.000000 udp 10.0.2.104 54523 -> 208.101.81.78 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:49.759164 0.000000 udp 10.0.2.104 54523 -> 201.19.246.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:50.760512 0.000000 udp 10.0.2.104 54523 -> 77.78.219.27 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:51.762219 0.320248 udp 10.0.2.104 54523 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:52.763936 0.181296 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:24:53.754776 0.000000 udp 10.0.2.104 54523 -> 78.84.97.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:54.756290 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:55.757612 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:56.759230 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:57.760788 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:58.762239 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:24:59.763721 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:00.756415 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:01.757948 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:02.757962 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:03.758926 0.314328 udp 10.0.2.104 54523 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:04.760496 1.168569 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:06.763789 0.059538 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:07.754772 0.294750 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:08.756762 0.000000 udp 10.0.2.104 54523 -> 78.84.97.4 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:09.757992 1.341348 udp 10.0.2.104 54523 <-> 101.1.88.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:10.759123 0.000000 udp 10.0.2.104 54523 -> 71.22.67.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:11.760517 0.155592 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:12.420845 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:25:12.761864 3.535207 udp 10.0.2.104 54523 <-> 190.18.110.154 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:13.763893 0.000000 udp 10.0.2.104 54523 -> 178.164.167.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:14.754774 2.002552 udp 10.0.2.104 54523 -> 85.84.55.163 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:17.759326 4.112744 udp 10.0.2.104 54523 <-> 77.45.49.23 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:18.760845 0.081823 udp 10.0.2.104 54523 <-> 86.125.196.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:19.762195 0.681337 udp 10.0.2.104 54523 <-> 190.18.110.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:20.763721 0.163662 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:22.756610 3.131237 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:23.758314 3.230131 udp 10.0.2.104 54523 <-> 200.125.109.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:24.759101 0.000000 udp 10.0.2.104 54523 -> 78.148.23.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:26.762063 0.000000 udp 10.0.2.104 54523 -> 86.125.196.187 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:27.763522 0.000000 udp 10.0.2.104 54523 -> 87.16.154.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:28.755274 0.156896 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:29.757289 0.185214 udp 10.0.2.104 54523 <-> 70.75.88.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:30.757935 0.045949 udp 10.0.2.104 54523 <-> 78.62.159.32 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:31.759394 0.049768 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:32.761003 0.051794 udp 10.0.2.104 54523 <-> 80.80.40.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:33.762424 0.000000 udp 10.0.2.104 54523 -> 92.108.115.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:34.764189 0.000000 udp 10.0.2.104 54523 -> 181.55.154.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:35.755108 0.305989 udp 10.0.2.104 54523 <-> 114.160.143.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:36.756969 0.171185 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:37.757996 0.348744 udp 10.0.2.104 54523 <-> 88.187.104.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:38.759557 0.240968 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:39.761021 0.000000 udp 10.0.2.104 54523 -> 88.135.201.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:40.762334 0.000000 udp 10.0.2.104 54523 -> 84.120.145.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:41.763290 0.066611 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:42.755197 0.000000 udp 10.0.2.104 54523 -> 142.166.205.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:43.756728 2.969186 udp 10.0.2.104 54523 <-> 72.141.22.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:44.757872 0.288349 udp 10.0.2.104 54523 <-> 59.147.239.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:45.759732 0.000000 udp 10.0.2.104 54523 -> 190.206.232.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:46.760979 0.147624 udp 10.0.2.104 54523 <-> 174.110.129.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:47.762606 0.075594 udp 10.0.2.104 54523 <-> 86.124.126.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:48.764061 0.198998 udp 10.0.2.104 54523 <-> 200.84.136.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:49.755790 0.000000 udp 10.0.2.104 54523 -> 75.48.12.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:50.757077 0.032469 udp 10.0.2.104 54523 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:51.758073 0.000000 udp 10.0.2.104 54523 -> 177.34.126.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:52.759493 0.162797 udp 10.0.2.104 54523 <-> 98.238.78.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:53.760916 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:54.762723 1.531774 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:55.764143 0.172745 udp 10.0.2.104 54523 <-> 184.160.62.92 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:56.755276 0.298912 udp 10.0.2.104 54523 <-> 124.121.185.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:57.756844 0.000000 udp 10.0.2.104 54523 -> 74.132.164.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:25:58.758292 0.042733 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:25:59.419290 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:25:59.759527 0.105307 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:00.761197 0.454054 udp 10.0.2.104 54523 <-> 69.228.96.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:01.768100 0.284399 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:02.768328 0.166390 udp 10.0.2.104 54523 <-> 76.107.10.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:03.758074 0.392864 udp 10.0.2.104 54523 <-> 49.158.158.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:04.758337 0.150638 udp 10.0.2.104 54523 <-> 174.110.129.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:05.759039 0.157983 udp 10.0.2.104 54523 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:06.759308 0.000000 udp 10.0.2.104 54523 -> 108.69.130.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:26:07.761255 0.208800 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:08.763016 1.382740 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:09.764714 1.530714 udp 10.0.2.104 54523 <-> 80.140.179.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:10.756346 0.163650 udp 10.0.2.104 54523 <-> 68.46.197.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:11.757885 0.000000 udp 10.0.2.104 54523 -> 186.22.32.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:26:12.758289 0.157745 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:13.759766 0.021456 udp 10.0.2.104 54523 <-> 159.149.85.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:14.761459 0.144665 udp 10.0.2.104 54523 <-> 24.3.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:15.762842 0.149381 udp 10.0.2.104 54523 <-> 50.73.70.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:16.764370 3.041788 udp 10.0.2.104 54523 <-> 96.54.178.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:17.755533 0.062812 udp 10.0.2.104 54523 <-> 188.193.251.145 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:18.757925 0.096028 udp 10.0.2.104 54523 <-> 88.166.247.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:19.758336 0.297863 udp 10.0.2.104 54523 <-> 190.37.169.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:20.760124 0.182916 udp 10.0.2.104 54523 <-> 208.84.191.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:21.762898 0.065160 udp 10.0.2.104 54523 <-> 80.238.126.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:22.763917 0.000000 udp 10.0.2.104 54523 -> 142.134.228.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:26:23.768332 0.000000 udp 10.0.2.104 54523 -> 74.105.20.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:26:24.758360 0.000000 udp 10.0.2.104 54523 -> 151.46.192.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:26:25.758648 0.473077 udp 10.0.2.104 54523 <-> 69.221.161.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:26.759097 2.204294 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:27.760496 0.217210 udp 10.0.2.104 54523 <-> 31.223.219.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:29.763166 0.075889 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:30.764248 0.117603 udp 10.0.2.104 54523 <-> 72.218.201.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:31.755467 0.068500 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:32.757572 0.045366 udp 10.0.2.104 54523 <-> 88.216.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:33.758691 0.920108 udp 10.0.2.104 54523 <-> 211.128.83.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:34.760174 0.120604 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:35.761270 0.367925 udp 10.0.2.104 54523 <-> 190.134.185.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:36.763162 0.101246 udp 10.0.2.104 54523 <-> 88.166.247.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:37.764660 0.072300 udp 10.0.2.104 54523 <-> 46.35.97.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:38.756063 0.162337 udp 10.0.2.104 54523 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:39.757574 0.138516 udp 10.0.2.104 54523 <-> 95.235.71.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:40.758799 0.161843 udp 10.0.2.104 54523 <-> 71.61.137.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:41.760256 0.292881 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:42.762103 0.296688 udp 10.0.2.104 54523 <-> 190.36.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:43.763292 0.214124 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:44.764479 0.089506 udp 10.0.2.104 54523 <-> 84.237.172.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:45.756156 0.000000 udp 10.0.2.104 54523 -> 187.69.61.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:26:46.417271 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:26:46.757885 0.000000 udp 10.0.2.104 54523 -> 41.44.228.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:26:47.758752 4.005959 udp 10.0.2.104 54523 <-> 79.173.36.168 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:48.760186 0.294818 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:49.761648 0.000000 udp 10.0.2.104 54523 -> 173.164.122.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:26:50.762831 0.045431 udp 10.0.2.104 54523 <-> 62.205.120.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:52.755884 0.258434 udp 10.0.2.104 54523 <-> 187.121.67.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:53.757498 0.064074 udp 10.0.2.104 54523 <-> 80.238.126.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:54.759005 0.077010 udp 10.0.2.104 54523 <-> 79.115.191.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:55.760017 1.326132 udp 10.0.2.104 54523 <-> 190.244.206.192 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:57.763126 0.150957 udp 10.0.2.104 54523 <-> 74.78.52.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:58.754556 0.212703 udp 10.0.2.104 54523 <-> 69.181.14.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:26:59.755766 0.145806 udp 10.0.2.104 54523 <-> 111.119.243.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:00.757854 0.245886 udp 10.0.2.104 54523 <-> 161.200.125.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:01.759100 0.115331 udp 10.0.2.104 54523 <-> 188.2.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:02.760375 0.165286 udp 10.0.2.104 54523 <-> 96.33.173.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:03.761837 0.376049 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:04.076562 3.000171 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:27:04.764317 0.362405 udp 10.0.2.104 54523 <-> 117.204.170.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:05.754564 0.000000 udp 10.0.2.104 54523 -> 82.65.53.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:06.756407 4.639656 udp 10.0.2.104 54523 <-> 186.188.121.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:07.757269 0.000000 udp 10.0.2.104 54523 -> 14.198.30.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:08.758728 0.142144 udp 10.0.2.104 54523 <-> 114.79.140.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:09.760287 0.070318 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:10.762292 0.167595 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:11.082375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:27:11.763072 0.172239 udp 10.0.2.104 54523 <-> 174.55.72.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:12.755189 0.369855 udp 10.0.2.104 54523 <-> 186.123.130.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:13.756063 0.511549 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:14.757852 0.314304 udp 10.0.2.104 54523 <-> 201.43.56.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:15.759142 0.172218 udp 10.0.2.104 54523 <-> 174.101.8.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:16.760278 0.118876 udp 10.0.2.104 54523 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:17.762209 0.150994 udp 10.0.2.104 54523 <-> 98.222.105.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:18.763069 0.087945 udp 10.0.2.104 54523 <-> 84.2.7.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:19.083899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:27:19.754918 0.216279 udp 10.0.2.104 54523 <-> 190.156.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:20.757289 0.022580 udp 10.0.2.104 54523 <-> 46.223.226.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:21.758088 0.042589 udp 10.0.2.104 54523 <-> 46.229.193.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:22.759197 0.296570 udp 10.0.2.104 54523 <-> 189.103.153.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:23.760238 0.364378 udp 10.0.2.104 54523 <-> 118.169.130.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:24.761577 4.516240 udp 10.0.2.104 54523 <-> 62.43.82.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:25.763307 2.053614 udp 10.0.2.104 54523 <-> 86.121.66.50 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:28.758159 0.000000 udp 10.0.2.104 54523 -> 88.222.170.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:29.758937 0.061148 udp 10.0.2.104 54523 <-> 89.32.155.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:30.760461 0.000000 udp 10.0.2.104 54523 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:31.762299 0.000000 udp 10.0.2.104 54523 -> 123.17.199.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:32.763255 0.137172 udp 10.0.2.104 54523 <-> 67.82.5.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:33.414434 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:27:33.755094 1.830038 udp 10.0.2.104 54523 <-> 119.63.168.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:34.756558 0.070234 udp 10.0.2.104 54523 <-> 93.72.70.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:35.087349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:27:35.757943 0.000000 udp 10.0.2.104 54523 -> 69.14.223.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:36.759250 0.285162 udp 10.0.2.104 54523 <-> 69.55.205.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:37.760548 0.039689 udp 10.0.2.104 54523 <-> 91.218.81.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:38.762209 0.335064 udp 10.0.2.104 54523 <-> 58.230.46.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:39.763465 0.927571 udp 10.0.2.104 54523 <-> 190.188.39.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:40.755086 0.595414 udp 10.0.2.104 54523 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:41.756806 0.602348 udp 10.0.2.104 54523 <-> 24.232.163.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:42.758090 0.000000 udp 10.0.2.104 54523 -> 186.92.60.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:43.759019 0.138144 udp 10.0.2.104 54523 <-> 79.36.253.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:44.760636 0.220816 udp 10.0.2.104 54523 <-> 177.206.253.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:45.762280 0.187316 udp 10.0.2.104 54523 <-> 174.101.8.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:27:47.754978 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:48.756731 0.000102 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:48.756833 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:27:49.757373 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:50.759301 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:51.760885 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:52.762665 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:53.763675 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:54.754923 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:55.757140 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:56.757833 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:57.759354 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:58.760860 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:27:59.762271 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:00.763938 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:01.755426 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:02.756941 0.159638 udp 10.0.2.104 54523 <-> 71.235.192.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:28:03.758348 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:04.759263 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:05.760849 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:06.762748 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:07.093058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:28:07.763430 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:09.757025 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:10.758295 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:11.759469 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:12.760955 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:13.762543 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:14.764609 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:15.755144 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:16.757020 0.000089 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:16.757109 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:28:17.758366 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:18.759420 0.000000 udp 10.0.2.104 54523 -> 77.23.171.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:19.760963 0.124942 udp 10.0.2.104 54523 <-> 82.250.208.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:28:20.421999 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:28:21.764077 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:22.756229 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:23.757370 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:24.758201 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:25.759386 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:26.761153 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:27.762540 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:28.764302 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:29.755427 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:30.756648 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:31.758309 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:32.759954 4.997266 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:32.760026 4.997194 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 10:28:33.761096 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:34.762415 0.053858 udp 10.0.2.104 54523 <-> 77.23.171.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:28:35.764225 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:36.755477 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:38.758457 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:39.759767 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:40.760888 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:41.762700 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:42.764454 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:43.755749 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:44.757869 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:45.758339 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:46.759918 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:47.761065 3.996449 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:48.765379 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:49.766051 0.000000 udp 10.0.2.104 54523 -> 77.23.171.163 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:50.757227 0.297738 udp 10.0.2.104 54523 <-> 103.5.186.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:28:52.758721 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:53.759834 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:54.761625 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:55.762760 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:56.764202 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:57.755917 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:58.756915 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:28:59.758874 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:00.763224 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:01.764594 0.000127 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:01.764721 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:29:02.765121 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:03.764833 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:05.757369 0.292531 udp 10.0.2.104 54523 <-> 103.5.186.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:29:06.758415 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:07.419627 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:29:07.760218 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:08.764545 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:09.766073 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:10.766420 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:11.758012 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:12.758087 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:13.758363 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:14.760288 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:15.762400 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:16.762837 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:18.756412 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:18.756507 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:29:19.757658 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:20.758746 0.000000 udp 10.0.2.104 54523 -> 103.5.186.168 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:21.760258 0.000000 udp 10.0.2.104 54523 -> 77.23.171.163 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:22.761943 0.062891 udp 10.0.2.104 54523 <-> 81.190.233.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:29:23.762838 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:24.764456 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:25.755910 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:26.757661 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:28.760188 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:29.761780 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:30.763317 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:31.754410 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:32.756232 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:33.758913 0.000090 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:33.759003 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:29:34.758977 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:35.760410 0.000000 udp 10.0.2.104 54523 -> 77.23.171.163 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:36.762025 0.000000 udp 10.0.2.104 54523 -> 103.5.186.168 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:37.763021 0.064145 udp 10.0.2.104 54523 <-> 81.190.233.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:29:38.754547 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:39.756197 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:40.757410 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:41.759077 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:42.760427 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:43.762499 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:44.763238 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:46.756025 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:47.757949 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:48.759112 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:49.760160 0.000100 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:49.760260 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:29:50.762144 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:51.763158 0.000000 udp 10.0.2.104 54523 -> 77.23.171.163 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:52.755034 0.066123 udp 10.0.2.104 54523 <-> 81.190.233.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:29:53.756480 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:54.757896 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:55.418277 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:29:55.758999 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:56.760419 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:57.761956 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:58.763518 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:29:59.754707 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:00.756316 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:01.757951 0.000078 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:01.758029 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:30:03.760792 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:04.762387 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:05.763367 1.993300 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:06.755148 0.293719 udp 10.0.2.104 54523 <-> 103.5.186.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:30:08.757820 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:09.759252 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:10.760536 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:11.762322 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:12.764000 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:13.754865 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:14.756863 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:15.758176 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:16.759371 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:16.759416 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:30:17.760611 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:18.762497 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:19.763508 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:20.754789 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:21.757155 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:22.758033 0.053918 udp 10.0.2.104 54523 <-> 77.23.171.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:30:23.759244 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:25.762466 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:26.763795 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:27.755366 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:28.756761 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:29.758184 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:30.759253 0.000115 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:30.759368 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:30:31.760891 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:32.762297 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:33.763775 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:34.755401 4.005504 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:35.756831 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:36.758082 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:37.759357 0.074656 udp 10.0.2.104 54523 <-> 81.190.233.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:30:39.762650 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:39.762697 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:30:40.763944 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:41.754914 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:42.416528 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:30:42.756443 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:43.758337 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:44.759445 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:45.760747 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:46.762669 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:47.764020 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:48.755155 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:49.758789 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:50.758664 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:51.759616 3.995644 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:52.761115 2.003021 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:53.762702 0.054046 udp 10.0.2.104 54523 <-> 77.23.171.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:30:56.756861 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:57.758328 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:58.759631 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:30:59.761054 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:00.762557 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:01.763838 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:02.755348 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:02.755410 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:31:03.756634 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:04.758355 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:05.759484 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:07.762869 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:08.764218 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:09.755318 0.303311 udp 10.0.2.104 54523 <-> 103.5.186.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:31:10.756850 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:11.758019 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:12.759900 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:14.762557 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:15.763994 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:16.755476 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:17.757131 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:18.758425 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:19.759748 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:20.761271 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:21.762749 0.000105 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:21.762854 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:31:22.764722 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:23.756170 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:24.756906 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:25.758387 0.060606 udp 10.0.2.104 54523 <-> 81.190.233.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:31:26.759976 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:27.761287 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:28.762905 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:29.413289 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:31:29.764145 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:30.755603 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:31.757604 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:32.758314 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:33.759755 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:34.761487 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:35.762722 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:37.755931 0.000129 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:37.756060 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:31:38.756747 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:39.758335 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:40.760022 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:41.761619 0.295058 udp 10.0.2.104 54523 <-> 103.5.186.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:31:42.762571 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:43.764211 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:44.755515 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:45.757150 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:46.758591 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:48.761447 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:49.763256 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:50.764544 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:51.755715 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:52.763020 0.000114 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:52.763134 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:31:53.764650 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:54.765626 3.991486 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:55.766592 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:56.766993 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:31:57.767060 0.068791 udp 10.0.2.104 54523 <-> 81.190.233.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:31:59.758350 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:00.758820 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:01.760171 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:02.762076 0.147637 udp 10.0.2.104 54523 <-> 72.23.198.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:03.763219 0.157375 udp 10.0.2.104 54523 <-> 173.178.10.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:04.754471 0.163002 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:05.756164 0.057112 udp 10.0.2.104 54523 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:06.757301 0.000000 udp 10.0.2.104 54523 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:07.759156 0.153964 udp 10.0.2.104 54523 <-> 79.50.212.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:08.760525 1.321430 udp 10.0.2.104 54523 <-> 190.198.162.43 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:10.762985 0.000000 udp 10.0.2.104 54523 -> 84.124.183.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:11.754481 0.000000 udp 10.0.2.104 54523 -> 5.103.62.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:12.756386 0.144203 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:13.757589 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:14.759014 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:15.760559 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:16.421084 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:32:16.762284 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:17.763164 1.993085 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:18.754480 0.162623 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:20.760086 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:21.759940 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:22.761022 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:23.762006 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:24.763040 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:25.754574 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:26.756378 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:27.757737 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:28.758987 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:29.760291 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:30.761963 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:31.763159 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:32.754929 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:33.756147 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:33.756216 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:32:34.758077 0.155489 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:35.759161 0.000000 udp 10.0.2.104 54523 -> 74.51.83.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:36.760330 0.060182 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:37.762199 0.357329 udp 10.0.2.104 54523 <-> 111.250.115.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:38.763204 0.164360 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:39.754888 0.000000 udp 10.0.2.104 54523 -> 5.190.123.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:40.756447 0.160006 udp 10.0.2.104 54523 <-> 173.178.10.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:41.757836 4.997158 udp 10.0.2.104 54523 <-> 75.97.111.231 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:42.759257 0.038795 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:43.760394 0.388953 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:44.762201 0.000000 udp 10.0.2.104 54523 -> 89.201.69.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:45.763482 0.072666 udp 10.0.2.104 54523 <-> 87.96.140.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:46.912470 0.000000 udp 10.0.2.104 54523 <- 75.97.111.231 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:47.756382 0.879277 udp 10.0.2.104 54523 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:48.757459 0.000000 udp 10.0.2.104 54523 -> 183.87.71.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:49.759245 0.000000 udp 10.0.2.104 54523 -> 89.136.139.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:50.760578 0.000000 udp 10.0.2.104 54523 -> 96.236.214.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:51.762311 0.160107 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:52.764013 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:53.754944 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:54.756200 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:55.757725 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:56.759346 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:57.760575 0.401061 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:32:58.762197 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:32:59.763751 0.369698 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:00.755045 0.050581 udp 10.0.2.104 54523 <-> 178.119.205.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:01.756268 0.085973 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:02.757938 1.125110 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:03.418867 0.000174 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:33:03.759098 0.047607 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:04.760849 0.000000 udp 10.0.2.104 54523 -> 84.228.222.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:05.762185 0.173285 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:06.763638 0.143873 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:07.754801 0.000000 udp 10.0.2.104 54523 -> 77.221.21.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:08.756810 0.160504 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:09.757944 0.000000 udp 10.0.2.104 54523 -> 107.24.230.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:10.759184 0.189680 udp 10.0.2.104 54523 <-> 49.213.50.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:11.761314 0.174054 udp 10.0.2.104 54523 <-> 65.24.128.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:12.762933 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:13.168501 0.000000 udp 10.0.2.104 54523 <- 77.221.21.28 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:13.764053 2.040443 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:14.755024 3.061834 udp 10.0.2.104 54523 <-> 79.113.236.251 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:16.760329 0.000000 udp 10.0.2.104 54523 -> 5.190.123.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:18.764686 0.051734 udp 10.0.2.104 54523 <-> 82.139.22.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:19.765038 0.164956 udp 10.0.2.104 54523 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:20.766217 0.164366 udp 10.0.2.104 54523 <-> 68.206.170.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:21.756346 0.160023 udp 10.0.2.104 54523 <-> 79.2.118.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:22.757420 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:23.760720 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:24.760667 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:25.760865 0.147469 udp 10.0.2.104 54523 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:26.762231 0.000000 udp 10.0.2.104 54523 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:27.763956 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:28.755187 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:29.756710 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:30.758356 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:31.759311 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:32.760782 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:33.762575 0.186875 udp 10.0.2.104 54523 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:34.763929 0.065583 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:35.755165 0.145861 udp 10.0.2.104 54523 <-> 178.139.239.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:36.756704 0.226677 udp 10.0.2.104 54523 <-> 120.88.42.164 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:37.758379 0.077421 udp 10.0.2.104 54523 <-> 188.27.92.248 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:38.759807 0.000000 udp 10.0.2.104 54523 -> 10.201.32.177 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:39.761054 0.080950 udp 10.0.2.104 54523 <-> 84.55.22.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:40.762393 0.562967 udp 10.0.2.104 54523 <-> 200.126.150.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:41.764183 0.358658 udp 10.0.2.104 54523 <-> 111.241.157.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:42.755396 0.201092 udp 10.0.2.104 54523 <-> 200.84.4.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:43.756876 0.070007 udp 10.0.2.104 54523 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:44.758678 0.000000 udp 10.0.2.104 54523 -> 46.35.110.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:45.759593 0.000000 udp 10.0.2.104 54523 -> 87.1.25.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:46.761427 0.818733 udp 10.0.2.104 54523 <-> 31.147.61.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:47.762886 0.000000 udp 10.0.2.104 54523 -> 99.41.197.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:48.764453 0.000000 udp 10.0.2.104 54523 -> 217.174.48.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:49.755302 1.888009 udp 10.0.2.104 54523 <-> 72.220.6.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:50.416696 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:33:50.757275 0.274303 udp 10.0.2.104 54523 <-> 181.166.30.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:51.758268 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:33:52.759474 0.459332 udp 10.0.2.104 54523 <-> 120.88.42.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:53.761285 0.174532 udp 10.0.2.104 54523 <-> 77.239.84.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:54.762975 0.314911 udp 10.0.2.104 54523 <-> 113.39.129.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:55.764238 1.308998 udp 10.0.2.104 54523 <-> 110.134.54.73 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:57.756978 0.316141 udp 10.0.2.104 54523 <-> 122.210.119.52 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:58.758395 0.162444 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:33:59.759883 0.155894 udp 10.0.2.104 54523 <-> 74.58.30.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:00.761843 0.574621 udp 10.0.2.104 54523 <-> 187.2.67.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:01.762990 0.171033 udp 10.0.2.104 54523 <-> 173.177.19.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:02.764552 1.024773 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:04.757087 0.340019 udp 10.0.2.104 54523 <-> 200.90.98.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:05.758627 0.234669 udp 10.0.2.104 54523 <-> 71.95.216.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:06.759932 0.160782 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:07.761493 2.048183 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:08.763334 0.000000 udp 10.0.2.104 54523 -> 66.115.90.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:34:10.755709 0.216692 udp 10.0.2.104 54523 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:11.099101 3.001511 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:34:11.757524 0.067687 udp 10.0.2.104 54523 <-> 79.113.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:12.758293 0.343079 udp 10.0.2.104 54523 <-> 118.171.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:13.760056 0.145156 udp 10.0.2.104 54523 <-> 174.106.15.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:14.761436 0.120420 udp 10.0.2.104 54523 <-> 79.55.190.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:15.763019 0.000000 udp 10.0.2.104 54523 -> 71.77.141.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:34:16.764181 0.086996 udp 10.0.2.104 54523 <-> 93.156.61.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:17.756264 0.277565 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:18.106631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:34:18.757819 2.077041 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:19.758595 0.159342 udp 10.0.2.104 54523 <-> 71.94.98.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:21.761379 0.147722 udp 10.0.2.104 54523 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:22.763459 0.146721 udp 10.0.2.104 54523 <-> 184.59.92.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:23.764406 0.344921 udp 10.0.2.104 54523 <-> 61.62.74.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:24.759013 0.104999 udp 10.0.2.104 54523 <-> 178.43.165.175 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:25.758944 0.175311 udp 10.0.2.104 54523 <-> 98.196.143.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:26.108918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:34:26.759040 0.159462 udp 10.0.2.104 54523 <-> 98.28.87.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:27.764351 0.077193 udp 10.0.2.104 54523 <-> 193.150.231.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:28.765117 0.000000 udp 10.0.2.104 54523 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:34:29.766458 0.077738 udp 10.0.2.104 54523 <-> 79.112.27.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:30.767152 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:34:31.758224 0.037527 udp 10.0.2.104 54523 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:32.758388 2.001974 udp 10.0.2.104 54523 <-> 190.39.39.98 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:33.758766 0.151589 udp 10.0.2.104 54523 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:35.761789 0.204675 udp 10.0.2.104 54523 <-> 98.157.7.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:36.763207 0.274388 udp 10.0.2.104 54523 <-> 201.209.247.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:37.414168 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:34:37.754389 0.151409 udp 10.0.2.104 54523 <-> 24.231.243.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:38.756160 0.000000 udp 10.0.2.104 54523 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:34:39.757831 0.164157 udp 10.0.2.104 54523 <-> 96.2.4.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:40.759103 1.249606 udp 10.0.2.104 54523 <-> 201.210.213.118 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:41.760365 0.165286 udp 10.0.2.104 54523 <-> 70.36.60.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:42.110986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:34:42.762074 0.081557 udp 10.0.2.104 54523 <-> 93.156.11.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:43.763325 0.044537 udp 10.0.2.104 54523 <-> 178.119.14.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:44.754479 0.161595 udp 10.0.2.104 54523 <-> 98.224.55.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:45.756220 0.186035 udp 10.0.2.104 54523 <-> 67.177.97.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:46.757445 0.163207 udp 10.0.2.104 54523 <-> 76.105.92.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:47.758904 3.114723 udp 10.0.2.104 54523 <-> 79.176.13.149 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:48.760233 0.055812 udp 10.0.2.104 54523 <-> 84.38.87.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:49.762374 1.485941 udp 10.0.2.104 54523 <-> 201.219.190.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:51.754476 0.166870 udp 10.0.2.104 54523 <-> 71.203.5.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:52.756345 0.053433 udp 10.0.2.104 54523 <-> 78.92.213.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:53.758008 0.154038 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:54.759299 0.250562 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:55.760374 0.184653 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:56.762125 2.152225 udp 10.0.2.104 54523 <-> 66.30.24.66 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:34:59.756281 2.125769 udp 10.0.2.104 54523 <-> 217.201.179.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:00.757495 0.289684 udp 10.0.2.104 54523 <-> 190.163.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:01.758904 0.191220 udp 10.0.2.104 54523 <-> 62.18.139.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:02.760351 0.405396 udp 10.0.2.104 54523 <-> 101.63.197.122 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:03.762210 0.181403 udp 10.0.2.104 54523 <-> 41.200.209.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:04.763294 0.038457 udp 10.0.2.104 54523 <-> 188.254.170.36 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:05.754781 0.167713 udp 10.0.2.104 54523 <-> 107.10.65.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:06.756451 0.058053 udp 10.0.2.104 54523 <-> 188.25.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:07.758117 0.135771 udp 10.0.2.104 54523 <-> 37.122.1.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:08.759293 0.154286 udp 10.0.2.104 54523 <-> 47.17.133.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:09.760601 0.000000 udp 10.0.2.104 54523 -> 70.112.193.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:10.761971 0.223507 udp 10.0.2.104 54523 <-> 71.95.45.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:11.763143 0.300654 udp 10.0.2.104 54523 <-> 177.143.165.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:12.755246 0.149689 udp 10.0.2.104 54523 <-> 216.196.163.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:13.756703 0.262480 udp 10.0.2.104 54523 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:14.117119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:35:14.758092 0.146004 udp 10.0.2.104 54523 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:15.759158 0.000000 udp 10.0.2.104 54523 -> 74.65.222.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:16.760620 0.153482 udp 10.0.2.104 54523 <-> 96.30.149.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:17.762150 0.171433 udp 10.0.2.104 54523 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:18.763486 1.917036 udp 10.0.2.104 54523 <-> 184.63.214.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:19.754860 0.154650 udp 10.0.2.104 54523 <-> 68.97.115.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:20.755830 0.675743 udp 10.0.2.104 54523 <-> 187.19.211.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:21.758125 0.213012 udp 10.0.2.104 54523 <-> 190.75.66.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:22.759129 0.000000 udp 10.0.2.104 54523 -> 206.246.140.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:23.760453 0.211905 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:24.421852 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:35:24.762002 0.192883 udp 10.0.2.104 54523 <-> 66.75.62.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:25.763287 0.155804 udp 10.0.2.104 54523 <-> 68.197.121.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:26.754858 0.546148 udp 10.0.2.104 54523 <-> 93.184.85.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:27.756215 0.306783 udp 10.0.2.104 54523 <-> 121.152.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:28.758016 0.000000 udp 10.0.2.104 54523 -> 91.82.34.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:29.759168 0.261886 udp 10.0.2.104 54523 <-> 181.29.6.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:30.760767 0.626403 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:31.761988 0.272900 udp 10.0.2.104 54523 <-> 203.92.49.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:32.763875 1.254438 udp 10.0.2.104 54523 <-> 186.67.39.106 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:34.756345 0.372062 udp 10.0.2.104 54523 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:35.758185 0.068127 udp 10.0.2.104 54523 <-> 37.203.120.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:36.759097 0.327148 udp 10.0.2.104 54523 <-> 61.231.35.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:37.761262 0.155618 udp 10.0.2.104 54523 <-> 173.217.236.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:38.762177 0.000000 udp 10.0.2.104 54523 -> 75.84.97.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:39.763599 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:40.754833 0.048798 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:41.756850 0.195885 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:42.758120 0.141882 udp 10.0.2.104 54523 <-> 24.182.94.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:43.759099 0.050967 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:44.760593 0.511765 udp 10.0.2.104 54523 <-> 189.106.52.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:45.762601 3.995559 udp 10.0.2.104 54523 -> 75.84.97.247 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:46.763782 0.000000 udp 10.0.2.104 54523 -> 216.84.40.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:47.755122 4.005545 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:48.756491 0.048493 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:50.759336 0.040993 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:52.762671 0.000000 udp 10.0.2.104 54523 -> 186.95.43.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:53.763789 0.208412 udp 10.0.2.104 54523 <-> 203.192.241.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:54.754920 0.647245 udp 10.0.2.104 54523 <-> 186.193.61.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:55.756753 0.136990 udp 10.0.2.104 54523 <-> 67.83.217.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:56.758337 0.165636 udp 10.0.2.104 54523 <-> 68.46.197.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:57.759758 0.000000 udp 10.0.2.104 54523 -> 98.203.24.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:35:58.760733 3.265117 udp 10.0.2.104 54523 <-> 201.104.139.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:35:59.762443 0.063897 udp 10.0.2.104 54523 <-> 5.14.71.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:00.763561 0.163771 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:01.755295 0.124816 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:02.756778 0.153457 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:03.758728 0.047245 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:04.759501 0.346892 udp 10.0.2.104 54523 <-> 61.64.176.39 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:05.761040 0.000000 udp 10.0.2.104 54523 -> 46.37.71.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:06.762672 4.996662 udp 10.0.2.104 54523 <-> 93.184.85.53 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:07.763277 0.000000 udp 10.0.2.104 54523 -> 88.67.174.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:08.755534 0.541341 udp 10.0.2.104 54523 <-> 186.144.251.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:09.756644 0.200484 udp 10.0.2.104 54523 <-> 176.219.37.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:10.758291 0.156583 udp 10.0.2.104 54523 <-> 76.180.2.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:11.418872 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:36:12.116703 0.000000 udp 10.0.2.104 54523 <- 93.184.85.53 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:12.760896 0.162090 udp 10.0.2.104 54523 <-> 12.39.137.121 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:13.762456 0.000000 udp 10.0.2.104 54523 -> 78.203.12.138 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:14.764040 0.114561 udp 10.0.2.104 54523 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:15.755387 0.152535 udp 10.0.2.104 54523 <-> 173.197.148.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:17.758368 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:18.759620 1.096104 udp 10.0.2.104 54523 <-> 31.44.140.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:20.762500 0.153294 udp 10.0.2.104 54523 <-> 173.197.148.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:21.764090 0.158273 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:22.755736 1.351797 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:24.758300 0.144736 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:25.760011 0.000000 udp 10.0.2.104 54523 -> 189.90.187.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:26.761248 0.069341 udp 10.0.2.104 54523 <-> 84.38.87.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:27.762558 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:28.764148 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:29.755244 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:30.757009 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:31.758712 3.099547 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:32.759558 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:33.761450 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:35.764181 0.072170 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:36.755652 0.550217 udp 10.0.2.104 54523 <-> 190.18.110.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:37.756896 0.359144 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:38.758363 0.054236 udp 10.0.2.104 54523 <-> 89.165.189.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:39.760102 0.095190 udp 10.0.2.104 54523 <-> 5.34.141.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:40.761443 0.162453 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:41.762650 0.380634 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:42.763733 0.557159 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:43.755774 0.376004 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:44.757238 0.243842 udp 10.0.2.104 54523 <-> 200.93.91.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:45.758859 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:45.758954 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:36:46.759987 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:47.761368 0.079924 udp 10.0.2.104 54523 <-> 86.120.85.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:48.762925 1.016352 udp 10.0.2.104 54523 <-> 14.97.86.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:49.763945 0.361405 udp 10.0.2.104 54523 <-> 186.93.155.34 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:36:50.755629 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:51.756834 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:52.758286 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:53.760164 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:54.761586 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:56.764508 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:57.756328 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:58.417353 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:36:58.757598 0.000105 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:36:58.757703 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:36:59.758660 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:00.760002 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:01.762031 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:02.763199 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:03.764278 0.000000 udp 10.0.2.104 54523 -> 188.27.46.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:04.755889 0.000000 udp 10.0.2.104 54523 -> 189.13.22.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:05.757247 0.064995 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:06.759129 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:07.760279 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:08.761597 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:09.762964 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:11.756091 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:12.757188 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:13.758792 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:14.760219 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:15.761783 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:16.762839 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:17.754485 0.000121 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:17.754606 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:37:18.755949 4.006228 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:19.757182 0.314635 udp 10.0.2.104 54523 <-> 78.228.89.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:20.758874 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:21.760288 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:23.762973 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:24.754516 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:25.756049 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:26.757604 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:27.758857 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:29.761995 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:29.762042 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:37:30.763012 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:31.754564 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:32.756031 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:33.757915 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:34.758823 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:35.760400 0.178933 udp 10.0.2.104 54523 <-> 69.73.42.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:36.761690 0.314726 udp 10.0.2.104 54523 <-> 177.138.96.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:37.763230 0.231444 udp 10.0.2.104 54523 <-> 78.228.89.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:38.754764 0.000000 udp 10.0.2.104 54523 -> 184.35.75.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:39.756333 0.000000 udp 10.0.2.104 54523 -> 190.74.247.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:40.757608 0.000000 udp 10.0.2.104 54523 -> 190.39.39.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:41.759056 0.063733 udp 10.0.2.104 54523 <-> 86.125.184.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:42.760576 0.071653 udp 10.0.2.104 54523 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:43.761851 0.335026 udp 10.0.2.104 54523 <-> 189.110.145.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:44.763181 0.044054 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:45.414182 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:37:45.754639 0.161501 udp 10.0.2.104 54523 <-> 77.239.84.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:46.756144 0.000000 udp 10.0.2.104 54523 -> 5.15.56.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:47.758353 0.287474 udp 10.0.2.104 54523 <-> 201.249.10.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:48.759136 0.000000 udp 10.0.2.104 54523 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:49.760580 2.051245 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:50.761925 3.996169 udp 10.0.2.104 54523 -> 74.135.109.249 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:52.464140 0.010273 udp 10.0.2.104 54601 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 10:37:52.474683 0.000000 udp 10.0.2.104 54602 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:37:52.754836 0.223473 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:53.756441 0.050851 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:55.759287 0.048165 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:56.760773 0.205424 udp 10.0.2.104 54523 <-> 24.6.8.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:57.762018 0.150144 udp 10.0.2.104 54523 <-> 85.219.46.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:58.763658 0.478848 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:37:59.754777 0.025453 udp 10.0.2.104 54523 <-> 95.168.34.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:00.756334 0.366171 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:01.758003 0.000000 udp 10.0.2.104 54523 -> 5.238.23.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:02.759224 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:03.760796 0.126110 udp 10.0.2.104 54523 <-> 24.157.98.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:04.762207 0.113104 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:05.763862 0.055243 udp 10.0.2.104 54523 <-> 89.228.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:06.754945 0.000000 udp 10.0.2.104 54523 -> 24.0.138.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:07.756435 4.169627 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:08.758330 0.111652 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:09.759298 0.139173 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:10.760921 0.225201 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:12.763414 2.151617 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 4 1616 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:13.754791 0.000000 udp 10.0.2.104 54523 -> 46.248.74.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:15.758133 0.000000 udp 10.0.2.104 54523 -> 186.88.170.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:16.759308 0.000000 udp 10.0.2.104 54523 -> 177.187.21.194 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:17.760865 0.171852 udp 10.0.2.104 54523 <-> 72.137.144.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:18.761914 0.089776 udp 10.0.2.104 54523 <-> 85.202.213.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:19.763996 4.996780 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 3 866 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:20.755124 0.000000 udp 10.0.2.104 54523 -> 46.248.74.20 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:21.756820 1.070867 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:23.759230 0.333504 udp 10.0.2.104 54523 <-> 186.88.170.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:24.918574 0.000000 udp 10.0.2.104 54523 <- 71.234.246.13 16464 RSP 0 0 1 750 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:25.762705 0.878638 udp 10.0.2.104 54523 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:26.764013 0.116604 udp 10.0.2.104 54523 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:27.754987 0.072740 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:28.756662 0.000000 udp 10.0.2.104 54523 -> 75.184.42.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:29.758341 0.062986 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:30.759367 0.211774 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:31.761151 0.364679 udp 10.0.2.104 54523 <-> 184.156.1.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:32.421067 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:38:32.762377 1.228358 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:33.763486 0.173632 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:34.755333 0.367942 udp 10.0.2.104 54523 <-> 36.227.0.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:35.756736 0.025145 udp 10.0.2.104 54523 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:36.758202 4.997032 udp 10.0.2.104 54523 <-> 95.169.196.132 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:38.761223 0.067035 udp 10.0.2.104 54523 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:39.762446 0.065671 udp 10.0.2.104 54523 <-> 46.9.150.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:40.763604 0.238952 udp 10.0.2.104 54523 <-> 71.95.216.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:41.800818 0.000000 udp 10.0.2.104 54523 <- 95.169.196.132 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:42.756888 0.257059 udp 10.0.2.104 54523 <-> 95.235.207.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:43.758938 0.000000 udp 10.0.2.104 54523 -> 217.197.141.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:44.759350 0.080789 udp 10.0.2.104 54523 <-> 85.86.73.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:45.761196 0.163811 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:46.762261 1.040627 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:47.763397 0.063411 udp 10.0.2.104 54523 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:48.755211 2.003593 udp 10.0.2.104 54523 -> 37.137.42.114 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:49.756879 0.253312 udp 10.0.2.104 54523 <-> 189.25.78.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:51.759064 0.066217 udp 10.0.2.104 54523 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:52.760894 0.044087 udp 10.0.2.104 54523 <-> 213.109.121.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:53.762756 0.000000 udp 10.0.2.104 54523 -> 37.137.42.114 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:54.763585 0.064635 udp 10.0.2.104 54523 <-> 89.234.212.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:55.755342 0.092472 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:56.757315 0.020110 udp 10.0.2.104 54523 <-> 78.94.145.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:57.758106 0.137197 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:38:58.759475 0.000000 udp 10.0.2.104 54523 -> 88.166.247.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:38:59.760962 0.000000 udp 10.0.2.104 54523 -> 114.185.3.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:00.762518 0.250468 udp 10.0.2.104 54523 <-> 161.200.173.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:01.763981 0.000000 udp 10.0.2.104 54523 -> 95.15.199.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:02.755376 0.139103 udp 10.0.2.104 54523 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:03.757171 0.128288 udp 10.0.2.104 54523 <-> 24.157.98.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:04.758223 0.175168 udp 10.0.2.104 54523 <-> 174.55.3.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:05.759867 0.155704 udp 10.0.2.104 54523 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:06.761036 0.175182 udp 10.0.2.104 54523 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:07.762698 0.048661 udp 10.0.2.104 54523 <-> 92.241.152.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:08.763737 0.037751 udp 10.0.2.104 54523 <-> 84.197.114.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:09.755625 0.398918 udp 10.0.2.104 54523 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:10.756958 0.051920 udp 10.0.2.104 54523 <-> 95.77.123.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:11.758877 0.045964 udp 10.0.2.104 54523 <-> 78.62.44.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:12.760097 0.374844 udp 10.0.2.104 54523 <-> 36.227.0.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:13.761285 0.158026 udp 10.0.2.104 54523 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:14.762846 0.000000 udp 10.0.2.104 54523 -> 95.252.133.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:15.764302 0.029059 udp 10.0.2.104 54523 <-> 77.70.41.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:16.755913 0.305604 udp 10.0.2.104 54523 <-> 189.61.212.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:17.756691 0.118376 udp 10.0.2.104 54523 <-> 72.200.174.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:18.758956 0.051420 udp 10.0.2.104 54523 <-> 95.42.30.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:19.419591 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:39:19.759794 0.000000 udp 10.0.2.104 54523 -> 61.70.234.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:20.761278 1.337666 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:22.764333 0.000000 udp 10.0.2.104 54523 -> 189.30.140.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:23.755702 2.868618 udp 10.0.2.104 54523 <-> 198.91.171.183 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:24.756914 0.000000 udp 10.0.2.104 54523 -> 89.215.64.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:25.758480 0.158383 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:26.760160 2.002845 udp 10.0.2.104 54523 -> 109.122.73.22 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:27.761246 3.330699 udp 10.0.2.104 54523 <-> 111.252.37.144 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:29.764382 0.053624 udp 10.0.2.104 54523 <-> 82.139.22.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:31.757024 0.352004 udp 10.0.2.104 54523 <-> 190.177.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:32.758597 4.302809 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:33.760079 1.060918 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:35.763044 0.000000 udp 10.0.2.104 54523 -> 82.0.137.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:37.755656 0.040005 udp 10.0.2.104 54523 <-> 89.215.64.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:38.757418 2.512893 udp 10.0.2.104 54523 <-> 198.91.171.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:39.758988 0.000000 udp 10.0.2.104 54523 -> 189.30.140.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:40.760242 0.801991 udp 10.0.2.104 54523 <-> 179.210.224.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:41.761329 3.006655 udp 10.0.2.104 54523 <-> 212.59.229.78 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:42.762781 0.000000 udp 10.0.2.104 54523 -> 71.238.72.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:43.754229 0.078087 udp 10.0.2.104 54523 <-> 188.27.92.248 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:45.758044 1.176030 udp 10.0.2.104 54523 <-> 74.12.109.132 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:47.760031 0.000000 udp 10.0.2.104 54523 -> 14.97.124.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:48.761361 0.317513 udp 10.0.2.104 54523 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:49.763313 0.261868 udp 10.0.2.104 54523 <-> 177.143.155.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:50.754252 0.012839 udp 10.0.2.104 54523 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:51.756193 0.148171 udp 10.0.2.104 54523 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:52.757913 0.198265 udp 10.0.2.104 54523 <-> 24.116.20.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:53.758746 0.000000 udp 10.0.2.104 54523 -> 213.164.127.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:39:54.760170 0.135984 udp 10.0.2.104 54523 <-> 68.34.31.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:55.761568 0.148562 udp 10.0.2.104 54523 <-> 188.17.160.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:56.763089 0.121929 udp 10.0.2.104 54523 <-> 62.211.235.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:57.754708 0.155946 udp 10.0.2.104 54523 <-> 98.178.192.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:58.756317 0.073857 udp 10.0.2.104 54523 <-> 85.86.47.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:39:59.758160 1.171333 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:01.760408 0.195810 udp 10.0.2.104 54523 <-> 184.167.251.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:02.761336 0.154978 udp 10.0.2.104 54523 <-> 98.223.142.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:03.763002 0.000000 udp 10.0.2.104 54523 -> 96.247.178.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:04.754668 0.166444 udp 10.0.2.104 54523 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:05.756038 0.170622 udp 10.0.2.104 54523 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:06.416981 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:40:06.757550 0.000000 udp 10.0.2.104 54523 -> 84.2.254.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:07.758949 0.000000 udp 10.0.2.104 54523 -> 164.8.204.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:08.760323 0.055026 udp 10.0.2.104 54523 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:09.762230 0.155691 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:10.763313 0.000000 udp 10.0.2.104 54523 -> 174.108.102.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:11.754574 0.098563 udp 10.0.2.104 54523 <-> 46.161.110.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:12.756114 0.367768 udp 10.0.2.104 54523 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:13.757545 0.144908 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:14.758978 3.995566 udp 10.0.2.104 54523 <-> 114.25.138.159 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:15.760399 4.996805 udp 10.0.2.104 54523 <-> 186.58.98.149 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:16.761886 4.997114 udp 10.0.2.104 54523 <-> 79.117.163.102 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:17.763721 0.199504 udp 10.0.2.104 54523 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:19.756627 0.295145 udp 10.0.2.104 54523 <-> 201.82.230.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:21.097759 0.000000 udp 10.0.2.104 54523 <- 186.58.98.149 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:21.830287 2.005570 udp 10.0.2.104 54523 <-> 79.117.163.102 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:22.760541 0.087396 udp 10.0.2.104 54523 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:24.763178 0.171208 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:25.755017 0.363556 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:26.756393 0.341182 udp 10.0.2.104 54523 <-> 111.250.115.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:27.758057 0.000000 udp 10.0.2.104 54523 -> 162.226.222.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:28.759072 0.217229 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:29.760554 0.158562 udp 10.0.2.104 54523 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:30.762138 0.614008 udp 10.0.2.104 54523 <-> 202.29.179.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:31.763491 0.059649 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:32.754782 0.000000 udp 10.0.2.104 54523 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:33.756616 0.792916 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:34.758362 0.000000 udp 10.0.2.104 54523 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:35.759188 0.077793 udp 10.0.2.104 54523 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:36.760537 0.162931 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:37.762158 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:38.763458 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:39.754950 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:40.756371 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:41.758167 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:42.759074 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:43.760548 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:44.762097 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:45.763759 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:46.755127 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:47.756679 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:48.758349 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:49.759359 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:50.760835 0.097764 udp 10.0.2.104 54523 <-> 82.246.196.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:40:51.762078 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:52.763788 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:53.414498 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:40:53.755132 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:55.758293 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:56.759122 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:57.760851 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:58.762465 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:40:59.763661 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:00.755076 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:01.756460 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:02.758594 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:03.759265 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:04.760996 0.000055 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:04.761051 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:41:05.762256 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:06.763907 0.169399 udp 10.0.2.104 54523 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:07.755126 0.155763 udp 10.0.2.104 54523 <-> 98.181.49.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:08.756796 0.064607 udp 10.0.2.104 54523 <-> 77.20.104.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:09.758548 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:10.759220 0.151172 udp 10.0.2.104 54523 <-> 69.120.164.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:11.760801 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:12.762461 0.847378 udp 10.0.2.104 54523 <-> 72.226.4.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:13.763903 3.054322 udp 10.0.2.104 54523 <-> 95.77.123.77 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:14.755237 0.000000 udp 10.0.2.104 54523 -> 188.153.244.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:15.756685 0.163721 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:17.759455 0.046011 udp 10.0.2.104 54523 <-> 46.35.173.47 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:18.122927 3.001444 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:41:18.760833 0.168249 udp 10.0.2.104 54523 <-> 24.94.119.57 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:19.762403 0.176154 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:20.763896 0.133417 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:21.755450 0.154977 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:22.757079 3.965798 udp 10.0.2.104 54523 <-> 173.17.161.159 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:23.758377 1.084062 udp 10.0.2.104 54523 <-> 109.60.31.97 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:25.130215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:41:25.929227 0.000000 udp 10.0.2.104 54523 <- 188.153.244.65 16464 RSP 0 0 1 470 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:26.762488 0.000000 udp 10.0.2.104 54523 -> 76.105.92.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:27.764077 0.182206 udp 10.0.2.104 54523 <-> 123.201.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:28.755387 0.160973 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:29.756743 0.373793 udp 10.0.2.104 54523 <-> 151.51.17.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:30.757780 0.114616 udp 10.0.2.104 54523 <-> 72.209.212.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:31.759482 0.116833 udp 10.0.2.104 54523 <-> 87.7.245.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:32.761021 0.156570 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:33.132226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:41:33.762627 0.000000 udp 10.0.2.104 54523 -> 184.160.172.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:34.764054 0.447785 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:35.755170 0.142688 udp 10.0.2.104 54523 <-> 69.63.41.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:36.756860 0.553636 udp 10.0.2.104 54523 <-> 79.19.32.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:37.758322 0.146229 udp 10.0.2.104 54523 <-> 37.212.32.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:38.760092 0.129703 udp 10.0.2.104 54523 <-> 79.1.217.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:39.761341 0.252179 udp 10.0.2.104 54523 <-> 161.200.212.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:40.422064 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:41:40.762672 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:41.764091 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:41.764150 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:41:43.756864 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:44.758361 0.442439 udp 10.0.2.104 54523 <-> 70.1.9.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:45.759884 0.020703 udp 10.0.2.104 54523 <-> 161.53.166.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:46.761710 0.370778 udp 10.0.2.104 54523 <-> 36.230.61.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:47.762742 0.139492 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:48.764023 0.384755 udp 10.0.2.104 54523 <-> 111.252.202.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:49.134854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:41:49.755392 0.324543 udp 10.0.2.104 54523 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:50.756679 0.156797 udp 10.0.2.104 54523 <-> 67.172.65.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:51.758192 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:51.758242 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:41:52.759694 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:53.761247 0.958718 udp 10.0.2.104 54523 <-> 70.1.9.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:41:54.762702 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:55.764210 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:56.756078 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:57.757036 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:58.758342 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:41:59.759690 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:00.761544 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:01.762534 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:02.764170 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:03.756066 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:04.756963 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:05.758242 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:06.760186 0.000057 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:06.760243 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:42:08.762929 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:09.756278 0.000000 udp 10.0.2.104 54523 -> 70.1.9.113 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:10.756498 0.094550 udp 10.0.2.104 54523 <-> 62.18.51.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:42:11.756964 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:12.758766 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:13.760222 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:14.761822 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:15.764131 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:16.760159 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:17.760701 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:18.769063 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:19.766546 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:20.763934 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:21.143564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:42:22.762861 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:23.754634 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:23.754729 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:42:24.757799 4.003587 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:25.757841 0.737420 udp 10.0.2.104 54523 <-> 70.1.9.113 16464 CON 0 0 7 5398 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:42:26.758873 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:27.418963 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:42:27.760201 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:29.763004 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:31.756183 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:32.757564 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:33.758936 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:34.760157 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:35.762062 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:36.763215 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:37.758092 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:38.758201 0.000050 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:38.758251 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:42:39.758340 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:40.759003 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:41.760179 0.000000 udp 10.0.2.104 54523 -> 70.1.9.113 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:42.763106 0.096193 udp 10.0.2.104 54523 <-> 178.95.55.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:42:43.763048 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:44.758020 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:45.758208 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:46.758082 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:47.758999 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:48.766936 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:49.766005 0.000099 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:49.766104 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:42:51.756832 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:52.760455 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:53.760647 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:54.760601 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:55.760475 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:56.762146 0.327502 udp 10.0.2.104 54523 <-> 70.1.9.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:42:57.763434 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:58.756082 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:42:59.757971 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:01.758736 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:02.760668 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:03.761899 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:04.763457 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:05.754889 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:06.756220 0.000000 udp 10.0.2.104 54523 -> 70.1.9.113 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:07.758048 2.068090 udp 10.0.2.104 54523 <-> 188.26.241.186 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:08.759015 0.054603 udp 10.0.2.104 54523 <-> 109.163.155.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:10.762437 0.308695 udp 10.0.2.104 54523 <-> 49.250.84.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:11.763858 3.203456 udp 10.0.2.104 54523 <-> 24.6.8.112 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:12.754831 0.000000 udp 10.0.2.104 54523 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:13.756405 1.529361 udp 10.0.2.104 54523 <-> 201.160.27.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:14.417203 0.000035 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:43:15.759269 0.159902 udp 10.0.2.104 54523 <-> 66.176.196.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:16.760710 0.077812 udp 10.0.2.104 54523 <-> 188.24.142.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:17.762249 0.078618 udp 10.0.2.104 54523 <-> 46.9.150.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:18.763540 0.087219 udp 10.0.2.104 54523 <-> 78.157.66.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:19.754755 0.000000 udp 10.0.2.104 54523 -> 182.189.159.201 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:20.756767 0.060047 udp 10.0.2.104 54523 <-> 95.113.159.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:21.757855 0.163198 udp 10.0.2.104 54523 <-> 24.60.218.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:22.759398 0.148110 udp 10.0.2.104 54523 <-> 69.244.114.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:23.760704 0.053812 udp 10.0.2.104 54523 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:24.762289 1.201117 udp 10.0.2.104 54523 <-> 76.115.104.75 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:26.755139 0.161283 udp 10.0.2.104 54523 <-> 98.250.16.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:27.756860 0.318412 udp 10.0.2.104 54523 <-> 153.164.223.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:28.758340 0.294382 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:29.759527 0.162406 udp 10.0.2.104 54523 <-> 98.243.26.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:30.763935 0.149784 udp 10.0.2.104 54523 <-> 50.134.10.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:31.764516 0.000000 udp 10.0.2.104 54523 -> 97.118.117.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:32.764535 0.320861 udp 10.0.2.104 54523 <-> 190.173.30.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:33.755430 3.003775 udp 10.0.2.104 54523 -> 76.226.213.19 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:34.756498 0.030254 udp 10.0.2.104 54523 <-> 89.134.105.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:35.757996 0.181413 udp 10.0.2.104 54523 <-> 70.75.88.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:37.760765 0.080308 udp 10.0.2.104 54523 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:38.762248 0.082314 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:39.764068 0.142816 udp 10.0.2.104 54523 <-> 24.53.34.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:40.754924 0.000000 udp 10.0.2.104 54523 -> 78.94.145.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:41.756671 0.054437 udp 10.0.2.104 54523 <-> 188.121.26.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:42.758295 0.373863 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:43.759339 0.000000 udp 10.0.2.104 54523 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:44.761320 0.149911 udp 10.0.2.104 54523 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:45.762100 0.376424 udp 10.0.2.104 54523 <-> 190.78.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:46.763454 0.368801 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:47.755279 0.000000 udp 10.0.2.104 54523 -> 189.13.22.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:48.756509 0.021703 udp 10.0.2.104 54523 <-> 78.94.145.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:49.757932 3.490483 udp 10.0.2.104 54523 <-> 14.98.186.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:50.759542 0.000000 udp 10.0.2.104 54523 -> 92.86.49.26 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:43:51.760936 0.153078 udp 10.0.2.104 54523 <-> 24.149.57.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:52.762304 1.248222 udp 10.0.2.104 54523 <-> 85.152.63.41 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:54.755486 0.213622 udp 10.0.2.104 54523 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:55.756585 0.058412 udp 10.0.2.104 54523 <-> 95.113.159.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:56.758203 0.070607 udp 10.0.2.104 54523 <-> 109.163.155.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:57.759301 0.185735 udp 10.0.2.104 54523 <-> 174.68.99.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:58.761170 3.356749 udp 10.0.2.104 54523 <-> 190.51.40.160 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:43:59.762308 0.041097 udp 10.0.2.104 54523 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:00.764141 3.996380 udp 10.0.2.104 54523 -> 113.19.2.30 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:01.416163 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:44:02.760684 3.000316 udp 10.0.2.104 54523 -> 12.41.245.50 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:03.760416 3.337695 udp 10.0.2.104 54523 <-> 218.227.129.90 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:07.763908 0.122625 udp 10.0.2.104 54523 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:08.755973 2.847299 udp 10.0.2.104 54523 <-> 113.19.2.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:09.757960 0.390238 udp 10.0.2.104 54523 <-> 186.91.198.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:10.758394 1.348576 udp 10.0.2.104 54523 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:11.759845 0.017674 udp 10.0.2.104 54523 <-> 89.103.142.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:12.761165 0.158536 udp 10.0.2.104 54523 <-> 24.158.215.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:13.762463 0.059289 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:14.764025 0.000000 udp 10.0.2.104 54523 -> 109.72.59.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:15.755613 0.000000 udp 10.0.2.104 54523 -> 75.110.39.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:16.756735 0.168908 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:17.758150 0.048117 udp 10.0.2.104 54523 <-> 37.203.120.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:18.761923 0.181150 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:19.763896 0.233698 udp 10.0.2.104 54523 <-> 190.206.205.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:20.764154 0.148595 udp 10.0.2.104 54523 <-> 69.121.7.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:21.764113 0.321985 udp 10.0.2.104 54523 <-> 186.93.9.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:22.758143 0.053935 udp 10.0.2.104 54523 <-> 81.236.193.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:23.765056 0.103596 udp 10.0.2.104 54523 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:24.764608 0.322292 udp 10.0.2.104 54523 <-> 150.162.122.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:25.762814 0.000000 udp 10.0.2.104 54523 -> 178.126.177.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:26.761378 0.162552 udp 10.0.2.104 54523 <-> 108.183.69.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:27.767426 0.000000 udp 10.0.2.104 54523 -> 59.181.98.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:28.768296 1.302228 udp 10.0.2.104 54523 <-> 37.250.73.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:29.762494 0.000000 udp 10.0.2.104 54523 -> 219.91.211.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:30.767134 0.218045 udp 10.0.2.104 54523 <-> 186.93.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:31.764302 0.084763 udp 10.0.2.104 54523 <-> 88.216.22.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:32.761761 0.142148 udp 10.0.2.104 54523 <-> 24.45.80.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:33.761154 1.127632 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:35.766213 0.159870 udp 10.0.2.104 54523 <-> 98.161.45.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:36.757935 0.000000 udp 10.0.2.104 54523 -> 96.58.51.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:37.763835 0.163837 udp 10.0.2.104 54523 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:38.762037 0.156931 udp 10.0.2.104 54523 <-> 71.90.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:39.759914 0.343386 udp 10.0.2.104 54523 <-> 72.235.234.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:40.762817 0.298152 udp 10.0.2.104 54523 <-> 187.37.104.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:41.766519 3.065801 udp 10.0.2.104 54523 <-> 179.45.166.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:42.756204 2.813536 udp 10.0.2.104 54523 <-> 113.19.2.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:43.757025 0.195865 udp 10.0.2.104 54523 <-> 50.66.54.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:44.757425 0.069499 udp 10.0.2.104 54523 <-> 5.43.88.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:45.758920 1.828695 udp 10.0.2.104 54523 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:46.759961 0.135654 udp 10.0.2.104 54523 <-> 95.57.128.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:47.764205 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:48.424126 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:44:48.768152 0.661295 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:49.762794 0.271225 udp 10.0.2.104 54523 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:44:51.764077 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:52.762488 0.000109 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:52.762597 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:44:53.760192 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:54.762208 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:55.769897 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:56.757440 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:57.755833 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:58.763165 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:44:59.764320 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:00.764522 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:01.764057 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:02.764107 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:03.754460 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:04.755895 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:05.757155 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:06.758789 0.379504 udp 10.0.2.104 54523 <-> 190.51.66.112 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:07.760163 0.307006 udp 10.0.2.104 54523 <-> 190.191.117.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:08.761847 0.469785 udp 10.0.2.104 54523 <-> 186.188.24.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:09.763266 0.415877 udp 10.0.2.104 54523 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:10.754480 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:11.756191 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:12.757380 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:13.758821 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:14.760333 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:15.761509 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:16.768696 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:17.758147 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:18.757882 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:19.758084 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:20.758692 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:22.762000 0.000000 udp 10.0.2.104 54523 -> 190.51.66.112 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:23.763204 0.000000 udp 10.0.2.104 54523 -> 190.191.117.97 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:24.754673 0.040087 udp 10.0.2.104 54523 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:25.756060 0.149397 udp 10.0.2.104 54523 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:26.757914 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:27.759081 0.000146 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:27.759227 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:45:28.760205 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:29.761918 0.374643 udp 10.0.2.104 54523 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:30.763343 0.271349 udp 10.0.2.104 54523 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:31.754661 1.057340 udp 10.0.2.104 54523 <-> 5.15.233.108 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:33.757416 0.067312 udp 10.0.2.104 54523 <-> 178.164.167.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:34.758973 0.242709 udp 10.0.2.104 54523 <-> 92.86.42.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:35.419926 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:45:35.760463 0.000000 udp 10.0.2.104 54523 -> 72.66.28.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:36.762063 0.000000 udp 10.0.2.104 54523 -> 27.106.76.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:37.763328 0.000000 udp 10.0.2.104 54523 -> 190.107.109.178 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:38.754633 0.124317 udp 10.0.2.104 54523 <-> 213.27.51.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:39.756517 0.045610 udp 10.0.2.104 54523 <-> 91.187.86.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:40.758181 0.253217 udp 10.0.2.104 54523 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:41.759077 0.355179 udp 10.0.2.104 54523 <-> 111.249.165.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:42.760472 0.027629 udp 10.0.2.104 54523 <-> 86.101.158.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:43.762214 0.045556 udp 10.0.2.104 54523 <-> 84.30.232.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:44.763938 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:45.754907 4.005553 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:46.756662 0.023735 udp 10.0.2.104 54523 <-> 89.132.188.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:47.758218 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:48.759084 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:50.762225 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:51.763462 0.448566 udp 10.0.2.104 54523 <-> 2.184.247.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:52.754929 0.453496 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:53.756532 0.410347 udp 10.0.2.104 54523 <-> 166.140.134.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:54.758225 0.118697 udp 10.0.2.104 54523 <-> 80.183.28.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:55.759215 0.346754 udp 10.0.2.104 54523 <-> 190.208.117.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:56.760685 0.126428 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:57.762096 0.369686 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:45:58.763967 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:45:59.754976 0.115951 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:00.756212 0.210911 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:01.758006 0.105798 udp 10.0.2.104 54523 <-> 46.55.49.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:02.759169 0.159920 udp 10.0.2.104 54523 <-> 142.165.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:03.760771 0.082554 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:04.761973 0.435945 udp 10.0.2.104 54523 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:05.763882 0.328587 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:06.755312 0.151970 udp 10.0.2.104 54523 <-> 98.160.101.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:07.756218 0.268896 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:08.757377 0.611727 udp 10.0.2.104 54523 <-> 151.238.233.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:09.759616 0.000000 udp 10.0.2.104 54523 -> 14.97.52.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:10.760620 1.269863 udp 10.0.2.104 54523 <-> 177.149.66.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:11.762610 0.048572 udp 10.0.2.104 54523 <-> 37.203.120.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:12.764119 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:13.755043 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:15.758060 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:16.759470 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:17.761210 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:18.768965 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:19.768048 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:20.756832 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:21.757172 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:22.417494 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:46:22.757992 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:23.763119 0.000043 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:23.763162 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:46:24.763100 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:25.763438 0.064360 udp 10.0.2.104 54523 <-> 77.85.172.144 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:26.763671 0.138958 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:27.755328 0.144055 udp 10.0.2.104 54523 <-> 69.125.238.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:28.756712 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:29.758343 0.549468 udp 10.0.2.104 54523 <-> 202.29.179.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:30.759797 0.031589 udp 10.0.2.104 54523 <-> 95.180.36.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:31.761136 0.058806 udp 10.0.2.104 54523 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:32.762429 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:33.763875 0.151198 udp 10.0.2.104 54523 <-> 24.61.172.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:34.755670 0.045353 udp 10.0.2.104 54523 <-> 178.150.200.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:35.756838 0.284166 udp 10.0.2.104 54523 <-> 181.177.210.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:36.758963 4.996652 udp 10.0.2.104 54523 -> 77.123.28.116 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:37.759433 0.038596 udp 10.0.2.104 54523 <-> 212.117.58.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:38.761315 4.878273 udp 10.0.2.104 54523 <-> 166.159.168.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:39.762706 0.376290 udp 10.0.2.104 54523 <-> 190.172.75.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:40.763731 0.253819 udp 10.0.2.104 54523 <-> 201.17.131.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:42.756810 0.058386 udp 10.0.2.104 54523 <-> 5.15.162.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:43.758763 0.128630 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:44.759608 0.043020 udp 10.0.2.104 54523 <-> 89.135.143.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:45.761454 0.137216 udp 10.0.2.104 54523 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:46.762565 0.069693 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:47.764114 0.158572 udp 10.0.2.104 54523 <-> 74.131.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:48.755419 0.166647 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:49.756884 0.148888 udp 10.0.2.104 54523 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:50.758364 0.000000 udp 10.0.2.104 54523 -> 46.109.153.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:51.759736 0.000000 udp 10.0.2.104 54523 -> 96.33.14.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:52.761021 0.000000 udp 10.0.2.104 54523 -> 5.20.154.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:53.762779 0.000000 udp 10.0.2.104 54523 -> 98.141.65.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:54.764058 0.000000 udp 10.0.2.104 54523 -> 89.37.188.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:55.755713 0.000000 udp 10.0.2.104 54523 -> 68.234.125.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:56.756825 0.000000 udp 10.0.2.104 54523 -> 220.152.1.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:57.758227 0.000000 udp 10.0.2.104 54523 -> 24.247.221.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:46:58.759660 0.052586 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:46:59.761369 0.036234 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:00.762611 0.077408 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:01.764137 0.000000 udp 10.0.2.104 54523 -> 96.33.14.166 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:02.755668 0.000000 udp 10.0.2.104 54523 -> 193.11.105.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:03.757383 0.000000 udp 10.0.2.104 54523 -> 46.109.153.100 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:04.758597 0.211051 udp 10.0.2.104 54523 -> 189.220.161.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:04.969648 0.000000 icmp 189.220.161.191 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 10:47:05.759946 0.000000 udp 10.0.2.104 54523 -> 173.3.214.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:06.761144 0.162806 udp 10.0.2.104 54523 -> 66.227.133.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:06.923950 0.000000 icmp 66.227.133.236 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 10:47:07.762861 0.209935 udp 10.0.2.104 54523 -> 89.37.188.248 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:07.972796 0.000000 icmp 89.37.188.248 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 10:47:08.764209 0.149894 udp 10.0.2.104 54523 -> 98.141.65.34 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:08.914103 0.000000 icmp 98.141.65.34 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 10:47:09.415223 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:47:09.755783 0.000000 udp 10.0.2.104 54523 -> 5.20.154.28 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:10.757057 0.000000 udp 10.0.2.104 54523 -> 68.234.125.41 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:11.758321 0.000000 udp 10.0.2.104 54523 -> 24.247.221.140 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:12.759867 0.000000 udp 10.0.2.104 54523 -> 220.152.1.136 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:13.762046 0.000000 udp 10.0.2.104 54523 -> 86.124.236.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:14.762779 0.072091 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:15.754385 0.082519 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:16.755836 0.000000 udp 10.0.2.104 54523 -> 193.11.105.119 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:17.756924 0.000000 udp 10.0.2.104 54523 -> 173.3.214.11 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:18.758491 0.000000 udp 10.0.2.104 54523 -> 96.33.14.166 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:19.760312 0.000000 udp 10.0.2.104 54523 -> 189.220.161.191 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:20.761521 0.000000 udp 10.0.2.104 54523 -> 66.227.133.236 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:21.762974 0.000000 udp 10.0.2.104 54523 -> 46.109.153.100 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:22.754475 0.000000 udp 10.0.2.104 54523 -> 89.37.188.248 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:23.756067 0.000000 udp 10.0.2.104 54523 -> 68.234.125.41 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:24.757178 0.000000 udp 10.0.2.104 54523 -> 24.247.221.140 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:25.758842 0.000000 udp 10.0.2.104 54523 -> 98.141.65.34 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:26.760074 0.000000 udp 10.0.2.104 54523 -> 5.20.154.28 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:27.761541 0.000000 udp 10.0.2.104 54523 -> 220.152.1.136 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:28.762743 0.000000 udp 10.0.2.104 54523 -> 50.134.240.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:29.754432 0.072164 udp 10.0.2.104 54523 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:30.756524 0.163459 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:31.757306 0.000000 udp 10.0.2.104 54523 -> 115.240.92.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:32.758990 0.000000 udp 10.0.2.104 54523 -> 91.218.91.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:33.760295 0.087329 udp 10.0.2.104 54523 <-> 77.238.194.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:34.761995 0.048205 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:35.763205 0.000000 udp 10.0.2.104 54523 -> 24.247.221.140 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:36.754469 0.298844 udp 10.0.2.104 54523 <-> 223.133.79.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:37.756159 0.000000 udp 10.0.2.104 54523 -> 178.126.177.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:38.757875 0.030554 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:39.758889 0.060897 udp 10.0.2.104 54523 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:40.760274 0.000000 udp 10.0.2.104 54523 -> 173.3.214.11 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:41.761516 0.000000 udp 10.0.2.104 54523 -> 96.33.14.166 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:42.762946 0.000000 udp 10.0.2.104 54523 -> 193.11.105.119 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:43.754510 0.000000 udp 10.0.2.104 54523 -> 46.109.153.100 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:44.756419 0.000000 udp 10.0.2.104 54523 -> 66.227.133.236 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:45.757418 0.000000 udp 10.0.2.104 54523 -> 189.220.161.191 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:46.759106 0.000000 udp 10.0.2.104 54523 -> 5.20.154.28 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:47.760329 0.000000 udp 10.0.2.104 54523 -> 89.37.188.248 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:48.761568 0.000000 udp 10.0.2.104 54523 -> 98.141.65.34 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:49.763014 0.000000 udp 10.0.2.104 54523 -> 24.247.221.140 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:50.754608 0.000000 udp 10.0.2.104 54523 -> 220.152.1.136 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:51.756217 0.359695 udp 10.0.2.104 54523 -> 68.234.125.41 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:52.115912 0.000000 icmp 68.234.125.41 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 10:47:52.757740 0.288347 udp 10.0.2.104 54523 <-> 223.133.79.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:53.759058 0.000000 udp 10.0.2.104 54523 -> 68.196.169.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:54.760279 0.145206 udp 10.0.2.104 54523 <-> 24.146.229.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:55.761587 0.183286 udp 10.0.2.104 54523 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:56.422593 0.000146 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:47:56.763253 0.000000 udp 10.0.2.104 54523 -> 86.124.156.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:47:57.754800 0.155532 udp 10.0.2.104 54523 <-> 96.58.51.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:58.756191 0.161249 udp 10.0.2.104 54523 <-> 69.140.208.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:47:59.757241 0.000000 udp 10.0.2.104 54523 -> 131.202.192.138 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:00.758991 0.000000 udp 10.0.2.104 54523 -> 88.186.78.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:01.760540 0.517497 udp 10.0.2.104 54523 <-> 78.43.169.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:02.762253 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:04.754706 4.005604 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:04.754781 4.005529 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 10:48:05.756407 2.004396 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:06.760772 0.109248 udp 10.0.2.104 54523 <-> 2.193.74.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:09.761913 3.995717 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:11.755134 0.165482 udp 10.0.2.104 54523 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:12.756771 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:14.759060 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:15.760616 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:16.762043 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:17.763676 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:18.754552 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:19.756189 0.306767 udp 10.0.2.104 54523 <-> 49.207.105.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:20.757282 0.049553 udp 10.0.2.104 54523 <-> 178.150.91.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:21.759003 0.000000 udp 10.0.2.104 54523 -> 68.196.169.156 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:22.760606 0.090486 udp 10.0.2.104 54523 <-> 95.232.66.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:23.762230 0.153619 udp 10.0.2.104 54523 <-> 97.76.164.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:24.763160 0.991846 udp 10.0.2.104 54523 <-> 24.220.225.122 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:26.756060 0.064971 udp 10.0.2.104 54523 <-> 5.14.54.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:27.757938 0.274199 udp 10.0.2.104 54523 <-> 179.232.142.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:28.759195 0.343794 udp 10.0.2.104 54523 <-> 190.178.240.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:29.760576 0.129848 udp 10.0.2.104 54523 <-> 82.53.67.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:30.762189 0.188905 udp 10.0.2.104 54523 <-> 183.82.228.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:31.763239 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:32.755081 0.048521 udp 10.0.2.104 54523 <-> 95.158.180.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:33.756345 0.428578 udp 10.0.2.104 54523 <-> 101.5.240.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:34.758102 0.307064 udp 10.0.2.104 54523 <-> 189.39.131.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:35.759232 0.150592 udp 10.0.2.104 54523 <-> 131.202.192.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:36.761441 0.095583 udp 10.0.2.104 54523 <-> 82.230.115.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:37.762284 0.101880 udp 10.0.2.104 54523 <-> 79.12.46.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:38.763846 1.120342 udp 10.0.2.104 54523 <-> 24.48.173.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:39.755034 0.162737 udp 10.0.2.104 54523 <-> 72.191.109.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:40.758083 0.845858 udp 10.0.2.104 54523 <-> 217.29.96.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:41.758090 0.376373 udp 10.0.2.104 54523 <-> 124.12.33.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:42.759119 0.198678 udp 10.0.2.104 54523 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:43.419676 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:48:43.767794 0.231577 udp 10.0.2.104 54523 <-> 186.144.251.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:44.765614 0.237580 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:45.763461 0.175358 udp 10.0.2.104 54523 <-> 68.184.203.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:46.754955 0.192359 udp 10.0.2.104 54523 <-> 68.230.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:47.756383 1.261073 udp 10.0.2.104 54523 <-> 85.64.72.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:48.757872 0.000000 udp 10.0.2.104 54523 -> 5.14.70.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:49.760089 0.000000 udp 10.0.2.104 54523 -> 95.65.118.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:50.762850 0.312253 udp 10.0.2.104 54523 <-> 186.94.172.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:51.765783 0.136862 udp 10.0.2.104 54523 <-> 76.124.113.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:52.764017 0.129515 udp 10.0.2.104 54523 <-> 77.40.100.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:53.754991 0.000000 udp 10.0.2.104 54523 -> 190.39.82.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:54.756548 0.000000 udp 10.0.2.104 54523 -> 200.84.79.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:55.758643 0.029986 udp 10.0.2.104 54523 <-> 87.97.129.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:56.759556 0.318648 udp 10.0.2.104 54523 <-> 220.142.70.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:57.761244 0.000000 udp 10.0.2.104 54523 -> 50.84.28.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:48:58.762399 0.246241 udp 10.0.2.104 54523 <-> 200.93.94.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:48:59.763967 0.166334 udp 10.0.2.104 54523 <-> 24.220.201.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:00.755258 0.144509 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:01.756670 0.143944 udp 10.0.2.104 54523 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:02.757981 0.040542 udp 10.0.2.104 54523 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:03.759690 0.797942 udp 10.0.2.104 54523 <-> 181.118.86.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:04.761266 2.158702 udp 10.0.2.104 54523 <-> 200.55.82.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:05.762186 0.033013 udp 10.0.2.104 54523 <-> 84.115.169.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:06.764329 0.000000 udp 10.0.2.104 54523 -> 188.153.244.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:07.755389 0.000000 udp 10.0.2.104 54523 -> 189.68.129.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:08.756780 0.285882 udp 10.0.2.104 54523 <-> 190.54.229.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:09.758184 0.087830 udp 10.0.2.104 54523 <-> 188.2.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:10.759417 0.371119 udp 10.0.2.104 54523 <-> 1.168.141.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:11.760853 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:12.764449 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:13.764429 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:14.417082 0.000000 udp 10.0.2.104 54523 <- 188.153.244.65 16464 RSP 0 0 1 750 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:14.755330 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:15.756459 3.004428 udp 10.0.2.104 54523 -> 82.77.213.49 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:16.758224 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:17.759725 0.175802 udp 10.0.2.104 54523 <-> 173.23.208.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:19.766041 0.076889 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:20.766524 0.173504 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:21.760504 0.068094 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:22.758786 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:23.758043 0.175870 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:24.759809 0.140846 udp 10.0.2.104 54523 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:25.766418 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:26.766354 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:27.766453 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:28.756621 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:29.757059 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:30.417511 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:49:30.758281 0.172567 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:31.759797 0.148578 udp 10.0.2.104 54523 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:32.760989 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:33.762531 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:34.764111 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:36.756955 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:37.758372 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:38.759974 1.155997 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:40.762926 0.375122 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:41.764311 0.029134 udp 10.0.2.104 54523 <-> 85.218.139.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:42.755947 0.000000 udp 10.0.2.104 54523 -> 201.211.111.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:43.757085 0.164185 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:44.760238 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:45.759993 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:46.761915 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:47.762680 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:48.754258 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:49.755793 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:50.757091 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:51.758567 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:52.759808 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:53.761273 4.997477 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:54.763084 0.000000 udp 10.0.2.104 54523 -> 194.106.107.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:55.754313 0.217787 udp 10.0.2.104 54523 <-> 190.75.66.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:56.755793 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:49:57.757167 0.164503 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:49:59.760082 4.998649 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:00.764104 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:01.764326 0.000000 udp 10.0.2.104 54523 -> 194.106.107.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:02.757937 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:03.757942 0.164415 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:05.758480 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:06.764031 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:07.764597 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:08.764357 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:09.754429 4.005914 udp 10.0.2.104 54523 <-> 85.218.139.237 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:10.755974 0.171642 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:11.757203 0.153518 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:12.758801 3.004040 udp 10.0.2.104 54523 -> 194.106.107.250 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:14.761777 2.156795 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:17.416050 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:50:17.756317 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:18.757273 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:19.758755 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:20.760277 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:21.153688 3.001536 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:50:21.761677 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:22.763255 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:23.754482 0.342143 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:24.756162 0.323557 udp 10.0.2.104 54523 <-> 187.10.24.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:25.757319 1.138901 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:26.758877 0.000000 udp 10.0.2.104 54523 -> 87.18.54.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:27.760362 0.000000 udp 10.0.2.104 54523 -> 78.149.132.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:28.160655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:50:28.761930 0.061361 udp 10.0.2.104 54523 <-> 37.203.120.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:29.763159 0.150832 udp 10.0.2.104 54523 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:30.754905 0.333852 udp 10.0.2.104 54523 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:31.756088 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:32.757469 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:33.759179 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:34.760420 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:34.760497 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:50:36.162161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:50:36.763158 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:37.754973 0.000000 udp 10.0.2.104 54523 -> 188.246.92.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:38.756340 0.000000 udp 10.0.2.104 54523 -> 85.220.165.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:39.757893 0.268467 udp 10.0.2.104 54523 <-> 201.209.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:41.760401 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:42.762007 0.000086 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:42.762093 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:50:43.766469 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:44.758885 0.000000 udp 10.0.2.104 54523 -> 85.220.165.198 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:45.766097 0.000000 udp 10.0.2.104 54523 -> 117.195.75.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:46.766844 0.032297 udp 10.0.2.104 54523 <-> 188.246.92.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:47.764709 0.127688 udp 10.0.2.104 54523 <-> 82.247.43.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:48.763082 0.279734 udp 10.0.2.104 54523 <-> 190.195.159.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:49.762801 0.226011 udp 10.0.2.104 54523 <-> 109.193.154.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:50.768778 0.159605 udp 10.0.2.104 54523 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:51.758856 0.302402 udp 10.0.2.104 54523 <-> 181.226.107.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:52.168842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:50:52.758856 0.139604 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:53.758672 0.135318 udp 10.0.2.104 54523 <-> 62.18.173.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:54.759133 0.000000 udp 10.0.2.104 54523 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:55.760584 0.845029 udp 10.0.2.104 54523 <-> 151.70.61.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:56.762426 0.000000 udp 10.0.2.104 54523 -> 184.162.36.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:50:57.766844 0.245145 udp 10.0.2.104 54523 <-> 200.84.7.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:58.756353 0.252142 udp 10.0.2.104 54523 <-> 186.221.99.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:50:59.757368 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:00.757992 0.159600 udp 10.0.2.104 54523 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:01.763121 0.000000 udp 10.0.2.104 54523 -> 109.61.112.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:02.762761 4.998017 udp 10.0.2.104 54523 -> 79.115.87.246 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:03.762261 0.000000 udp 10.0.2.104 54523 -> 78.159.43.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:04.413098 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:51:04.763829 3.649148 udp 10.0.2.104 54523 <-> 190.221.41.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:05.755085 0.000000 udp 10.0.2.104 54523 -> 181.192.15.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:06.757299 0.394168 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:07.816920 0.000819 udp 10.0.2.104 54523 <- 79.115.87.246 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:08.771952 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:09.769056 0.162915 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:10.765978 0.252339 udp 10.0.2.104 54523 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:11.764740 0.000000 udp 10.0.2.104 54523 -> 46.175.229.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:12.757855 0.131105 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:13.758015 0.000000 udp 10.0.2.104 54523 -> 5.234.54.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:14.757977 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:15.759167 0.032171 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:16.760589 0.000000 udp 10.0.2.104 54523 -> 69.118.76.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:17.762275 0.607778 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:18.763620 0.160650 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:19.758139 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:20.766328 0.033960 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:21.764594 0.141008 udp 10.0.2.104 54523 <-> 69.118.76.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:22.761951 0.000000 udp 10.0.2.104 54523 -> 201.246.136.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:23.760718 0.176323 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:24.171874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:51:24.762436 3.597725 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:25.764038 0.165499 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:26.755155 0.031936 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:28.757410 1.263590 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:30.761187 0.036708 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:31.762428 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:32.763696 0.160609 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:33.755004 0.050596 udp 10.0.2.104 54523 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:34.756602 4.076401 udp 10.0.2.104 54523 <-> 95.220.247.249 16464 CON 0 0 4 1064 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:35.757575 0.601561 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:37.760919 0.039057 udp 10.0.2.104 54523 <-> 94.73.1.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:39.763944 0.000000 udp 10.0.2.104 54523 -> 124.187.13.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:40.762557 0.368106 udp 10.0.2.104 54523 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:41.760578 0.000000 udp 10.0.2.104 54523 -> 47.16.247.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:42.758405 0.150023 udp 10.0.2.104 54523 <-> 24.184.71.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:43.759529 0.000000 udp 10.0.2.104 54523 -> 64.253.10.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:44.760961 0.000000 udp 10.0.2.104 54523 -> 181.55.154.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:45.764152 0.114492 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:46.764297 0.081942 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:47.755098 2.003011 udp 10.0.2.104 54523 -> 217.18.251.249 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:48.756699 2.058457 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:51.420687 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:51:51.760960 0.342030 udp 10.0.2.104 54523 <-> 37.190.195.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:52.762741 0.128239 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:53.764005 0.085270 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:54.755355 0.077872 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:55.756882 0.106820 udp 10.0.2.104 54523 <-> 151.15.164.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:56.758267 0.000000 udp 10.0.2.104 54523 -> 117.234.122.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:57.759671 0.000000 udp 10.0.2.104 54523 -> 177.107.240.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:51:58.760925 0.140984 udp 10.0.2.104 54523 <-> 67.87.224.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:51:59.762695 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:00.764078 0.355776 udp 10.0.2.104 54523 <-> 190.203.117.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:01.755748 0.381454 udp 10.0.2.104 54523 <-> 190.198.162.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:02.756844 0.000000 udp 10.0.2.104 54523 -> 5.13.57.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:03.758214 1.302277 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:04.759855 0.021685 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:05.761347 0.687241 udp 10.0.2.104 54523 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:06.762558 4.123808 udp 10.0.2.104 54523 <-> 216.121.246.15 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:07.764085 0.374002 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:08.755919 0.213725 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:09.756664 0.000000 udp 10.0.2.104 54523 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:11.759657 0.000000 udp 10.0.2.104 54523 -> 94.139.135.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:12.761421 0.064140 udp 10.0.2.104 54523 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:13.762928 0.146158 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:14.764237 0.214481 udp 10.0.2.104 54523 <-> 97.93.51.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:15.755567 0.289288 udp 10.0.2.104 54523 <-> 189.79.96.106 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:16.757062 0.000000 udp 10.0.2.104 54523 -> 114.25.138.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:17.759056 0.064759 udp 10.0.2.104 54523 <-> 89.234.212.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:18.759940 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:19.761362 0.212739 udp 10.0.2.104 54523 <-> 37.213.166.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:20.762834 0.075835 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:21.754453 0.192048 udp 10.0.2.104 54523 <-> 201.242.68.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:22.756131 0.131605 udp 10.0.2.104 54523 <-> 79.18.211.99 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:23.756914 0.605511 udp 10.0.2.104 54523 <-> 70.184.95.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:24.758650 0.052292 udp 10.0.2.104 54523 <-> 78.35.97.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:25.759929 0.136445 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:26.761424 0.152747 udp 10.0.2.104 54523 <-> 98.160.101.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:27.762799 1.031242 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:29.755626 0.082914 udp 10.0.2.104 54523 <-> 84.90.235.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:30.756982 4.354632 udp 10.0.2.104 54523 <-> 74.199.89.82 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:31.758640 0.250349 udp 10.0.2.104 54523 <-> 70.189.102.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:32.760046 0.024638 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:33.761640 0.000000 udp 10.0.2.104 54523 -> 78.88.193.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:35.754378 0.000000 udp 10.0.2.104 54523 -> 87.4.183.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:36.756055 0.044872 udp 10.0.2.104 54523 <-> 91.187.86.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:37.757091 0.128955 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:38.418664 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:52:38.759125 1.045748 udp 10.0.2.104 54523 <-> 213.109.121.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:40.761845 2.043660 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:41.763709 0.000000 udp 10.0.2.104 54523 -> 186.90.146.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:43.756266 0.174027 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:44.757145 0.138502 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:45.758816 0.427098 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:46.760174 2.164536 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 4 1616 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:47.761360 0.126194 udp 10.0.2.104 54523 <-> 216.121.246.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:49.754718 0.286425 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:50.756260 0.000000 udp 10.0.2.104 54523 -> 49.205.253.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:51.757991 0.000000 udp 10.0.2.104 54523 -> 201.27.47.192 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:52.468943 0.013365 udp 10.0.2.104 54603 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 10:52:52.482632 0.000000 udp 10.0.2.104 54604 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:52.758690 0.229486 udp 10.0.2.104 54523 <-> 89.216.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:53.760455 4.087870 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:54.761644 1.992957 udp 10.0.2.104 54523 -> 71.187.41.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:52:55.763059 0.289849 udp 10.0.2.104 54523 <-> 186.88.170.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:58.757273 3.112452 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:52:59.758834 0.000000 udp 10.0.2.104 54523 -> 85.230.174.252 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:00.760505 0.164673 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:02.763051 2.875729 udp 10.0.2.104 54523 <-> 189.13.22.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:03.754741 0.471679 udp 10.0.2.104 54523 <-> 75.195.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:04.755920 0.195060 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:05.757873 0.073144 udp 10.0.2.104 54523 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:06.759029 0.164522 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:07.760378 0.162088 udp 10.0.2.104 54523 <-> 76.187.122.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:08.761621 0.093770 udp 10.0.2.104 54523 <-> 84.122.212.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:09.763102 0.179358 udp 10.0.2.104 54523 <-> 68.2.34.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:10.754830 0.171015 udp 10.0.2.104 54523 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:11.755999 0.152393 udp 10.0.2.104 54523 <-> 76.120.220.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:12.757405 0.072755 udp 10.0.2.104 54523 <-> 79.113.242.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:13.758790 0.134435 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:14.760471 0.051810 udp 10.0.2.104 54523 <-> 46.35.173.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:15.761974 4.042629 udp 10.0.2.104 54523 <-> 62.195.179.53 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:16.763192 0.160585 udp 10.0.2.104 54523 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:17.754578 0.279932 udp 10.0.2.104 54523 <-> 179.232.142.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:18.756079 0.000000 udp 10.0.2.104 54523 -> 81.11.215.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:20.758969 0.245423 udp 10.0.2.104 54523 <-> 161.200.173.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:21.760436 0.000000 udp 10.0.2.104 54523 -> 188.246.91.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:22.762067 0.355007 udp 10.0.2.104 54523 <-> 111.249.165.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:23.763310 0.462005 udp 10.0.2.104 54523 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:24.754684 0.159608 udp 10.0.2.104 54523 <-> 68.47.164.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:25.415878 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:53:25.756468 0.180248 udp 10.0.2.104 54523 <-> 208.107.200.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:26.757977 1.039340 udp 10.0.2.104 54523 <-> 84.252.26.195 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:28.760588 0.054263 udp 10.0.2.104 54523 <-> 88.156.89.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:29.762005 0.248134 udp 10.0.2.104 54523 <-> 216.222.167.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:30.763038 0.215829 udp 10.0.2.104 54523 <-> 75.25.21.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:31.754947 0.000000 udp 10.0.2.104 54523 -> 190.204.12.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:32.756283 0.030160 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:33.757891 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:34.759160 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:35.760548 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:36.762077 3.996281 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:37.764078 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:38.754789 0.361229 udp 10.0.2.104 54523 <-> 190.178.172.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:41.759120 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:42.760911 0.168398 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:43.761889 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:44.763597 1.095419 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:45.754601 0.358875 udp 10.0.2.104 54523 <-> 125.128.173.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:46.756542 0.198004 udp 10.0.2.104 54523 <-> 106.51.31.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:47.758158 0.079279 udp 10.0.2.104 54523 <-> 93.156.11.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:48.759267 0.824217 udp 10.0.2.104 54523 <-> 190.17.37.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:49.760729 0.153345 udp 10.0.2.104 54523 <-> 50.202.4.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:50.762376 0.211723 udp 10.0.2.104 54523 <-> 67.169.170.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:51.763973 0.208910 udp 10.0.2.104 54523 <-> 1.22.76.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:52.755084 0.200486 udp 10.0.2.104 54523 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:53.756779 0.159638 udp 10.0.2.104 54523 <-> 174.69.148.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:54.758448 2.460172 udp 10.0.2.104 54523 <-> 72.152.208.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:55.759229 0.000000 udp 10.0.2.104 54523 -> 98.101.27.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:53:57.762079 0.426536 udp 10.0.2.104 54523 <-> 186.93.155.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:58.763663 0.094086 udp 10.0.2.104 54523 <-> 158.148.145.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:53:59.754757 0.122426 udp 10.0.2.104 54523 <-> 178.120.38.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:00.756578 0.145692 udp 10.0.2.104 54523 <-> 69.126.154.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:01.758374 0.394596 udp 10.0.2.104 54523 <-> 27.2.158.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:02.759207 0.161368 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:03.760832 0.135035 udp 10.0.2.104 54523 <-> 98.221.57.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:04.762366 0.107366 udp 10.0.2.104 54523 <-> 87.111.149.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:05.764204 0.000000 udp 10.0.2.104 54523 -> 195.174.108.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:06.755015 0.204707 udp 10.0.2.104 54523 <-> 174.50.95.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:07.757094 4.116612 udp 10.0.2.104 54523 <-> 122.106.43.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:08.758022 1.458711 udp 10.0.2.104 54523 <-> 188.38.61.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:09.759721 0.649588 udp 10.0.2.104 54523 <-> 105.225.179.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:10.761064 0.136825 udp 10.0.2.104 54523 <-> 74.57.225.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:11.762403 0.075611 udp 10.0.2.104 54523 <-> 79.118.138.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:12.413197 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:54:12.763928 0.060391 udp 10.0.2.104 54523 <-> 93.105.14.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:13.755321 0.683978 udp 10.0.2.104 54523 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:14.756452 0.000000 udp 10.0.2.104 54523 -> 212.119.157.177 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:15.758572 0.147645 udp 10.0.2.104 54523 <-> 50.30.116.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:16.759395 0.209717 udp 10.0.2.104 54523 <-> 189.194.83.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:17.761220 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:18.762800 0.159794 udp 10.0.2.104 54523 <-> 174.89.51.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:19.763812 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:20.755493 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:21.756643 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:22.758871 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:23.759629 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:24.760948 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:25.762611 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:26.764432 0.139766 udp 10.0.2.104 54523 <-> 74.57.225.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:27.755455 0.156844 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:28.756640 0.262704 udp 10.0.2.104 54523 <-> 181.166.240.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:29.758375 0.215397 udp 10.0.2.104 54523 <-> 97.93.51.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:30.759990 0.065437 udp 10.0.2.104 54523 <-> 83.213.201.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:31.760970 0.096962 udp 10.0.2.104 54523 <-> 79.23.235.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:32.762541 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:33.764115 0.610246 udp 10.0.2.104 54523 <-> 77.89.104.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:34.755378 0.164738 udp 10.0.2.104 54523 <-> 76.187.223.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:35.756886 0.055235 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:36.758605 0.000000 udp 10.0.2.104 54523 -> 98.253.7.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:37.759600 0.000000 udp 10.0.2.104 54523 -> 186.124.166.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:38.761121 0.149165 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:39.762563 0.170318 udp 10.0.2.104 54523 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:40.763944 0.154248 udp 10.0.2.104 54523 <-> 69.138.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:41.755277 0.602441 udp 10.0.2.104 54523 <-> 219.162.244.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:42.756983 0.145474 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:43.758480 0.148975 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:44.759934 0.215033 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:45.761347 1.080075 udp 10.0.2.104 54523 <-> 176.8.201.186 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:47.764183 0.106955 udp 10.0.2.104 54523 <-> 85.210.234.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:48.755381 0.071986 udp 10.0.2.104 54523 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:49.757055 0.078162 udp 10.0.2.104 54523 <-> 151.15.164.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:50.758808 0.047934 udp 10.0.2.104 54523 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:51.759867 0.088510 udp 10.0.2.104 54523 <-> 78.157.66.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:52.761318 0.145111 udp 10.0.2.104 54523 <-> 2.180.36.115 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:53.762628 0.145792 udp 10.0.2.104 54523 <-> 68.199.156.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:54.754347 0.284773 udp 10.0.2.104 54523 <-> 210.194.250.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:55.755817 0.482098 udp 10.0.2.104 54523 <-> 201.74.108.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:54:56.757031 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:57.758753 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:54:59.420174 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:54:59.761882 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:00.762658 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:01.754249 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:02.756402 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:03.757378 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:04.758788 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:05.760326 1.864620 udp 10.0.2.104 54523 <-> 84.123.103.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:06.761576 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:07.763248 0.349721 udp 10.0.2.104 54523 <-> 122.121.39.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:08.754276 1.769257 udp 10.0.2.104 54523 <-> 176.201.32.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:09.755977 0.151236 udp 10.0.2.104 54523 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:10.756974 0.009343 udp 10.0.2.104 54523 <-> 94.74.245.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:11.758671 0.060951 udp 10.0.2.104 54523 <-> 82.159.28.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:12.759997 0.347677 udp 10.0.2.104 54523 <-> 114.46.235.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:13.761496 0.069726 udp 10.0.2.104 54523 <-> 85.86.237.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:14.763003 0.209089 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:15.754198 0.166005 udp 10.0.2.104 54523 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:16.755721 0.030621 udp 10.0.2.104 54523 <-> 185.13.243.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:17.757386 0.152994 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:18.758863 0.051305 udp 10.0.2.104 54523 <-> 217.24.71.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:19.760269 0.303710 udp 10.0.2.104 54523 <-> 186.222.191.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:20.761932 0.000000 udp 10.0.2.104 54523 -> 114.44.142.202 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:21.762805 0.000000 udp 10.0.2.104 54523 -> 83.192.67.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:22.754518 0.153223 udp 10.0.2.104 54523 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:23.755991 0.244814 udp 10.0.2.104 54523 <-> 92.60.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:24.757187 0.819643 udp 10.0.2.104 54523 <-> 76.202.177.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:25.758727 0.157619 udp 10.0.2.104 54523 <-> 76.180.2.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:26.760286 0.168888 udp 10.0.2.104 54523 <-> 71.94.98.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:27.761584 0.161175 udp 10.0.2.104 54523 <-> 67.241.19.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:28.763063 0.078322 udp 10.0.2.104 54523 <-> 46.37.71.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:29.754552 0.000000 udp 10.0.2.104 54523 -> 79.26.223.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:30.755792 0.268123 udp 10.0.2.104 54523 <-> 181.29.200.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:31.757382 0.299616 udp 10.0.2.104 54523 <-> 190.138.32.138 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:32.758869 0.000000 udp 10.0.2.104 54523 -> 188.218.34.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:33.760469 0.000000 udp 10.0.2.104 54523 -> 84.124.183.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:34.761820 0.723489 udp 10.0.2.104 54523 <-> 79.53.137.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:35.763330 0.076708 udp 10.0.2.104 54523 <-> 86.126.32.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:36.754934 0.154578 udp 10.0.2.104 54523 <-> 82.249.156.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:37.756174 0.470851 udp 10.0.2.104 54523 <-> 187.2.67.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:38.758058 0.175167 udp 10.0.2.104 54523 <-> 24.217.52.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:39.758937 0.090898 udp 10.0.2.104 54523 <-> 88.245.27.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:40.760498 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:41.761895 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:42.763463 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:43.754796 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:44.756135 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:45.757641 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:45.757729 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:55:46.418764 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:55:46.758756 0.000000 udp 10.0.2.104 54523 -> 186.191.18.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:55:47.760376 0.251968 udp 10.0.2.104 54523 <-> 82.243.94.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:48.761985 0.169307 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:49.763409 0.377718 udp 10.0.2.104 54523 <-> 177.11.145.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:50.754790 0.080407 udp 10.0.2.104 54523 <-> 88.174.239.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:51.756299 0.320460 udp 10.0.2.104 54523 <-> 175.210.26.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:52.757911 0.097050 udp 10.0.2.104 54523 <-> 151.65.224.22 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:53.759068 0.029026 udp 10.0.2.104 54523 <-> 89.215.134.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:54.760794 0.218982 udp 10.0.2.104 54523 <-> 187.240.58.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:55.764686 0.141272 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:56.764663 0.238549 udp 10.0.2.104 54523 <-> 69.62.15.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:57.754599 0.025354 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:58.756347 0.079536 udp 10.0.2.104 54523 <-> 213.37.198.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:55:59.757747 0.000000 udp 10.0.2.104 54523 -> 24.111.50.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:00.758965 0.162527 udp 10.0.2.104 54523 <-> 98.103.195.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:01.760619 4.997404 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:02.762072 0.315015 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:03.763318 0.000000 udp 10.0.2.104 54523 -> 98.194.123.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:04.755007 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:05.757285 0.000000 udp 10.0.2.104 54523 -> 74.110.36.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:06.800421 0.000000 udp 10.0.2.104 54523 <- 5.20.145.20 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:07.759123 0.000000 udp 10.0.2.104 54523 -> 50.72.204.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:08.760617 0.145364 udp 10.0.2.104 54523 <-> 82.38.6.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:09.762079 0.167455 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:10.763818 0.000000 udp 10.0.2.104 54523 -> 86.126.32.58 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:11.754770 0.052450 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:12.756534 0.345982 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:13.757393 0.278614 udp 10.0.2.104 54523 <-> 201.209.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:14.759120 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:15.760617 0.347466 udp 10.0.2.104 54523 <-> 190.51.66.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:16.762184 0.032646 udp 10.0.2.104 54523 <-> 195.60.193.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:17.763055 0.856042 udp 10.0.2.104 54523 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:18.755014 0.224263 udp 10.0.2.104 54523 <-> 190.73.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:19.756311 0.000000 udp 10.0.2.104 54523 -> 212.50.72.155 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:20.758338 0.135939 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:21.759386 0.030022 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:22.760579 4.997740 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:23.762067 2.303358 udp 10.0.2.104 54523 <-> 75.246.254.27 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:24.763944 0.030291 udp 10.0.2.104 54523 <-> 77.46.40.14 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:26.756430 0.000000 udp 10.0.2.104 54523 -> 201.132.60.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:27.919281 0.000000 udp 10.0.2.104 54523 <- 75.86.159.42 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:28.759338 0.219412 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:29.760761 0.296969 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:30.762338 0.081708 udp 10.0.2.104 54523 <-> 78.72.225.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:31.763563 0.147332 udp 10.0.2.104 54523 <-> 74.195.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:32.754989 3.139747 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:33.416380 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:56:33.756464 0.000000 udp 10.0.2.104 54523 -> 82.243.94.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:34.758378 4.996507 udp 10.0.2.104 54523 <-> 77.22.44.38 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:36.760639 0.244512 udp 10.0.2.104 54523 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:37.762288 0.110823 udp 10.0.2.104 54523 <-> 95.77.123.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:38.763670 0.000000 udp 10.0.2.104 54523 -> 187.213.51.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:39.819686 0.000000 udp 10.0.2.104 54523 <- 77.22.44.38 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:40.756350 0.945496 udp 10.0.2.104 54523 <-> 201.187.0.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:41.758283 0.146315 udp 10.0.2.104 54523 <-> 69.121.228.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:42.759445 0.059864 udp 10.0.2.104 54523 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:43.761070 0.173614 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:44.762411 0.588070 udp 10.0.2.104 54523 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:45.763632 0.114457 udp 10.0.2.104 54523 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:46.755333 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:47.756511 1.057137 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:49.759366 0.053757 udp 10.0.2.104 54523 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:50.760953 4.997207 udp 10.0.2.104 54523 -> 118.171.226.5 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:51.762666 0.000000 udp 10.0.2.104 54523 -> 187.161.132.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:52.763878 0.121218 udp 10.0.2.104 54523 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:53.755180 0.000000 udp 10.0.2.104 54523 -> 24.241.36.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:54.756583 0.055418 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:56.101032 0.000000 udp 10.0.2.104 54523 <- 118.171.226.5 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:56:56.759928 0.103178 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:57.760928 0.516411 udp 10.0.2.104 54523 <-> 187.161.132.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:58.762476 0.210150 udp 10.0.2.104 54523 <-> 209.236.94.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:56:59.764082 1.403023 udp 10.0.2.104 54523 <-> 103.6.169.85 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:00.755469 3.148131 udp 10.0.2.104 54523 <-> 71.71.254.85 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:01.756995 0.042185 udp 10.0.2.104 54523 <-> 195.60.193.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:02.758663 1.004846 udp 10.0.2.104 54523 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:04.761060 0.361237 udp 10.0.2.104 54523 <-> 14.53.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:05.762923 0.217771 udp 10.0.2.104 54523 <-> 190.73.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:06.764001 0.146409 udp 10.0.2.104 54523 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:07.755793 0.019371 udp 10.0.2.104 54523 <-> 161.53.202.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:08.757145 1.012770 udp 10.0.2.104 54523 <-> 190.39.39.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:09.758431 0.072550 udp 10.0.2.104 54523 <-> 78.8.236.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:10.759752 0.062055 udp 10.0.2.104 54523 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:11.761523 0.342345 udp 10.0.2.104 54523 <-> 190.157.239.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:12.762882 0.000000 udp 10.0.2.104 54523 -> 151.238.198.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:13.764251 0.143747 udp 10.0.2.104 54523 <-> 107.16.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:14.755392 0.029092 udp 10.0.2.104 54523 <-> 141.170.198.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:15.757224 0.000000 udp 10.0.2.104 54523 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:16.758586 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:17.759925 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:18.761343 0.188323 udp 10.0.2.104 54523 <-> 68.98.24.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:19.762642 0.092278 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:20.413423 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:57:20.763981 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:21.755567 0.403514 udp 10.0.2.104 54523 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:22.757178 0.060729 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:23.758921 0.151120 udp 10.0.2.104 54523 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:24.759987 0.041431 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:25.761719 0.000000 udp 10.0.2.104 54523 -> 5.13.239.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:26.762918 0.307250 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:27.754355 3.086721 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:28.755866 0.178338 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:29.757068 0.292342 udp 10.0.2.104 54523 <-> 5.151.60.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:31.759860 1.141365 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:33.762805 0.311881 udp 10.0.2.104 54523 <-> 186.92.54.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:34.754385 0.390862 udp 10.0.2.104 54523 <-> 5.200.214.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:35.755738 0.000000 udp 10.0.2.104 54523 -> 107.223.54.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:36.757177 0.153371 udp 10.0.2.104 54523 <-> 67.253.48.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:37.758885 0.639498 udp 10.0.2.104 54523 <-> 2.184.53.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:38.760127 0.125692 udp 10.0.2.104 54523 <-> 173.218.218.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:39.761521 1.286215 udp 10.0.2.104 54523 <-> 110.132.54.144 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:41.754454 0.297261 udp 10.0.2.104 54523 <-> 125.4.4.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:42.755805 0.073205 udp 10.0.2.104 54523 <-> 109.163.155.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:43.757092 0.158077 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:44.758733 1.277920 udp 10.0.2.104 54523 <-> 201.213.50.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:45.760036 0.331994 udp 10.0.2.104 54523 <-> 201.86.129.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:46.761631 0.180966 udp 10.0.2.104 54523 <-> 69.59.85.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:47.184681 3.001792 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:57:47.763158 0.051510 udp 10.0.2.104 54523 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:48.754420 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:49.755850 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:50.757410 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:51.758823 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:52.760226 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:53.762064 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:54.195600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:57:54.764734 0.000000 udp 10.0.2.104 54523 -> 186.232.5.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:55.754603 0.068067 udp 10.0.2.104 54523 <-> 62.165.227.24 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:56.758639 0.398148 udp 10.0.2.104 54523 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:57:57.758796 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:58.758911 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:57:59.760135 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:00.761639 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:01.762961 0.000045 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:01.763006 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:58:02.194047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:58:02.754674 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:03.756259 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:04.757604 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:05.759028 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:06.760279 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:07.421096 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:58:07.761654 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:08.763161 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:09.754612 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:10.756124 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:12.760942 3.525541 udp 10.0.2.104 54523 <-> 190.55.128.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:13.760136 0.214881 udp 10.0.2.104 54523 <-> 128.123.234.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:14.762160 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:15.763144 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:16.754637 0.165838 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:17.756305 0.279951 udp 10.0.2.104 54523 <-> 116.203.225.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:18.196434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:58:18.758000 0.158595 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:19.759061 0.175058 udp 10.0.2.104 54523 <-> 68.110.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:20.760405 0.049526 udp 10.0.2.104 54523 <-> 93.183.136.187 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:21.761581 0.346968 udp 10.0.2.104 54523 <-> 201.93.44.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:22.769226 0.123081 udp 10.0.2.104 54523 <-> 217.203.88.198 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:23.757967 0.105438 udp 10.0.2.104 54523 <-> 86.126.97.64 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:24.782038 0.256314 udp 10.0.2.104 54523 <-> 98.158.113.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:25.777747 1.417425 udp 10.0.2.104 54523 <-> 190.204.12.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:26.772870 0.247113 udp 10.0.2.104 54523 <-> 2.190.117.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:27.767844 0.166779 udp 10.0.2.104 54523 <-> 67.11.181.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:28.762587 0.197522 udp 10.0.2.104 54523 <-> 173.242.116.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:29.763650 0.141037 udp 10.0.2.104 54523 <-> 80.180.187.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:30.754588 0.000000 udp 10.0.2.104 54523 -> 190.16.162.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:31.755977 0.000000 udp 10.0.2.104 54523 -> 62.99.108.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:32.757487 0.000000 udp 10.0.2.104 54523 -> 179.236.253.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:33.759059 0.165391 udp 10.0.2.104 54523 <-> 74.56.240.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:34.760454 1.049715 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:36.762898 0.324626 udp 10.0.2.104 54523 <-> 111.235.58.35 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:37.754801 0.243760 udp 10.0.2.104 54523 <-> 62.99.108.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:38.755952 2.263022 udp 10.0.2.104 54523 <-> 200.233.54.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:39.757854 0.000000 udp 10.0.2.104 54523 -> 67.161.201.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:41.760668 0.000000 udp 10.0.2.104 54523 -> 82.213.133.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:42.762006 0.125504 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:43.763834 0.061996 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:44.755050 0.250187 udp 10.0.2.104 54523 <-> 187.67.179.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:45.758031 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:46.757871 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:47.762082 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:48.762043 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:49.762684 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:50.202640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:58:50.763610 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:51.760170 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:52.767966 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:54.424410 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:58:54.763728 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:55.777227 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:56.773408 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:57.770197 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:58:58.756675 0.030967 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:58:59.756509 0.000000 udp 10.0.2.104 54523 -> 91.105.12.196 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:00.757316 0.000000 udp 10.0.2.104 54523 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:01.759234 0.322283 udp 10.0.2.104 54523 <-> 115.253.180.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:02.760554 0.291971 udp 10.0.2.104 54523 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:03.762385 0.151384 udp 10.0.2.104 54523 <-> 74.195.167.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:04.763753 2.442742 udp 10.0.2.104 54523 <-> 101.63.64.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:05.758222 1.972560 udp 10.0.2.104 54523 <-> 72.220.6.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:06.762983 0.073832 udp 10.0.2.104 54523 <-> 79.117.176.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:07.768310 1.192930 udp 10.0.2.104 54523 <-> 202.216.86.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:08.769962 0.084799 udp 10.0.2.104 54523 <-> 46.35.97.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:09.774003 0.151338 udp 10.0.2.104 54523 <-> 209.169.179.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:10.771928 0.300258 udp 10.0.2.104 54523 <-> 201.239.103.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:11.768497 0.054468 udp 10.0.2.104 54523 <-> 78.154.189.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:12.756223 0.000000 udp 10.0.2.104 54523 -> 109.163.134.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:13.756524 0.303254 udp 10.0.2.104 54523 <-> 201.0.107.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:14.758081 0.103586 udp 10.0.2.104 54523 <-> 81.227.139.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:15.759220 1.283450 udp 10.0.2.104 54523 <-> 190.191.117.97 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:17.762530 0.000000 udp 10.0.2.104 54523 -> 109.163.134.240 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:18.763971 0.044322 udp 10.0.2.104 54523 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:19.755083 0.083554 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:20.756931 0.293816 udp 10.0.2.104 54523 <-> 190.198.144.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:21.758020 0.093558 udp 10.0.2.104 54523 <-> 88.166.247.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:22.759406 2.968797 udp 10.0.2.104 54523 <-> 181.16.28.151 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:23.761011 0.051142 udp 10.0.2.104 54523 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:25.763998 0.142762 udp 10.0.2.104 54523 <-> 68.196.251.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:26.755631 0.000000 udp 10.0.2.104 54523 -> 122.121.39.179 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:27.756492 0.131572 udp 10.0.2.104 54523 <-> 188.17.160.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:28.758191 0.115952 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:29.759464 0.064578 udp 10.0.2.104 54523 <-> 86.122.21.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:30.765431 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:31.765893 0.154160 udp 10.0.2.104 54523 <-> 68.43.93.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:32.767279 0.143003 udp 10.0.2.104 54523 <-> 24.241.35.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:33.756931 0.789534 udp 10.0.2.104 54523 <-> 1.186.50.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:34.757356 0.000000 udp 10.0.2.104 54523 -> 37.19.238.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:35.757827 0.265409 udp 10.0.2.104 54523 <-> 124.122.2.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:36.759862 0.040247 udp 10.0.2.104 54523 <-> 89.215.64.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:37.764228 3.351613 udp 10.0.2.104 54523 <-> 190.106.81.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:38.764515 0.301065 udp 10.0.2.104 54523 <-> 220.208.150.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:39.764286 0.150921 udp 10.0.2.104 54523 <-> 71.79.14.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:40.755370 0.080382 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:41.416320 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:59:41.757017 0.024649 udp 10.0.2.104 54523 <-> 89.142.152.236 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:42.758212 0.205080 udp 10.0.2.104 54523 <-> 206.253.49.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:43.759797 0.206469 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:44.761259 0.142911 udp 10.0.2.104 54523 <-> 24.241.35.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:45.762798 0.118847 udp 10.0.2.104 54523 <-> 173.238.180.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:46.764239 0.210754 udp 10.0.2.104 54523 <-> 118.97.174.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:47.755534 0.461137 udp 10.0.2.104 54523 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:48.756880 0.453435 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:49.758211 0.112727 udp 10.0.2.104 54523 <-> 212.200.157.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:50.759861 0.094608 udp 10.0.2.104 54523 <-> 82.225.28.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:51.761905 0.188438 udp 10.0.2.104 54523 <-> 64.185.54.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:52.762813 0.037029 udp 10.0.2.104 54523 <-> 212.104.100.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:53.763660 0.000000 udp 10.0.2.104 54523 -> 78.191.143.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:54.755493 3.079292 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:55.756958 0.104975 udp 10.0.2.104 54523 <-> 83.180.211.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 10:59:56.758219 3.004599 udp 10.0.2.104 54523 -> 77.225.27.202 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 10:59:58.761445 0.164316 udp 10.0.2.104 54523 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:00.758961 0.133816 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:01.758414 0.015485 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:02.760289 0.134547 udp 10.0.2.104 54523 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:03.760361 0.110632 udp 10.0.2.104 54523 <-> 78.220.84.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:04.760514 0.028590 udp 10.0.2.104 54523 <-> 91.89.202.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:05.761827 0.000000 udp 10.0.2.104 54523 -> 71.11.251.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:06.762751 0.053161 udp 10.0.2.104 54523 <-> 109.163.134.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:07.754104 0.169839 udp 10.0.2.104 54523 <-> 173.199.217.72 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:08.755997 0.068227 udp 10.0.2.104 54523 <-> 178.164.167.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:09.757330 4.170947 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:10.758705 0.041995 udp 10.0.2.104 54523 <-> 87.252.173.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:11.759886 0.215747 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:12.761364 0.320332 udp 10.0.2.104 54523 <-> 189.61.212.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:14.754185 0.245661 udp 10.0.2.104 54523 <-> 161.200.125.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:15.755955 0.000000 udp 10.0.2.104 54523 -> 92.241.139.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:16.757459 0.289040 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:17.758841 1.224032 udp 10.0.2.104 54523 <-> 190.39.82.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:18.760493 0.042120 udp 10.0.2.104 54523 <-> 87.252.173.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:19.761554 0.142379 udp 10.0.2.104 54523 <-> 24.241.35.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:20.762891 0.301180 udp 10.0.2.104 54523 <-> 116.203.225.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:21.757786 0.010718 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:22.758822 0.210380 udp 10.0.2.104 54523 <-> 64.234.32.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:23.758429 0.056151 udp 10.0.2.104 54523 <-> 79.115.87.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:24.758876 0.094724 udp 10.0.2.104 54523 <-> 82.225.28.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:25.759953 0.073034 udp 10.0.2.104 54523 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:26.761582 0.178279 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:27.762982 0.309770 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:28.414138 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:00:28.755025 2.094346 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:29.757937 0.000000 udp 10.0.2.104 54523 -> 77.253.85.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:31.758510 0.057173 udp 10.0.2.104 54523 <-> 188.214.34.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:32.760378 2.375602 udp 10.0.2.104 54523 <-> 82.243.94.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:33.761830 1.993057 udp 10.0.2.104 54523 -> 141.101.50.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:36.755996 0.000000 udp 10.0.2.104 54523 -> 97.76.35.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:37.757332 0.178272 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:38.758809 0.000000 udp 10.0.2.104 54523 -> 85.84.235.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:39.760224 0.078150 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:40.761834 0.381326 udp 10.0.2.104 54523 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:41.763028 0.035961 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:42.754723 0.000000 udp 10.0.2.104 54523 -> 95.57.180.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:43.756123 0.120763 udp 10.0.2.104 54523 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:44.758094 0.000000 udp 10.0.2.104 54523 -> 193.68.211.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:45.758843 0.117911 udp 10.0.2.104 54523 <-> 217.201.248.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:46.760070 2.039025 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:49.716530 0.077688 udp 10.0.2.104 54523 <-> 79.113.242.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:50.704905 0.000000 udp 10.0.2.104 54523 -> 189.29.250.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:00:51.682812 1.283666 udp 10.0.2.104 54523 <-> 24.117.40.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:52.674726 0.148309 udp 10.0.2.104 54523 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:53.665516 0.002151 udp 10.0.2.104 54523 <-> 109.239.71.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:54.655449 0.161220 udp 10.0.2.104 54523 <-> 76.120.220.66 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:55.644428 0.118910 udp 10.0.2.104 54523 <-> 68.231.252.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:56.632872 0.085305 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:57.619716 0.149161 udp 10.0.2.104 54523 <-> 24.74.220.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:58.595913 0.174810 udp 10.0.2.104 54523 <-> 68.191.141.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:00:59.587827 0.065281 udp 10.0.2.104 54523 <-> 81.190.243.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:00.578663 0.024497 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:01.568623 0.144171 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:02.557624 0.038057 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:03.545582 0.361950 udp 10.0.2.104 54523 <-> 186.88.170.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:04.532751 0.039492 udp 10.0.2.104 54523 <-> 91.218.81.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:05.508733 0.466598 udp 10.0.2.104 54523 <-> 201.74.108.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:06.500542 0.364974 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:07.491764 1.277637 udp 10.0.2.104 54523 <-> 177.227.173.10 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:09.474235 0.060007 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:10.462617 2.363578 udp 10.0.2.104 54523 <-> 190.51.16.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:11.451845 0.081829 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:13.421724 0.169253 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:14.412411 0.307562 udp 10.0.2.104 54523 <-> 177.230.92.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:15.404127 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:01:16.393734 0.000000 udp 10.0.2.104 54523 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:01:17.044437 4.764069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:01:22.135210 1.441754 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:23.120176 0.530185 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:24.094252 0.434062 udp 10.0.2.104 54523 <-> 111.242.2.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:25.084570 0.156565 udp 10.0.2.104 54523 <-> 71.74.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:26.076027 0.155013 udp 10.0.2.104 54523 <-> 107.5.244.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:27.064490 0.106586 udp 10.0.2.104 54523 <-> 217.203.88.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:28.051504 0.103457 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:29.038542 0.176345 udp 10.0.2.104 54523 <-> 71.62.251.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:30.023838 3.542359 udp 10.0.2.104 54523 <-> 195.174.108.37 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:30.997749 0.136005 udp 10.0.2.104 54523 <-> 75.109.118.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:32.977338 0.131321 udp 10.0.2.104 54523 <-> 206.74.136.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:33.965504 3.120880 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:35.215935 0.000000 udp 10.0.2.104 54523 <- 195.174.108.37 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:01:35.941695 0.698277 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:37.900805 0.282473 udp 10.0.2.104 54523 <-> 74.70.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:38.891192 0.434983 udp 10.0.2.104 54523 <-> 179.56.57.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:39.880549 0.377865 udp 10.0.2.104 54523 <-> 186.88.170.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:40.869044 0.126344 udp 10.0.2.104 54523 <-> 67.193.95.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:41.857934 0.145772 udp 10.0.2.104 54523 <-> 216.36.152.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:42.845056 0.000000 udp 10.0.2.104 54523 -> 62.57.140.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:01:43.829911 0.000000 udp 10.0.2.104 54523 -> 85.232.150.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:01:44.805544 0.078376 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:45.798316 0.060071 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:46.789901 0.064759 udp 10.0.2.104 54523 <-> 89.234.212.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:47.782048 0.151462 udp 10.0.2.104 54523 <-> 216.36.152.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:48.769114 0.141351 udp 10.0.2.104 54523 <-> 24.148.90.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:49.755215 0.000000 udp 10.0.2.104 54523 -> 94.253.205.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:01:56.596967 0.000000 udp 10.0.2.104 54523 <- 94.253.205.252 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:01:57.525806 1.260813 udp 10.0.2.104 54523 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:01:58.500140 0.000000 udp 10.0.2.104 54523 -> 178.122.178.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:01:59.490400 0.020786 udp 10.0.2.104 54523 <-> 161.53.166.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:00.479641 0.000000 udp 10.0.2.104 54523 -> 87.18.54.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:01.468301 0.141882 udp 10.0.2.104 54523 <-> 24.148.90.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:02.656189 0.247742 udp 10.0.2.104 54523 <-> 200.84.56.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:03.632268 0.209177 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:04.617465 0.000000 udp 10.0.2.104 54523 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:05.591553 0.270245 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:06.581920 0.475908 udp 10.0.2.104 54523 <-> 181.165.132.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:07.571067 0.000000 udp 10.0.2.104 54523 -> 14.99.192.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:08.558835 0.000000 udp 10.0.2.104 54523 -> 186.67.39.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:22.420428 0.000000 udp 10.0.2.104 54523 <- 186.67.39.106 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:23.058989 0.927737 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:24.642422 0.194152 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:25.626790 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:26.608288 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:27.599311 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:39.883783 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:40.533793 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:02:40.870455 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:41.858308 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:42.842927 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:43.826319 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:44.806422 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:45.795730 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:47.098049 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:48.084730 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:02:49.069672 0.145613 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:50.054102 0.161108 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:51.037426 0.328282 udp 10.0.2.104 54523 <-> 190.206.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:02:52.017496 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:03.199854 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:04.188074 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:05.174974 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:06.160680 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:07.145265 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:08.128397 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:10.098282 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:11.086323 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:12.072826 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:13.058143 0.000044 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:13.058187 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:03:14.042569 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:15.026132 0.387876 udp 10.0.2.104 54523 <-> 190.206.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:16.007365 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:17.984148 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:18.970768 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:19.956264 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:20.940591 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:21.913987 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:22.904143 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:31.842686 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:41.676854 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:42.671650 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:43.665657 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:44.659303 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:45.644562 0.075607 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:45.720169 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:03:46.705405 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:47.699585 0.320993 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:48.693310 0.294492 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:49.686398 0.000000 udp 10.0.2.104 54523 -> 69.1.2.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:50.678599 0.321664 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:51.821913 0.189527 udp 10.0.2.104 54523 <-> 66.130.126.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:52.804737 0.074581 udp 10.0.2.104 54523 <-> 217.18.251.249 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:53.798779 0.171436 udp 10.0.2.104 54523 <-> 68.59.249.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:54.453935 0.000036 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:03:54.791914 0.000000 udp 10.0.2.104 54523 -> 78.220.84.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:55.784565 0.362568 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:56.776417 0.000000 udp 10.0.2.104 54523 -> 109.163.134.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:03:57.771076 0.161576 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:58.761326 0.078717 udp 10.0.2.104 54523 <-> 212.225.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:03:59.740867 0.000000 udp 10.0.2.104 54523 -> 86.163.77.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:00.734498 0.000000 udp 10.0.2.104 54523 -> 98.66.7.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:01.727750 0.000000 udp 10.0.2.104 54523 -> 209.102.248.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:02.719911 0.000000 udp 10.0.2.104 54523 -> 216.197.145.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:03.712001 0.053876 udp 10.0.2.104 54523 <-> 89.165.189.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:04:04.703186 0.209472 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:04:05.693608 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:46.993068 0.048203 udp 10.0.2.104 54523 <-> 79.113.19.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:04:47.982807 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:48.971629 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:49.959128 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:51.931329 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:54.167548 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:55.140500 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:56.130435 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:57.118952 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:58.106335 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:59.092472 0.000065 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:04:59.092537 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:05:00.079147 4.923397 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:01.063087 0.170849 udp 10.0.2.104 54523 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:02.036278 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:03.026616 1.062778 udp 10.0.2.104 54523 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:04.015150 0.049414 udp 10.0.2.104 54523 <-> 79.113.19.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:05.988883 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:06.974054 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:07.957990 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:08.930712 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:09.920400 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:22.315522 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:22.315591 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:05:23.302420 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:24.288299 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:25.273126 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:26.257050 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:27.229704 0.000000 udp 10.0.2.104 54523 -> 24.115.169.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:28.219476 0.292578 udp 10.0.2.104 54523 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:29.208159 0.275141 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:30.195643 0.000000 udp 10.0.2.104 54523 -> 79.117.54.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:31.181651 1.121149 udp 10.0.2.104 54523 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:32.166983 0.049277 udp 10.0.2.104 54523 <-> 79.113.19.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:33.151350 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:33.787393 0.000000 arp 10.0.2.104 who 10.0.2.2 INT 1 42 flow=Background-ARP 1970/01/01 11:05:40.888362 0.000000 arp 10.0.2.104 who 10.0.2.2 RSP 1 42 flow=Background-ARP 1970/01/01 11:05:41.214346 1.149404 udp 10.0.2.104 54523 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:42.203076 0.049081 udp 10.0.2.104 54523 <-> 79.113.19.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:05:43.190644 0.000000 udp 10.0.2.104 54523 -> 217.201.5.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:44.176813 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:05:45.161977 0.000000 udp 10.0.2.104 54523 -> 77.70.120.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:06:43.217378 0.000000 udp 10.0.2.104 54523 <- 77.70.120.2 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:06:45.464174 0.048912 udp 10.0.2.104 54523 <-> 79.113.19.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:06:46.441389 0.153242 udp 10.0.2.104 54523 <-> 74.93.84.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:06:47.417473 0.299185 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:06:48.413666 0.129731 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:06:49.404706 0.149568 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:06:50.394599 0.146076 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:06:51.383790 0.000000 udp 10.0.2.104 54523 -> 184.10.180.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:06:52.371729 0.000000 udp 10.0.2.104 54523 -> 68.42.45.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:06:53.359063 0.000000 udp 10.0.2.104 54523 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:06:54.335152 0.000000 udp 10.0.2.104 54523 -> 111.248.57.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:06:55.329796 0.132636 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:06:56.320585 0.142381 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:06:57.310537 0.000000 udp 10.0.2.104 54523 -> 83.250.76.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:06:58.298875 0.000000 udp 10.0.2.104 54523 -> 190.198.250.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:06:59.287051 0.083111 udp 10.0.2.104 54523 <-> 178.74.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:00.274414 0.127560 udp 10.0.2.104 54523 <-> 84.229.204.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:01.250449 0.000000 udp 10.0.2.104 54523 -> 68.42.45.79 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:02.242733 0.000000 udp 10.0.2.104 54523 -> 178.164.167.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:03.233407 0.962640 udp 10.0.2.104 54523 <-> 166.154.87.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:04.223115 0.144771 udp 10.0.2.104 54523 <-> 98.27.22.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:05.211731 0.289402 udp 10.0.2.104 54523 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:06.200163 0.594629 udp 10.0.2.104 54523 <-> 2.228.29.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:07.187108 0.079044 udp 10.0.2.104 54523 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:08.163040 0.153655 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:09.154924 0.140761 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:10.145678 0.170348 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:11.135961 0.000000 udp 10.0.2.104 54523 -> 94.253.205.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:29.872992 0.000000 udp 10.0.2.104 54523 <- 94.253.205.252 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:31.182403 0.174322 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:32.158480 0.000000 udp 10.0.2.104 54523 -> 95.77.166.177 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:33.143625 2.623031 udp 10.0.2.104 54523 <-> 111.94.65.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:34.117653 0.000000 udp 10.0.2.104 54523 -> 151.77.138.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:35.107875 0.349603 udp 10.0.2.104 54523 <-> 114.45.53.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:36.097192 0.000000 udp 10.0.2.104 54523 -> 178.126.16.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:37.085338 0.000000 udp 10.0.2.104 54523 -> 98.27.22.146 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:47.820883 0.000000 udp 10.0.2.104 54523 <- 98.27.22.146 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:48.650588 0.170749 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:49.635702 0.040218 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:50.618942 0.000000 udp 10.0.2.104 54523 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:51.591860 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:52.581001 2.030880 udp 10.0.2.104 54523 <-> 62.57.140.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:53.569715 0.112531 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:55.541604 0.000000 udp 10.0.2.104 54523 -> 82.124.235.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:56.189797 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:07:56.526488 0.295860 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:57.508967 0.000000 udp 10.0.2.104 54523 -> 24.51.58.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:07:58.481298 2.667244 udp 10.0.2.104 54523 <-> 200.127.62.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:07:59.470380 0.000000 udp 10.0.2.104 54523 -> 198.176.180.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:00.458644 0.082141 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:01.445588 0.000000 udp 10.0.2.104 54523 -> 81.201.145.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:02.431704 0.000000 udp 10.0.2.104 54523 -> 75.246.254.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:07.520321 0.000000 udp 10.0.2.104 54523 <- 75.246.254.27 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:08.205743 0.217693 udp 10.0.2.104 54523 <-> 190.156.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:09.189230 0.000000 udp 10.0.2.104 54523 -> 190.213.116.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:10.161856 0.000000 udp 10.0.2.104 54523 -> 188.26.181.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:11.150947 0.000000 udp 10.0.2.104 54523 -> 71.236.119.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:12.138707 0.151984 udp 10.0.2.104 54523 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:13.127577 1.079244 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:15.097726 1.380006 udp 10.0.2.104 54523 <-> 95.88.209.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:16.081022 2.148700 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:17.061460 0.149071 udp 10.0.2.104 54523 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:19.038717 0.097898 udp 10.0.2.104 54523 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:20.025368 0.361717 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:21.010267 0.101541 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:21.994979 0.278641 udp 10.0.2.104 54523 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:22.978400 0.000000 udp 10.0.2.104 54523 -> 159.20.98.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:50.302155 0.000000 udp 10.0.2.104 54523 <- 159.20.98.69 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:08:51.709473 0.427178 udp 10.0.2.104 54523 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:54.424458 0.270515 udp 10.0.2.104 54523 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:55.405248 0.227712 udp 10.0.2.104 54523 <-> 37.254.21.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:56.394918 1.024643 udp 10.0.2.104 54523 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:58.107222 1.572185 udp 10.0.2.104 54523 <-> 190.79.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:08:59.093012 0.159813 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:00.077476 1.010085 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:01.508441 0.986127 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 2 292 flow=Background 1970/01/01 11:09:02.048408 0.000000 udp 10.0.2.104 54523 -> 72.70.92.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:09:08.884828 0.000000 udp 10.0.2.104 54523 -> 87.4.183.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:09:09.873630 0.326075 udp 10.0.2.104 54523 <-> 186.48.133.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:10.329586 3.947680 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/01 11:09:10.860047 0.249992 udp 10.0.2.104 54523 <-> 158.108.164.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:11.845861 0.000000 udp 10.0.2.104 54523 -> 216.114.33.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:09:12.830334 0.256435 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:13.811286 0.059419 udp 10.0.2.104 54523 <-> 77.244.39.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:14.801360 0.357076 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:15.790231 0.191019 udp 10.0.2.104 54523 <-> 75.135.53.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:16.777897 2.044091 udp 10.0.2.104 54523 <-> 84.236.102.29 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:17.764744 0.082269 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:19.724969 0.190291 udp 10.0.2.104 54523 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:20.715980 0.142143 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:21.705474 0.330521 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:22.171484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:09:22.694324 0.461383 udp 10.0.2.104 54523 <-> 186.9.252.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:23.345005 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:09:23.682033 1.050148 udp 10.0.2.104 54523 <-> 31.222.118.75 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:25.654168 0.050809 udp 10.0.2.104 54523 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:26.628757 0.000000 udp 10.0.2.104 54523 -> 83.192.67.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:09:27.619783 1.594704 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:30.127901 0.727959 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:31.475593 0.140574 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:32.463216 0.135671 udp 10.0.2.104 54523 <-> 47.16.247.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:33.453568 0.330669 udp 10.0.2.104 54523 <-> 114.24.159.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:34.439120 0.482902 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:35.413696 0.024759 udp 10.0.2.104 54523 <-> 46.150.38.48 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:36.404645 3.830612 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 3 438 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:41.054908 0.284709 udp 10.0.2.104 54523 <-> 201.208.192.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:42.043628 0.162918 udp 10.0.2.104 54523 <-> 216.197.194.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:43.031205 0.023484 udp 10.0.2.104 54523 <-> 95.168.34.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:43.497057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:09:44.017738 2.380536 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:45.003245 0.000000 udp 10.0.2.104 54523 -> 85.152.63.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:09:46.969292 2.965997 udp 10.0.2.104 54523 -> 92.86.49.26 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:09:47.959072 0.000000 udp 10.0.2.104 54523 -> 186.14.134.27 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:09:48.947818 0.025644 udp 10.0.2.104 54523 <-> 95.168.34.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:50.921825 0.053316 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:51.907410 1.206517 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:52.882053 0.887663 udp 10.0.2.104 54523 <-> 201.208.192.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:53.874644 0.144008 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:09:54.864128 0.000000 udp 10.0.2.104 54523 -> 92.86.49.26 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:09:55.852895 0.000000 udp 10.0.2.104 54523 -> 186.14.134.27 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:08.001868 2.119261 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:08.757478 1.795340 udp 10.0.2.104 54523 <-> 92.86.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:10.729176 0.000000 udp 10.0.2.104 54523 -> 79.117.97.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:11.703645 0.172647 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:12.694226 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:13.683976 0.553724 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:15.049419 0.472320 udp 10.0.2.104 54523 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:16.036990 0.986422 udp 10.0.2.104 54523 <-> 201.246.136.27 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:18.008923 0.195794 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:18.983545 0.000000 udp 10.0.2.104 54523 -> 24.191.81.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:30.222498 0.000000 udp 10.0.2.104 54523 <- 24.191.81.20 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:31.057025 0.260408 udp 10.0.2.104 54523 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:32.045381 0.165028 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:33.032262 0.150476 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:34.018455 0.178563 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:35.003598 0.179302 udp 10.0.2.104 54523 <-> 5.151.60.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:35.987349 0.000000 udp 10.0.2.104 54523 -> 80.235.34.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:36.960493 0.158337 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:37.950128 0.138481 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:38.425426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 1 146 flow=Background 1970/01/01 11:10:38.601674 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:10:38.938439 4.916933 udp 10.0.2.104 54523 -> 95.59.21.62 16464 INT 0 3 174 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:39.925847 2.140420 udp 10.0.2.104 54523 <-> 71.229.106.186 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:42.882391 0.031759 udp 10.0.2.104 54523 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:44.844757 0.212330 udp 10.0.2.104 54523 <-> 142.129.132.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:45.832083 1.022057 udp 10.0.2.104 54523 <-> 190.17.37.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:47.107327 0.184302 udp 10.0.2.104 54523 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:48.093650 0.000000 udp 10.0.2.104 54523 -> 186.93.97.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:53.443040 0.000000 udp 10.0.2.104 54523 <- 186.93.97.117 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:54.135439 2.308912 udp 10.0.2.104 54523 <-> 118.171.226.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:10:55.119260 0.000000 udp 10.0.2.104 54523 -> 190.111.199.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:58.071128 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:10:59.058277 6.470981 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:05.529258 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:11:06.504769 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:07.489776 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:08.473144 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:09.446012 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:10.437535 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:11.427766 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:12.415431 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:13.402020 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:14.387567 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:15.371976 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:16.344492 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:18.959668 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:19.948105 4.917915 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:20.935359 1.152564 udp 10.0.2.104 54523 <-> 173.23.110.164 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:11:23.893084 0.291714 udp 10.0.2.104 54523 <-> 186.91.202.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:11:26.844052 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:27.831714 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:28.817549 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:11:33.556942 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:00.236274 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:01.282242 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:02.277896 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:03.274278 0.000065 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:03.274343 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:12:04.269479 2.985872 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:05.263642 0.174071 udp 10.0.2.104 54523 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:12:06.260975 0.168845 udp 10.0.2.104 54523 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:12:08.238102 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:08.895719 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:12:09.234486 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:10.230613 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:11.232116 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:12.233935 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:13.235109 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:14.236498 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:15.227188 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:16.048914 0.012835 udp 10.0.2.104 54605 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 11:12:16.062062 0.000000 udp 10.0.2.104 54606 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:16.337490 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:17.334236 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:17.334305 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:12:18.327740 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:19.320316 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:20.312180 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:21.304063 0.136408 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:12:22.284938 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:23.279740 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:24.273742 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:25.267676 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:26.260618 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:27.252218 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:28.243605 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:29.227514 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:30.229744 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:31.230759 0.000039 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:12:31.230798 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:12:32.232372 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:23.167777 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:25.510947 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:26.494168 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:27.474944 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:28.464221 0.000000 udp 10.0.2.104 54523 -> 186.91.202.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:33.502114 0.000000 udp 10.0.2.104 54523 <- 186.91.202.114 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:34.185585 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:35.171282 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:36.155881 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:37.139271 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:37.139333 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:13:38.121453 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:39.100942 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:40.089257 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:41.076606 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:42.062460 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:43.047104 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:52.284408 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:53.285630 4.997586 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:54.277236 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:55.278796 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:56.280442 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:57.282007 0.136326 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:13:59.284802 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:13:59.935341 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:14:00.285966 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:01.277640 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:02.278798 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:03.280381 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:04.282049 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:05.283161 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:06.284652 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:07.276262 0.000097 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:07.276359 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:14:08.277816 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:09.279166 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:10.280567 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:11.281703 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:12.283213 0.335484 udp 10.0.2.104 54523 <-> 118.161.58.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:14:13.284785 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:23.596823 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:24.587596 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:25.577923 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:25.577979 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:14:26.566716 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:27.554680 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:28.541818 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:29.527537 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:30.501977 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:31.492916 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:32.482709 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:33.471863 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:34.459502 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:35.446034 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:36.432704 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:37.407305 0.341048 udp 10.0.2.104 54523 <-> 118.161.58.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:14:38.398226 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:39.388257 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:40.376987 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:41.364591 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:42.351055 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:43.337306 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:44.311790 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:45.302704 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:46.294043 0.000089 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:46.294132 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:14:47.282699 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:53.009585 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:53.995999 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:54.981472 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:55.955801 4.943843 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:56.946264 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:57.936308 0.172304 udp 10.0.2.104 54523 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:14:58.925065 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:14:59.912526 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:00.562332 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:15:01.885710 0.000094 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:01.885804 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:15:02.860272 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:03.851325 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:04.840819 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:05.829524 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:06.820455 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:07.807382 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:08.792922 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:09.767085 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:10.758136 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:11.747622 4.922823 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:12.736298 4.924520 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:13.723607 1.111320 udp 10.0.2.104 54523 <-> 24.235.158.177 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:15.695043 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:22.648274 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:23.636666 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:24.624208 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:25.610427 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:26.595767 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:27.569952 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:28.566824 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:44.529749 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:45.517366 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:45.517413 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:15:46.503850 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:47.489264 0.290401 udp 10.0.2.104 54523 <-> 186.91.202.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:48.473055 0.168113 udp 10.0.2.104 54523 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:49.446574 0.715632 udp 10.0.2.104 54523 <-> 14.98.186.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:50.436003 0.046424 udp 10.0.2.104 54523 <-> 46.223.226.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:51.424701 0.191588 udp 10.0.2.104 54523 <-> 75.135.53.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:52.412029 0.000000 udp 10.0.2.104 54523 -> 89.32.155.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:53.397754 3.935104 udp 10.0.2.104 54523 -> 81.180.18.42 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:54.382790 0.186047 udp 10.0.2.104 54523 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:55.370390 0.000000 udp 10.0.2.104 54523 -> 79.17.109.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:15:56.343282 0.030818 udp 10.0.2.104 54523 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:58.321662 0.191476 udp 10.0.2.104 54523 <-> 74.58.30.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:15:59.308760 0.000000 udp 10.0.2.104 54523 -> 79.114.51.173 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:05.932656 0.074755 udp 10.0.2.104 54523 <-> 62.57.52.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:06.918793 0.000000 udp 10.0.2.104 54523 -> 216.121.246.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:07.904346 0.168493 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:08.879562 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:09.869054 0.164942 udp 10.0.2.104 54523 <-> 27.106.49.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:13.946349 1.491660 udp 10.0.2.104 54523 <-> 24.101.248.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:14.586884 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:16:14.923704 0.032141 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:15.909858 0.000000 udp 10.0.2.104 54523 -> 187.57.60.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:16.894727 0.024921 udp 10.0.2.104 54523 <-> 80.98.204.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:17.878968 0.246668 udp 10.0.2.104 54523 <-> 161.200.212.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:18.851906 0.283055 udp 10.0.2.104 54523 <-> 116.64.95.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:19.840889 0.123340 udp 10.0.2.104 54523 <-> 24.57.20.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:20.829584 0.067458 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:21.816854 0.000000 udp 10.0.2.104 54523 -> 188.27.46.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:22.802865 0.078003 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:23.788056 0.159215 udp 10.0.2.104 54523 <-> 74.77.223.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:24.771795 0.212090 udp 10.0.2.104 54523 <-> 75.109.236.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:25.801407 0.024185 udp 10.0.2.104 54523 <-> 109.193.105.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:26.790819 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:27.779034 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:28.766588 0.215145 udp 10.0.2.104 54523 <-> 181.53.75.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:29.754495 0.000000 udp 10.0.2.104 54523 -> 66.191.93.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:30.739727 0.484468 udp 10.0.2.104 54523 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:37.783149 0.378953 udp 10.0.2.104 54523 <-> 200.104.248.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:38.745921 0.000000 udp 10.0.2.104 54523 -> 78.218.21.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:39.734541 1.058474 udp 10.0.2.104 54523 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:40.722556 0.320487 udp 10.0.2.104 54523 <-> 190.110.186.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:41.709585 0.167239 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:42.695592 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:43.679764 0.000000 udp 10.0.2.104 54523 -> 187.21.76.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:44.663968 0.144968 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:45.637099 0.000000 udp 10.0.2.104 54523 -> 24.63.83.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:46.626179 0.146166 udp 10.0.2.104 54523 <-> 24.53.34.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:47.614423 0.303324 udp 10.0.2.104 54523 <-> 115.241.153.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:48.601420 0.395341 udp 10.0.2.104 54523 <-> 115.241.32.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:49.586997 0.336126 udp 10.0.2.104 54523 <-> 220.129.41.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:50.571730 0.242298 udp 10.0.2.104 54523 <-> 76.179.117.101 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:51.555663 0.000000 udp 10.0.2.104 54523 -> 201.235.154.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:52.528080 0.526279 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:53.517459 0.204187 udp 10.0.2.104 54523 <-> 208.99.142.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:54.736895 0.174680 udp 10.0.2.104 54523 <-> 70.115.72.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:55.713719 0.160026 udp 10.0.2.104 54523 <-> 74.77.223.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:56.699338 0.159436 udp 10.0.2.104 54523 <-> 74.192.111.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:57.683958 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:16:58.667627 1.421091 udp 10.0.2.104 54523 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:16:59.648999 0.259327 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:00.638126 0.155275 udp 10.0.2.104 54523 <-> 74.143.231.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:01.626861 0.000000 udp 10.0.2.104 54523 -> 66.176.196.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:02.613822 0.010187 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:03.599669 0.352670 udp 10.0.2.104 54523 <-> 177.21.225.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:04.584105 0.162986 udp 10.0.2.104 54523 <-> 109.53.117.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:05.567691 2.005302 udp 10.0.2.104 54523 <-> 188.254.136.142 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:06.547841 0.395115 udp 10.0.2.104 54523 <-> 14.96.106.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:07.200017 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:17:08.524830 0.000000 udp 10.0.2.104 54523 -> 189.79.96.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:09.511757 0.000000 udp 10.0.2.104 54523 -> 187.69.96.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:13.576267 0.046647 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:14.560801 3.940794 udp 10.0.2.104 54523 <-> 201.210.213.118 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:15.544082 0.000000 udp 10.0.2.104 54523 -> 189.79.96.106 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:16.524469 0.000000 udp 10.0.2.104 54523 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:17.513553 0.000000 udp 10.0.2.104 54523 -> 75.120.2.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:19.488266 0.288978 udp 10.0.2.104 54523 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:19.665113 0.000000 udp 10.0.2.104 54523 <- 201.210.213.118 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:20.474048 0.035965 udp 10.0.2.104 54523 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:21.458423 0.067811 udp 10.0.2.104 54523 <-> 95.180.20.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:22.442015 0.613687 udp 10.0.2.104 54523 <-> 98.112.167.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:39.306316 0.155710 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:40.298418 0.156022 udp 10.0.2.104 54523 <-> 75.68.73.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:41.299984 0.124091 udp 10.0.2.104 54523 <-> 151.21.25.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:42.301756 0.175366 udp 10.0.2.104 54523 <-> 124.123.164.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:43.302995 0.185805 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:44.304872 1.105705 udp 10.0.2.104 54523 <-> 115.241.32.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:46.400791 0.166265 udp 10.0.2.104 54523 <-> 65.34.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:47.383226 0.127774 udp 10.0.2.104 54523 <-> 24.156.248.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:48.374593 0.197962 udp 10.0.2.104 54523 <-> 76.69.199.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:49.364776 0.299613 udp 10.0.2.104 54523 <-> 201.27.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:50.354156 0.000000 udp 10.0.2.104 54523 -> 173.58.109.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:51.342727 0.000000 udp 10.0.2.104 54523 -> 188.29.11.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:17:52.330417 0.252088 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:53.306853 0.173321 udp 10.0.2.104 54523 <-> 70.115.72.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:54.298693 0.167628 udp 10.0.2.104 54523 <-> 74.77.223.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:17:55.289881 3.977382 udp 10.0.2.104 54523 <-> 190.249.30.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:00.029863 0.000000 udp 10.0.2.104 54523 -> 64.219.232.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:01.017594 0.158706 udp 10.0.2.104 54523 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:02.004201 1.145171 udp 10.0.2.104 54523 <-> 198.179.118.149 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:03.964469 0.094395 udp 10.0.2.104 54523 <-> 188.28.198.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:04.955557 0.158824 udp 10.0.2.104 54523 <-> 71.61.202.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:05.945039 0.163002 udp 10.0.2.104 54523 <-> 72.191.109.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:06.933664 0.207529 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:07.921222 0.324459 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:08.908049 0.388473 udp 10.0.2.104 54523 <-> 79.43.218.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:09.894091 0.182358 udp 10.0.2.104 54523 <-> 68.184.206.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:10.868611 0.139731 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:11.859699 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:12.848712 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:13.837388 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:14.824733 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:17.361043 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:18.468625 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:19.105969 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:18:19.442992 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:20.434603 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:21.424264 0.000000 udp 10.0.2.104 54523 -> 179.209.194.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:33.466992 0.000000 udp 10.0.2.104 54523 <- 179.209.194.180 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:34.131844 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:35.119424 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:36.107238 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:37.092664 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:38.067243 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:39.058303 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:40.048252 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:41.036987 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:42.024941 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:43.011317 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:43.996792 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:44.970706 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:45.961720 0.000103 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:45.961823 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:18:47.940110 4.924081 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:48.927764 0.187352 udp 10.0.2.104 54523 <-> 74.197.8.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:18:49.913789 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:50.899137 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:51.873428 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:18:53.854160 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:00.352610 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:01.340560 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:02.326805 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:03.312111 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:04.286435 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:05.276952 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:06.266401 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:07.259106 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:08.246503 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:08.246549 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:19:10.218380 0.355992 udp 10.0.2.104 54523 <-> 115.241.59.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:11.193054 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:12.183719 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:13.173459 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:14.161872 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:15.148904 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:16.135066 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:17.123138 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:18.097309 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:19.087928 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:20.077667 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:21.066076 0.000065 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:21.066141 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:19:22.053308 0.000000 udp 10.0.2.104 54523 -> 179.209.194.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:28.892081 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:19:28.992773 0.000000 udp 10.0.2.104 54523 <- 179.209.194.180 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:29.229190 0.254693 udp 10.0.2.104 54523 <-> 41.102.55.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:30.214519 0.524713 udp 10.0.2.104 54523 <-> 179.208.248.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:31.188750 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:51.533528 0.240653 udp 10.0.2.104 54523 <-> 71.178.136.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:52.521746 0.315355 udp 10.0.2.104 54523 <-> 188.47.233.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:53.508765 0.086332 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:54.495604 0.204358 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:55.480072 0.507069 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:56.463909 0.000000 udp 10.0.2.104 54523 -> 193.34.156.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:19:57.436487 0.266203 udp 10.0.2.104 54523 <-> 71.178.136.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:58.425561 0.065285 udp 10.0.2.104 54523 <-> 188.24.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:19:59.413749 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:00.400960 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:01.387333 0.000041 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:01.387374 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:20:02.371892 0.000000 udp 10.0.2.104 54523 -> 46.223.177.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:03.355602 3.429318 udp 10.0.2.104 54523 <-> 50.83.18.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:07.572664 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:08.561964 0.145396 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:09.550152 0.089053 udp 10.0.2.104 54523 <-> 188.27.119.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:10.541925 0.083745 udp 10.0.2.104 54523 <-> 91.82.39.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:11.527840 0.225261 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:12.515612 0.000000 udp 10.0.2.104 54523 -> 195.80.135.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:13.498989 0.140147 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:17.129616 0.552190 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:18.846973 0.144872 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:19.824869 0.355349 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:20.811892 0.071388 udp 10.0.2.104 54523 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:21.797596 0.182923 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:22.782122 0.000000 udp 10.0.2.104 54523 -> 71.84.132.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:23.765647 0.135810 udp 10.0.2.104 54523 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:24.738544 0.000000 udp 10.0.2.104 54523 -> 71.194.150.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:37.119668 0.000000 udp 10.0.2.104 54523 <- 71.194.150.64 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:37.957258 0.316556 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:38.958591 3.931196 udp 10.0.2.104 54523 <-> 50.83.18.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:43.710849 0.144270 udp 10.0.2.104 54523 <-> 24.191.107.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:44.189431 0.984237 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 2 292 flow=Background 1970/01/01 11:20:44.697845 0.319359 udp 10.0.2.104 54523 <-> 186.48.133.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:45.684034 2.837188 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:49.310612 1.123381 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:49.786493 3.951588 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/01 11:20:50.284895 1.171995 udp 10.0.2.104 54523 <-> 85.152.63.41 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:52.264356 0.047581 udp 10.0.2.104 54523 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:53.252425 0.000000 udp 10.0.2.104 54523 -> 70.3.85.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:54.238992 0.072311 udp 10.0.2.104 54523 <-> 178.158.102.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:55.225102 0.369887 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:56.209917 0.147344 udp 10.0.2.104 54523 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:57.183895 0.073008 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:58.174015 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:20:59.163252 0.075899 udp 10.0.2.104 54523 <-> 213.64.220.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:20:59.814094 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:21:00.151099 0.383042 udp 10.0.2.104 54523 <-> 189.93.227.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:01.138165 0.091828 udp 10.0.2.104 54523 <-> 84.224.226.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:01.623843 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:21:02.124111 0.227715 udp 10.0.2.104 54523 <-> 72.23.77.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:03.109177 0.368423 udp 10.0.2.104 54523 <-> 122.100.106.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:04.083212 0.347320 udp 10.0.2.104 54523 <-> 119.67.201.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:05.073534 0.345878 udp 10.0.2.104 54523 <-> 114.36.82.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:06.062664 0.343689 udp 10.0.2.104 54523 <-> 218.173.176.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:07.050981 2.968443 udp 10.0.2.104 54523 <-> 84.252.22.95 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:10.973353 3.285693 udp 10.0.2.104 54523 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:15.064844 0.178049 udp 10.0.2.104 54523 <-> 76.30.191.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:16.046201 0.000000 udp 10.0.2.104 54523 -> 79.35.110.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:21:17.036230 0.400446 udp 10.0.2.104 54523 <-> 49.159.145.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:18.025661 0.019039 udp 10.0.2.104 54523 <-> 176.198.111.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:19.013868 0.282758 udp 10.0.2.104 54523 <-> 60.62.66.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:20.000495 0.281362 udp 10.0.2.104 54523 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:20.986216 0.166587 udp 10.0.2.104 54523 <-> 96.20.36.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:21.970651 0.163830 udp 10.0.2.104 54523 <-> 69.245.165.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:22.456278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:21:22.951135 0.407583 udp 10.0.2.104 54523 <-> 187.84.77.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:23.941154 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:21:24.929923 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:21:25.917670 0.302418 udp 10.0.2.104 54523 <-> 200.158.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:26.907322 0.082977 udp 10.0.2.104 54523 <-> 178.42.151.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:27.893046 0.155169 udp 10.0.2.104 54523 <-> 184.184.182.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:28.877829 0.128277 udp 10.0.2.104 54523 <-> 68.39.15.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:29.858909 0.515045 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:30.849381 3.249258 udp 10.0.2.104 54523 <-> 201.235.154.108 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:31.838226 0.166423 udp 10.0.2.104 54523 <-> 71.82.221.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:32.826079 0.198321 udp 10.0.2.104 54523 <-> 74.216.44.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:34.798432 0.133085 udp 10.0.2.104 54523 <-> 83.29.32.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:35.772875 0.154034 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:36.764351 0.153729 udp 10.0.2.104 54523 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:37.754346 0.000000 udp 10.0.2.104 54523 -> 114.25.138.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:21:38.743418 0.262255 udp 10.0.2.104 54523 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:39.731070 0.000000 udp 10.0.2.104 54523 -> 189.6.137.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:21:40.717729 0.211294 udp 10.0.2.104 54523 <-> 24.68.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:41.702311 0.155672 udp 10.0.2.104 54523 <-> 184.184.182.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:42.676373 0.068047 udp 10.0.2.104 54523 <-> 83.213.107.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:43.667751 0.168781 udp 10.0.2.104 54523 <-> 76.184.250.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:44.657208 1.049071 udp 10.0.2.104 54523 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:45.645532 0.144694 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:46.633126 0.036339 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:47.619796 0.000000 udp 10.0.2.104 54523 -> 64.129.187.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:21:48.604777 0.333095 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:49.579742 0.136473 udp 10.0.2.104 54523 <-> 173.220.221.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:50.569779 0.040712 udp 10.0.2.104 54523 <-> 213.231.150.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:51.222351 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:21:51.559430 0.059162 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:21:52.548579 0.000000 udp 10.0.2.104 54523 -> 188.26.217.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:21:53.535913 1.305114 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:06.734610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:22:06.734650 0.000000 udp 10.0.2.104 54523 <- 211.76.60.16 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:07.215797 1.277811 udp 10.0.2.104 54523 <-> 201.187.117.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:08.201306 0.136534 udp 10.0.2.104 54523 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:09.175934 0.786618 udp 10.0.2.104 54523 <-> 114.46.117.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:10.166769 0.282598 udp 10.0.2.104 54523 <-> 190.206.219.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:11.156413 0.045138 udp 10.0.2.104 54523 <-> 91.187.86.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:12.145227 0.141794 udp 10.0.2.104 54523 <-> 24.0.79.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:13.133315 0.371804 udp 10.0.2.104 54523 <-> 188.158.81.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:14.119882 0.010433 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:15.105517 0.166978 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:16.080062 0.170482 udp 10.0.2.104 54523 <-> 72.135.116.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:17.070905 0.000000 udp 10.0.2.104 54523 -> 114.45.22.188 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:18.060722 0.050471 udp 10.0.2.104 54523 <-> 77.244.194.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:19.049325 0.767249 udp 10.0.2.104 54523 <-> 79.19.32.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:22.083866 0.066989 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:23.060496 0.000000 udp 10.0.2.104 54523 -> 190.79.124.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:24.045988 0.472915 udp 10.0.2.104 54523 <-> 183.87.65.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:25.982874 0.212547 udp 10.0.2.104 54523 <-> 65.65.137.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:26.963598 0.000000 udp 10.0.2.104 54523 -> 85.130.81.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:27.953383 4.107729 udp 10.0.2.104 54523 <-> 190.26.100.160 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:30.820848 0.000000 udp 10.0.2.104 54523 -> 68.48.163.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:32.795058 0.302259 udp 10.0.2.104 54523 <-> 200.158.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:33.780669 4.930678 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:34.755064 1.330548 udp 10.0.2.104 54523 <-> 114.43.67.34 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:36.735318 0.445485 udp 10.0.2.104 54523 <-> 179.203.215.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:37.723879 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:38.886027 0.000000 udp 10.0.2.104 54523 <- 174.59.159.254 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:39.697721 0.000000 udp 10.0.2.104 54523 -> 201.231.197.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:40.682896 0.123915 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:41.657293 0.284466 udp 10.0.2.104 54523 <-> 189.120.4.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:42.648096 0.879649 udp 10.0.2.104 54523 <-> 217.203.144.119 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:43.637810 0.000000 udp 10.0.2.104 54523 -> 24.148.90.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:44.626520 0.203087 udp 10.0.2.104 54523 <-> 76.94.105.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:45.612981 0.000000 udp 10.0.2.104 54523 -> 24.47.139.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:51.535917 0.000000 udp 10.0.2.104 54523 <- 24.47.139.84 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:52.661880 0.345144 udp 10.0.2.104 54523 <-> 49.249.143.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:53.635923 0.077119 udp 10.0.2.104 54523 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:54.608334 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:22:55.598006 0.206548 udp 10.0.2.104 54523 <-> 184.160.92.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:56.586760 0.076603 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:57.573874 0.051482 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:22:58.559329 0.000000 udp 10.0.2.104 54523 -> 88.163.39.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:23:14.598365 0.000000 udp 10.0.2.104 54523 <- 88.163.39.243 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:23:15.475038 0.983759 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:17.094650 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:23:17.431418 1.344393 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:19.409354 0.000000 udp 10.0.2.104 54523 -> 91.82.39.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:23:20.396261 0.159173 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:21.382132 0.000000 udp 10.0.2.104 54523 -> 109.53.123.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:23:22.366929 0.051752 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:23.350818 0.341656 udp 10.0.2.104 54523 <-> 122.121.12.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:24.323315 0.144822 udp 10.0.2.104 54523 <-> 216.36.152.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:25.317068 0.130689 udp 10.0.2.104 54523 <-> 87.18.124.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:26.305032 2.145226 udp 10.0.2.104 54523 <-> 76.125.64.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:27.292008 0.141683 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:29.262929 0.000000 udp 10.0.2.104 54523 -> 188.27.119.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:23:30.246762 0.247377 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:31.338211 2.031613 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:32.327714 0.321666 udp 10.0.2.104 54523 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:34.304033 4.134340 udp 10.0.2.104 54523 <-> 207.190.82.206 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:35.289927 0.096920 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:36.274708 0.156244 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:37.258165 0.000000 udp 10.0.2.104 54523 -> 190.124.133.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:23:39.220158 0.376995 udp 10.0.2.104 54523 <-> 186.91.145.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:40.208374 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:23:41.195583 0.178403 udp 10.0.2.104 54523 <-> 24.28.147.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:42.181438 0.164581 udp 10.0.2.104 54523 <-> 76.187.122.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:43.166274 1.087450 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:44.149959 0.000000 udp 10.0.2.104 54523 -> 74.172.71.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:23:45.122293 0.168963 udp 10.0.2.104 54523 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:46.111318 1.744140 udp 10.0.2.104 54523 <-> 107.9.137.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:48.665038 0.086521 udp 10.0.2.104 54523 <-> 78.235.244.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:49.652326 0.161343 udp 10.0.2.104 54523 <-> 67.198.91.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:50.638490 0.201119 udp 10.0.2.104 54523 <-> 124.125.254.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:51.623301 0.175368 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:52.607004 4.923411 udp 10.0.2.104 54523 <-> 201.235.247.205 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:53.579339 0.281603 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:55.557314 0.050486 udp 10.0.2.104 54523 <-> 94.53.32.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:56.544343 0.172334 udp 10.0.2.104 54523 <-> 66.169.209.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:57.815447 0.979154 udp 10.0.2.104 54523 <-> 201.235.247.205 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:23:59.500425 0.499615 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:00.473321 0.000000 udp 10.0.2.104 54523 -> 70.114.34.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:37.430935 0.000000 udp 10.0.2.104 54523 <- 70.114.34.236 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:38.256413 1.922853 udp 10.0.2.104 54523 <-> 201.46.149.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:40.813772 0.132477 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:41.803451 0.040087 udp 10.0.2.104 54523 <-> 89.215.145.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:42.791983 0.625369 udp 10.0.2.104 54523 <-> 190.75.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:43.589599 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:24:43.927257 0.042004 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:44.914263 0.000000 udp 10.0.2.104 54523 -> 46.150.38.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:45.890059 4.188250 udp 10.0.2.104 54523 <-> 186.93.186.40 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:46.881588 0.063597 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:47.872129 0.084781 udp 10.0.2.104 54523 <-> 85.67.109.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:48.861956 0.385136 udp 10.0.2.104 54523 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:24:51.825404 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:52.801224 0.000094 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:52.801318 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:24:53.793126 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:54.784036 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:55.773506 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:56.762334 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:57.750025 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:58.736616 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:24:59.712611 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:00.703841 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:01.694933 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:02.683941 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:03.678233 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:04.665711 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:05.651787 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:06.634282 3.031284 udp 10.0.2.104 54523 <-> 86.121.77.25 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:07.625741 0.049028 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:08.616406 0.161133 udp 10.0.2.104 54523 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:10.595239 0.116792 udp 10.0.2.104 54523 <-> 72.200.174.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:11.582829 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:12.569591 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:13.552410 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:14.543672 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:15.534067 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:16.523422 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:16.523518 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:25:17.511972 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:18.499860 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:19.486519 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:20.468880 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:21.460370 2.138766 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:22.450751 0.132458 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:24.429025 0.255993 udp 10.0.2.104 54523 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:25.416469 0.874090 udp 10.0.2.104 54523 <-> 91.65.189.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:26.393397 0.076045 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:27.385786 0.314287 udp 10.0.2.104 54523 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:28.377161 2.968795 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:28.380245 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.104 0x9efe URN 192 1 110 flow=Background 1970/01/01 11:25:29.367740 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:30.019547 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:25:30.357123 0.125697 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:32.333458 0.227774 udp 10.0.2.104 54523 <-> 190.78.168.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:33.310303 3.841919 udp 10.0.2.104 54523 <-> 190.38.7.14 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:34.302551 0.138814 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:36.284768 0.069998 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:37.274397 0.000000 udp 10.0.2.104 54523 -> 77.242.145.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:38.262960 0.057632 udp 10.0.2.104 54523 <-> 86.127.145.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:39.250248 0.192053 udp 10.0.2.104 54523 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:40.226467 0.157149 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:41.218791 0.385520 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:42.210544 0.299758 udp 10.0.2.104 54523 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:43.201096 0.465819 udp 10.0.2.104 54523 <-> 188.152.54.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:44.190604 0.285345 udp 10.0.2.104 54523 <-> 42.125.56.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:45.178916 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:46.166552 2.960615 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:47.143346 0.053096 udp 10.0.2.104 54523 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:48.135761 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:50.117385 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:51.106740 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:52.095331 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:53.083006 0.503708 udp 10.0.2.104 54523 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:54.059597 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:55.051738 0.024178 udp 10.0.2.104 54523 <-> 176.199.74.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:56.042863 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:25:57.033005 0.142064 udp 10.0.2.104 54523 <-> 69.123.17.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:58.022237 0.127682 udp 10.0.2.104 54523 <-> 178.127.14.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:59.010615 0.349478 udp 10.0.2.104 54523 <-> 190.213.116.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:25:59.997912 4.091671 udp 10.0.2.104 54523 <-> 75.177.8.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:00.974747 0.058079 udp 10.0.2.104 54523 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:01.966868 0.022178 udp 10.0.2.104 54523 <-> 176.199.74.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:02.958105 0.000000 udp 10.0.2.104 54523 -> 41.189.162.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:04.937333 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:05.925343 0.143320 udp 10.0.2.104 54523 <-> 75.177.8.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:06.912646 2.959977 udp 10.0.2.104 54523 <-> 190.213.116.10 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:07.888989 0.207789 udp 10.0.2.104 54523 <-> 24.2.42.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:08.881418 0.154238 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:10.862907 0.857225 udp 10.0.2.104 54523 <-> 70.237.37.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:11.851823 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:12.840370 0.000000 udp 10.0.2.104 54523 -> 190.120.66.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:13.827694 0.379185 udp 10.0.2.104 54523 <-> 95.237.143.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:14.803931 0.145205 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:15.797657 0.097757 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:16.452868 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:26:16.790357 0.000000 udp 10.0.2.104 54523 -> 186.124.166.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:17.780582 1.442325 udp 10.0.2.104 54523 <-> 181.33.138.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:18.769680 0.111478 udp 10.0.2.104 54523 <-> 188.37.190.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:19.757737 1.220024 udp 10.0.2.104 54523 <-> 190.80.114.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:21.721169 1.424131 udp 10.0.2.104 54523 <-> 187.69.14.35 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:23.704108 0.116717 udp 10.0.2.104 54523 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:24.694206 0.056460 udp 10.0.2.104 54523 <-> 79.119.29.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:25.683151 0.144053 udp 10.0.2.104 54523 <-> 174.101.11.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:26.671217 0.245892 udp 10.0.2.104 54523 <-> 91.89.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:27.658278 0.000000 udp 10.0.2.104 54523 -> 190.18.110.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:28.634926 0.060314 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:29.626984 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:30.618181 0.207552 udp 10.0.2.104 54523 <-> 50.168.13.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:31.608073 0.299428 udp 10.0.2.104 54523 <-> 187.11.102.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:32.597450 1.035902 udp 10.0.2.104 54523 <-> 178.148.123.102 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:34.572680 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:35.548922 0.305001 udp 10.0.2.104 54523 <-> 187.84.77.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:36.540745 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:36.540822 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:26:37.531777 4.930055 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:38.521981 0.000000 udp 10.0.2.104 54523 -> 2.187.192.193 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:39.510759 0.156372 udp 10.0.2.104 54523 <-> 71.82.221.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:40.498637 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:41.485659 4.938432 udp 10.0.2.104 54523 <-> 98.157.198.223 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:43.453697 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:44.444824 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:45.435035 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:46.719749 0.000000 udp 10.0.2.104 54523 <- 98.157.198.223 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:47.411925 0.398059 udp 10.0.2.104 54523 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:48.399169 0.409290 udp 10.0.2.104 54523 <-> 190.189.116.41 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:49.375573 0.051223 udp 10.0.2.104 54523 <-> 79.117.12.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:50.367373 0.059941 udp 10.0.2.104 54523 <-> 89.47.223.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:51.358571 0.000000 udp 10.0.2.104 54523 -> 190.177.182.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:52.349065 0.462027 udp 10.0.2.104 54523 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:53.337925 0.000000 udp 10.0.2.104 54523 -> 186.14.10.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:54.325911 0.040114 udp 10.0.2.104 54523 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:55.312931 0.594971 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:56.289157 0.218311 udp 10.0.2.104 54523 <-> 50.38.15.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:57.280911 0.155072 udp 10.0.2.104 54523 <-> 173.217.236.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:58.271727 0.167056 udp 10.0.2.104 54523 <-> 107.9.137.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:26:58.973901 0.011809 udp 10.0.2.104 54607 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 11:26:58.986005 0.000000 udp 10.0.2.104 54608 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:26:59.261673 0.095151 udp 10.0.2.104 54523 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:00.261820 0.159082 udp 10.0.2.104 54523 <-> 78.236.112.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:01.262122 1.345278 udp 10.0.2.104 54523 <-> 186.182.96.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:02.263219 4.291247 udp 10.0.2.104 54523 <-> 190.163.230.144 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:02.913639 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:27:03.254643 0.075053 udp 10.0.2.104 54523 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:04.256534 0.000000 udp 10.0.2.104 54523 -> 95.249.31.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:05.257780 0.000000 udp 10.0.2.104 54523 -> 88.78.149.201 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:07.260603 0.112299 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:08.262360 0.224476 udp 10.0.2.104 54523 <-> 64.184.108.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:09.264084 0.153761 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:10.254654 1.302511 udp 10.0.2.104 54523 <-> 95.88.209.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:11.256545 0.167390 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:12.259222 0.158793 udp 10.0.2.104 54523 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:13.259732 0.000000 udp 10.0.2.104 54523 -> 79.53.137.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:14.260603 0.170371 udp 10.0.2.104 54523 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:15.262046 0.089555 udp 10.0.2.104 54523 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:16.263323 0.000000 udp 10.0.2.104 54523 -> 83.192.67.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:17.254873 0.042394 udp 10.0.2.104 54523 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:18.256454 0.161183 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:19.257582 0.000000 udp 10.0.2.104 54523 -> 201.241.105.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:20.259305 0.351526 udp 10.0.2.104 54523 <-> 96.20.36.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:21.260778 0.197507 udp 10.0.2.104 54523 <-> 89.231.196.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:22.262095 0.296640 udp 10.0.2.104 54523 <-> 220.216.24.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:23.263430 0.284629 udp 10.0.2.104 54523 <-> 75.248.206.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:24.254918 0.311347 udp 10.0.2.104 54523 <-> 182.237.188.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:25.256404 0.070128 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:26.257998 0.346340 udp 10.0.2.104 54523 <-> 61.223.150.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:27.259046 0.295312 udp 10.0.2.104 54523 <-> 187.39.55.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:28.260744 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:29.262282 0.098048 udp 10.0.2.104 54523 <-> 92.32.95.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:30.263604 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:30.263650 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:27:31.254900 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:32.256709 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:33.257833 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:34.259197 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:35.260794 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:36.262433 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:37.263058 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:38.255583 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:39.256619 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:40.258383 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:41.259379 4.998280 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:42.263485 0.138644 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:43.263249 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:44.266257 3.289127 udp 10.0.2.104 54523 <-> 187.39.55.231 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:45.256648 0.139095 udp 10.0.2.104 54523 <-> 50.177.222.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:46.330677 0.000000 udp 10.0.2.104 54523 <- 91.65.196.250 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:27:48.259971 0.228581 udp 10.0.2.104 54523 <-> 177.224.99.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:49.260902 0.124244 udp 10.0.2.104 54523 <-> 87.18.124.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:49.922032 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:27:50.262760 0.064203 udp 10.0.2.104 54523 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:51.263990 0.138408 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:52.255463 4.122533 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:53.256729 0.176373 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:54.258332 0.276566 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:55.259368 0.192136 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:57.262352 0.064327 udp 10.0.2.104 54523 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:58.253636 0.098469 udp 10.0.2.104 54523 <-> 78.236.112.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:27:59.255180 0.000000 udp 10.0.2.104 54523 -> 83.253.100.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:00.256772 0.000000 udp 10.0.2.104 54523 -> 75.191.197.158 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:01.258064 0.155179 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:02.259475 0.146967 udp 10.0.2.104 54523 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:03.260811 0.043649 udp 10.0.2.104 54523 <-> 93.183.191.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:04.262645 0.000000 udp 10.0.2.104 54523 -> 188.26.181.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:05.253321 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:06.255512 0.329729 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:07.256952 0.308014 udp 10.0.2.104 54523 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:08.258149 0.154610 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:09.259425 0.164179 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:10.261027 0.144837 udp 10.0.2.104 54523 <-> 98.103.10.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:11.262438 0.000000 udp 10.0.2.104 54523 -> 93.105.14.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:12.254179 0.228259 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:13.255261 0.000000 udp 10.0.2.104 54523 -> 92.86.42.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:14.257025 0.160939 udp 10.0.2.104 54523 <-> 96.20.36.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:15.258069 0.000000 udp 10.0.2.104 54523 -> 66.208.224.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:16.259885 0.215523 udp 10.0.2.104 54523 <-> 128.123.234.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:17.261108 0.069347 udp 10.0.2.104 54523 <-> 217.175.118.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:18.263108 0.162825 udp 10.0.2.104 54523 <-> 24.238.169.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:19.254258 0.000000 udp 10.0.2.104 54523 -> 181.72.237.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:20.256058 0.347084 udp 10.0.2.104 54523 <-> 121.131.107.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:21.256803 0.123794 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:22.258309 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:23.260738 0.172513 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:24.261455 0.139106 udp 10.0.2.104 54523 <-> 69.116.80.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:25.262945 0.162947 udp 10.0.2.104 54523 <-> 68.103.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:26.254039 0.154386 udp 10.0.2.104 54523 <-> 68.58.91.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:27.256549 0.158668 udp 10.0.2.104 54523 <-> 66.61.104.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:28.257176 4.996890 udp 10.0.2.104 54523 <-> 108.230.246.250 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:29.258408 0.000000 udp 10.0.2.104 54523 -> 181.21.153.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:30.259819 0.000000 udp 10.0.2.104 54523 -> 74.216.7.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:31.261287 0.335028 udp 10.0.2.104 54523 <-> 27.116.53.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:32.262851 0.070569 udp 10.0.2.104 54523 <-> 85.85.25.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:33.657047 0.000000 udp 10.0.2.104 54523 <- 108.230.246.250 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:34.255374 0.000000 udp 10.0.2.104 54523 -> 212.238.72.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:35.257236 0.401950 udp 10.0.2.104 54523 <-> 181.26.51.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:36.258268 0.252090 udp 10.0.2.104 54523 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:36.919293 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:28:37.259829 0.086326 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:38.261314 0.000000 udp 10.0.2.104 54523 -> 151.66.132.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:39.262816 0.052389 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:40.253875 3.352664 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:41.255830 0.166776 udp 10.0.2.104 54523 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:42.257261 0.058453 udp 10.0.2.104 54523 <-> 87.121.149.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:44.260092 0.290818 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:45.260968 0.214969 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:46.262785 0.188881 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:47.254125 0.157655 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:48.255810 0.266155 udp 10.0.2.104 54523 <-> 188.246.92.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:49.257250 0.161740 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:50.258745 0.641312 udp 10.0.2.104 54523 <-> 201.81.202.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:51.259828 0.164407 udp 10.0.2.104 54523 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:52.261385 0.141691 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:53.263087 0.052991 udp 10.0.2.104 54523 <-> 62.31.245.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:54.254328 0.060365 udp 10.0.2.104 54523 <-> 78.131.49.205 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:54.314956 0.000000 udp 10.0.2.104 54523 -> 98.28.102.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315054 0.000000 udp 10.0.2.104 54523 -> 71.61.103.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315157 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315217 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:28:54.315283 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315346 0.000000 udp 10.0.2.104 54523 -> 189.13.77.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315434 0.000000 udp 10.0.2.104 54523 -> 212.225.170.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315654 0.000000 udp 10.0.2.104 54523 -> 186.30.206.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315752 0.000000 udp 10.0.2.104 54523 -> 201.208.196.167 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315842 0.000000 udp 10.0.2.104 54523 -> 76.16.28.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.315931 0.000000 udp 10.0.2.104 54523 -> 213.92.136.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.316019 0.000000 udp 10.0.2.104 54523 -> 78.193.13.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.316115 0.000000 udp 10.0.2.104 54523 -> 218.152.217.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.316206 0.000000 udp 10.0.2.104 54523 -> 85.60.11.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.316294 0.000000 udp 10.0.2.104 54523 -> 68.191.141.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.316383 0.000000 udp 10.0.2.104 54523 -> 92.228.122.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:54.316471 0.000000 udp 10.0.2.104 54523 -> 69.31.160.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:55.255869 0.173561 udp 10.0.2.104 54523 <-> 24.154.191.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:56.257216 0.000000 udp 10.0.2.104 54523 -> 216.183.150.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:28:57.258434 0.098791 udp 10.0.2.104 54523 <-> 83.213.107.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:58.260804 0.571109 udp 10.0.2.104 54523 <-> 114.79.176.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:28:59.261397 0.049100 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:00.263125 0.153862 udp 10.0.2.104 54523 <-> 68.40.144.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:01.255051 0.322113 udp 10.0.2.104 54523 <-> 201.186.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:02.256270 0.113430 udp 10.0.2.104 54523 <-> 178.149.186.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:03.257346 0.362601 udp 10.0.2.104 54523 <-> 115.244.238.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:04.258714 0.000000 udp 10.0.2.104 54523 -> 5.237.114.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:05.261939 0.203772 udp 10.0.2.104 54523 <-> 31.185.115.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:06.262839 0.218554 udp 10.0.2.104 54523 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:07.263093 0.074659 udp 10.0.2.104 54523 <-> 86.126.32.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:08.254614 0.000000 udp 10.0.2.104 54523 -> 201.213.50.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:09.256302 0.000000 udp 10.0.2.104 54523 -> 81.213.226.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:10.257949 0.059892 udp 10.0.2.104 54523 <-> 89.47.223.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:11.258848 0.061322 udp 10.0.2.104 54523 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:12.259971 0.172448 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:13.262043 0.976587 udp 10.0.2.104 54523 <-> 77.89.104.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:14.263006 0.000000 udp 10.0.2.104 54523 -> 85.84.235.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:14.776901 3.001282 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:29:15.254738 0.165869 udp 10.0.2.104 54523 <-> 184.160.92.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:16.256252 0.151399 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:17.257790 0.155811 udp 10.0.2.104 54523 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:18.258639 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:19.260339 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:20.261384 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:21.262938 0.000000 udp 10.0.2.104 54523 -> 79.53.104.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:21.783995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:29:22.254655 0.000000 udp 10.0.2.104 54523 -> 207.58.236.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:23.256012 0.165358 udp 10.0.2.104 54523 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:23.917327 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:29:24.257797 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:25.258853 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:27.261903 0.000153 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:27.262056 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:29:28.263760 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:29.254509 1.039739 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:29.785912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:29:31.257493 1.250406 udp 10.0.2.104 54523 <-> 79.53.104.10 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:33.262800 0.000000 udp 10.0.2.104 54523 -> 207.58.236.252 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:34.263842 0.000000 udp 10.0.2.104 54523 -> 192.168.1.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:35.264064 0.051570 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:36.255082 0.476832 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:37.256761 0.176369 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:38.257559 0.162586 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:39.258997 0.203720 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:40.261391 0.101020 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:41.261798 0.601677 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:42.263391 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:43.254662 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:44.256176 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:45.258204 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:45.788711 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:29:46.259148 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:47.261091 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:48.262345 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:49.263711 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:50.254887 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:51.256186 0.000000 udp 10.0.2.104 54523 -> 24.196.200.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:52.258030 0.432981 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:29:53.259250 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:54.260879 0.000091 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:54.260970 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:29:55.262130 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:56.263988 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:57.255120 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:58.256677 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:29:59.260124 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:00.260125 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:01.260972 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:02.262420 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:03.263881 3.995503 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:04.255121 0.031263 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:30:05.256613 0.000000 udp 10.0.2.104 54523 -> 24.196.200.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:06.257937 0.527610 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:30:08.261023 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:09.262512 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:10.264088 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:10.914478 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:30:11.255069 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:12.256784 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:13.257884 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:14.259693 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:15.260652 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:16.262820 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:17.263464 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:17.794685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:30:18.256700 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:19.257951 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:20.259164 0.032111 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:30:21.259197 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:22.260672 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:23.262527 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:24.264105 0.000147 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:24.264252 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:30:25.255434 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:26.256743 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:27.258170 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:28.259399 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:29.264561 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:30.264886 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:31.255172 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:32.256208 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:33.256673 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:34.258495 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:35.259755 1.838576 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:30:37.262315 0.000131 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:37.262446 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:30:38.254064 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:39.255254 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:40.256912 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:41.258292 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:42.260145 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:43.262131 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:44.262610 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:45.254252 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:46.255250 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:47.257096 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:48.258319 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:49.260134 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:50.261150 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:51.262440 3.119467 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:30:52.254077 0.000000 udp 10.0.2.104 54523 -> 24.196.200.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:53.255393 0.000000 udp 10.0.2.104 54523 -> 77.70.120.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:55.258221 0.437112 udp 10.0.2.104 54523 <-> 79.53.104.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:30:56.260094 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:57.261462 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:57.922483 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:30:58.263138 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:30:59.254155 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:00.255650 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:01.256589 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:02.258904 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:03.259408 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:04.261985 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:05.262875 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:06.254495 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:07.256033 0.000000 udp 10.0.2.104 54523 -> 24.196.200.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:08.256908 1.033387 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:31:10.260087 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:11.261447 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:12.262760 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:13.254256 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:14.255753 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:15.257176 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:16.258605 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:17.260311 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:18.261276 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:19.262753 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:20.257264 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:21.257504 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:22.257986 0.032291 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:31:23.258531 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:24.260689 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:25.261492 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:26.263370 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:27.254551 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:28.256470 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:29.257348 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:30.258780 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:31.260568 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:32.262272 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:33.263205 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:34.254317 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:35.256186 3.004103 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:36.257308 4.006036 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:37.259345 0.674467 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:31:39.261710 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:41.254700 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:42.256353 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:43.257911 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:44.258843 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:44.920150 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:31:45.260814 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:46.262331 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:47.262928 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:48.254804 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:49.255928 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:50.257324 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:51.259385 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:52.260711 0.000000 udp 10.0.2.104 54523 -> 188.167.110.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:53.262017 0.126430 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:31:54.266372 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:55.256881 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:56.258463 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:57.258335 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:58.258935 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:31:59.260850 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:00.261867 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:01.263169 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:02.254508 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:03.256288 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:04.257372 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:05.259016 1.035812 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:07.262158 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:08.263259 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:09.254787 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:10.256693 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:11.258468 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:12.259033 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:13.260716 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:14.262116 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:15.263429 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:16.254609 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:17.256252 0.000000 udp 10.0.2.104 54523 -> 24.196.200.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:18.258218 0.031334 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:19.259384 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:20.260750 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:21.262468 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:22.263699 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:23.254705 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:24.256138 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:25.258038 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:26.259035 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:27.260711 4.997638 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:28.261966 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:29.263459 0.129689 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:30.255234 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:31.256193 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:31.917801 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:32:33.259161 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:34.260621 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:35.262547 0.393497 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:36.263846 0.032614 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:37.254955 4.181052 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:38.256940 0.033070 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:39.258424 0.000000 udp 10.0.2.104 54523 -> 159.0.44.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:40.259383 0.142704 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:42.262452 3.996055 udp 10.0.2.104 54523 -> 187.101.248.28 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:43.263828 4.094845 udp 10.0.2.104 54523 <-> 109.61.112.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:44.255267 0.333801 udp 10.0.2.104 54523 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:45.256684 2.239062 udp 10.0.2.104 54523 <-> 178.237.140.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:48.260902 0.136896 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:49.262513 2.324994 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:50.263716 0.000000 udp 10.0.2.104 54523 -> 91.89.7.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:52.256548 0.358113 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:53.258270 0.022393 udp 10.0.2.104 54523 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:54.259359 0.038088 udp 10.0.2.104 54523 <-> 212.117.58.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:55.260969 0.207966 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:56.262238 0.118669 udp 10.0.2.104 54523 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:57.264196 0.031057 udp 10.0.2.104 54523 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:32:58.254912 0.000000 udp 10.0.2.104 54523 -> 190.79.140.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:32:59.257051 0.068116 udp 10.0.2.104 54523 <-> 86.126.0.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:00.258168 0.536681 udp 10.0.2.104 54523 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:01.259428 0.053612 udp 10.0.2.104 54523 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:02.260780 3.317963 udp 10.0.2.104 54523 <-> 219.71.217.211 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:03.262376 3.155228 udp 10.0.2.104 54523 <-> 71.203.65.165 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:04.254185 0.319522 udp 10.0.2.104 54523 <-> 76.169.90.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:07.258231 0.303566 udp 10.0.2.104 54523 <-> 189.69.216.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:08.259738 0.000000 udp 10.0.2.104 54523 -> 24.122.213.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:09.260915 2.114672 udp 10.0.2.104 54523 <-> 24.122.167.188 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:10.262935 2.996504 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:14.259113 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:15.259441 0.216307 udp 10.0.2.104 54523 <-> 201.242.68.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:16.261035 0.337866 udp 10.0.2.104 54523 <-> 87.115.229.77 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:17.262788 0.173205 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:18.256814 2.157146 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:18.917163 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:33:19.257538 0.000000 udp 10.0.2.104 54523 -> 5.15.162.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:21.264970 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:22.266396 0.000000 udp 10.0.2.104 54523 -> 213.198.237.211 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:23.266692 0.165585 udp 10.0.2.104 54523 <-> 66.69.251.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:24.266215 0.000000 udp 10.0.2.104 54523 -> 201.37.234.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:25.256210 0.276272 udp 10.0.2.104 54523 <-> 184.167.18.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:26.257043 0.319484 udp 10.0.2.104 54523 <-> 179.56.57.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:27.258285 0.066479 udp 10.0.2.104 54523 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:28.259074 0.054810 udp 10.0.2.104 54523 <-> 95.160.90.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:29.260050 0.146940 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:30.261464 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:31.262544 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:32.253889 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:33.255859 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:34.257071 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:35.258631 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:36.260511 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:37.261319 0.457009 udp 10.0.2.104 54523 <-> 201.37.234.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:38.262764 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:39.254377 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:40.255839 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:41.257080 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:42.258930 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:43.260127 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:44.261098 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:45.262971 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:46.254176 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:47.255847 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:48.256939 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:50.260104 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:51.261889 0.000103 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:51.261992 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:33:52.263155 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:53.254364 0.170613 udp 10.0.2.104 54523 <-> 66.69.251.213 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:54.255922 0.143293 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:33:55.256852 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:56.259389 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:57.260224 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:58.261259 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:33:59.262925 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:00.254289 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:01.255859 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:02.257331 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:03.258584 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:04.260211 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:05.261553 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:05.261649 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:34:05.912403 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:34:07.254255 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:08.256339 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:09.258182 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:10.258713 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:11.260809 0.055449 udp 10.0.2.104 54523 <-> 95.160.90.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:12.261749 0.225235 udp 10.0.2.104 54523 <-> 75.92.194.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:13.262884 1.301516 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:14.254259 0.000000 udp 10.0.2.104 54523 -> 184.167.18.225 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:15.256311 0.142819 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:16.257583 0.152983 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:17.258978 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:18.259923 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:19.261491 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:20.262967 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:21.254341 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:22.256205 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:23.257277 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:24.259000 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:25.260448 0.046808 udp 10.0.2.104 54523 <-> 46.160.101.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:26.261860 4.997503 udp 10.0.2.104 54523 -> 93.137.174.223 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:27.263135 2.994235 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:28.254372 0.314407 udp 10.0.2.104 54523 <-> 180.215.26.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:29.256341 0.164944 udp 10.0.2.104 54523 <-> 66.69.251.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:32.260836 0.000000 udp 10.0.2.104 54523 -> 201.37.234.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:33.261621 0.153943 udp 10.0.2.104 54523 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:34.263289 0.303301 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:35.254561 0.310871 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:36.256722 0.170275 udp 10.0.2.104 54523 <-> 72.51.46.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:37.257892 0.255585 udp 10.0.2.104 54523 <-> 206.253.49.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:38.258863 0.000000 udp 10.0.2.104 54523 -> 181.19.220.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:39.260943 0.196901 udp 10.0.2.104 54523 <-> 75.97.2.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:40.262028 0.150621 udp 10.0.2.104 54523 <-> 79.52.161.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:41.263165 0.254237 udp 10.0.2.104 54523 <-> 190.254.197.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:42.255067 0.039443 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:43.256209 0.028679 udp 10.0.2.104 54523 <-> 95.111.26.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:44.257757 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:45.258968 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:46.260810 0.151062 udp 10.0.2.104 54523 <-> 24.202.178.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:47.262013 0.040323 udp 10.0.2.104 54523 <-> 188.254.247.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:48.266741 0.031315 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:49.257404 0.383745 udp 10.0.2.104 54523 <-> 115.241.185.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:50.258109 0.138148 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:51.257793 0.286545 udp 10.0.2.104 54523 <-> 177.143.165.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:52.258960 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:52.920285 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:34:53.260506 0.141450 udp 10.0.2.104 54523 <-> 66.117.244.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:54.262172 0.330379 udp 10.0.2.104 54523 <-> 211.206.235.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:55.263499 0.037745 udp 10.0.2.104 54523 <-> 87.188.164.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:56.254719 0.087880 udp 10.0.2.104 54523 <-> 41.97.210.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:56.284991 0.000000 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:34:57.256908 0.154538 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:58.257192 0.136986 udp 10.0.2.104 54523 <-> 69.115.88.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:34:59.259291 0.183998 udp 10.0.2.104 54523 <-> 70.181.157.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:00.260889 0.152761 udp 10.0.2.104 54523 <-> 71.47.180.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:01.261854 0.190719 udp 10.0.2.104 54523 <-> 68.106.224.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:02.263581 0.576680 udp 10.0.2.104 54523 <-> 219.162.244.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:03.255223 0.152276 udp 10.0.2.104 54523 <-> 188.159.244.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:04.256452 0.283840 udp 10.0.2.104 54523 <-> 31.200.135.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:05.258075 0.220467 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:06.259208 0.538468 udp 10.0.2.104 54523 <-> 24.232.163.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:07.261065 0.244112 udp 10.0.2.104 54523 <-> 186.93.97.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:08.262247 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:09.263400 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:10.255081 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:11.256449 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:12.258018 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:13.259381 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:14.260485 0.074730 udp 10.0.2.104 54523 <-> 62.42.133.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:15.262193 0.328174 udp 10.0.2.104 54523 <-> 118.171.178.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:16.263065 0.172995 udp 10.0.2.104 54523 <-> 68.59.249.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:17.254841 0.568300 udp 10.0.2.104 54523 <-> 202.29.179.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:18.256572 0.397608 udp 10.0.2.104 54523 <-> 116.49.205.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:19.258273 0.085669 udp 10.0.2.104 54523 <-> 85.86.108.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:20.259171 0.000000 udp 10.0.2.104 54523 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:21.260761 0.165779 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:22.262427 0.116447 udp 10.0.2.104 54523 <-> 72.218.201.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:23.263600 0.104999 udp 10.0.2.104 54523 <-> 87.59.123.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:24.255067 0.111192 udp 10.0.2.104 54523 <-> 37.213.183.239 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:25.256657 0.200056 udp 10.0.2.104 54523 <-> 96.49.44.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:26.257371 0.224421 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:27.259185 0.176249 udp 10.0.2.104 54523 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:28.260987 1.287565 udp 10.0.2.104 54523 <-> 190.138.32.138 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:30.264012 0.000000 udp 10.0.2.104 54523 -> 96.247.124.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:31.255056 0.298334 udp 10.0.2.104 54523 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:32.256488 0.162118 udp 10.0.2.104 54523 <-> 24.203.38.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:33.258029 0.090344 udp 10.0.2.104 54523 <-> 80.216.234.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:34.259257 0.160041 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:35.260986 0.203509 udp 10.0.2.104 54523 <-> 71.227.148.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:36.262461 0.263529 udp 10.0.2.104 54523 <-> 81.233.173.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:37.253937 0.163080 udp 10.0.2.104 54523 <-> 69.245.165.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:38.255306 0.207351 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:39.256723 0.288984 udp 10.0.2.104 54523 <-> 222.159.225.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:39.917322 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:35:40.258661 0.038505 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:41.259836 0.043228 udp 10.0.2.104 54523 <-> 87.207.48.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:42.260793 0.348654 udp 10.0.2.104 54523 <-> 115.241.59.177 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:43.262536 0.741928 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:44.253884 0.158263 udp 10.0.2.104 54523 <-> 198.47.54.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:45.255435 0.317577 udp 10.0.2.104 54523 <-> 14.45.89.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:46.256752 0.000000 udp 10.0.2.104 54523 -> 173.177.199.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:35:47.258776 0.213765 udp 10.0.2.104 54523 <-> 67.177.197.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:48.259752 0.138721 udp 10.0.2.104 54523 <-> 79.22.211.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:49.261041 0.298755 udp 10.0.2.104 54523 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:50.262369 0.173527 udp 10.0.2.104 54523 <-> 71.60.220.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:51.253441 0.353519 udp 10.0.2.104 54523 <-> 118.166.237.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:52.255288 0.448063 udp 10.0.2.104 54523 <-> 190.206.1.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:53.256656 0.158268 udp 10.0.2.104 54523 <-> 75.143.148.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:54.258228 0.163670 udp 10.0.2.104 54523 <-> 173.165.66.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:55.259854 0.188877 udp 10.0.2.104 54523 <-> 24.113.7.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:56.260959 0.342292 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:57.262679 0.339775 udp 10.0.2.104 54523 <-> 187.49.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:58.253618 0.145309 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:35:59.256019 0.000000 udp 10.0.2.104 54523 -> 81.37.164.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:00.257046 0.000000 udp 10.0.2.104 54523 -> 69.76.173.209 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:01.258334 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:02.260012 1.213949 udp 10.0.2.104 54523 <-> 89.229.162.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:03.261036 0.000000 udp 10.0.2.104 54523 -> 190.177.182.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:04.262540 0.089155 udp 10.0.2.104 54523 <-> 82.229.19.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:05.254264 0.162702 udp 10.0.2.104 54523 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:06.255384 0.000000 udp 10.0.2.104 54523 -> 193.68.211.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:07.257166 0.254233 udp 10.0.2.104 54523 <-> 2.190.117.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:08.258891 0.177915 udp 10.0.2.104 54523 <-> 49.207.105.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:09.259484 0.067084 udp 10.0.2.104 54523 <-> 188.171.6.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:10.261200 0.154762 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:11.262767 0.000000 udp 10.0.2.104 54523 -> 201.231.197.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:12.254209 0.000000 udp 10.0.2.104 54523 -> 118.171.226.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:13.255475 0.053460 udp 10.0.2.104 54523 <-> 85.231.171.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:14.257002 0.158398 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:15.258989 0.152713 udp 10.0.2.104 54523 <-> 67.240.151.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:16.260065 0.188484 udp 10.0.2.104 54523 <-> 24.113.7.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:17.261306 0.226112 udp 10.0.2.104 54523 <-> 76.178.38.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:18.262939 0.000000 udp 10.0.2.104 54523 -> 83.82.41.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:19.254454 0.000000 udp 10.0.2.104 54523 -> 204.95.127.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:20.255514 0.000000 udp 10.0.2.104 54523 -> 149.254.234.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:21.256958 0.144596 udp 10.0.2.104 54523 <-> 90.132.108.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:21.800799 3.001093 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:36:22.258668 0.184264 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:23.260381 0.160655 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:24.261520 0.095300 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:25.262984 0.063170 udp 10.0.2.104 54523 <-> 95.65.118.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:26.254165 0.000000 udp 10.0.2.104 54523 -> 187.243.193.146 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:26.914941 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:36:27.256015 0.137707 udp 10.0.2.104 54523 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:28.257234 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:28.808191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:36:29.259050 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:30.260514 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:31.261381 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:32.262647 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:33.254438 0.000000 udp 10.0.2.104 54523 -> 79.115.87.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:34.255514 1.143929 udp 10.0.2.104 54523 <-> 24.229.141.132 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:36.258724 0.136629 udp 10.0.2.104 54523 <-> 24.148.4.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:36.809281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:36:37.260212 0.484431 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:38.261709 0.126006 udp 10.0.2.104 54523 <-> 173.218.213.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:39.263302 0.235947 udp 10.0.2.104 54523 <-> 190.36.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:40.254545 0.170474 udp 10.0.2.104 54523 <-> 74.133.226.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:41.255706 0.331356 udp 10.0.2.104 54523 <-> 123.205.144.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:42.257022 0.168446 udp 10.0.2.104 54523 <-> 66.69.203.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:43.258646 0.384471 udp 10.0.2.104 54523 <-> 177.22.235.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:44.260416 0.000000 udp 10.0.2.104 54523 -> 84.124.183.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:45.261369 0.053932 udp 10.0.2.104 54523 <-> 195.182.199.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:46.263143 0.285906 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:47.254200 0.000042 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:47.254242 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:36:48.256176 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:49.257326 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:50.258724 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:51.260471 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:52.812353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:36:53.263169 0.772092 udp 10.0.2.104 54523 <-> 24.232.62.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:54.254671 0.156928 udp 10.0.2.104 54523 <-> 72.186.226.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:55.256091 3.150389 udp 10.0.2.104 54523 <-> 69.119.31.104 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:56.257327 0.000000 udp 10.0.2.104 54523 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:36:57.258740 0.194175 udp 10.0.2.104 54523 <-> 85.224.225.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:36:59.262368 0.138719 udp 10.0.2.104 54523 <-> 24.167.187.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:00.263119 0.193906 udp 10.0.2.104 54523 <-> 76.169.58.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:01.254776 0.188248 udp 10.0.2.104 54523 <-> 209.236.94.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:02.256192 0.272037 udp 10.0.2.104 54523 <-> 190.252.80.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:03.257487 1.785956 udp 10.0.2.104 54523 <-> 79.109.5.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:04.258889 0.124875 udp 10.0.2.104 54523 <-> 188.29.11.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:05.260465 0.085957 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:06.261637 2.927006 udp 10.0.2.104 54523 <-> 190.195.127.58 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:07.263365 0.000000 udp 10.0.2.104 54523 -> 201.223.198.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:09.256020 0.150533 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:10.257277 4.997472 udp 10.0.2.104 54523 -> 178.148.117.155 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:11.258927 0.000000 udp 10.0.2.104 54523 -> 63.169.196.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:12.260785 0.000000 udp 10.0.2.104 54523 -> 200.84.79.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:13.261976 0.056975 udp 10.0.2.104 54523 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:13.912455 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:37:14.263180 0.145134 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:16.256312 0.756674 udp 10.0.2.104 54523 <-> 79.53.137.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:17.257406 0.000000 udp 10.0.2.104 54523 -> 201.250.120.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:18.259000 0.283429 udp 10.0.2.104 54523 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:19.260926 0.180870 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:20.261885 0.265504 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:21.263472 4.213049 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:22.254888 0.000000 udp 10.0.2.104 54523 -> 190.94.221.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:23.256108 0.000000 udp 10.0.2.104 54523 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:24.258095 0.000000 udp 10.0.2.104 54523 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:24.818621 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:37:26.260839 0.282676 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:27.261957 0.188935 udp 10.0.2.104 54523 <-> 216.196.163.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:28.263095 0.169660 udp 10.0.2.104 54523 <-> 124.123.164.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:29.254861 0.119903 udp 10.0.2.104 54523 <-> 68.231.252.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:30.256439 0.151096 udp 10.0.2.104 54523 <-> 74.133.226.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:31.257790 0.085231 udp 10.0.2.104 54523 <-> 93.176.212.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:32.259181 0.837855 udp 10.0.2.104 54523 <-> 46.223.177.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:33.260835 1.058359 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:35.263481 0.299622 udp 10.0.2.104 54523 <-> 180.3.235.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:36.254794 0.153697 udp 10.0.2.104 54523 <-> 188.119.78.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:37.256318 0.166665 udp 10.0.2.104 54523 <-> 66.30.24.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:38.258128 0.197895 udp 10.0.2.104 54523 <-> 66.75.62.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:39.259012 0.289973 udp 10.0.2.104 54523 <-> 60.56.88.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:40.260796 0.248942 udp 10.0.2.104 54523 <-> 64.250.220.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:41.262403 0.171846 udp 10.0.2.104 54523 <-> 174.100.67.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:42.263326 0.000000 udp 10.0.2.104 54523 -> 67.22.175.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:43.255093 0.134905 udp 10.0.2.104 54523 <-> 68.82.41.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:44.256551 0.161890 udp 10.0.2.104 54523 <-> 198.47.54.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:45.258356 0.129782 udp 10.0.2.104 54523 <-> 95.67.190.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:46.259381 0.089943 udp 10.0.2.104 54523 <-> 83.252.33.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:47.260715 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:48.262143 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:49.263828 0.546735 udp 10.0.2.104 54523 <-> 201.46.189.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:50.255023 0.163763 udp 10.0.2.104 54523 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:51.256704 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:52.258438 0.000000 udp 10.0.2.104 54523 -> 162.71.241.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:53.259331 0.332074 udp 10.0.2.104 54523 <-> 112.104.11.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:37:54.260626 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:55.262632 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:56.263800 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:57.255005 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:58.257122 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:37:59.258341 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:00.259263 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:00.920233 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:38:01.260768 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:03.263379 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:04.255092 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:05.256508 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:06.258563 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:07.259540 0.000109 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:07.259649 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:38:08.260965 0.000000 udp 10.0.2.104 54523 -> 162.71.241.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:09.262380 0.307547 udp 10.0.2.104 54523 <-> 121.131.107.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:10.254003 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:11.255085 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:12.256676 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:14.259356 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:15.260773 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:16.262447 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:17.253879 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:18.255392 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:19.256782 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:20.258322 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:21.259452 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:22.260763 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:22.260840 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:38:23.262374 0.000000 udp 10.0.2.104 54523 -> 162.71.241.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:24.253996 0.262875 udp 10.0.2.104 54523 <-> 31.44.140.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:25.255187 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:26.257067 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:27.258186 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:29.260898 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:30.262558 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:31.253889 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:32.255809 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:33.256668 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:34.258591 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:35.259354 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:36.260946 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:37.262880 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:37.262956 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:38:38.253414 0.000000 udp 10.0.2.104 54523 -> 162.71.241.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:39.255822 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:40.257168 0.000000 udp 10.0.2.104 54523 -> 173.199.217.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:41.258942 0.123653 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:42.259764 0.157175 udp 10.0.2.104 54523 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:43.261060 0.299359 udp 10.0.2.104 54523 <-> 117.206.163.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:44.262688 3.070260 udp 10.0.2.104 54523 <-> 122.106.43.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:45.254238 0.127923 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:46.256131 0.098716 udp 10.0.2.104 54523 <-> 85.85.25.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:47.257062 0.156079 udp 10.0.2.104 54523 <-> 72.28.177.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:47.918506 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:38:48.258544 0.045690 udp 10.0.2.104 54523 <-> 88.216.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:49.259902 0.000000 udp 10.0.2.104 54523 -> 78.159.43.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:50.261084 0.041939 udp 10.0.2.104 54523 <-> 91.179.184.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:51.262870 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:52.253945 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:53.255770 0.233898 udp 10.0.2.104 54523 <-> 63.195.75.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:54.257306 0.052075 udp 10.0.2.104 54523 <-> 188.27.217.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:55.258324 0.060749 udp 10.0.2.104 54523 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:56.260254 1.019695 udp 10.0.2.104 54523 <-> 176.198.111.98 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:38:58.262862 0.000000 udp 10.0.2.104 54523 -> 184.178.49.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:58.964171 0.010881 udp 10.0.2.104 54609 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 11:38:58.975372 0.000000 udp 10.0.2.104 54610 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:38:59.254406 0.051593 udp 10.0.2.104 54523 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:00.255734 0.165308 udp 10.0.2.104 54523 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:01.257161 0.075577 udp 10.0.2.104 54523 <-> 5.12.11.55 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:02.258568 0.322811 udp 10.0.2.104 54523 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:03.259254 0.045521 udp 10.0.2.104 54523 <-> 88.216.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:04.261477 0.000000 udp 10.0.2.104 54523 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:05.262604 2.089437 udp 10.0.2.104 54523 <-> 95.232.66.108 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:06.254471 0.167664 udp 10.0.2.104 54523 <-> 71.192.132.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:08.257261 0.041219 udp 10.0.2.104 54523 <-> 91.179.184.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:09.258696 0.218757 udp 10.0.2.104 54523 <-> 63.195.75.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:10.260358 0.054888 udp 10.0.2.104 54523 <-> 77.85.204.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:11.261643 2.211335 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:12.263385 0.358188 udp 10.0.2.104 54523 <-> 111.250.115.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:14.256044 0.000000 udp 10.0.2.104 54523 -> 64.58.241.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:15.257308 0.145990 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:16.258487 0.167786 udp 10.0.2.104 54523 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:17.260773 0.730376 udp 10.0.2.104 54523 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:18.261429 0.074124 udp 10.0.2.104 54523 <-> 79.243.206.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:19.263129 0.762370 udp 10.0.2.104 54523 <-> 116.202.195.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:20.254339 0.184485 udp 10.0.2.104 54523 <-> 96.58.51.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:21.256018 1.134585 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:23.258779 0.316404 udp 10.0.2.104 54523 <-> 200.236.0.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:24.260596 1.379427 udp 10.0.2.104 54523 <-> 190.39.82.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:25.261497 1.993010 udp 10.0.2.104 54523 -> 109.72.59.29 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:26.263159 0.000000 udp 10.0.2.104 54523 -> 2.191.68.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:28.256080 4.116486 udp 10.0.2.104 54523 <-> 77.40.100.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:29.257333 2.049937 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:30.258686 0.485556 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:33.263557 4.634913 udp 10.0.2.104 54523 <-> 176.219.37.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:34.254595 0.160536 udp 10.0.2.104 54523 <-> 66.30.24.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:34.915415 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:39:35.256123 0.208471 udp 10.0.2.104 54523 <-> 70.66.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:36.257279 0.190553 udp 10.0.2.104 54523 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:37.259024 0.016007 udp 10.0.2.104 54523 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:38.260745 0.000000 udp 10.0.2.104 54523 -> 178.17.29.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:39.262108 0.000000 udp 10.0.2.104 54523 -> 24.232.62.74 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:40.263139 4.997613 udp 10.0.2.104 54523 <-> 200.125.109.71 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:41.254717 0.000000 udp 10.0.2.104 54523 -> 201.68.62.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:42.256071 0.336862 udp 10.0.2.104 54523 <-> 177.107.240.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:43.257399 1.441598 udp 10.0.2.104 54523 <-> 179.210.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:44.259276 0.895801 udp 10.0.2.104 54523 <-> 116.202.195.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:46.262323 0.594024 udp 10.0.2.104 54523 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:47.001449 0.000000 udp 10.0.2.104 54523 <- 200.125.109.71 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:47.263214 0.251573 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:48.254688 0.077691 udp 10.0.2.104 54523 <-> 188.26.29.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:49.256289 0.053599 udp 10.0.2.104 54523 <-> 188.121.26.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:50.257565 0.000000 udp 10.0.2.104 54523 -> 79.30.234.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:51.258709 0.000000 udp 10.0.2.104 54523 -> 46.37.84.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:52.260716 0.000000 udp 10.0.2.104 54523 -> 78.218.21.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:53.261737 1.334702 udp 10.0.2.104 54523 <-> 190.78.188.114 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:54.263399 0.143348 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:55.254857 0.000000 udp 10.0.2.104 54523 -> 84.122.78.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:39:56.256646 0.311831 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:57.258025 0.054414 udp 10.0.2.104 54523 <-> 188.121.26.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:58.259009 0.216674 udp 10.0.2.104 54523 <-> 97.93.51.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:39:59.260933 0.136510 udp 10.0.2.104 54523 <-> 68.194.88.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:00.262070 0.162422 udp 10.0.2.104 54523 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:01.263471 0.152574 udp 10.0.2.104 54523 <-> 67.61.177.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:02.254881 0.138890 udp 10.0.2.104 54523 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:03.255967 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:04.259153 0.229791 udp 10.0.2.104 54523 <-> 174.100.151.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:05.259094 0.212472 udp 10.0.2.104 54523 <-> 67.177.197.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:06.260630 0.118508 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:07.262257 0.053840 udp 10.0.2.104 54523 <-> 85.231.171.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:08.263233 0.000000 udp 10.0.2.104 54523 -> 79.80.217.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:09.255035 0.018602 udp 10.0.2.104 54523 <-> 95.168.34.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:10.256347 0.218456 udp 10.0.2.104 54523 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:11.257491 0.000000 udp 10.0.2.104 54523 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:12.258938 0.130887 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:13.260715 0.053279 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:14.262160 3.539098 udp 10.0.2.104 54523 <-> 46.196.151.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:15.263488 0.228623 udp 10.0.2.104 54523 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:16.255174 0.136381 udp 10.0.2.104 54523 <-> 24.188.69.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:17.256583 0.020162 udp 10.0.2.104 54523 <-> 95.168.34.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:18.258107 0.346682 udp 10.0.2.104 54523 <-> 117.194.72.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:19.259101 0.151163 udp 10.0.2.104 54523 <-> 75.75.92.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:20.260468 0.185751 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:21.262216 0.303583 udp 10.0.2.104 54523 <-> 175.193.245.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:21.913086 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:40:22.263383 0.000000 udp 10.0.2.104 54523 -> 68.185.124.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:23.255007 0.000000 udp 10.0.2.104 54523 -> 90.201.135.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:24.256453 0.298090 udp 10.0.2.104 54523 <-> 189.110.72.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:25.257862 0.176514 udp 10.0.2.104 54523 <-> 217.10.134.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:26.259141 0.073740 udp 10.0.2.104 54523 <-> 213.60.233.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:27.260630 0.177927 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:28.262353 0.160142 udp 10.0.2.104 54523 <-> 80.27.227.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:29.264011 0.264420 udp 10.0.2.104 54523 <-> 186.93.155.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:30.255233 0.163741 udp 10.0.2.104 54523 <-> 99.253.48.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:31.256721 0.000000 udp 10.0.2.104 54523 -> 68.116.158.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:32.258009 0.156691 udp 10.0.2.104 54523 <-> 97.84.210.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:33.259282 0.037987 udp 10.0.2.104 54523 <-> 213.92.136.25 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:34.260802 0.149817 udp 10.0.2.104 54523 <-> 50.30.116.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:35.262177 0.220097 udp 10.0.2.104 54523 <-> 71.80.148.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:36.253438 2.080764 udp 10.0.2.104 54523 <-> 188.24.142.173 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:37.254881 0.204099 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:39.257724 0.163597 udp 10.0.2.104 54523 <-> 71.90.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:40.259291 0.135685 udp 10.0.2.104 54523 <-> 173.220.69.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:41.260635 0.000000 udp 10.0.2.104 54523 -> 67.223.22.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:42.262359 0.118570 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:43.253849 0.164143 udp 10.0.2.104 54523 <-> 24.94.119.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:44.255507 2.811669 udp 10.0.2.104 54523 <-> 24.152.221.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:45.256684 0.518107 udp 10.0.2.104 54523 <-> 202.29.178.10 16464 CON 0 0 2 1088 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:46.257806 0.303795 udp 10.0.2.104 54523 <-> 175.193.245.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:47.259346 0.051776 udp 10.0.2.104 54523 <-> 84.51.169.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:48.260912 3.734596 udp 10.0.2.104 54523 <-> 190.0.76.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:49.262425 0.000000 udp 10.0.2.104 54523 -> 108.184.7.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:50.254241 0.177608 udp 10.0.2.104 54523 <-> 75.111.203.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:51.255184 0.000000 udp 10.0.2.104 54523 -> 68.14.166.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:52.257064 0.359664 udp 10.0.2.104 54523 <-> 190.178.172.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:53.258645 0.000000 udp 10.0.2.104 54523 -> 72.38.29.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:40:54.259585 0.166051 udp 10.0.2.104 54523 <-> 66.177.33.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:55.261064 0.167543 udp 10.0.2.104 54523 <-> 66.69.203.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:56.262680 0.322744 udp 10.0.2.104 54523 <-> 61.208.224.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:57.253784 0.173132 udp 10.0.2.104 54523 <-> 24.214.119.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:58.255423 0.191128 udp 10.0.2.104 54523 <-> 72.197.28.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:40:59.256678 1.160947 udp 10.0.2.104 54523 <-> 173.178.26.203 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:01.259849 0.133109 udp 10.0.2.104 54523 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:02.260897 0.371000 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:03.262656 1.304141 udp 10.0.2.104 54523 <-> 118.157.11.218 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:05.255141 0.444681 udp 10.0.2.104 54523 <-> 179.203.215.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:06.256899 1.145775 udp 10.0.2.104 54523 <-> 173.16.181.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:07.258087 0.000000 udp 10.0.2.104 54523 -> 82.54.253.86 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:08.259429 0.028629 udp 10.0.2.104 54523 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:08.920645 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:41:09.261088 0.146843 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:10.262794 0.567687 udp 10.0.2.104 54523 <-> 186.95.182.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:11.253387 0.462939 udp 10.0.2.104 54523 <-> 177.119.173.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:12.255371 0.075815 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:13.257072 0.302067 udp 10.0.2.104 54523 <-> 201.93.44.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:14.258265 0.450700 udp 10.0.2.104 54523 <-> 111.243.164.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:15.356168 1.118542 udp 10.0.2.104 54523 <-> 158.181.242.169 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:17.340780 0.558139 udp 10.0.2.104 54523 <-> 87.3.116.35 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:18.323893 0.191722 udp 10.0.2.104 54523 <-> 106.51.31.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:19.318784 0.113186 udp 10.0.2.104 54523 <-> 93.184.81.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:20.313048 0.154941 udp 10.0.2.104 54523 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:21.306699 0.113142 udp 10.0.2.104 54523 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:22.299769 0.048065 udp 10.0.2.104 54523 <-> 87.247.78.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:23.292604 0.168215 udp 10.0.2.104 54523 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:24.284511 0.178541 udp 10.0.2.104 54523 <-> 75.66.196.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:25.266078 0.131289 udp 10.0.2.104 54523 <-> 68.169.186.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:26.260874 0.383500 udp 10.0.2.104 54523 <-> 91.99.162.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:27.257149 0.000000 udp 10.0.2.104 54523 -> 87.111.49.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:28.258490 0.061568 udp 10.0.2.104 54523 <-> 80.238.126.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:29.259790 0.235362 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:30.261435 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:31.262892 0.336107 udp 10.0.2.104 54523 <-> 1.173.218.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:32.254074 4.006050 udp 10.0.2.104 54523 -> 109.175.72.57 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:33.255981 0.377676 udp 10.0.2.104 54523 <-> 201.46.149.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:34.257021 0.000000 udp 10.0.2.104 54523 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:35.258434 0.329044 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:37.261564 0.167150 udp 10.0.2.104 54523 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:38.263040 2.372647 udp 10.0.2.104 54523 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:39.254190 0.210800 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:40.256026 0.000000 udp 10.0.2.104 54523 -> 171.99.73.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:41.257330 0.498418 udp 10.0.2.104 54523 <-> 177.119.173.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:42.258614 0.338838 udp 10.0.2.104 54523 <-> 61.231.10.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:43.259901 0.186528 udp 10.0.2.104 54523 <-> 205.138.133.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:44.261498 0.466987 udp 10.0.2.104 54523 <-> 190.112.98.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:45.263020 0.290740 udp 10.0.2.104 54523 <-> 200.207.20.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:46.254335 0.267693 udp 10.0.2.104 54523 <-> 188.152.54.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:47.255892 0.037282 udp 10.0.2.104 54523 <-> 84.10.108.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:48.257167 0.191640 udp 10.0.2.104 54523 <-> 106.51.31.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:49.258429 0.072251 udp 10.0.2.104 54523 <-> 84.232.121.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:50.260371 0.046101 udp 10.0.2.104 54523 <-> 78.62.44.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:51.261410 0.146358 udp 10.0.2.104 54523 <-> 85.219.46.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:52.262961 0.000000 udp 10.0.2.104 54523 -> 173.23.163.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:53.254517 0.226564 udp 10.0.2.104 54523 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:54.256566 0.160268 udp 10.0.2.104 54523 <-> 66.30.121.102 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:55.257283 0.307857 udp 10.0.2.104 54523 <-> 123.225.58.143 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:41:55.918010 0.000140 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:41:56.258768 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:57.260425 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:58.261491 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:41:59.263050 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:00.254754 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:01.255881 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:02.260744 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:03.262161 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:04.262269 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:05.262162 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:06.262890 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:07.254512 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:08.256185 3.004204 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:09.257358 0.159844 udp 10.0.2.104 54523 <-> 66.229.143.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:42:10.258766 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:10.258845 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:42:12.272721 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:13.274072 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:14.260956 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:15.259723 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:16.263173 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:17.261629 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:18.264005 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:19.261878 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:20.262941 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:21.254558 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:22.256889 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:23.257460 3.004183 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:25.260223 0.160676 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:42:27.263349 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:28.254561 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:29.256279 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:30.258112 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:31.258932 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:32.260471 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:33.262213 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:34.263630 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:35.254713 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:36.256604 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:37.257427 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:37.257515 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:42:38.258995 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:39.262526 3.993712 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:41.263116 0.000000 udp 10.0.2.104 54523 -> 69.249.42.35 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:42.254720 0.155563 udp 10.0.2.104 54523 <-> 75.68.73.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:42:42.915866 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:42:44.257872 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:45.259238 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:46.260555 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:47.262089 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:48.263248 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:49.254963 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:50.256299 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:51.257334 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:52.259213 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:53.260687 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:54.262311 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:55.263802 0.000106 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:55.263908 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:42:57.256480 0.306580 udp 10.0.2.104 54523 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:42:58.258041 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:42:59.259323 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:00.260546 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:01.262144 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:02.263066 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:03.255444 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:04.257047 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:05.258140 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:06.258833 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:07.260853 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:08.262278 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:09.253854 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:10.254983 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:11.256651 0.000107 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:11.256758 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:43:12.257323 2.003626 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:13.259300 0.306438 udp 10.0.2.104 54523 <-> 114.158.112.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:15.262148 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:16.253447 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:17.255168 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:18.256491 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:19.257352 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:20.259708 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:21.263847 0.156020 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:22.263381 0.267953 udp 10.0.2.104 54523 <-> 190.183.18.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:23.253847 0.153247 udp 10.0.2.104 54523 <-> 109.61.112.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:24.255251 0.000000 udp 10.0.2.104 54523 -> 75.248.210.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:25.256643 0.211036 udp 10.0.2.104 54523 <-> 87.3.116.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:26.258037 0.162567 udp 10.0.2.104 54523 <-> 71.200.252.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:27.259275 0.141371 udp 10.0.2.104 54523 <-> 67.80.216.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:28.261169 0.294658 udp 10.0.2.104 54523 <-> 27.143.46.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:28.824172 3.001993 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:43:29.262308 0.285438 udp 10.0.2.104 54523 <-> 189.32.246.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:29.913041 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:43:30.254171 0.154315 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:31.255318 0.000000 udp 10.0.2.104 54523 -> 216.106.166.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:32.256575 0.000000 udp 10.0.2.104 54523 -> 209.236.94.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:33.258395 0.000000 udp 10.0.2.104 54523 -> 72.222.72.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:34.259982 0.000000 udp 10.0.2.104 54523 -> 87.120.215.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:35.263014 0.239608 udp 10.0.2.104 54523 <-> 76.178.38.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:35.832494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:43:36.262429 0.220334 udp 10.0.2.104 54523 <-> 186.89.3.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:37.254005 0.294139 udp 10.0.2.104 54523 <-> 190.79.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:38.255294 0.391085 udp 10.0.2.104 54523 <-> 190.37.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:39.256909 0.236117 udp 10.0.2.104 54523 <-> 98.157.198.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:40.258552 0.326260 udp 10.0.2.104 54523 <-> 219.121.216.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:41.259646 0.141459 udp 10.0.2.104 54523 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:42.261284 0.206256 udp 10.0.2.104 54523 <-> 71.92.68.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:43.262646 0.207766 udp 10.0.2.104 54523 <-> 64.183.30.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:43.833350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:43:44.254071 0.333830 udp 10.0.2.104 54523 <-> 116.202.172.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:45.255452 0.386714 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:46.256738 0.505716 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:47.258922 0.388569 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:48.260145 0.527104 udp 10.0.2.104 54523 <-> 177.119.173.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:49.261271 0.000000 udp 10.0.2.104 54523 -> 85.86.106.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:50.266701 0.347138 udp 10.0.2.104 54523 <-> 114.40.182.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:51.256581 4.179917 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:52.256646 0.311494 udp 10.0.2.104 54523 <-> 200.93.91.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:53.257447 0.000000 udp 10.0.2.104 54523 -> 65.32.93.182 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:54.258142 0.826753 udp 10.0.2.104 54523 <-> 201.19.246.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:56.261287 2.125849 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:57.263177 0.458063 udp 10.0.2.104 54523 <-> 187.68.65.109 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:43:59.256148 0.000000 udp 10.0.2.104 54523 -> 65.32.93.182 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:43:59.836738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:44:00.257102 0.000000 udp 10.0.2.104 54523 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:01.258528 0.170408 udp 10.0.2.104 54523 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:02.260016 0.000000 udp 10.0.2.104 54523 -> 75.197.19.113 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:03.261103 0.000000 udp 10.0.2.104 54523 -> 187.68.65.109 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:04.262744 0.000000 udp 10.0.2.104 54523 -> 190.38.7.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:05.254384 0.000000 udp 10.0.2.104 54523 -> 188.76.59.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:06.255672 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:07.257028 0.250903 udp 10.0.2.104 54523 <-> 79.43.218.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:08.259117 0.138332 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:09.259955 0.216035 udp 10.0.2.104 54523 <-> 76.87.85.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:10.261249 1.043712 udp 10.0.2.104 54523 <-> 178.148.27.203 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:12.254276 0.144593 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:13.255628 0.062099 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:14.257185 0.162660 udp 10.0.2.104 54523 <-> 109.105.194.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:15.258689 0.217371 udp 10.0.2.104 54523 <-> 76.87.85.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:16.259526 0.042792 udp 10.0.2.104 54523 <-> 178.148.27.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:16.920851 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:44:17.261361 0.353597 udp 10.0.2.104 54523 <-> 190.204.134.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:18.267400 0.185090 udp 10.0.2.104 54523 <-> 98.140.199.76 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:19.257249 0.165307 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:20.257939 0.062795 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:21.265678 0.053189 udp 10.0.2.104 54523 <-> 91.240.42.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:22.263824 0.828412 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:23.261877 0.178792 udp 10.0.2.104 54523 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:24.266760 0.304992 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:25.263679 0.169850 udp 10.0.2.104 54523 <-> 66.169.209.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:26.258033 0.000000 udp 10.0.2.104 54523 -> 2.69.41.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:27.265752 4.999121 udp 10.0.2.104 54523 <-> 109.199.149.91 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:28.266422 0.174143 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:29.267459 0.038383 udp 10.0.2.104 54523 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:30.264230 0.283546 udp 10.0.2.104 54523 <-> 179.45.48.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:31.261764 0.000000 udp 10.0.2.104 54523 -> 87.115.229.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:31.845659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:44:32.301110 0.000000 udp 10.0.2.104 54523 <- 109.199.149.91 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:33.260546 0.350047 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:34.258244 0.170579 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:35.257271 0.082507 udp 10.0.2.104 54523 <-> 213.89.60.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:36.259103 0.435192 udp 10.0.2.104 54523 <-> 118.231.75.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:37.260159 0.055117 udp 10.0.2.104 54523 <-> 178.148.27.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:38.263174 0.343850 udp 10.0.2.104 54523 <-> 61.19.25.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:39.263133 0.344094 udp 10.0.2.104 54523 <-> 190.204.134.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:40.256407 0.000000 udp 10.0.2.104 54523 -> 117.234.122.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:41.265753 0.000000 udp 10.0.2.104 54523 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:42.265961 0.135810 udp 10.0.2.104 54523 <-> 69.124.115.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:43.263908 0.159138 udp 10.0.2.104 54523 <-> 68.226.188.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:44.261811 1.000214 udp 10.0.2.104 54523 <-> 173.199.217.72 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:46.262857 0.345496 udp 10.0.2.104 54523 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:47.256353 0.164613 udp 10.0.2.104 54523 <-> 70.81.218.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:48.259385 0.000000 udp 10.0.2.104 54523 -> 76.194.34.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:49.261549 0.305085 udp 10.0.2.104 54523 <-> 213.112.131.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:50.262457 0.076914 udp 10.0.2.104 54523 <-> 178.148.123.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:51.266110 1.447277 udp 10.0.2.104 54523 <-> 201.160.27.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:52.267861 0.000000 udp 10.0.2.104 54523 -> 71.59.124.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:53.268797 0.238039 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:54.255117 0.000000 udp 10.0.2.104 54523 -> 108.73.173.178 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:44:55.256609 1.165920 udp 10.0.2.104 54523 <-> 88.163.39.243 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:57.261272 1.471413 udp 10.0.2.104 54523 <-> 201.160.27.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:58.260949 0.155964 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:44:59.266861 0.216136 udp 10.0.2.104 54523 <-> 50.174.107.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:00.266176 0.000000 udp 10.0.2.104 54523 -> 50.77.197.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:01.255361 0.500492 udp 10.0.2.104 54523 <-> 117.227.108.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:02.256378 0.000000 udp 10.0.2.104 54523 -> 190.77.212.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:03.257612 4.154132 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:03.918449 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:45:04.259130 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:05.260515 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:06.261217 0.064955 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:08.256094 0.055015 udp 10.0.2.104 54523 <-> 95.160.90.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:09.261132 0.180999 udp 10.0.2.104 54523 <-> 207.34.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:10.263855 0.318315 udp 10.0.2.104 54523 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:11.262397 0.000000 udp 10.0.2.104 54523 -> 85.219.46.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:12.260309 3.505603 udp 10.0.2.104 54523 <-> 213.233.189.99 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:13.261973 0.000000 udp 10.0.2.104 54523 -> 97.102.73.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:16.256176 0.338999 udp 10.0.2.104 54523 <-> 181.18.186.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:17.257784 0.122406 udp 10.0.2.104 54523 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:18.259091 0.124408 udp 10.0.2.104 54523 <-> 173.238.167.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:19.260239 0.163536 udp 10.0.2.104 54523 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:20.262010 0.070279 udp 10.0.2.104 54523 <-> 79.54.96.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:21.262734 0.941892 udp 10.0.2.104 54523 <-> 181.16.28.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:22.254932 0.132732 udp 10.0.2.104 54523 <-> 50.70.177.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:23.256400 0.174780 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:24.257755 0.144353 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:25.259282 1.145653 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:27.264818 0.082904 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:28.263845 0.000000 udp 10.0.2.104 54523 -> 98.253.7.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:29.255070 0.264943 udp 10.0.2.104 54523 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:30.256304 0.060250 udp 10.0.2.104 54523 <-> 78.92.213.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:31.257959 4.996978 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:33.260486 0.031327 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:34.262323 0.579198 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:35.263266 0.259724 udp 10.0.2.104 54523 <-> 46.150.39.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:37.093432 0.000000 udp 10.0.2.104 54523 <- 190.192.195.38 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:37.256468 0.000000 udp 10.0.2.104 54523 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:38.257946 0.296249 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:39.259461 0.090039 udp 10.0.2.104 54523 <-> 91.89.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:40.260807 0.051759 udp 10.0.2.104 54523 <-> 85.67.109.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:41.262377 0.260681 udp 10.0.2.104 54523 <-> 76.88.165.238 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:42.252917 0.319603 udp 10.0.2.104 54523 <-> 177.138.96.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:43.255238 0.275194 udp 10.0.2.104 54523 <-> 72.235.15.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:44.256752 0.557913 udp 10.0.2.104 54523 <-> 78.94.228.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:45.257962 0.143933 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:46.259575 0.000000 udp 10.0.2.104 54523 -> 72.234.0.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:45:47.260973 0.982060 udp 10.0.2.104 54523 <-> 64.147.42.197 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:48.262322 2.208223 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:49.253869 0.531023 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:50.916207 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:45:51.256947 0.370856 udp 10.0.2.104 54523 <-> 1.168.39.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:52.258172 0.141436 udp 10.0.2.104 54523 <-> 77.106.75.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:53.259678 3.773134 udp 10.0.2.104 54523 <-> 117.234.122.80 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:54.260805 1.140034 udp 10.0.2.104 54523 <-> 98.121.91.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:56.254060 0.208911 udp 10.0.2.104 54523 <-> 75.63.54.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:57.255183 0.142312 udp 10.0.2.104 54523 <-> 47.16.247.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:58.256923 0.156896 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:45:59.258505 0.499944 udp 10.0.2.104 54523 <-> 201.160.70.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:00.259546 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:01.260904 3.079349 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:02.262374 4.998495 udp 10.0.2.104 54523 <-> 79.113.236.251 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:03.254053 0.361402 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:05.256736 0.171180 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:06.258589 0.386541 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:07.310778 0.000000 udp 10.0.2.104 54523 <- 79.113.236.251 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:08.261009 0.080240 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:10.253870 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:11.255184 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:11.255244 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:46:12.256968 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:13.258283 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:14.259861 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:15.260965 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:16.262422 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:17.253552 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:18.255245 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:19.257105 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:20.258272 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:21.259986 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:22.261108 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:23.262708 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:24.254248 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:25.255427 0.243431 udp 10.0.2.104 54523 <-> 184.160.92.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:26.258116 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:27.258570 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:28.259339 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:29.261191 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:30.262570 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:31.253899 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:32.255388 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:33.256833 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:34.258687 3.995332 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:35.260144 1.285517 udp 10.0.2.104 54523 <-> 184.160.92.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:37.262821 0.166467 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:37.913410 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:46:39.255758 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:40.256851 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:41.258834 0.045675 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:42.260159 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:43.261224 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:44.263059 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:45.254183 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:46.255778 0.000048 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:46.255826 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:46:47.257332 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:48.258903 0.081788 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:46:50.261497 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:51.263027 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:52.254172 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:53.255749 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:54.257192 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:55.258884 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:56.260409 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:57.261601 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:58.263064 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:46:59.254341 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:00.256097 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:01.256996 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:02.258863 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:02.258937 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:47:03.260019 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:04.261269 0.056528 udp 10.0.2.104 54523 <-> 195.80.135.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:05.263266 0.042471 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:06.254408 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:07.256111 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:08.257607 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:09.258677 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:10.260321 0.000098 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:10.260419 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:47:11.261884 3.995757 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:12.262872 0.186091 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:13.254319 0.428077 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:14.255861 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:16.258908 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:17.260215 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:18.261967 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:19.263211 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:20.254775 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:21.256505 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:22.257114 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:23.258958 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:24.260332 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:24.920987 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:47:25.261511 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:26.262719 0.000065 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:26.262784 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:47:28.256397 0.000000 udp 10.0.2.104 54523 -> 85.219.46.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:29.258001 1.132338 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:31.260564 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:32.261622 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:34.254583 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:35.256466 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:36.257445 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:37.258879 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:38.260623 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:39.261904 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:40.263382 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:40.263442 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:47:41.254665 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:42.256457 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:43.257427 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:44.258981 4.088752 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:45.260902 0.000000 udp 10.0.2.104 54523 -> 85.219.46.5 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:46.261993 0.000000 udp 10.0.2.104 54523 -> 179.210.166.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:47.263460 0.056708 udp 10.0.2.104 54523 <-> 195.80.135.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:49.256248 0.176042 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:50.257941 0.244014 udp 10.0.2.104 54523 <-> 184.160.92.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:51.259046 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:52.260870 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:53.261925 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:54.263185 0.056833 udp 10.0.2.104 54523 <-> 195.80.135.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:47:55.254702 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:56.256378 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:57.263330 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:58.262696 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:47:59.262245 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:00.262276 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:01.263349 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:02.254873 1.846485 udp 10.0.2.104 54523 <-> 179.210.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:03.256502 0.086644 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:04.257689 0.000000 udp 10.0.2.104 54523 -> 195.2.142.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:05.259233 0.000000 udp 10.0.2.104 54523 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:06.260618 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:07.262043 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:08.263298 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:09.255095 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:10.258535 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:11.258674 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:11.918933 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:48:12.259184 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:13.260653 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:14.262173 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:15.253193 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:16.255140 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:17.256559 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:18.257938 0.023370 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:19.259398 0.038872 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:20.260601 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:21.262506 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:22.253508 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:23.255196 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:24.256569 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:25.258009 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:26.259654 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:27.261189 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:28.262506 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:29.254262 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:30.255229 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:31.256676 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:32.258412 0.226585 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:33.259470 1.421812 udp 10.0.2.104 54523 <-> 181.55.154.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:34.260767 0.318687 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:35.262496 0.147648 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:36.253793 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:37.255115 4.384711 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:38.258181 0.000000 udp 10.0.2.104 54523 -> 79.145.149.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:39.258058 0.174255 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:40.259779 0.319554 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:42.262674 0.136190 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:43.254010 0.169266 udp 10.0.2.104 54523 <-> 135.19.58.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:44.255468 0.338658 udp 10.0.2.104 54523 <-> 79.2.136.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:45.256654 0.347346 udp 10.0.2.104 54523 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:46.258083 0.000000 udp 10.0.2.104 54523 -> 178.17.29.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:47.259628 1.001528 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:49.262520 0.991546 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:51.255235 0.319593 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:52.256657 0.000000 udp 10.0.2.104 54523 -> 190.208.110.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:53.258101 0.000000 udp 10.0.2.104 54523 -> 195.2.142.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:54.259821 0.084478 udp 10.0.2.104 54523 -> 79.145.149.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:48:54.344299 0.000000 icmp 79.145.149.250 0x0303 -> 10.0.2.104 0x5040 URP 192 1 70 flow=Background 1970/01/01 11:48:55.263752 0.377066 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:56.263047 1.501016 udp 10.0.2.104 54523 <-> 181.55.154.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:58.257149 3.272519 udp 10.0.2.104 54523 <-> 190.193.26.119 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:48:58.916835 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:48:59.257186 0.755927 udp 10.0.2.104 54523 <-> 79.47.59.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:00.260367 2.020347 udp 10.0.2.104 54523 <-> 89.173.235.151 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:03.262773 4.997344 udp 10.0.2.104 54523 <-> 190.176.202.224 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:04.254323 0.000000 udp 10.0.2.104 54523 -> 84.40.68.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:05.255597 0.000000 udp 10.0.2.104 54523 -> 200.127.30.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:06.257102 0.383533 udp 10.0.2.104 54523 <-> 213.133.17.151 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:07.260101 0.000000 udp 10.0.2.104 54523 -> 79.47.59.49 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:08.641970 0.000000 udp 10.0.2.104 54523 <- 190.176.202.224 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:09.260864 0.137692 udp 10.0.2.104 54523 <-> 24.0.79.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:10.262784 3.995630 udp 10.0.2.104 54523 -> 201.95.144.59 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:11.253787 4.258173 udp 10.0.2.104 54523 <-> 190.254.103.106 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:12.255675 0.246502 udp 10.0.2.104 54523 <-> 161.200.173.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:13.257166 0.077573 udp 10.0.2.104 54523 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:16.261420 1.145188 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:18.254522 0.446229 udp 10.0.2.104 54523 <-> 69.221.161.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:19.255482 0.051157 udp 10.0.2.104 54523 <-> 195.80.135.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:20.257033 0.460484 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:21.258599 0.220342 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:22.259980 4.128276 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:23.261240 3.995888 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 3 306 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:24.262640 3.996871 udp 10.0.2.104 54523 -> 69.204.187.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:26.255826 0.307662 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:29.259954 0.261880 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:30.261260 0.111207 udp 10.0.2.104 54523 <-> 82.60.93.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:31.262902 0.000000 udp 10.0.2.104 54523 -> 65.8.167.109 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:32.254263 0.154623 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:33.255742 0.291837 udp 10.0.2.104 54523 <-> 188.152.54.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:34.257222 1.001374 udp 10.0.2.104 54523 <-> 74.216.190.30 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:36.259996 0.000000 udp 10.0.2.104 54523 -> 64.229.161.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:37.262560 0.000000 udp 10.0.2.104 54523 -> 71.7.176.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:38.263828 0.116923 udp 10.0.2.104 54523 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:39.254626 1.390726 udp 10.0.2.104 54523 <-> 79.53.137.124 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:41.257548 0.386968 udp 10.0.2.104 54523 <-> 177.106.39.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:42.258622 0.156702 udp 10.0.2.104 54523 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:42.415324 0.000000 icmp 199.188.251.64 0x0303 -> 10.0.2.104 0x5040 URP 192 1 70 flow=Background 1970/01/01 11:49:43.260134 0.000000 udp 10.0.2.104 54523 -> 67.132.11.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:44.261428 0.329627 udp 10.0.2.104 54523 <-> 181.26.51.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:45.263252 0.308481 udp 10.0.2.104 54523 <-> 109.163.134.240 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:45.914010 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:49:46.254287 4.879753 udp 10.0.2.104 54523 <-> 151.232.27.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:47.255854 0.083088 udp 10.0.2.104 54523 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:48.257454 2.085510 udp 10.0.2.104 54523 <-> 86.126.0.125 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:49.259286 0.143165 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:51.261984 0.174486 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:52.263020 0.000000 udp 10.0.2.104 54523 -> 84.123.162.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:53.254298 0.000000 udp 10.0.2.104 54523 -> 27.145.154.135 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:54.256167 0.000000 udp 10.0.2.104 54523 -> 69.165.156.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:55.257382 0.000000 udp 10.0.2.104 54523 -> 76.177.183.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:49:56.258751 0.370937 udp 10.0.2.104 54523 <-> 114.38.164.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:57.260500 0.017317 udp 10.0.2.104 54523 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:58.261793 0.794046 udp 10.0.2.104 54523 <-> 184.63.28.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:49:59.263022 0.295373 udp 10.0.2.104 54523 <-> 186.94.57.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:00.256286 0.181703 udp 10.0.2.104 54523 <-> 208.84.191.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:01.257023 3.003261 udp 10.0.2.104 54523 -> 117.205.32.17 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:02.257547 0.123928 udp 10.0.2.104 54523 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:03.259079 0.000000 udp 10.0.2.104 54523 -> 98.181.35.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:05.262135 0.147352 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:06.263012 2.057891 udp 10.0.2.104 54523 <-> 77.78.239.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:07.254570 0.212228 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:09.257545 0.271635 udp 10.0.2.104 54523 <-> 81.172.41.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:10.258867 0.000000 udp 10.0.2.104 54523 -> 114.43.0.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:11.260632 0.000000 udp 10.0.2.104 54523 -> 186.204.190.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:12.262113 0.166055 udp 10.0.2.104 54523 <-> 71.192.132.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:13.263159 0.000000 udp 10.0.2.104 54523 -> 85.202.146.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:14.254660 0.000000 udp 10.0.2.104 54523 -> 200.82.248.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:15.256166 0.155647 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:16.258120 0.070510 udp 10.0.2.104 54523 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:17.259026 0.276660 udp 10.0.2.104 54523 <-> 190.254.103.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:18.260404 0.165605 udp 10.0.2.104 54523 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:19.263725 0.804389 udp 10.0.2.104 54523 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:20.263216 0.000000 udp 10.0.2.104 54523 -> 94.78.184.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:20.645635 0.000000 udp 10.0.2.104 54523 <- 200.82.248.153 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:21.254841 2.071899 udp 10.0.2.104 54523 <-> 85.178.133.152 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:22.256195 2.298561 udp 10.0.2.104 54523 <-> 190.190.227.139 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:26.262100 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:26.262164 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:50:27.263455 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:28.254751 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:29.256991 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:30.257497 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:31.260236 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:32.260667 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:32.926029 0.000150 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:50:33.266131 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:34.265294 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:35.258390 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:35.850798 2.999104 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:50:36.258740 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:37.258588 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:38.259068 0.177591 udp 10.0.2.104 54523 <-> 69.180.104.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:39.260894 1.608357 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:40.261815 0.134516 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:41.263597 0.446031 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:42.255144 0.154266 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:42.856188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:50:43.256433 0.282367 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:44.258407 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:45.259098 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:46.260657 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:47.262253 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:48.253472 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:49.256749 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:50.256948 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:50.857114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:50:51.258450 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:52.259348 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:53.266178 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:54.272038 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:55.259242 0.000099 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:55.259341 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:50:56.257470 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:57.256590 0.000000 udp 10.0.2.104 54523 -> 200.175.127.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:50:58.258204 0.042445 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:50:59.259723 0.000000 udp 10.0.2.104 54523 -> 68.114.151.5 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:00.261480 0.000000 udp 10.0.2.104 54523 -> 192.168.1.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:01.262161 0.138703 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:02.254050 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:03.261705 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:04.262992 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:05.264657 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:06.262832 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:06.860566 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:51:07.261126 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:08.264246 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:09.262180 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:10.260725 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:11.263355 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:11.263406 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:51:13.259773 0.386938 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:14.260970 0.000000 udp 10.0.2.104 54523 -> 77.70.120.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:15.262374 0.000000 udp 10.0.2.104 54523 -> 74.126.37.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:16.254173 2.046244 udp 10.0.2.104 54523 <-> 5.20.145.20 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:17.258350 0.268217 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:19.258438 0.000000 udp 10.0.2.104 54523 -> 200.175.127.19 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:19.918364 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:51:20.259842 0.029791 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:21.260816 0.000000 udp 10.0.2.104 54523 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:22.262586 0.316877 udp 10.0.2.104 54523 <-> 190.203.72.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:23.254698 0.000000 udp 10.0.2.104 54523 -> 85.85.49.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:24.255147 0.066556 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:25.257975 0.114675 udp 10.0.2.104 54523 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:26.258126 2.212436 udp 10.0.2.104 54523 <-> 174.50.95.212 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:27.259488 0.248649 udp 10.0.2.104 54523 <-> 181.33.188.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:29.262600 0.045187 udp 10.0.2.104 54523 <-> 213.112.131.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:30.257584 0.508229 udp 10.0.2.104 54523 <-> 177.165.74.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:31.258145 0.301372 udp 10.0.2.104 54523 <-> 190.36.153.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:32.263022 0.200893 udp 10.0.2.104 54523 <-> 91.72.117.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:33.262783 0.165944 udp 10.0.2.104 54523 <-> 98.242.221.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:34.263129 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:34.263206 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:51:36.268014 0.188397 udp 10.0.2.104 54523 <-> 68.101.204.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:38.260695 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:38.870891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:51:39.260888 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:40.260696 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:41.263842 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:41.263904 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:51:42.263532 0.000000 udp 10.0.2.104 54523 -> 68.101.204.194 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:43.262836 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:44.253846 0.262569 udp 10.0.2.104 54523 <-> 24.139.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:45.315343 0.253990 udp 10.0.2.104 54523 <-> 200.93.117.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:46.311683 0.000000 udp 10.0.2.104 54523 -> 216.135.40.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:47.306871 0.155883 udp 10.0.2.104 54523 <-> 74.78.25.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:48.308072 0.080560 udp 10.0.2.104 54523 <-> 79.45.129.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:49.307259 0.309494 udp 10.0.2.104 54523 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:50.302154 0.056762 udp 10.0.2.104 54523 <-> 195.80.135.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:51.285389 0.131480 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:52.281655 2.592606 udp 10.0.2.104 54523 <-> 188.29.54.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:53.279337 0.174172 udp 10.0.2.104 54523 <-> 50.10.71.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:54.277532 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:55.276848 0.000000 udp 10.0.2.104 54523 -> 181.74.134.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:51:56.271077 0.224123 udp 10.0.2.104 54523 <-> 190.78.29.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:57.265326 0.304774 udp 10.0.2.104 54523 <-> 211.14.251.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:58.254094 0.177675 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:51:59.255722 0.316376 udp 10.0.2.104 54523 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:00.257315 0.179242 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:01.258508 2.169636 udp 10.0.2.104 54523 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:02.261206 0.056482 udp 10.0.2.104 54523 <-> 195.80.135.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:03.261263 0.154891 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:04.266007 0.255233 udp 10.0.2.104 54523 <-> 201.80.32.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:05.255278 0.142903 udp 10.0.2.104 54523 <-> 130.15.154.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:06.255917 0.052046 udp 10.0.2.104 54523 <-> 188.27.217.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:06.916627 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:52:07.257072 0.143909 udp 10.0.2.104 54523 <-> 75.97.82.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:08.258630 0.032218 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:09.260296 0.106969 udp 10.0.2.104 54523 <-> 82.225.28.105 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:10.261825 0.076005 udp 10.0.2.104 54523 <-> 86.127.163.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:11.263073 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:12.254262 0.520337 udp 10.0.2.104 54523 <-> 190.201.56.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:13.256129 0.161879 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:14.257547 0.148175 udp 10.0.2.104 54523 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:15.258663 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:16.260233 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:17.261838 0.145146 udp 10.0.2.104 54523 <-> 98.102.132.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:18.263018 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:19.254452 3.055378 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:20.318629 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:21.314734 0.144147 udp 10.0.2.104 54523 <-> 70.63.221.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:23.304582 0.146359 udp 10.0.2.104 54523 <-> 98.102.132.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:24.298530 0.000000 udp 10.0.2.104 54523 -> 8.19.133.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:25.292613 0.080545 udp 10.0.2.104 54523 <-> 83.249.231.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:26.276876 0.071838 udp 10.0.2.104 54523 <-> 37.61.147.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:27.273201 0.216254 udp 10.0.2.104 54523 <-> 75.83.193.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:28.269140 0.086394 udp 10.0.2.104 54523 <-> 213.89.60.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:29.264643 0.425666 udp 10.0.2.104 54523 <-> 116.193.240.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:30.260287 0.051159 udp 10.0.2.104 54523 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:31.262125 0.166496 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:32.263082 4.087273 udp 10.0.2.104 54523 <-> 86.127.43.220 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:33.254538 0.000000 udp 10.0.2.104 54523 -> 195.0.170.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:34.256166 0.000000 udp 10.0.2.104 54523 -> 31.11.133.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:35.261088 0.000000 udp 10.0.2.104 54523 -> 88.156.110.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:37.262567 0.001911 udp 10.0.2.104 54523 <-> 80.243.105.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:38.262764 0.128001 udp 10.0.2.104 54523 <-> 24.156.248.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:39.263150 3.072860 udp 10.0.2.104 54523 <-> 212.225.185.62 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:40.254605 0.146304 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:41.256191 0.164521 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:43.262099 0.000000 udp 10.0.2.104 54523 -> 85.230.38.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:44.262336 0.317393 udp 10.0.2.104 54523 <-> 115.240.116.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:45.261888 0.045588 udp 10.0.2.104 54523 <-> 89.68.6.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:46.263184 0.019182 udp 10.0.2.104 54523 <-> 213.47.113.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:47.254741 0.076482 udp 10.0.2.104 54523 <-> 85.152.248.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:48.256430 0.000000 udp 10.0.2.104 54523 -> 67.162.162.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:49.257291 0.206718 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:50.258989 0.164821 udp 10.0.2.104 54523 <-> 67.247.169.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:51.260731 0.330684 udp 10.0.2.104 54523 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:52.261568 0.453717 udp 10.0.2.104 54523 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:53.263243 0.000000 udp 10.0.2.104 54523 -> 211.76.60.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:53.913503 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:52:54.254681 0.213438 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:55.256144 3.117984 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:56.257830 0.000000 udp 10.0.2.104 54523 -> 190.203.238.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:52:57.259041 4.206637 udp 10.0.2.104 54523 <-> 76.169.58.24 16464 CON 0 0 7 3734 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:52:59.261871 0.336650 udp 10.0.2.104 54523 <-> 200.85.88.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:02.256469 0.152446 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:03.257560 0.496008 udp 10.0.2.104 54523 <-> 189.100.78.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:04.259306 0.053405 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:05.260794 0.114141 udp 10.0.2.104 54523 <-> 24.122.51.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:06.262069 0.169335 udp 10.0.2.104 54523 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:07.263722 0.000000 udp 10.0.2.104 54523 -> 85.85.49.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:08.254822 0.000000 udp 10.0.2.104 54523 -> 14.97.47.232 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:09.256380 0.283302 udp 10.0.2.104 54523 <-> 37.254.21.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:10.257896 0.051625 udp 10.0.2.104 54523 <-> 188.173.77.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:11.259353 0.205111 udp 10.0.2.104 54523 <-> 64.148.59.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:12.260995 0.176576 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:13.262195 0.125409 udp 10.0.2.104 54523 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:14.263269 0.267078 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:15.254887 0.076645 udp 10.0.2.104 54523 <-> 84.237.172.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:16.256502 0.000000 udp 10.0.2.104 54523 -> 98.194.123.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:17.257876 0.000000 udp 10.0.2.104 54523 -> 114.148.100.165 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:18.259215 0.545833 udp 10.0.2.104 54523 <-> 190.208.146.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:19.260580 0.359741 udp 10.0.2.104 54523 <-> 190.78.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:20.262390 0.348062 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:21.253468 0.000000 udp 10.0.2.104 54523 -> 81.100.17.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:22.254835 0.073295 udp 10.0.2.104 54523 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:23.256395 0.151463 udp 10.0.2.104 54523 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:24.258189 0.178113 udp 10.0.2.104 54523 <-> 76.189.34.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:25.259371 0.000000 udp 10.0.2.104 54523 -> 75.240.45.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:26.260957 0.338960 udp 10.0.2.104 54523 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:27.262294 0.309714 udp 10.0.2.104 54523 <-> 187.75.19.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:28.253574 0.152156 udp 10.0.2.104 54523 <-> 74.78.25.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:29.254856 0.059987 udp 10.0.2.104 54523 <-> 5.15.135.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:30.256390 0.076300 udp 10.0.2.104 54523 <-> 85.219.21.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:31.258460 0.087249 udp 10.0.2.104 54523 <-> 80.164.97.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:32.259355 0.137402 udp 10.0.2.104 54523 <-> 67.248.215.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:33.260649 0.312386 udp 10.0.2.104 54523 <-> 111.217.235.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:34.262201 0.120915 udp 10.0.2.104 54523 <-> 24.122.251.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:35.254116 0.175699 udp 10.0.2.104 54523 <-> 71.15.136.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:36.255085 2.043072 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:37.256696 0.495024 udp 10.0.2.104 54523 <-> 201.160.70.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:39.259330 0.148823 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:40.260891 1.993262 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:40.921106 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:53:41.262430 0.066397 udp 10.0.2.104 54523 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:43.255185 0.145092 udp 10.0.2.104 54523 <-> 204.210.176.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:44.256657 0.053272 udp 10.0.2.104 54523 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:45.258100 0.000000 udp 10.0.2.104 54523 -> 190.37.37.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:46.259795 0.000000 udp 10.0.2.104 54523 -> 70.191.247.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:47.261261 0.161334 udp 10.0.2.104 54523 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:48.262390 0.156812 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:49.253891 0.172111 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:50.255250 0.053179 udp 10.0.2.104 54523 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:51.256649 0.334157 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:52.258315 0.161743 udp 10.0.2.104 54523 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:53.259920 0.304383 udp 10.0.2.104 54523 <-> 190.78.30.65 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:54.261150 1.992790 udp 10.0.2.104 54523 <-> 188.26.217.37 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:55.262556 0.142375 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:57.255192 0.061278 udp 10.0.2.104 54523 <-> 151.65.231.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:58.256793 0.045882 udp 10.0.2.104 54523 <-> 86.20.15.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:53:58.967872 0.023428 udp 10.0.2.104 54611 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 11:53:58.991642 0.000000 udp 10.0.2.104 54612 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:53:59.258452 0.162420 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:00.259833 0.273053 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:01.260914 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:02.262594 0.200480 udp 10.0.2.104 54523 <-> 76.174.151.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:03.254238 0.176400 udp 10.0.2.104 54523 <-> 98.165.79.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:04.255208 0.156122 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:05.256981 0.000000 udp 10.0.2.104 54523 -> 187.245.97.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:06.258753 0.146240 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:07.259809 0.081302 udp 10.0.2.104 54523 <-> 217.217.124.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:08.261295 0.091318 udp 10.0.2.104 54523 <-> 217.217.16.66 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:08.826657 0.000000 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:09.262452 0.169903 udp 10.0.2.104 54523 <-> 24.160.149.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:10.254153 0.222378 udp 10.0.2.104 54523 <-> 68.185.37.105 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:11.255413 0.757900 udp 10.0.2.104 54523 <-> 63.149.19.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:12.256917 0.150500 udp 10.0.2.104 54523 <-> 24.61.172.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:13.258390 1.596788 udp 10.0.2.104 54523 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:14.259981 0.206392 udp 10.0.2.104 54523 <-> 97.71.86.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:15.261323 0.360651 udp 10.0.2.104 54523 <-> 187.57.16.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:16.262852 0.444467 udp 10.0.2.104 54523 <-> 190.177.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:17.254177 0.213322 udp 10.0.2.104 54523 <-> 82.225.160.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:18.255772 3.051643 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:19.256949 0.166857 udp 10.0.2.104 54523 <-> 173.27.224.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:20.258531 4.997463 udp 10.0.2.104 54523 -> 68.59.72.41 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:22.261196 0.371568 udp 10.0.2.104 54523 <-> 118.161.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:23.262596 0.142327 udp 10.0.2.104 54523 <-> 184.57.25.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:24.254594 0.000000 udp 10.0.2.104 54523 -> 24.175.233.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:26.256870 0.000000 udp 10.0.2.104 54523 -> 66.229.239.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:27.258637 0.435364 udp 10.0.2.104 54523 <-> 190.177.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:27.919309 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:54:28.260200 0.048214 udp 10.0.2.104 54523 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:29.261047 0.143808 udp 10.0.2.104 54523 <-> 74.59.191.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:30.262960 0.160693 udp 10.0.2.104 54523 <-> 173.27.224.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:31.254003 0.169480 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:32.255477 0.000000 udp 10.0.2.104 54523 -> 218.152.217.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:33.257014 0.000000 udp 10.0.2.104 54523 -> 187.57.16.233 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:34.258633 0.190578 udp 10.0.2.104 54523 <-> 62.18.155.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:35.259967 0.061881 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:36.261276 0.000000 udp 10.0.2.104 54523 -> 24.175.233.20 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:37.262837 0.158364 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:38.254216 0.000000 udp 10.0.2.104 54523 -> 176.200.130.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:39.256116 1.074234 udp 10.0.2.104 54523 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:40.257179 0.335245 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:42.260457 0.226641 udp 10.0.2.104 54523 <-> 24.68.145.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:43.261582 0.311903 udp 10.0.2.104 54523 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:44.262912 0.257680 udp 10.0.2.104 54523 <-> 177.192.200.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:45.254628 0.319332 udp 10.0.2.104 54523 <-> 1.34.204.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:46.255644 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:47.257362 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:48.258415 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:49.260410 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:50.260957 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:51.262478 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:52.254417 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:53.256211 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:54.257275 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:55.258641 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:56.260192 0.000000 udp 10.0.2.104 54523 -> 24.137.128.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:57.261391 0.330296 udp 10.0.2.104 54523 <-> 61.231.220.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:54:58.265115 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:54:59.254573 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:00.256338 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:01.257118 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:02.258620 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:03.260622 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:04.261409 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:06.254485 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:07.256616 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:08.257422 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:09.258715 4.997770 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:10.260255 2.814288 udp 10.0.2.104 54523 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:11.261644 0.000122 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:11.261766 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:55:12.263075 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:14.916244 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:55:15.257586 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:16.259409 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:17.260828 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:18.261949 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:19.262657 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:20.254618 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:21.256760 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:22.257408 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:23.259201 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:24.260456 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:25.261781 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:26.263493 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:27.254826 0.000041 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:27.254867 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:55:28.256142 0.113425 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:29.257914 0.311901 udp 10.0.2.104 54523 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:30.259343 0.108640 udp 10.0.2.104 54523 <-> 95.180.171.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:31.260899 0.292017 udp 10.0.2.104 54523 <-> 122.210.119.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:32.261999 0.263507 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:33.263132 0.157605 udp 10.0.2.104 54523 <-> 66.168.73.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:34.254572 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:35.256416 0.048965 udp 10.0.2.104 54523 <-> 89.68.6.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:36.257556 0.099784 udp 10.0.2.104 54523 <-> 159.205.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:37.259128 0.135511 udp 10.0.2.104 54523 <-> 71.206.33.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:38.260393 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:39.262198 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:40.263440 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:41.254895 0.000117 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:41.255012 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:55:43.258086 0.200938 udp 10.0.2.104 54523 <-> 96.49.44.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:44.259008 0.000000 udp 10.0.2.104 54523 -> 79.211.113.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:45.260470 0.000000 udp 10.0.2.104 54523 -> 78.159.43.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:47.263852 0.134081 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:48.254905 0.048960 udp 10.0.2.104 54523 <-> 95.180.52.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:49.256465 0.271629 udp 10.0.2.104 54523 <-> 201.235.247.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:50.258119 0.085122 udp 10.0.2.104 54523 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:51.259100 0.371362 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:52.260586 0.268731 udp 10.0.2.104 54523 <-> 189.61.185.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:53.261660 0.000000 udp 10.0.2.104 54523 -> 141.196.23.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:54.252899 0.070931 udp 10.0.2.104 54523 <-> 85.86.237.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:55.254850 0.025903 udp 10.0.2.104 54523 <-> 85.121.1.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:56.256117 0.293723 udp 10.0.2.104 54523 <-> 83.10.113.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:57.258024 0.087735 udp 10.0.2.104 54523 <-> 94.197.217.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:55:58.259089 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:55:59.260773 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:01.253533 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:01.914512 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:56:02.255173 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:03.256434 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:04.258207 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:05.259248 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:06.260745 0.000000 udp 10.0.2.104 54523 -> 94.197.217.173 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:07.262097 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:08.253528 0.044307 udp 10.0.2.104 54523 <-> 31.31.96.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:09.254960 1.026377 udp 10.0.2.104 54523 <-> 91.89.7.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:11.258557 0.363436 udp 10.0.2.104 54523 <-> 201.242.46.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:12.259646 0.000000 udp 10.0.2.104 54523 -> 192.168.1.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:13.261120 0.049938 udp 10.0.2.104 54523 <-> 178.235.37.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:14.262294 0.000000 udp 10.0.2.104 54523 -> 95.111.22.139 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:15.253203 0.113434 udp 10.0.2.104 54523 <-> 178.122.80.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:16.255107 0.401178 udp 10.0.2.104 54523 <-> 189.93.140.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:17.257150 0.055946 udp 10.0.2.104 54523 <-> 81.233.173.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:18.257618 0.317428 udp 10.0.2.104 54523 <-> 189.103.8.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:19.259594 0.000000 udp 10.0.2.104 54523 -> 87.19.140.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:20.261078 0.000000 udp 10.0.2.104 54523 -> 2.190.66.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:21.262606 0.318824 udp 10.0.2.104 54523 <-> 200.156.109.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:22.253896 0.336635 udp 10.0.2.104 54523 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:23.255158 0.054991 udp 10.0.2.104 54523 <-> 95.43.88.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:24.257007 0.708256 udp 10.0.2.104 54523 <-> 49.124.98.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:25.257972 0.000000 udp 10.0.2.104 54523 -> 72.23.148.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:26.260067 0.317101 udp 10.0.2.104 54523 <-> 122.145.189.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:27.260837 0.154106 udp 10.0.2.104 54523 <-> 75.176.44.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:28.262422 0.056499 udp 10.0.2.104 54523 <-> 85.228.202.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:29.253511 0.309005 udp 10.0.2.104 54523 <-> 115.162.37.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:30.255149 0.104706 udp 10.0.2.104 54523 <-> 95.192.73.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:31.256801 0.074017 udp 10.0.2.104 54523 <-> 31.46.84.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:32.258352 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:33.260117 0.216041 udp 10.0.2.104 54523 <-> 97.93.51.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:34.261051 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:35.262325 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:36.254031 0.215541 udp 10.0.2.104 54523 <-> 180.151.150.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:37.255400 0.475540 udp 10.0.2.104 54523 <-> 201.209.173.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:38.256679 0.311807 udp 10.0.2.104 54523 <-> 125.195.179.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:39.258349 0.134537 udp 10.0.2.104 54523 <-> 24.91.138.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:40.259969 0.399459 udp 10.0.2.104 54523 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:41.261045 0.291277 udp 10.0.2.104 54523 <-> 187.39.138.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:42.262720 0.000000 udp 10.0.2.104 54523 -> 69.69.130.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:43.254349 0.000000 udp 10.0.2.104 54523 -> 31.46.84.57 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:44.255808 0.183988 udp 10.0.2.104 54523 <-> 93.156.11.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:45.256888 0.032520 udp 10.0.2.104 54523 <-> 37.49.49.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:46.258657 1.253088 udp 10.0.2.104 54523 <-> 181.16.55.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:47.259760 0.255450 udp 10.0.2.104 54523 <-> 201.80.32.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:48.261155 0.042042 udp 10.0.2.104 54523 <-> 86.20.15.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:48.922029 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:56:49.262741 0.136820 udp 10.0.2.104 54523 <-> 69.124.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:50.253780 0.447428 udp 10.0.2.104 54523 <-> 186.89.152.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:51.255746 0.148905 udp 10.0.2.104 54523 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:52.257044 0.285507 udp 10.0.2.104 54523 <-> 186.137.65.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:53.258397 0.012577 udp 10.0.2.104 54523 <-> 89.176.72.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:54.259600 0.169156 udp 10.0.2.104 54523 <-> 72.51.46.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:55.261274 0.124003 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:56.262572 0.508043 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:57.254229 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:56:58.255859 0.384235 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:56:59.256843 0.315725 udp 10.0.2.104 54523 <-> 177.165.74.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:00.258528 0.269649 udp 10.0.2.104 54523 <-> 201.53.200.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:01.259893 2.003064 udp 10.0.2.104 54523 -> 69.198.6.243 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:57:02.261120 0.171151 udp 10.0.2.104 54523 <-> 166.143.225.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:04.254253 0.209454 udp 10.0.2.104 54523 <-> 24.21.223.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:05.255628 0.264660 udp 10.0.2.104 54523 <-> 37.19.252.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:06.257102 0.274025 udp 10.0.2.104 54523 <-> 177.80.157.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:07.258576 0.545495 udp 10.0.2.104 54523 <-> 201.211.121.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:08.260040 3.043002 udp 10.0.2.104 54523 <-> 195.80.135.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:09.261524 4.321475 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:10.263010 4.172090 udp 10.0.2.104 54523 <-> 103.17.103.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:12.255834 0.193189 udp 10.0.2.104 54523 <-> 68.185.251.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:14.258404 0.137538 udp 10.0.2.104 54523 <-> 69.124.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:15.260020 0.410806 udp 10.0.2.104 54523 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:16.261472 0.167337 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:17.263009 0.000000 udp 10.0.2.104 54523 -> 184.162.1.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:57:18.254376 0.300745 udp 10.0.2.104 54523 <-> 24.155.247.189 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:19.256242 0.000000 udp 10.0.2.104 54523 -> 31.17.92.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:57:20.257696 0.207833 udp 10.0.2.104 54523 <-> 62.18.155.242 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:21.258618 0.054759 udp 10.0.2.104 54523 <-> 95.160.90.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:22.260242 0.155370 udp 10.0.2.104 54523 <-> 68.43.66.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:23.261617 0.178089 udp 10.0.2.104 54523 <-> 180.151.150.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:24.263082 0.200473 udp 10.0.2.104 54523 <-> 64.185.54.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:25.254388 0.287170 udp 10.0.2.104 54523 <-> 201.242.46.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:26.256142 0.206695 udp 10.0.2.104 54523 <-> 24.21.223.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:27.257610 0.359020 udp 10.0.2.104 54523 <-> 111.242.31.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:28.258744 0.158898 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:29.260198 0.080760 udp 10.0.2.104 54523 <-> 217.217.124.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:30.261363 0.185914 udp 10.0.2.104 54523 <-> 204.210.176.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:31.262912 0.148345 udp 10.0.2.104 54523 <-> 71.80.67.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:32.254407 1.001718 udp 10.0.2.104 54523 <-> 87.10.138.41 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:34.257997 0.318383 udp 10.0.2.104 54523 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:35.258624 0.323025 udp 10.0.2.104 54523 <-> 177.68.171.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:35.920072 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:57:36.260584 0.000000 udp 10.0.2.104 54523 -> 78.51.64.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:57:37.261425 0.000000 udp 10.0.2.104 54523 -> 85.152.244.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:57:38.262976 0.261837 udp 10.0.2.104 54523 <-> 69.193.106.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:39.254464 0.156296 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:40.256208 0.000000 udp 10.0.2.104 54523 -> 1.172.59.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:57:41.257256 0.160802 udp 10.0.2.104 54523 <-> 98.100.135.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:42.258745 4.202664 udp 10.0.2.104 54523 <-> 103.17.103.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:42.872560 3.001416 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:57:43.260445 0.091662 udp 10.0.2.104 54523 <-> 83.252.12.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:44.261681 0.069593 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:45.263108 0.043562 udp 10.0.2.104 54523 <-> 93.183.191.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:46.254573 0.159361 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:47.256103 0.159617 udp 10.0.2.104 54523 <-> 108.170.53.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:48.257700 0.332858 udp 10.0.2.104 54523 <-> 95.38.253.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:49.258776 0.798747 udp 10.0.2.104 54523 <-> 184.63.28.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:49.882449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:57:50.262455 0.162254 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:51.262327 0.159807 udp 10.0.2.104 54523 <-> 50.142.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:52.263019 0.432794 udp 10.0.2.104 54523 <-> 1.163.82.147 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:53.254354 0.048426 udp 10.0.2.104 54523 <-> 46.237.118.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:54.256329 0.317630 udp 10.0.2.104 54523 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:55.257318 0.013669 udp 10.0.2.104 54523 <-> 94.113.114.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:56.259047 0.237491 udp 10.0.2.104 54523 <-> 76.113.45.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:57.260401 1.087487 udp 10.0.2.104 54523 <-> 5.12.54.75 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:57:57.881346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:57:59.263116 0.163267 udp 10.0.2.104 54523 <-> 75.72.237.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:00.254795 0.000000 udp 10.0.2.104 54523 -> 76.117.184.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:01.255995 0.634230 udp 10.0.2.104 54523 <-> 180.215.119.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:02.257856 0.208476 udp 10.0.2.104 54523 <-> 98.237.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:03.258957 0.504463 udp 10.0.2.104 54523 <-> 88.164.164.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:04.260405 0.269559 udp 10.0.2.104 54523 <-> 177.80.138.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:05.263235 2.147087 udp 10.0.2.104 54523 <-> 82.229.226.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:06.263450 0.000000 udp 10.0.2.104 54523 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:08.256321 0.278587 udp 10.0.2.104 54523 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:09.258029 0.681464 udp 10.0.2.104 54523 <-> 190.190.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:10.260160 0.086617 udp 10.0.2.104 54523 <-> 89.160.39.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:12.261944 0.000072 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:12.262016 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:58:13.263326 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:13.884232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:58:14.254966 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:15.256518 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:16.258107 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:17.259180 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:18.260545 0.000000 udp 10.0.2.104 54523 -> 2.184.241.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:19.262604 0.218352 udp 10.0.2.104 54523 <-> 111.125.203.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:20.301398 4.197037 udp 10.0.2.104 54523 <-> 186.176.148.120 16464 CON 0 0 4 1616 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:21.285436 0.996216 udp 10.0.2.104 54523 -> 173.176.177.119 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:22.938007 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:58:24.272799 0.158187 udp 10.0.2.104 54523 <-> 24.101.81.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:25.267703 0.082390 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:26.262550 0.076429 udp 10.0.2.104 54523 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:27.253369 0.591742 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:28.254955 0.140190 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:30.257675 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:31.259109 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:32.260813 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:33.262274 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:34.253964 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:35.255187 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:36.256827 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:37.258434 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:38.259604 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:39.260984 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:40.262310 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:41.254204 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:42.255165 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:43.257001 0.000104 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:43.257105 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:58:44.258343 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:45.259188 0.204096 udp 10.0.2.104 54523 <-> 88.207.58.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:45.890620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:58:46.261586 0.172060 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:47.262655 0.000000 udp 10.0.2.104 54523 -> 188.246.66.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:48.253758 0.611336 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:49.255511 0.000000 udp 10.0.2.104 54523 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:50.256524 0.000000 udp 10.0.2.104 54523 -> 173.248.17.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:51.258458 0.023207 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:52.259417 0.061044 udp 10.0.2.104 54523 <-> 94.240.201.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:53.260803 0.144290 udp 10.0.2.104 54523 <-> 69.124.254.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:54.262233 0.296399 udp 10.0.2.104 54523 <-> 177.193.249.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:55.253852 1.066475 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:58:58.258190 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:59.259504 0.000200 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:58:59.259704 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:59:00.261152 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:01.262670 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:02.253808 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:03.255757 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:04.256955 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:05.257897 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:06.259616 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:07.261102 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:08.262360 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:09.253282 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:09.914979 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:59:10.255096 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:11.256648 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:12.258475 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:13.259506 0.174820 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:14.261023 1.327267 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:15.262479 0.214994 udp 10.0.2.104 54523 <-> 24.119.59.82 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:16.254158 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:17.260203 0.188175 udp 10.0.2.104 54523 <-> 24.13.129.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:18.260508 0.000000 udp 10.0.2.104 54523 -> 176.63.245.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:19.262437 0.194926 udp 10.0.2.104 54523 <-> 108.178.146.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:20.268037 0.262407 udp 10.0.2.104 54523 <-> 200.109.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:21.266065 0.206422 udp 10.0.2.104 54523 <-> 50.149.114.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:22.267139 0.000000 udp 10.0.2.104 54523 -> 24.217.235.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:23.256427 0.141126 udp 10.0.2.104 54523 <-> 204.210.133.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:24.255865 0.754877 udp 10.0.2.104 54523 <-> 190.97.47.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:25.260588 0.310521 udp 10.0.2.104 54523 <-> 118.157.11.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:26.266169 0.213918 udp 10.0.2.104 54523 <-> 72.174.46.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:27.274142 0.000000 udp 10.0.2.104 54523 -> 78.172.187.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:28.277559 0.169693 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:29.274212 1.565368 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:30.261226 0.316300 udp 10.0.2.104 54523 <-> 200.236.0.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:31.258840 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:32.257053 0.090259 udp 10.0.2.104 54523 <-> 178.127.14.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:33.258269 0.584707 udp 10.0.2.104 54523 <-> 190.107.125.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:34.262276 0.104303 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:35.262066 0.313834 udp 10.0.2.104 54523 <-> 114.180.118.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:36.269498 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:37.260127 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:38.260359 0.140101 udp 10.0.2.104 54523 <-> 50.164.243.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:39.261569 0.000000 udp 10.0.2.104 54523 -> 189.111.210.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:40.258813 0.079175 udp 10.0.2.104 54523 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:41.259307 0.152576 udp 10.0.2.104 54523 <-> 71.197.28.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:42.261372 0.170382 udp 10.0.2.104 54523 <-> 68.59.168.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:43.266548 0.233775 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:44.256168 0.000000 udp 10.0.2.104 54523 -> 75.254.51.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:45.260774 0.211347 udp 10.0.2.104 54523 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:46.261555 1.749361 udp 10.0.2.104 54523 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:47.262743 0.142154 udp 10.0.2.104 54523 <-> 66.56.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:48.264267 0.169088 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:49.264846 0.214486 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:50.264464 0.279440 udp 10.0.2.104 54523 <-> 190.191.117.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:51.254266 0.000000 udp 10.0.2.104 54523 -> 209.102.248.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:52.256033 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:53.257554 0.000000 udp 10.0.2.104 54523 -> 190.117.242.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:54.258620 0.054432 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:55.260948 0.683970 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:56.261598 0.595178 udp 10.0.2.104 54523 <-> 190.17.37.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:56.912340 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:59:57.263448 0.145585 udp 10.0.2.104 54523 <-> 62.99.72.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 11:59:58.254283 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 11:59:59.256096 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:00.257617 0.141169 udp 10.0.2.104 54523 <-> 71.89.8.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:00:01.258650 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:02.259990 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:03.261504 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:04.263105 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:05.254369 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:06.255991 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:08.258677 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:09.260551 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:10.260923 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:11.263135 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:12.254428 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:13.256004 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:14.257407 0.000134 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:14.257541 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:00:15.258738 3.004818 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:16.260135 0.037711 udp 10.0.2.104 54523 <-> 84.196.174.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:00:17.261985 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:19.254883 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:20.256021 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:21.257494 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:22.258977 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:24.261799 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:25.262803 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:26.254663 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:27.256372 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:28.257813 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:29.259042 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:30.260711 0.000040 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:30.260751 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:00:31.261532 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:32.263434 0.396486 udp 10.0.2.104 54523 <-> 62.83.45.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:00:33.254720 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:34.256403 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:36.258740 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:37.260265 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:38.262096 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:39.263475 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:40.254885 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:41.256670 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:42.257966 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:43.259186 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:43.259250 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:00:43.919901 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:00:44.260515 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:45.261811 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:46.263731 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:47.254848 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:48.256455 0.000000 udp 10.0.2.104 54523 -> 197.7.171.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:49.258021 0.140721 udp 10.0.2.104 54523 <-> 69.115.153.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:00:50.258994 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:51.260488 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:52.262475 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:53.263885 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:54.254902 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:55.256280 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:56.258378 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:57.259213 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:00:59.262015 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:00.253384 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:01.254728 0.000088 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:01.254816 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:01:02.256768 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:03.257331 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:04.258902 0.000000 udp 10.0.2.104 54523 -> 69.115.153.210 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:05.260728 0.000000 udp 10.0.2.104 54523 -> 206.253.148.89 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:06.262218 0.000000 udp 10.0.2.104 54523 -> 201.210.215.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:07.253970 0.215795 udp 10.0.2.104 54523 <-> 62.83.45.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:01:08.255152 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:09.256324 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:10.257941 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:11.259109 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:12.262706 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:12.262752 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:01:14.254150 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:15.256156 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:16.258102 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:17.270262 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:18.268643 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:19.265767 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:20.265632 0.061437 udp 10.0.2.104 54523 <-> 84.121.191.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:01:21.253850 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:22.295283 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:23.291628 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:24.289463 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:25.284157 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:26.278911 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:27.342184 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:28.323713 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:29.318859 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:30.313444 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:30.313508 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:01:30.969967 0.000112 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:01:31.308293 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:32.301358 4.997184 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:33.294054 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:34.287219 0.000000 udp 10.0.2.104 54523 -> 197.7.171.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:35.307812 0.044632 udp 10.0.2.104 54523 <-> 87.204.155.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:01:36.304305 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:38.292103 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:39.285052 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:40.277521 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:41.272128 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:42.253692 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:43.260308 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:44.260230 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:45.264200 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:46.267813 0.008545 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:46.276358 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:01:48.262952 2.993793 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:49.254041 0.038298 udp 10.0.2.104 54523 <-> 81.83.62.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:01:50.255746 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:52.258195 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:53.259838 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:54.261318 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:56.260584 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:57.262162 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:58.265525 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:01:59.265829 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:00.263710 0.000057 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:00.263767 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:02:01.261107 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:02.262627 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:03.253531 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:04.255461 0.057732 udp 10.0.2.104 54523 <-> 62.83.45.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:05.257060 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:06.258556 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:07.259423 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:08.261138 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:08.261212 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:02:09.262665 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:10.254283 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:11.255837 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:12.256932 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:13.258338 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:14.259929 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:15.261533 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:17.254202 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:17.915022 0.000150 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:02:18.255921 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:19.257156 1.235977 udp 10.0.2.104 54523 <-> 201.210.215.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:20.258658 0.174017 udp 10.0.2.104 54523 <-> 173.178.181.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:21.259672 2.840088 udp 10.0.2.104 54523 <-> 75.240.45.40 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:22.261564 0.276278 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:24.254381 0.000000 udp 10.0.2.104 54523 -> 85.229.184.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:25.256082 0.295510 udp 10.0.2.104 54523 <-> 187.39.55.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:26.257256 0.000000 udp 10.0.2.104 54523 -> 78.178.71.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:27.258610 0.228907 udp 10.0.2.104 54523 <-> 72.42.160.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:28.260161 0.185124 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:29.261457 0.000000 udp 10.0.2.104 54523 -> 50.160.106.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:30.263205 0.152596 udp 10.0.2.104 54523 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:31.254384 0.221002 udp 10.0.2.104 54523 <-> 190.36.152.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:32.256288 0.153177 udp 10.0.2.104 54523 <-> 173.81.250.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:33.257492 0.031595 udp 10.0.2.104 54523 <-> 82.149.23.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:34.258556 0.125036 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:35.260142 0.409630 udp 10.0.2.104 54523 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:36.261407 0.000000 udp 10.0.2.104 54523 -> 101.60.93.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:37.263129 0.352347 udp 10.0.2.104 54523 <-> 59.102.161.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:38.254521 0.166548 udp 10.0.2.104 54523 <-> 24.15.28.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:39.256142 0.200399 udp 10.0.2.104 54523 <-> 174.112.180.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:40.257141 0.481905 udp 10.0.2.104 54523 <-> 188.253.67.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:41.258729 0.102091 udp 10.0.2.104 54523 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:42.260309 0.690267 udp 10.0.2.104 54523 <-> 98.222.5.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:43.261458 0.220586 udp 10.0.2.104 54523 <-> 72.174.46.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:44.262808 0.177264 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:45.254654 0.353663 udp 10.0.2.104 54523 <-> 114.43.0.30 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:46.255595 0.174439 udp 10.0.2.104 54523 <-> 64.7.146.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:47.257453 0.048141 udp 10.0.2.104 54523 <-> 212.117.27.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:48.258618 0.580463 udp 10.0.2.104 54523 <-> 166.161.71.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:49.260413 0.253637 udp 10.0.2.104 54523 <-> 190.72.112.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:50.261644 0.183673 udp 10.0.2.104 54523 <-> 24.121.84.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:51.263304 2.063394 udp 10.0.2.104 54523 <-> 95.86.47.62 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:52.254482 0.308274 udp 10.0.2.104 54523 <-> 201.208.173.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:54.257360 0.216335 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:55.258669 3.004561 udp 10.0.2.104 54523 -> 186.109.184.46 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:02:56.260287 0.070486 udp 10.0.2.104 54523 <-> 82.130.134.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:57.262190 0.154311 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:02:59.254436 0.151493 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:00.256096 4.283633 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:01.257485 0.171959 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:02.258854 4.276041 udp 10.0.2.104 54523 <-> 179.210.224.161 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:04.261939 3.129693 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:04.912103 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:03:06.254947 0.000000 udp 10.0.2.104 54523 -> 174.108.78.50 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:08.257667 0.142541 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:09.259023 0.000000 udp 10.0.2.104 54523 -> 125.230.11.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:10.260674 0.166239 udp 10.0.2.104 54523 <-> 173.18.197.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:11.262497 0.000000 udp 10.0.2.104 54523 -> 24.193.20.26 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:12.263338 0.241019 udp 10.0.2.104 54523 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:14.256064 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:15.257464 0.000100 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:15.257564 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:03:16.258975 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:17.260418 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:18.261916 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:19.263671 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:20.375804 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:21.370672 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:22.364327 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:23.358101 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:24.351090 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:25.343035 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:26.334694 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:27.315389 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:28.310121 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:29.304336 0.000000 udp 10.0.2.104 54523 -> 94.21.162.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:30.297746 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:31.290999 0.067894 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:32.282678 0.267010 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:33.264471 1.166064 udp 10.0.2.104 54523 <-> 181.72.115.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:34.255369 0.055378 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:35.256682 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:36.258516 0.136920 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:37.259386 0.860930 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:38.260909 0.069411 udp 10.0.2.104 54523 <-> 5.103.62.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:39.261462 0.033091 udp 10.0.2.104 54523 <-> 82.149.23.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:40.253824 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:41.254786 0.402840 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:42.256820 2.147606 udp 10.0.2.104 54523 <-> 71.77.141.55 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:43.258434 0.000000 udp 10.0.2.104 54523 -> 115.241.58.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:45.260923 0.195583 udp 10.0.2.104 54523 <-> 199.188.251.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:46.262558 0.379566 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:47.253759 0.424983 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:48.255027 0.607430 udp 10.0.2.104 54523 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:49.256515 0.096550 udp 10.0.2.104 54523 <-> 178.126.16.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:50.258651 0.147258 udp 10.0.2.104 54523 <-> 184.57.25.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:51.264806 0.132085 udp 10.0.2.104 54523 <-> 207.180.74.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:51.924226 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:03:52.264101 0.000000 udp 10.0.2.104 54523 -> 37.60.46.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:53.264079 0.000000 udp 10.0.2.104 54523 -> 190.161.202.180 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:54.254663 0.000000 udp 10.0.2.104 54523 -> 79.30.234.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:55.323049 1.048934 udp 10.0.2.104 54523 <-> 213.112.230.161 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:57.314972 0.155328 udp 10.0.2.104 54523 <-> 98.28.240.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:03:58.310163 3.968788 udp 10.0.2.104 54523 -> 162.210.42.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:03:59.304877 0.000000 udp 10.0.2.104 54523 -> 190.38.178.208 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:00.298258 0.168713 udp 10.0.2.104 54523 <-> 183.87.83.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:01.282112 0.000000 udp 10.0.2.104 54523 -> 186.36.244.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:03.275029 0.058144 udp 10.0.2.104 54523 <-> 95.160.90.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:04.270873 0.062008 udp 10.0.2.104 54523 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:05.266013 0.263284 udp 10.0.2.104 54523 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:06.261702 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:07.262561 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:08.253894 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:09.255169 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:10.256798 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:11.258061 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:12.259299 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:13.260801 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:14.262334 0.000000 udp 10.0.2.104 54523 -> 162.210.42.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:15.253533 0.000000 udp 10.0.2.104 54523 -> 95.160.90.245 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:16.255272 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:17.256713 0.000000 udp 10.0.2.104 54523 -> 95.122.167.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:18.258004 0.324835 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:19.259540 0.059810 udp 10.0.2.104 54523 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:20.260827 0.056392 udp 10.0.2.104 54523 <-> 95.160.90.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:21.262499 0.276619 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:22.254103 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:23.255436 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:24.256867 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:25.258287 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:26.259740 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:27.260894 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:28.262750 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:29.253469 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:30.294957 0.135460 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:31.291307 0.000000 udp 10.0.2.104 54523 -> 190.160.37.245 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:32.287143 0.234599 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:33.282511 0.065383 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:34.276548 0.324390 udp 10.0.2.104 54523 <-> 201.46.189.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:35.270237 0.155927 udp 10.0.2.104 54523 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:36.254262 0.164525 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:37.255835 0.144731 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:38.264029 0.127152 udp 10.0.2.104 54523 <-> 67.193.95.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:38.921981 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:04:39.261851 0.576324 udp 10.0.2.104 54523 <-> 79.47.30.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:40.259848 0.143598 udp 10.0.2.104 54523 <-> 68.194.88.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:41.261333 0.175229 udp 10.0.2.104 54523 <-> 124.123.164.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:42.262694 0.021143 udp 10.0.2.104 54523 <-> 176.63.245.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:43.254243 1.281437 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:44.261975 0.338609 udp 10.0.2.104 54523 <-> 190.124.132.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:45.262443 0.048315 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:46.262330 0.145934 udp 10.0.2.104 54523 <-> 24.161.48.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:47.262106 0.172785 udp 10.0.2.104 54523 <-> 75.134.145.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:48.262409 0.152491 udp 10.0.2.104 54523 <-> 71.88.178.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:49.262770 0.094694 udp 10.0.2.104 54523 <-> 37.203.73.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:49.895747 3.002311 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:04:50.254249 0.071053 udp 10.0.2.104 54523 <-> 193.30.248.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:51.256084 0.520321 udp 10.0.2.104 54523 <-> 172.129.80.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:52.257168 0.000000 udp 10.0.2.104 54523 -> 46.10.187.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:53.258323 0.000000 udp 10.0.2.104 54523 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:04:54.259998 0.287907 udp 10.0.2.104 54523 <-> 153.164.223.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:55.261770 0.180592 udp 10.0.2.104 54523 <-> 173.23.208.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:56.262766 1.252288 udp 10.0.2.104 54523 <-> 98.127.49.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:56.903798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:04:58.255781 0.155802 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:04:59.257218 0.313750 udp 10.0.2.104 54523 <-> 187.78.4.6 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:00.258506 0.327288 udp 10.0.2.104 54523 <-> 175.215.45.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:01.259950 0.000000 udp 10.0.2.104 54523 -> 192.168.1.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:02.261629 0.213447 udp 10.0.2.104 54523 <-> 75.85.35.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:03.262961 0.405863 udp 10.0.2.104 54523 <-> 182.172.202.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:04.254528 0.077962 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:04.905570 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:05:05.256164 0.150292 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:06.257543 0.232031 udp 10.0.2.104 54523 <-> 207.190.82.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:07.258657 0.000000 udp 10.0.2.104 54523 -> 47.58.112.210 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:08.260358 0.142153 udp 10.0.2.104 54523 <-> 98.24.41.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:09.261974 1.354617 udp 10.0.2.104 54523 <-> 177.132.184.103 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:11.254519 0.294909 udp 10.0.2.104 54523 <-> 125.192.40.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:12.255922 0.170679 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:13.257578 2.329035 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:14.258854 0.123411 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:16.261555 0.000000 udp 10.0.2.104 54523 -> 98.64.135.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:17.263253 0.173891 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:18.254729 0.000000 udp 10.0.2.104 54523 -> 67.193.64.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:19.256185 0.000000 udp 10.0.2.104 54523 -> 79.154.116.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:20.257350 0.171933 udp 10.0.2.104 54523 <-> 98.200.250.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:20.908167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:05:21.259002 0.048025 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:22.260279 0.171050 udp 10.0.2.104 54523 <-> 97.85.91.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:23.262130 0.174837 udp 10.0.2.104 54523 <-> 98.196.143.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:24.263005 0.146357 udp 10.0.2.104 54523 <-> 24.183.237.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:25.254462 0.164013 udp 10.0.2.104 54523 <-> 71.229.106.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:25.915257 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:05:26.256113 0.419230 udp 10.0.2.104 54523 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:27.257227 0.065273 udp 10.0.2.104 54523 <-> 62.57.52.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:28.258835 0.000000 udp 10.0.2.104 54523 -> 110.172.155.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:29.260170 0.164332 udp 10.0.2.104 54523 <-> 50.141.162.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:30.261969 0.000000 udp 10.0.2.104 54523 -> 88.233.78.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:31.263239 0.277489 udp 10.0.2.104 54523 <-> 177.192.200.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:32.254713 0.198309 udp 10.0.2.104 54523 <-> 76.85.171.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:33.256420 0.047627 udp 10.0.2.104 54523 <-> 77.21.231.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:34.257947 0.230483 udp 10.0.2.104 54523 <-> 71.92.68.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:35.259181 0.150099 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:36.260430 0.186428 udp 10.0.2.104 54523 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:37.261891 0.000000 udp 10.0.2.104 54523 -> 152.26.68.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:38.263976 0.083838 udp 10.0.2.104 54523 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:39.254658 0.372636 udp 10.0.2.104 54523 <-> 75.211.24.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:40.283443 0.036601 udp 10.0.2.104 54523 <-> 87.206.142.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:41.279192 0.177910 udp 10.0.2.104 54523 <-> 174.55.72.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:42.275375 0.211528 udp 10.0.2.104 54523 <-> 74.127.151.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:43.270109 0.080855 udp 10.0.2.104 54523 <-> 81.57.246.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:44.264616 0.158923 udp 10.0.2.104 54523 <-> 98.213.124.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:45.262993 0.204426 udp 10.0.2.104 54523 <-> 68.224.37.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:46.255057 0.070917 udp 10.0.2.104 54523 <-> 91.133.48.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:47.256662 0.000000 udp 10.0.2.104 54523 -> 24.233.63.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:48.257425 0.696676 udp 10.0.2.104 54523 <-> 201.19.246.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:49.259081 0.157791 udp 10.0.2.104 54523 <-> 75.129.238.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:50.260597 2.003209 udp 10.0.2.104 54523 <-> 24.164.171.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:51.262335 0.243970 udp 10.0.2.104 54523 <-> 201.132.60.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:52.914318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:05:53.258107 0.477569 udp 10.0.2.104 54523 <-> 67.183.71.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:54.258749 0.067979 udp 10.0.2.104 54523 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:55.258693 0.000000 udp 10.0.2.104 54523 -> 186.9.249.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:56.258852 0.000000 udp 10.0.2.104 54523 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:05:57.266710 0.069877 udp 10.0.2.104 54523 <-> 94.240.166.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:58.263866 0.201086 udp 10.0.2.104 54523 <-> 207.210.39.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:05:59.265852 0.059951 udp 10.0.2.104 54523 <-> 89.32.155.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:00.254936 0.277612 udp 10.0.2.104 54523 <-> 177.138.108.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:01.256382 0.044734 udp 10.0.2.104 54523 <-> 89.68.6.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:02.258227 0.139515 udp 10.0.2.104 54523 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:03.260785 0.196484 udp 10.0.2.104 54523 <-> 111.92.99.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:04.260235 0.100491 udp 10.0.2.104 54523 <-> 176.200.160.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:05.262936 0.532926 udp 10.0.2.104 54523 <-> 117.234.22.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:06.257471 0.168322 udp 10.0.2.104 54523 <-> 184.69.38.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:07.256657 0.156033 udp 10.0.2.104 54523 <-> 71.74.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:08.264757 0.000000 udp 10.0.2.104 54523 -> 202.138.11.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:09.263076 0.313505 udp 10.0.2.104 54523 <-> 190.193.89.54 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:10.263149 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:11.267825 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:12.265726 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:12.913454 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:06:13.253549 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:14.255312 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:15.300576 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:16.299842 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:17.300122 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:18.296150 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:19.290854 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:20.274705 4.986156 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:21.268333 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:22.264236 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:23.263650 0.159954 udp 10.0.2.104 54523 <-> 75.129.238.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:24.259079 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:26.268019 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:27.257916 0.000107 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:27.258023 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:06:28.258304 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:29.258424 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:30.258023 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:32.260638 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:33.262505 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:34.253518 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:35.255072 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:36.256758 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:37.258587 3.003879 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:38.259599 0.000000 udp 10.0.2.104 54523 -> 5.20.145.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:39.260890 0.309707 udp 10.0.2.104 54523 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:41.253382 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:42.255070 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:43.256937 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:44.258151 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:45.259434 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:46.260944 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:47.262845 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:48.253802 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:49.255023 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:49.255134 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:06:50.256905 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:51.258232 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:52.259590 2.993926 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:53.261043 0.000000 udp 10.0.2.104 54523 -> 202.138.11.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:54.262481 0.511662 udp 10.0.2.104 54523 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:06:56.255251 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:58.258595 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:59.259986 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:06:59.920726 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:07:00.261545 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:01.262816 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:02.253563 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:03.255666 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:04.257421 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:05.258429 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:06.259557 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:07.261179 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:07.261272 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:07:08.262886 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:09.254230 0.000000 udp 10.0.2.104 54523 -> 202.138.11.36 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:10.255637 0.376427 udp 10.0.2.104 54523 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:11.256816 0.181102 udp 10.0.2.104 54523 <-> 208.107.200.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:12.258683 0.227129 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:13.259800 0.082980 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:14.261271 0.303069 udp 10.0.2.104 54523 <-> 88.187.105.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:15.262761 0.000000 udp 10.0.2.104 54523 -> 206.191.17.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:16.253561 0.076669 udp 10.0.2.104 54523 <-> 213.60.233.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:17.255485 0.000000 udp 10.0.2.104 54523 -> 193.248.39.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:18.257398 0.024522 udp 10.0.2.104 54523 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:19.258430 0.000000 udp 10.0.2.104 54523 -> 200.117.20.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:20.260045 0.000000 udp 10.0.2.104 54523 -> 76.27.251.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:21.261082 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:22.262608 0.000000 udp 10.0.2.104 54523 -> 69.31.160.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:23.254093 0.668177 udp 10.0.2.104 54523 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:24.255828 0.157151 udp 10.0.2.104 54523 <-> 173.179.146.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:25.257321 0.000000 udp 10.0.2.104 54523 -> 190.17.37.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:26.258672 0.000000 udp 10.0.2.104 54523 -> 91.89.7.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:27.260153 0.081522 udp 10.0.2.104 54523 <-> 79.113.119.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:28.261232 0.000000 udp 10.0.2.104 54523 -> 24.134.63.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:29.262714 0.000000 udp 10.0.2.104 54523 -> 66.207.9.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:30.254355 1.604237 udp 10.0.2.104 54523 <-> 201.160.27.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:31.255819 0.052577 udp 10.0.2.104 54523 <-> 195.60.193.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:32.257071 2.253916 udp 10.0.2.104 54523 <-> 198.91.171.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:33.258793 0.169671 udp 10.0.2.104 54523 <-> 71.57.228.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:34.263097 0.316013 udp 10.0.2.104 54523 <-> 121.139.105.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:35.262742 0.234111 udp 10.0.2.104 54523 <-> 190.205.185.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:36.263034 0.171523 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:37.254417 0.046454 udp 10.0.2.104 54523 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:38.255992 0.028041 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:39.257138 0.719201 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:40.258662 4.997165 udp 10.0.2.104 54523 <-> 89.215.42.167 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:41.259863 0.000000 udp 10.0.2.104 54523 -> 89.146.142.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:42.261900 0.224246 udp 10.0.2.104 54523 <-> 187.242.41.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:43.262810 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:44.254790 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:45.296427 0.000000 udp 10.0.2.104 54523 <- 89.215.42.167 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:46.257093 0.176138 udp 10.0.2.104 54523 <-> 135.19.152.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:07:46.918004 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:07:47.258675 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:48.260420 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:49.261369 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:50.263311 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:51.254747 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:52.256176 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:53.257301 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:54.258836 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:55.260382 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:56.261902 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:57.265798 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:58.255431 0.000106 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:07:58.255537 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:07:59.256095 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:01.263891 0.713976 udp 10.0.2.104 54523 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:02.263834 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:03.264331 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:04.263225 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:05.258856 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:06.258758 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:07.259595 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:08.263963 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:09.264756 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:11.276557 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:12.269702 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:13.270528 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:14.268351 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:15.265845 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:15.265909 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:08:16.263838 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:17.261857 0.308304 udp 10.0.2.104 54523 <-> 186.95.24.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:18.263512 0.209833 udp 10.0.2.104 54523 <-> 209.137.215.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:19.254685 0.337772 udp 10.0.2.104 54523 <-> 190.182.128.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:20.257491 0.000000 udp 10.0.2.104 54523 -> 81.227.139.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:21.258808 0.239340 udp 10.0.2.104 54523 <-> 190.77.247.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:22.258891 0.067453 udp 10.0.2.104 54523 <-> 84.126.6.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:23.264099 0.000000 udp 10.0.2.104 54523 -> 75.138.193.217 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:24.264240 0.150838 udp 10.0.2.104 54523 <-> 24.101.81.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:25.264238 0.310434 udp 10.0.2.104 54523 <-> 24.232.167.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:26.254858 0.149689 udp 10.0.2.104 54523 <-> 66.171.56.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:27.256757 0.157553 udp 10.0.2.104 54523 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:28.260556 0.143511 udp 10.0.2.104 54523 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:29.260324 0.151053 udp 10.0.2.104 54523 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:30.260610 0.000000 udp 10.0.2.104 54523 -> 75.237.109.0 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:31.261560 0.026468 udp 10.0.2.104 54523 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:32.264121 0.066828 udp 10.0.2.104 54523 <-> 178.164.167.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:33.254703 0.000000 udp 10.0.2.104 54523 -> 190.38.80.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:33.915934 0.000112 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:08:34.256512 0.401101 udp 10.0.2.104 54523 <-> 201.46.149.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:35.264490 0.127187 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:36.261876 0.328652 udp 10.0.2.104 54523 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:37.260694 0.052991 udp 10.0.2.104 54523 <-> 95.43.102.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:38.261956 0.000000 udp 10.0.2.104 54523 -> 75.137.254.70 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:39.258112 0.083919 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:40.261783 0.057787 udp 10.0.2.104 54523 <-> 78.94.145.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:41.259918 2.101383 udp 10.0.2.104 54523 <-> 177.106.0.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:42.258061 0.000000 udp 10.0.2.104 54523 -> 179.164.107.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:43.259145 0.000000 udp 10.0.2.104 54523 -> 190.38.80.174 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:44.260492 0.750586 udp 10.0.2.104 54523 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:45.262006 0.159196 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:46.253242 2.061297 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:47.255057 0.077561 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:49.257975 0.176437 udp 10.0.2.104 54523 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:50.259245 0.203232 udp 10.0.2.104 54523 <-> 67.177.197.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:51.260702 0.160766 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:52.262376 1.369312 udp 10.0.2.104 54523 <-> 181.72.115.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:53.253456 0.000000 udp 10.0.2.104 54523 -> 94.21.162.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:54.254982 0.069290 udp 10.0.2.104 54523 <-> 86.123.120.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:55.256444 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:56.264815 0.000000 udp 10.0.2.104 54523 -> 74.216.190.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:08:57.264313 0.542868 udp 10.0.2.104 54523 <-> 187.69.96.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:58.262033 0.208763 udp 10.0.2.104 54523 <-> 142.129.132.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:08:59.262457 3.995649 udp 10.0.2.104 54523 -> 79.51.215.42 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:00.253817 4.142298 udp 10.0.2.104 54523 <-> 24.75.190.46 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:01.254896 0.000000 udp 10.0.2.104 54523 -> 112.118.16.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:02.256602 0.000000 udp 10.0.2.104 54523 -> 99.14.206.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:05.260710 2.033735 udp 10.0.2.104 54523 <-> 46.10.187.32 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:06.261863 0.126532 udp 10.0.2.104 54523 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:08.254824 0.262097 udp 10.0.2.104 54523 <-> 200.84.224.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:09.256427 2.133918 udp 10.0.2.104 54523 <-> 198.91.171.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:10.263110 0.203580 udp 10.0.2.104 54523 <-> 190.218.244.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:11.263120 0.222522 udp 10.0.2.104 54523 <-> 187.242.41.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:12.263259 0.306608 udp 10.0.2.104 54523 <-> 66.79.231.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:13.262773 0.048522 udp 10.0.2.104 54523 <-> 62.195.179.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:14.253482 0.144926 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:15.255248 0.000000 udp 10.0.2.104 54523 -> 190.0.76.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:16.256442 0.304491 udp 10.0.2.104 54523 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:17.257912 0.157133 udp 10.0.2.104 54523 -> 216.114.33.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:17.415045 0.000000 icmp 216.114.33.171 0x0303 -> 10.0.2.104 0x5040 URP 192 1 70 flow=Background 1970/01/01 12:09:18.259432 0.254606 udp 10.0.2.104 54523 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:19.261166 2.078583 udp 10.0.2.104 54523 <-> 83.249.8.194 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:20.264372 0.208756 udp 10.0.2.104 54523 <-> 76.91.133.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:20.913392 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:09:22.254977 0.336988 udp 10.0.2.104 54523 <-> 190.174.134.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:23.256746 0.292914 udp 10.0.2.104 54523 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:24.258550 0.314069 udp 10.0.2.104 54523 <-> 61.70.94.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:25.259398 1.198945 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:27.262244 0.296506 udp 10.0.2.104 54523 <-> 200.104.248.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:28.254136 0.000000 udp 10.0.2.104 54523 -> 151.74.35.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:29.255322 0.174597 udp 10.0.2.104 54523 <-> 68.59.168.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:30.256665 4.997531 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:31.258211 0.322199 udp 10.0.2.104 54523 <-> 150.162.122.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:32.259898 0.000000 udp 10.0.2.104 54523 -> 190.160.170.108 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:33.261173 3.353027 udp 10.0.2.104 54523 <-> 111.250.115.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:34.262389 4.997092 udp 10.0.2.104 54523 <-> 151.74.35.117 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:37.257310 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:38.258536 0.078871 udp 10.0.2.104 54523 <-> 85.219.21.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:39.387655 0.000000 udp 10.0.2.104 54523 <- 151.74.35.117 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:40.261414 0.000000 udp 10.0.2.104 54523 -> 190.160.170.108 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:41.264454 0.082068 udp 10.0.2.104 54523 <-> 217.129.106.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:42.254329 0.155226 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:43.255536 0.371074 udp 10.0.2.104 54523 <-> 190.78.183.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:44.257006 0.154752 udp 10.0.2.104 54523 <-> 95.65.118.76 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:45.327927 0.143704 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:46.320991 0.000000 udp 10.0.2.104 54523 -> 186.92.110.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:47.312982 0.166554 udp 10.0.2.104 54523 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:48.304648 2.135306 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:49.285750 0.067814 udp 10.0.2.104 54523 <-> 95.65.118.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:51.274613 0.179787 udp 10.0.2.104 54523 <-> 140.193.57.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:52.271688 0.000000 udp 10.0.2.104 54523 -> 188.26.217.37 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:53.264801 0.157091 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:54.260592 0.060994 udp 10.0.2.104 54523 <-> 80.4.111.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:55.262941 0.193264 udp 10.0.2.104 54523 <-> 70.180.235.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:56.254069 0.000000 udp 10.0.2.104 54523 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:09:57.255371 0.181345 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:58.257220 0.154996 udp 10.0.2.104 54523 <-> 24.179.39.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:09:59.258590 1.251646 udp 10.0.2.104 54523 <-> 69.104.55.122 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:01.261498 0.847431 udp 10.0.2.104 54523 <-> 181.29.6.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:02.262402 0.000000 udp 10.0.2.104 54523 -> 84.77.48.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:03.254375 0.046924 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:04.255699 0.147817 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:05.257094 0.322320 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:06.258372 0.038372 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:07.260381 1.000977 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:07.920169 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:10:09.269147 0.000000 udp 10.0.2.104 54523 -> 82.243.94.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:10.258795 0.243240 udp 10.0.2.104 54523 <-> 62.18.155.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:11.259150 0.291276 udp 10.0.2.104 54523 <-> 190.195.159.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:12.258707 0.608093 udp 10.0.2.104 54523 <-> 2.180.145.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:13.259025 0.000000 udp 10.0.2.104 54523 -> 77.70.120.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:14.260202 0.038718 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:15.261298 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:16.262941 0.000000 udp 10.0.2.104 54523 -> 82.243.94.4 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:17.254551 0.000000 udp 10.0.2.104 54523 -> 62.18.155.242 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:18.256217 0.055567 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:19.257310 0.353756 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:20.258752 0.162624 udp 10.0.2.104 54523 <-> 173.179.146.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:21.260144 0.000000 udp 10.0.2.104 54523 -> 217.217.179.236 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:22.268034 0.000000 udp 10.0.2.104 54523 -> 62.18.155.242 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:23.267859 0.035857 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:24.257753 0.053601 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:25.258053 0.172834 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:26.258311 0.000000 udp 10.0.2.104 54523 -> 65.30.26.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:27.259272 0.232277 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:28.260759 0.155010 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:29.262077 0.038831 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:30.265160 0.054566 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:31.258003 0.189400 udp 10.0.2.104 54523 <-> 82.243.94.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:32.258264 0.000000 udp 10.0.2.104 54523 -> 190.218.101.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:33.257941 0.000000 udp 10.0.2.104 54523 -> 173.215.19.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:34.258787 3.995769 udp 10.0.2.104 54523 -> 186.9.249.3 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:35.260585 1.286691 udp 10.0.2.104 54523 <-> 190.195.159.195 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:37.263184 0.000000 udp 10.0.2.104 54523 -> 190.218.101.4 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:39.256290 0.335126 udp 10.0.2.104 54523 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:40.258100 0.000000 udp 10.0.2.104 54523 -> 79.33.223.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:41.258813 0.387832 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:42.260611 0.216190 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:43.262620 0.050362 udp 10.0.2.104 54523 <-> 94.53.32.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:44.263644 0.367808 udp 10.0.2.104 54523 <-> 186.58.136.209 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:45.254558 0.065446 udp 10.0.2.104 54523 <-> 81.236.193.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:46.256280 0.332672 udp 10.0.2.104 54523 <-> 190.189.116.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:47.257353 0.322285 udp 10.0.2.104 54523 <-> 183.102.244.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:48.258928 3.995763 udp 10.0.2.104 54523 -> 72.222.72.67 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:49.260432 0.166457 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:50.262296 0.169439 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:51.263097 0.000000 udp 10.0.2.104 54523 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:53.256327 0.000000 udp 10.0.2.104 54523 -> 76.79.188.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:10:54.257438 0.046002 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:54.918252 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:10:55.258749 0.162098 udp 10.0.2.104 54523 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:56.260384 0.300321 udp 10.0.2.104 54523 <-> 42.148.35.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:57.262444 0.183708 udp 10.0.2.104 54523 <-> 79.53.125.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:58.263315 0.073180 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:10:59.254829 0.000000 udp 10.0.2.104 54523 -> 69.124.123.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:00.256327 1.221969 udp 10.0.2.104 54523 <-> 76.90.73.101 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:02.259045 0.189033 udp 10.0.2.104 54523 <-> 72.197.28.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:03.260821 0.000000 udp 10.0.2.104 54523 -> 190.78.142.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:04.262063 2.154756 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:05.263538 3.132503 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:07.256495 4.997037 udp 10.0.2.104 54523 -> 88.6.54.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:09.259231 0.000000 udp 10.0.2.104 54523 -> 69.124.123.249 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:10.260907 0.115591 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:11.262020 0.040517 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:13.254862 0.053855 udp 10.0.2.104 54523 <-> 95.160.90.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:14.256320 0.145007 udp 10.0.2.104 54523 <-> 98.102.132.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:15.257318 0.633081 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:16.259197 3.289743 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:17.260729 3.131647 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:18.262398 4.996883 udp 10.0.2.104 54523 -> 75.246.254.27 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:21.256379 0.135851 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:22.258157 0.061951 udp 10.0.2.104 54523 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:23.620171 4.636408 udp 10.0.2.104 54523 <-> 75.246.254.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:24.261505 0.143635 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:25.262646 1.354814 udp 10.0.2.104 54523 <-> 202.78.81.194 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:27.255166 0.132935 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:29.258166 0.131208 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:30.259442 0.238529 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:31.261086 0.035497 udp 10.0.2.104 54523 <-> 195.182.199.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:32.262209 0.000000 udp 10.0.2.104 54523 -> 75.246.254.27 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:33.253557 0.000000 udp 10.0.2.104 54523 -> 94.21.162.26 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:34.255321 0.065270 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:35.256427 0.137662 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:36.257691 0.131526 udp 10.0.2.104 54523 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:37.259778 0.234852 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:38.264276 2.329747 udp 10.0.2.104 54523 <-> 111.241.157.68 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:39.264393 0.149339 udp 10.0.2.104 54523 <-> 24.157.98.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:41.255200 3.004140 udp 10.0.2.104 54523 <-> 95.180.191.25 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:41.915916 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:11:42.256742 0.185242 udp 10.0.2.104 54523 <-> 70.75.88.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:43.258135 0.216997 udp 10.0.2.104 54523 <-> 67.189.112.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:45.261953 0.106764 udp 10.0.2.104 54523 <-> 95.74.212.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:11:46.262148 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:47.253670 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:47.253746 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:11:48.255625 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:49.256568 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:50.258021 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:51.259483 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:52.260794 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:53.262695 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:54.253957 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:55.255757 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:56.257439 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:56.921581 3.000334 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:11:57.257884 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:58.259624 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:11:59.261002 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:00.262615 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:01.254324 0.579821 udp 10.0.2.104 54523 <-> 180.215.39.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:02.255491 0.000071 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:02.255562 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:12:03.257057 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:03.928060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:12:04.258466 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:05.259758 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:06.261890 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:07.262472 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:08.254477 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:09.255211 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:10.257560 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:11.258145 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:11.929272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:12:12.260185 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:14.262436 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:15.253453 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:16.255798 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:17.256984 0.691252 udp 10.0.2.104 54523 <-> 180.215.39.212 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:18.258507 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:19.259896 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:20.261293 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:21.262617 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:22.254329 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:24.256984 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:25.258509 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:26.260177 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:27.261338 3.995908 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:27.932157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:12:28.262922 0.000115 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:28.263037 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:12:28.913205 0.000116 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:12:29.254359 3.004069 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:30.255901 0.073783 udp 10.0.2.104 54523 <-> 109.225.123.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:34.261245 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:35.262878 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:36.254365 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:37.255801 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:38.257228 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:39.265149 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:40.264927 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:41.265034 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:42.264920 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:43.254870 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:44.255952 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:45.257095 0.093302 udp 10.0.2.104 54523 <-> 95.74.212.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:46.258448 0.206831 udp 10.0.2.104 54523 <-> 67.160.249.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:47.260032 0.172994 udp 10.0.2.104 54523 <-> 69.23.215.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:48.261128 0.145442 udp 10.0.2.104 54523 <-> 24.210.69.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:49.262987 0.208413 udp 10.0.2.104 54523 <-> 67.168.98.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:51.256050 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:52.257286 0.000121 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:52.257407 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:12:53.258470 0.100603 udp 10.0.2.104 54523 <-> 87.1.19.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:54.260050 0.323923 udp 10.0.2.104 54523 <-> 61.228.89.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:55.262014 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:56.262984 0.000000 udp 10.0.2.104 54523 -> 79.51.215.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:57.254488 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:58.255961 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:12:59.257451 0.182909 udp 10.0.2.104 54523 <-> 24.155.247.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:12:59.938441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:13:00.258715 0.134975 udp 10.0.2.104 54523 <-> 68.82.170.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:01.260787 0.021984 udp 10.0.2.104 54523 <-> 89.33.186.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:02.261600 0.157385 udp 10.0.2.104 54523 <-> 68.185.251.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:03.263087 0.148323 udp 10.0.2.104 54523 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:04.254579 0.320313 udp 10.0.2.104 54523 <-> 61.228.89.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:05.255954 0.000000 udp 10.0.2.104 54523 -> 2.136.206.189 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:06.258093 0.163476 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:07.258528 0.151763 udp 10.0.2.104 54523 <-> 113.193.40.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:08.260145 0.789938 udp 10.0.2.104 54523 <-> 186.191.26.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:09.261812 0.147484 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:10.263293 1.609311 udp 10.0.2.104 54523 <-> 190.38.7.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:11.254522 0.000000 udp 10.0.2.104 54523 -> 50.11.51.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:12.256207 0.144715 udp 10.0.2.104 54523 <-> 24.38.207.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:13.257510 0.178873 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:14.258902 0.329414 udp 10.0.2.104 54523 <-> 111.246.102.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:15.260779 0.127679 udp 10.0.2.104 54523 <-> 37.239.230.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:15.920675 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:13:16.261579 0.167898 udp 10.0.2.104 54523 <-> 96.42.70.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:17.264472 0.188911 udp 10.0.2.104 54523 <-> 156.26.82.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:18.254525 0.000000 udp 10.0.2.104 54523 -> 96.51.141.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:19.256282 0.000000 udp 10.0.2.104 54523 -> 124.33.188.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:20.258019 0.271587 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:21.258784 0.033646 udp 10.0.2.104 54523 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:22.260893 0.290918 udp 10.0.2.104 54523 <-> 98.69.141.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:23.262105 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:24.263662 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:25.254545 0.055934 udp 10.0.2.104 54523 <-> 176.73.209.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:26.256168 0.061838 udp 10.0.2.104 54523 <-> 31.211.155.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:27.257620 2.169270 udp 10.0.2.104 54523 <-> 24.203.38.139 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:28.258838 1.239482 udp 10.0.2.104 54523 <-> 84.58.30.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:30.262499 2.031416 udp 10.0.2.104 54523 <-> 181.208.87.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:31.263367 0.155691 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:32.254794 0.070319 udp 10.0.2.104 54523 <-> 62.99.12.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:33.256305 0.155813 udp 10.0.2.104 54523 <-> 75.185.191.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:34.258049 0.099768 udp 10.0.2.104 54523 <-> 87.14.102.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:35.259129 0.000000 udp 10.0.2.104 54523 -> 71.84.132.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:36.260759 0.347651 udp 10.0.2.104 54523 <-> 2.193.240.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:37.262421 1.021990 udp 10.0.2.104 54523 <-> 95.222.25.66 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:39.254992 0.162147 udp 10.0.2.104 54523 <-> 24.247.36.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:40.256087 0.000000 udp 10.0.2.104 54523 -> 204.12.175.193 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:41.257756 0.038846 udp 10.0.2.104 54523 <-> 78.90.233.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:42.259104 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:43.260495 0.165394 udp 10.0.2.104 54523 <-> 66.176.196.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:44.261752 0.000000 udp 10.0.2.104 54523 -> 192.95.211.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:45.253706 0.000000 udp 10.0.2.104 54523 -> 211.244.198.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:46.254734 0.134700 udp 10.0.2.104 54523 <-> 2.192.47.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:47.256058 0.245345 udp 10.0.2.104 54523 <-> 70.30.90.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:48.258120 0.278964 udp 10.0.2.104 54523 <-> 201.27.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:49.258997 0.000000 udp 10.0.2.104 54523 -> 95.180.191.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:50.261181 0.000000 udp 10.0.2.104 54523 -> 68.14.166.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:51.262317 0.000000 udp 10.0.2.104 54523 -> 92.36.144.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:52.253569 0.361830 udp 10.0.2.104 54523 <-> 188.105.51.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:53.255044 0.059126 udp 10.0.2.104 54523 <-> 90.157.209.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:54.256609 0.098412 udp 10.0.2.104 54523 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:55.257968 1.045592 udp 10.0.2.104 54523 <-> 24.247.36.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:56.259177 0.153972 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:57.260778 0.218838 udp 10.0.2.104 54523 <-> 151.74.252.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:13:58.263093 0.000000 udp 10.0.2.104 54523 -> 181.118.86.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:58.963658 0.011642 udp 10.0.2.104 54613 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 12:13:58.975675 0.000000 udp 10.0.2.104 54614 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:13:59.253277 1.145642 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:01.256661 0.057668 udp 10.0.2.104 54523 <-> 188.26.225.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:02.258018 0.168850 udp 10.0.2.104 54523 <-> 72.179.177.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:02.918782 0.000131 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:14:03.259448 0.275850 udp 10.0.2.104 54523 <-> 99.235.131.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:04.261361 0.161891 udp 10.0.2.104 54523 <-> 72.200.63.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:05.262210 0.148603 udp 10.0.2.104 54523 <-> 24.99.130.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:06.253588 0.049584 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:07.255347 0.163516 udp 10.0.2.104 54523 <-> 184.153.119.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:08.256466 0.171736 udp 10.0.2.104 54523 <-> 50.123.134.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:09.258110 0.292754 udp 10.0.2.104 54523 <-> 220.216.24.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:10.259629 0.387174 udp 10.0.2.104 54523 <-> 184.78.226.230 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:11.261066 0.207604 udp 10.0.2.104 54523 <-> 98.234.99.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:12.262437 0.000000 udp 10.0.2.104 54523 -> 27.3.64.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:13.253574 0.146589 udp 10.0.2.104 54523 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:14.255187 0.000000 udp 10.0.2.104 54523 -> 95.82.9.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:15.256550 0.061166 udp 10.0.2.104 54523 <-> 31.211.155.199 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:16.258024 0.000000 udp 10.0.2.104 54523 -> 5.14.7.215 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:17.259354 3.811545 udp 10.0.2.104 54523 <-> 91.98.178.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:18.260798 0.071470 udp 10.0.2.104 54523 <-> 86.100.146.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:19.262507 0.000000 udp 10.0.2.104 54523 -> 67.189.32.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:20.253889 0.105657 udp 10.0.2.104 54523 <-> 84.127.155.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:21.258112 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:22.258265 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:23.258035 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:24.259346 0.478965 udp 10.0.2.104 54523 <-> 201.37.234.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:25.261003 0.085281 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:26.262679 0.207989 udp 10.0.2.104 54523 <-> 64.184.108.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:27.253529 0.115652 udp 10.0.2.104 54523 <-> 79.47.2.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:28.255278 0.108388 udp 10.0.2.104 54523 <-> 46.55.49.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:29.256587 0.201787 udp 10.0.2.104 54523 <-> 67.160.249.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:30.258303 0.201624 udp 10.0.2.104 54523 <-> 174.6.108.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:31.259699 0.680854 udp 10.0.2.104 54523 <-> 184.78.226.230 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:32.261201 0.136996 udp 10.0.2.104 54523 <-> 68.46.15.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:33.262888 0.000000 udp 10.0.2.104 54523 -> 89.185.197.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:34.254465 0.182194 udp 10.0.2.104 54523 <-> 97.66.100.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:35.255627 1.142224 udp 10.0.2.104 54523 <-> 186.19.88.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:36.256875 0.137618 udp 10.0.2.104 54523 <-> 74.90.141.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:37.258079 0.141012 udp 10.0.2.104 54523 <-> 75.185.190.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:38.259755 0.025787 udp 10.0.2.104 54523 <-> 89.133.126.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:39.261069 0.283784 udp 10.0.2.104 54523 <-> 151.247.66.105 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:40.262486 0.000000 udp 10.0.2.104 54523 -> 46.191.214.12 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:41.254508 0.188252 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:42.255865 2.077499 udp 10.0.2.104 54523 <-> 187.18.249.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:43.256948 0.163240 udp 10.0.2.104 54523 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:44.258885 0.000000 udp 10.0.2.104 54523 -> 65.51.126.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:45.259736 0.289590 udp 10.0.2.104 54523 <-> 190.207.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:46.261486 0.207210 udp 10.0.2.104 54523 <-> 71.95.45.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:47.263002 0.365608 udp 10.0.2.104 54523 <-> 37.63.159.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:48.254310 0.154271 udp 10.0.2.104 54523 <-> 96.21.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:49.256045 0.000000 udp 10.0.2.104 54523 -> 174.78.104.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:49.916420 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:14:50.256723 0.000000 udp 10.0.2.104 54523 -> 177.33.11.166 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:51.258673 0.061113 udp 10.0.2.104 54523 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:52.259874 1.004666 udp 10.0.2.104 54523 <-> 95.111.10.61 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:54.264363 0.000000 udp 10.0.2.104 54523 -> 190.94.222.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:14:55.254801 0.155894 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:56.255287 0.193451 udp 10.0.2.104 54523 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:57.256868 0.347499 udp 10.0.2.104 54523 <-> 190.204.58.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:58.258501 0.143864 udp 10.0.2.104 54523 <-> 67.85.14.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:14:59.260167 0.211347 udp 10.0.2.104 54523 <-> 67.215.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:00.261303 1.106366 udp 10.0.2.104 54523 <-> 95.86.77.153 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:02.254529 0.169082 udp 10.0.2.104 54523 <-> 67.11.222.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:03.255801 0.000000 udp 10.0.2.104 54523 -> 177.107.240.186 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:15:04.256798 0.051936 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:05.258300 0.161299 udp 10.0.2.104 54523 <-> 78.236.112.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:06.260029 0.039328 udp 10.0.2.104 54523 <-> 94.73.1.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:07.261435 0.184337 udp 10.0.2.104 54523 <-> 98.201.175.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:08.262915 0.111655 udp 10.0.2.104 54523 <-> 62.211.235.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:09.254380 0.133609 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:10.256024 0.159380 udp 10.0.2.104 54523 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:11.257963 0.115979 udp 10.0.2.104 54523 <-> 79.45.216.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:12.258505 0.164440 udp 10.0.2.104 54523 <-> 24.39.237.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:13.259903 0.133856 udp 10.0.2.104 54523 <-> 75.109.236.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:14.261449 0.057902 udp 10.0.2.104 54523 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:15.262693 0.992031 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:17.255900 0.165267 udp 10.0.2.104 54523 <-> 113.193.40.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:18.257153 0.155690 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:19.258738 0.116502 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:20.260043 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:15:21.262075 0.000000 udp 10.0.2.104 54523 -> 190.77.212.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:15:22.263191 0.079825 udp 10.0.2.104 54523 <-> 78.157.66.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:23.254714 0.000000 udp 10.0.2.104 54523 -> 76.97.8.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:15:24.256052 0.529474 udp 10.0.2.104 54523 <-> 46.223.177.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:25.257289 0.425515 udp 10.0.2.104 54523 <-> 201.160.70.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:26.258473 0.085603 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:27.260441 0.194162 udp 10.0.2.104 54523 <-> 71.93.103.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:28.261893 0.359450 udp 10.0.2.104 54523 <-> 75.15.193.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:29.262902 0.147710 udp 10.0.2.104 54523 <-> 107.15.31.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:30.254565 0.000000 udp 10.0.2.104 54523 -> 69.158.184.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:15:31.256869 0.360223 udp 10.0.2.104 54523 <-> 190.176.141.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:32.257351 0.330257 udp 10.0.2.104 54523 <-> 190.204.58.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:33.258631 0.294240 udp 10.0.2.104 54523 <-> 200.109.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:34.260174 0.163201 udp 10.0.2.104 54523 <-> 24.167.187.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:35.261997 0.000000 udp 10.0.2.104 54523 -> 76.189.34.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:15:36.262964 0.169189 udp 10.0.2.104 54523 <-> 67.11.222.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:36.913376 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:15:37.254567 0.365919 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:38.256023 0.317888 udp 10.0.2.104 54523 <-> 190.208.146.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:39.257363 0.153241 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:40.264177 0.173705 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:41.264382 0.267706 udp 10.0.2.104 54523 <-> 79.2.118.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:42.264513 0.168895 udp 10.0.2.104 54523 <-> 24.203.38.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:43.264492 3.151908 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 4 1616 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:44.254566 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:15:45.256275 0.158513 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:47.259152 0.162426 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:48.260261 0.386032 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:49.262533 2.606461 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:50.265071 0.308464 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:51.254526 0.068053 udp 10.0.2.104 54523 <-> 85.84.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:52.256178 0.153771 udp 10.0.2.104 54523 <-> 68.58.91.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:53.257839 0.214199 udp 10.0.2.104 54523 <-> 90.129.90.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:54.258825 0.220521 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:55.260598 1.050247 udp 10.0.2.104 54523 <-> 178.235.175.124 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:57.263159 0.037816 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:15:58.254723 0.000000 udp 10.0.2.104 54523 -> 98.95.254.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:15:59.256448 0.000000 udp 10.0.2.104 54523 -> 186.89.103.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:00.257332 0.353423 udp 10.0.2.104 54523 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:02.261160 0.137403 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:03.261346 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:04.263766 3.042558 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:05.255024 0.302057 udp 10.0.2.104 54523 <-> 201.132.60.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:06.257261 0.000000 udp 10.0.2.104 54523 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:08.259086 0.309181 udp 10.0.2.104 54523 <-> 174.100.151.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:09.260884 0.060114 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:10.261872 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:11.263980 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:12.254549 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:13.256503 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:14.257529 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:15.259097 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:16.260452 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:17.262412 0.176083 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:18.254269 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:19.255269 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:20.256154 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:21.258310 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:22.258952 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:23.260574 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:23.921844 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:16:24.262595 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:25.253295 0.174759 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:26.255160 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:27.256359 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:28.258013 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:29.259170 0.000110 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:29.259280 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:16:31.262431 3.995943 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:32.253617 0.071255 udp 10.0.2.104 54523 <-> 91.65.196.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:33.255643 3.003665 udp 10.0.2.104 54523 -> 74.47.69.248 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:34.256411 0.067815 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:37.260842 0.164492 udp 10.0.2.104 54523 <-> 151.74.154.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:38.262695 1.132398 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:40.254971 0.000000 udp 10.0.2.104 54523 -> 74.47.69.248 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:41.256597 0.115752 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:42.258530 0.000000 udp 10.0.2.104 54523 -> 190.208.110.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:43.260397 0.000000 udp 10.0.2.104 54523 -> 46.65.93.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:44.264500 0.307266 udp 10.0.2.104 54523 <-> 78.94.228.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:45.263934 0.167168 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:46.254175 0.000000 udp 10.0.2.104 54523 -> 177.106.90.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:47.255121 0.170122 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:48.256996 0.366461 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:49.258512 0.140286 udp 10.0.2.104 54523 <-> 24.191.107.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:50.259633 0.235757 udp 10.0.2.104 54523 <-> 76.178.38.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:51.260964 1.454356 udp 10.0.2.104 54523 <-> 93.105.145.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:52.262612 4.030222 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:53.253618 2.104880 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:54.255332 0.000000 udp 10.0.2.104 54523 -> 184.34.15.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:16:57.259626 1.418794 udp 10.0.2.104 54523 <-> 190.160.244.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:16:59.261945 0.208922 udp 10.0.2.104 54523 <-> 98.234.99.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:17:00.254308 0.000000 udp 10.0.2.104 54523 -> 190.174.132.198 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:01.255410 2.079029 udp 10.0.2.104 54523 <-> 189.78.6.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:17:02.256866 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:03.258445 0.000000 udp 10.0.2.104 54523 -> 87.97.146.161 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:04.259359 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:05.260919 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:06.262580 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:07.254091 4.005589 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:08.255303 0.038646 udp 10.0.2.104 54523 <-> 46.40.104.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:17:09.256727 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:10.258779 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:10.919137 0.000136 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:17:12.261216 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:13.262640 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:14.257083 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:16.258016 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:17.258350 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:18.259645 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:19.261217 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:20.262899 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:21.258214 0.000043 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:21.258257 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:17:22.258020 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:23.258121 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:24.258360 0.000000 udp 10.0.2.104 54523 -> 186.89.3.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:25.259911 0.000000 udp 10.0.2.104 54523 -> 190.38.80.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:26.261043 0.161186 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:17:27.262538 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:28.254574 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:29.256440 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:30.257228 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:31.258555 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:32.259723 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:33.265748 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:34.265167 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:35.254369 0.000149 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:35.254518 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:17:36.255764 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:37.256988 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:38.258373 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:40.261214 0.204205 udp 10.0.2.104 54523 <-> 186.89.3.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:17:41.262698 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:42.254234 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:43.255750 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:44.257043 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:45.258580 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:46.260579 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:47.261386 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:48.262998 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:50.256045 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:51.257161 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:52.258644 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:53.260041 0.000077 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:53.260118 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:17:54.261924 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:55.262909 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:56.254297 0.319412 udp 10.0.2.104 54523 <-> 201.246.136.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:17:57.255917 0.038562 udp 10.0.2.104 54523 <-> 46.40.104.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:17:58.257297 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:17:58.918001 0.000141 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:17:59.258553 0.288342 udp 10.0.2.104 54523 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:00.260374 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:01.261196 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:02.263193 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:03.254526 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:04.255732 0.000125 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:04.255857 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:18:05.256987 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:06.258852 2.002753 udp 10.0.2.104 54523 -> 87.97.146.161 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:07.260571 0.038363 udp 10.0.2.104 54523 <-> 46.40.104.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:09.263192 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:10.254166 2.272175 udp 10.0.2.104 54523 <-> 124.121.94.58 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:11.255476 0.068990 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:13.259498 3.045856 udp 10.0.2.104 54523 <-> 37.143.247.88 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:14.260438 1.159949 udp 10.0.2.104 54523 <-> 173.32.226.107 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:17.254523 0.000000 udp 10.0.2.104 54523 -> 190.55.44.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:18.256068 0.206142 udp 10.0.2.104 54523 <-> 75.70.148.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:19.257425 0.303746 udp 10.0.2.104 54523 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:20.258756 0.347702 udp 10.0.2.104 54523 <-> 114.43.0.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:21.260786 0.116157 udp 10.0.2.104 54523 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:22.262531 0.000000 udp 10.0.2.104 54523 -> 47.16.247.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:23.264417 0.090539 udp 10.0.2.104 54523 <-> 89.77.192.242 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:24.254549 0.000000 udp 10.0.2.104 54523 -> 195.0.170.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:25.256192 0.061454 udp 10.0.2.104 54523 <-> 80.238.126.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:26.262982 0.176175 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:27.264211 0.165955 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:28.264785 0.255480 udp 10.0.2.104 54523 <-> 186.93.155.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:29.264679 0.000000 udp 10.0.2.104 54523 -> 114.134.251.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:30.264408 0.000000 udp 10.0.2.104 54523 -> 217.201.199.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:31.254879 0.000000 udp 10.0.2.104 54523 -> 199.127.132.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:32.256079 0.000000 udp 10.0.2.104 54523 -> 94.21.162.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:33.257500 0.131971 udp 10.0.2.104 54523 <-> 24.224.154.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:34.259120 0.089021 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:35.260549 0.000000 udp 10.0.2.104 54523 -> 81.60.188.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:36.262171 0.184300 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:37.263111 0.000000 udp 10.0.2.104 54523 -> 75.197.131.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:38.254532 0.309408 udp 10.0.2.104 54523 <-> 186.93.155.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:39.256438 0.312526 udp 10.0.2.104 54523 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:40.258405 1.282245 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:41.259055 0.000000 udp 10.0.2.104 54523 -> 173.16.203.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:42.260930 0.170132 udp 10.0.2.104 54523 <-> 79.52.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:43.262307 0.150730 udp 10.0.2.104 54523 <-> 174.107.129.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:44.263277 0.303720 udp 10.0.2.104 54523 <-> 181.75.135.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:45.254873 0.287926 udp 10.0.2.104 54523 <-> 190.97.30.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:45.916287 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:18:46.256466 1.014519 udp 10.0.2.104 54523 <-> 74.77.25.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:47.258065 0.405419 udp 10.0.2.104 54523 <-> 187.109.249.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:48.260123 4.098483 udp 10.0.2.104 54523 <-> 82.228.47.194 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:49.261396 0.043103 udp 10.0.2.104 54523 <-> 89.216.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:51.253236 0.000000 udp 10.0.2.104 54523 -> 62.18.155.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:18:53.257046 0.028735 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:54.258650 0.068746 udp 10.0.2.104 54523 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:55.259493 0.140430 udp 10.0.2.104 54523 <-> 76.116.162.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:56.260502 0.280127 udp 10.0.2.104 54523 <-> 182.189.84.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:57.262380 0.139341 udp 10.0.2.104 54523 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:58.253597 4.086297 udp 10.0.2.104 54523 <-> 87.120.215.67 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:18:59.255222 0.022852 udp 10.0.2.104 54523 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:00.256737 4.997296 udp 10.0.2.104 54523 <-> 174.100.151.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:01.258132 4.997188 udp 10.0.2.104 54523 <-> 79.113.236.251 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:03.261036 0.327930 udp 10.0.2.104 54523 <-> 189.94.127.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:03.943144 3.002992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:19:04.262082 0.000000 udp 10.0.2.104 54523 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:05.728858 0.000000 udp 10.0.2.104 54523 <- 174.100.151.252 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:06.311624 0.000000 udp 10.0.2.104 54523 <- 79.113.236.251 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:07.256814 0.000000 udp 10.0.2.104 54523 -> 92.86.42.111 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:08.258026 0.024320 udp 10.0.2.104 54523 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:09.259064 0.000000 udp 10.0.2.104 54523 -> 202.29.179.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:10.260872 0.000000 udp 10.0.2.104 54523 -> 71.7.230.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:10.951887 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:19:11.262163 0.000000 udp 10.0.2.104 54523 -> 204.116.209.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:12.253364 2.106823 udp 10.0.2.104 54523 <-> 188.30.24.41 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:13.255129 0.175058 udp 10.0.2.104 54523 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:15.258521 0.112552 udp 10.0.2.104 54523 <-> 92.36.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:16.260138 0.139087 udp 10.0.2.104 54523 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:17.261056 0.000000 udp 10.0.2.104 54523 -> 202.29.179.246 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:18.262299 0.000000 udp 10.0.2.104 54523 -> 189.94.127.101 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:18.952816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:19:19.253705 0.000000 udp 10.0.2.104 54523 -> 87.120.215.67 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:20.255101 0.050739 udp 10.0.2.104 54523 <-> 95.43.102.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:21.256477 0.024388 udp 10.0.2.104 54523 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:22.258137 0.000000 udp 10.0.2.104 54523 -> 188.30.24.41 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:23.259380 3.207053 udp 10.0.2.104 54523 <-> 92.86.42.111 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:24.261147 1.001081 udp 10.0.2.104 54523 <-> 174.100.151.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:27.255241 0.176584 udp 10.0.2.104 54523 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:28.259340 0.141560 udp 10.0.2.104 54523 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:29.260564 0.158397 udp 10.0.2.104 54523 -> 204.116.209.9 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:29.418961 0.000000 icmp 204.116.209.9 0x0103 -> 10.0.2.104 0xcc74 URH 192 1 86 flow=Background 1970/01/01 12:19:30.260338 0.050892 udp 10.0.2.104 54523 <-> 95.43.102.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:31.260811 0.000000 udp 10.0.2.104 54523 -> 70.65.248.65 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:32.262675 2.301414 udp 10.0.2.104 54523 <-> 110.233.68.105 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:32.913193 0.000140 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:19:33.253961 2.157019 udp 10.0.2.104 54523 <-> 190.55.25.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:34.956233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:19:35.256666 0.306536 udp 10.0.2.104 54523 <-> 189.103.8.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:36.258554 0.943949 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:37.260352 0.042190 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:38.260839 1.138088 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:40.253727 0.060144 udp 10.0.2.104 54523 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:41.255402 0.159311 udp 10.0.2.104 54523 <-> 174.107.129.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:42.256870 0.087174 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:43.258443 0.176003 udp 10.0.2.104 54523 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:44.259768 0.303970 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:45.261345 0.000000 udp 10.0.2.104 54523 -> 187.53.27.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:46.262390 1.801384 udp 10.0.2.104 54523 <-> 180.215.170.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:47.253865 0.000000 udp 10.0.2.104 54523 -> 24.59.225.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:48.255433 0.078781 udp 10.0.2.104 54523 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:49.256752 0.189138 udp 10.0.2.104 54523 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:50.258294 0.186078 udp 10.0.2.104 54523 <-> 75.65.7.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:51.259459 0.115552 udp 10.0.2.104 54523 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:52.261134 0.080029 udp 10.0.2.104 54523 <-> 85.152.226.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:53.262539 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:54.259431 0.215319 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:55.260696 0.035786 udp 10.0.2.104 54523 <-> 188.254.156.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:56.262429 0.299553 udp 10.0.2.104 54523 <-> 180.36.86.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:57.263113 0.071442 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:19:58.263444 0.000000 udp 10.0.2.104 54523 -> 179.203.215.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:19:59.264521 0.159402 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:00.264282 0.000000 udp 10.0.2.104 54523 -> 2.185.234.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:01.254526 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:02.259125 0.000000 udp 10.0.2.104 54523 -> 78.232.115.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:03.260570 0.040822 udp 10.0.2.104 54523 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:04.261120 0.342943 udp 10.0.2.104 54523 <-> 176.201.3.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:05.262046 0.071917 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:06.262729 0.103877 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:06.962401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:20:07.262745 0.760580 udp 10.0.2.104 54523 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:08.254148 0.063066 udp 10.0.2.104 54523 <-> 82.37.18.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:09.255603 0.302122 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:10.256970 0.089541 udp 10.0.2.104 54523 <-> 37.45.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:11.258688 0.078622 udp 10.0.2.104 54523 <-> 212.92.251.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:12.260161 0.346875 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:13.261164 2.184940 udp 10.0.2.104 54523 <-> 190.218.244.197 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:14.262737 0.200094 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:16.255598 0.066251 udp 10.0.2.104 54523 <-> 188.24.11.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:18.259589 0.045848 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:19.260847 0.262595 udp 10.0.2.104 54523 <-> 186.92.54.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:19.921536 0.000160 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:20:20.262215 0.000000 udp 10.0.2.104 54523 -> 179.216.199.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:21.263199 0.899167 udp 10.0.2.104 54523 <-> 186.92.70.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:22.254264 0.222093 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:23.256069 0.280198 udp 10.0.2.104 54523 <-> 116.64.192.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:24.257471 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:25.265076 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:26.265173 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:27.264528 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:28.264523 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:29.254321 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:30.255919 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:31.257238 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:32.258517 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:33.260232 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:34.262767 0.000000 udp 10.0.2.104 54523 -> 89.66.178.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:35.265158 3.161231 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:37.256603 0.144289 udp 10.0.2.104 54523 <-> 24.187.175.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:39.259047 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:40.260072 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:41.261460 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:42.263072 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:43.254541 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:44.256275 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:45.257532 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:46.258709 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:47.260317 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:48.261449 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:49.263153 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:50.254587 0.000074 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:50.254661 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:20:51.256473 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:53.258728 0.000000 udp 10.0.2.104 54523 -> 97.107.107.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:54.260314 0.125307 udp 10.0.2.104 54523 <-> 76.78.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:20:55.261492 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:56.262888 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:57.254499 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:58.256196 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:20:59.258250 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:00.258693 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:01.260350 0.279251 udp 10.0.2.104 54523 <-> 116.64.192.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:02.261832 1.086064 udp 10.0.2.104 54523 <-> 85.86.106.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:03.263075 0.255611 udp 10.0.2.104 54523 <-> 97.107.107.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:04.254666 0.065798 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:05.256047 0.000000 udp 10.0.2.104 54523 -> 89.252.221.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:06.257354 0.000000 udp 10.0.2.104 54523 -> 80.30.105.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:06.918194 0.000133 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:21:07.258937 0.435933 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:08.260468 0.144293 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:09.262247 0.107535 udp 10.0.2.104 54523 <-> 109.53.117.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:10.263358 0.821508 udp 10.0.2.104 54523 <-> 173.18.197.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:11.255147 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:12.256153 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:13.259172 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:14.259074 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:15.260309 0.213627 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:16.261743 0.261201 udp 10.0.2.104 54523 <-> 190.73.238.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:17.263017 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:18.254927 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:20.257427 0.019503 udp 10.0.2.104 54523 <-> 109.90.224.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:21.258856 1.142106 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:23.262111 0.158791 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:24.253192 0.000000 udp 10.0.2.104 54523 -> 85.219.46.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:25.254634 0.072197 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:26.256168 0.019690 udp 10.0.2.104 54523 <-> 109.90.224.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:27.258030 0.402245 udp 10.0.2.104 54523 <-> 112.118.16.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:28.259182 0.318977 udp 10.0.2.104 54523 <-> 201.46.149.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:29.261369 0.164637 udp 10.0.2.104 54523 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:30.262439 0.354091 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:31.253313 0.143648 udp 10.0.2.104 54523 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:32.255197 2.164241 udp 10.0.2.104 54523 <-> 75.115.165.81 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:33.256573 1.336651 udp 10.0.2.104 54523 <-> 190.39.39.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:35.259192 0.151871 udp 10.0.2.104 54523 <-> 174.107.129.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:36.260701 0.123156 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:37.262394 0.086352 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:38.253236 0.000000 udp 10.0.2.104 54523 -> 190.38.7.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:39.255014 0.157490 udp 10.0.2.104 54523 <-> 98.228.120.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:40.256339 0.150459 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:41.258121 0.221293 udp 10.0.2.104 54523 <-> 189.193.239.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:42.259059 0.176576 udp 10.0.2.104 54523 <-> 72.9.77.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:43.262521 0.391940 udp 10.0.2.104 54523 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:44.262744 0.000000 udp 10.0.2.104 54523 -> 218.102.238.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:45.253958 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:21:46.254804 0.010509 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:47.256596 0.161852 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:48.257831 0.055182 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:49.259613 0.331620 udp 10.0.2.104 54523 <-> 220.129.1.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:50.260949 0.535876 udp 10.0.2.104 54523 <-> 190.97.41.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:51.262193 0.224423 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:52.254165 2.465724 udp 10.0.2.104 54523 <-> 62.248.2.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:53.255043 0.310151 udp 10.0.2.104 54523 <-> 180.215.93.163 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:53.916027 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:21:54.256636 0.146061 udp 10.0.2.104 54523 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:55.258361 0.709713 udp 10.0.2.104 54523 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:56.259312 0.365358 udp 10.0.2.104 54523 <-> 200.84.79.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:57.261898 1.055515 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:21:59.253091 0.311543 udp 10.0.2.104 54523 <-> 189.39.131.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:00.255396 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:01.256395 0.167391 udp 10.0.2.104 54523 <-> 91.89.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:02.258467 0.000000 udp 10.0.2.104 54523 -> 37.150.85.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:03.259253 0.082388 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:04.261415 0.163955 udp 10.0.2.104 54523 <-> 97.84.210.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:05.262969 0.159684 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:06.254214 0.000000 udp 10.0.2.104 54523 -> 90.148.205.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:07.255049 0.205560 udp 10.0.2.104 54523 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:08.256754 0.241882 udp 10.0.2.104 54523 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:09.258375 0.182406 udp 10.0.2.104 54523 <-> 216.186.239.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:10.258851 2.297161 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:11.261062 0.000000 udp 10.0.2.104 54523 -> 75.120.192.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:13.253737 0.070106 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:14.255596 0.150459 udp 10.0.2.104 54523 <-> 24.89.222.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:15.256641 3.093236 udp 10.0.2.104 54523 <-> 84.225.93.99 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:16.258449 0.000000 udp 10.0.2.104 54523 -> 186.10.104.161 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:17.259789 0.147801 udp 10.0.2.104 54523 <-> 69.142.3.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:19.262844 0.017650 udp 10.0.2.104 54523 <-> 95.168.48.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:20.254070 0.310325 udp 10.0.2.104 54523 <-> 114.176.173.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:21.255297 0.163736 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:22.256646 0.180203 udp 10.0.2.104 54523 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:23.258113 0.047219 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:24.259471 0.000000 udp 10.0.2.104 54523 -> 109.105.207.217 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:25.261075 0.347712 udp 10.0.2.104 54523 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:26.262261 0.128466 udp 10.0.2.104 54523 <-> 24.156.248.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:27.254224 0.163311 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:28.255579 0.152164 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:29.256899 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:30.258515 3.110543 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:31.259837 0.167813 udp 10.0.2.104 54523 <-> 71.63.13.85 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:32.260958 0.146265 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:34.253896 0.000000 udp 10.0.2.104 54523 -> 91.72.117.48 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:35.255517 0.175902 udp 10.0.2.104 54523 <-> 142.162.176.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:36.256700 0.182446 udp 10.0.2.104 54523 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:37.258452 0.000000 udp 10.0.2.104 54523 -> 98.192.133.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:38.259796 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:39.261595 0.147409 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:40.262531 0.160444 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:40.913446 0.000121 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:22:41.254509 2.147437 udp 10.0.2.104 54523 <-> 71.197.28.72 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:42.255367 1.080418 udp 10.0.2.104 54523 <-> 72.242.83.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:43.525186 0.000000 udp 10.0.2.104 54523 <- 186.10.104.161 16464 RSP 0 0 1 750 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:44.258516 3.004550 udp 10.0.2.104 54523 -> 79.129.35.140 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:45.260340 0.052962 udp 10.0.2.104 54523 <-> 91.134.72.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:46.261233 0.169740 udp 10.0.2.104 54523 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:48.254113 0.144657 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:49.255624 0.208702 udp 10.0.2.104 54523 <-> 91.72.117.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:50.257076 3.142463 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:52.260231 0.494024 udp 10.0.2.104 54523 <-> 114.47.90.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:54.263370 0.000000 udp 10.0.2.104 54523 -> 89.77.192.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:54.972322 0.000000 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:55.254240 0.375769 udp 10.0.2.104 54523 <-> 190.77.199.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:56.255540 0.000000 udp 10.0.2.104 54523 -> 85.218.25.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:22:57.257305 0.159654 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:58.259250 0.321523 udp 10.0.2.104 54523 <-> 101.128.248.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:22:59.262750 0.035231 udp 10.0.2.104 54523 <-> 213.161.6.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:00.263423 0.162254 udp 10.0.2.104 54523 <-> 71.90.72.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:01.264399 0.837240 udp 10.0.2.104 54523 <-> 172.243.139.12 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:02.254342 2.506361 udp 10.0.2.104 54523 <-> 75.97.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:03.256048 0.285686 udp 10.0.2.104 54523 <-> 201.209.126.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:04.257130 0.000000 udp 10.0.2.104 54523 -> 2.185.234.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:05.258562 0.314180 udp 10.0.2.104 54523 <-> 187.35.109.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:06.260430 0.223849 udp 10.0.2.104 54523 <-> 98.158.113.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:07.261468 0.141845 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:08.262949 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:09.253643 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:10.256043 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:11.257282 0.090045 udp 10.0.2.104 54523 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:12.258501 0.202745 udp 10.0.2.104 54523 <-> 91.72.117.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:13.260338 0.000000 udp 10.0.2.104 54523 -> 190.118.31.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:14.261377 1.128007 udp 10.0.2.104 54523 <-> 69.77.158.137 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:16.255652 0.640349 udp 10.0.2.104 54523 <-> 60.234.54.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:17.256212 0.164849 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:18.257852 0.042247 udp 10.0.2.104 54523 <-> 94.73.1.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:19.258757 0.048389 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:20.260321 0.443990 udp 10.0.2.104 54523 <-> 124.179.81.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:21.261663 0.155943 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:22.263193 0.156675 udp 10.0.2.104 54523 <-> 98.228.120.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:23.254768 1.076674 udp 10.0.2.104 54523 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:24.256569 0.179845 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:25.258029 4.004836 udp 10.0.2.104 54523 -> 31.166.157.48 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:26.258700 0.151955 udp 10.0.2.104 54523 <-> 68.43.186.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:27.260240 0.125291 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:27.921088 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:23:28.261750 1.754433 udp 10.0.2.104 54523 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:30.254367 0.264788 udp 10.0.2.104 54523 <-> 186.92.209.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:31.256224 0.163100 udp 10.0.2.104 54523 <-> 98.219.90.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:32.257404 0.081127 udp 10.0.2.104 54523 <-> 86.127.43.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:33.258933 0.129718 udp 10.0.2.104 54523 <-> 91.105.64.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:34.260896 0.336264 udp 10.0.2.104 54523 <-> 118.166.237.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:35.261809 0.146280 udp 10.0.2.104 54523 <-> 69.119.31.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:36.263068 0.160814 udp 10.0.2.104 54523 <-> 24.252.126.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:37.254517 0.015192 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:38.256070 0.000000 udp 10.0.2.104 54523 -> 46.240.38.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:39.257936 2.291677 udp 10.0.2.104 54523 <-> 42.125.56.220 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:40.258926 1.345515 udp 10.0.2.104 54523 <-> 201.74.127.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:42.262070 0.063948 udp 10.0.2.104 54523 <-> 95.113.51.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:43.263428 0.212903 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:44.254630 0.146182 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:45.256254 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:46.257267 0.381858 udp 10.0.2.104 54523 <-> 181.72.237.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:47.258822 1.523873 udp 10.0.2.104 54523 <-> 190.79.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:48.260934 0.208726 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:49.262458 0.043798 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:50.263292 0.222740 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:51.254894 0.155843 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:52.256817 0.138614 udp 10.0.2.104 54523 <-> 98.26.209.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:53.258095 0.166692 udp 10.0.2.104 54523 <-> 123.237.147.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:54.258841 2.065777 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:55.260508 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:57.253946 0.000000 udp 10.0.2.104 54523 -> 130.204.23.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:23:58.254951 0.138152 udp 10.0.2.104 54523 <-> 50.166.157.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:23:59.256519 0.398785 udp 10.0.2.104 54523 <-> 200.84.136.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:00.257884 0.354106 udp 10.0.2.104 54523 <-> 111.242.143.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:01.259135 0.000000 udp 10.0.2.104 54523 -> 37.236.162.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:02.260616 1.320551 udp 10.0.2.104 54523 <-> 181.237.244.77 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:04.253733 0.000000 udp 10.0.2.104 54523 -> 89.134.105.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:05.255003 0.799286 udp 10.0.2.104 54523 <-> 190.190.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:06.262793 0.180923 udp 10.0.2.104 54523 <-> 68.43.186.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:07.264122 0.055178 udp 10.0.2.104 54523 <-> 176.73.6.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:08.264292 0.286472 udp 10.0.2.104 54523 <-> 190.190.227.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:09.264270 1.136292 udp 10.0.2.104 54523 <-> 64.131.160.146 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:11.254364 0.394367 udp 10.0.2.104 54523 <-> 187.102.85.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:12.255036 0.000000 udp 10.0.2.104 54523 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:13.257046 0.000000 udp 10.0.2.104 54523 -> 79.118.9.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:14.258082 0.315992 udp 10.0.2.104 54523 <-> 113.39.129.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:14.918244 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:24:15.258990 0.155717 udp 10.0.2.104 54523 <-> 24.154.41.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:16.260769 0.654993 udp 10.0.2.104 54523 <-> 24.246.239.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:17.262036 0.000000 udp 10.0.2.104 54523 -> 68.69.150.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:18.253993 0.081125 udp 10.0.2.104 54523 <-> 79.113.119.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:19.255034 0.000000 udp 10.0.2.104 54523 -> 206.201.155.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:20.256374 0.239080 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:21.258019 0.000000 udp 10.0.2.104 54523 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:22.259299 0.169656 udp 10.0.2.104 54523 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:23.261109 0.000000 udp 10.0.2.104 54523 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:24.262858 0.410779 udp 10.0.2.104 54523 <-> 220.53.176.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:25.253917 3.004243 udp 10.0.2.104 54523 -> 187.101.10.247 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:26.255134 0.166603 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:27.256660 0.089234 udp 10.0.2.104 54523 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:29.259333 0.053609 udp 10.0.2.104 54523 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:30.261089 0.255800 udp 10.0.2.104 54523 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:31.262296 0.000000 udp 10.0.2.104 54523 -> 180.218.121.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:32.253498 0.144596 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:33.255272 0.033044 udp 10.0.2.104 54523 <-> 46.33.10.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:34.256552 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:34.256660 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:24:35.258106 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:37.260960 0.138600 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:38.262408 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:39.253861 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:40.255092 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:41.256676 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:42.258023 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:43.259403 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:44.261235 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:45.262667 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:46.253493 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:47.255367 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:48.256803 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:49.258349 0.000000 udp 10.0.2.104 54523 -> 74.68.63.5 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:50.259665 0.164020 udp 10.0.2.104 54523 <-> 173.23.87.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:24:51.261032 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:52.262812 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:53.254177 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:54.255271 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:55.256922 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:56.257960 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:57.259637 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:58.261110 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:24:58.971741 0.022516 udp 10.0.2.104 54615 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 12:24:58.994543 0.000000 udp 10.0.2.104 54616 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:00.253812 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:01.255450 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:01.916462 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:25:02.256582 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:03.258583 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:03.258647 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:25:04.259567 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:05.261368 0.172952 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:06.262670 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:07.254133 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:08.259855 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:09.260591 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:10.261132 0.000000 udp 10.0.2.104 54523 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:11.262513 0.137388 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:12.262532 0.290625 udp 10.0.2.104 54523 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:13.263114 0.000000 udp 10.0.2.104 54523 -> 201.68.62.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:14.254321 0.155688 udp 10.0.2.104 54523 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:15.255641 0.161524 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:16.256762 0.162103 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:17.258404 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:18.260029 0.272955 udp 10.0.2.104 54523 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:19.261213 0.000097 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:19.261310 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:25:20.262905 1.420193 udp 10.0.2.104 54523 <-> 46.35.110.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:21.254084 0.095877 udp 10.0.2.104 54523 <-> 176.201.3.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:22.255584 2.044057 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:23.257016 0.000000 udp 10.0.2.104 54523 -> 178.59.162.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:25.259926 0.000000 udp 10.0.2.104 54523 -> 92.40.157.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:26.261193 0.111163 udp 10.0.2.104 54523 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:27.262854 2.759143 udp 10.0.2.104 54523 <-> 46.35.110.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:28.254551 0.043810 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:29.256010 0.239464 udp 10.0.2.104 54523 <-> 186.92.178.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:30.256998 0.372885 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:31.258703 0.000000 udp 10.0.2.104 54523 -> 190.172.75.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:32.259312 0.231825 udp 10.0.2.104 54523 <-> 108.185.229.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:33.261680 0.036657 udp 10.0.2.104 54523 <-> 130.43.184.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:34.262900 0.000000 udp 10.0.2.104 54523 -> 173.25.141.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:35.254123 0.000000 udp 10.0.2.104 54523 -> 70.55.100.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:36.255892 4.321070 udp 10.0.2.104 54523 <-> 218.152.217.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:37.264351 1.995402 udp 10.0.2.104 54523 <-> 24.134.185.41 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:38.261974 0.136188 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:41.265264 0.252513 udp 10.0.2.104 54523 <-> 68.1.94.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:42.258632 0.035170 udp 10.0.2.104 54523 <-> 130.43.184.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:43.260416 0.353806 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:44.261078 0.000000 udp 10.0.2.104 54523 -> 92.229.38.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:45.260762 0.207982 udp 10.0.2.104 54523 <-> 70.79.30.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:46.261214 0.000000 udp 10.0.2.104 54523 -> 41.103.35.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:47.261523 0.000000 udp 10.0.2.104 54523 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:48.262805 3.995809 udp 10.0.2.104 54523 -> 189.188.126.105 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:48.913142 0.000116 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:25:49.254553 0.095520 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:50.256079 3.004132 udp 10.0.2.104 54523 -> 2.206.23.88 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:51.257950 4.026464 udp 10.0.2.104 54523 <-> 176.199.23.172 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:54.261610 0.000000 udp 10.0.2.104 54523 -> 79.0.94.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:56.254611 0.000000 udp 10.0.2.104 54523 -> 66.11.41.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:25:57.256242 0.614493 udp 10.0.2.104 54523 <-> 50.160.106.116 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:58.257214 0.093391 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:25:59.259192 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:00.260721 0.157636 udp 10.0.2.104 54523 <-> 174.69.148.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:01.262226 0.199292 udp 10.0.2.104 54523 <-> 67.177.197.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:02.262998 0.252635 udp 10.0.2.104 54523 <-> 76.88.165.238 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:03.254514 0.179143 udp 10.0.2.104 54523 <-> 68.184.203.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:04.256272 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:05.257792 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:06.258858 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:07.181143 0.000000 udp 10.0.2.104 54523 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:07.260552 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:08.262039 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:09.263276 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:09.263387 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:26:10.968552 3.000933 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:26:11.256277 0.386092 udp 10.0.2.104 54523 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:12.257700 0.022502 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:13.258973 0.053756 udp 10.0.2.104 54523 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:14.260544 0.035173 udp 10.0.2.104 54523 <-> 88.153.141.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:15.262043 0.084637 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:16.263263 0.199997 udp 10.0.2.104 54523 <-> 69.5.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:17.254697 0.150562 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:17.975725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:26:18.256462 0.031133 udp 10.0.2.104 54523 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:19.258415 0.146253 udp 10.0.2.104 54523 <-> 24.208.178.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:20.259633 1.161059 udp 10.0.2.104 54523 <-> 68.54.122.123 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:22.262234 0.201521 udp 10.0.2.104 54523 <-> 66.72.190.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:23.263173 0.180428 udp 10.0.2.104 54523 <-> 207.34.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:24.255137 0.231019 udp 10.0.2.104 54523 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:25.256625 0.027036 udp 10.0.2.104 54523 <-> 91.89.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:25.977169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:26:26.258069 0.293726 udp 10.0.2.104 54523 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:27.259467 0.198526 udp 10.0.2.104 54523 <-> 186.85.219.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:28.260490 0.000000 udp 10.0.2.104 54523 -> 186.124.166.145 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:29.261921 0.000000 udp 10.0.2.104 54523 -> 70.82.157.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:30.253256 0.000000 udp 10.0.2.104 54523 -> 114.25.138.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:31.254790 2.094374 udp 10.0.2.104 54523 <-> 92.229.38.115 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:32.256517 0.037527 udp 10.0.2.104 54523 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:34.260104 0.201337 udp 10.0.2.104 54523 <-> 91.72.117.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:35.261009 0.000000 udp 10.0.2.104 54523 -> 114.25.138.159 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:35.921435 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:26:36.262425 2.613208 udp 10.0.2.104 54523 <-> 186.11.17.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:37.253545 0.138137 udp 10.0.2.104 54523 <-> 24.186.3.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:38.254836 0.344074 udp 10.0.2.104 54523 <-> 186.59.143.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:39.256150 0.181754 udp 10.0.2.104 54523 <-> 68.8.184.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:40.257821 0.000000 udp 10.0.2.104 54523 -> 50.80.122.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:41.259023 0.074593 udp 10.0.2.104 54523 <-> 85.85.12.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:41.980226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:26:42.260971 0.137374 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:43.262094 0.114292 udp 10.0.2.104 54523 <-> 79.52.138.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:44.253419 0.088907 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:45.255327 0.073123 udp 10.0.2.104 54523 <-> 79.117.163.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:46.257840 0.134311 udp 10.0.2.104 54523 <-> 64.131.160.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:47.258299 0.000000 udp 10.0.2.104 54523 -> 24.193.20.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:48.259788 0.209112 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:49.260924 0.035696 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:50.261826 4.417160 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:51.253516 0.000000 udp 10.0.2.104 54523 -> 192.168.0.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:52.254752 0.000000 udp 10.0.2.104 54523 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:26:53.256274 0.323591 udp 10.0.2.104 54523 <-> 186.93.155.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:55.264272 0.291103 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:56.263940 0.117410 udp 10.0.2.104 54523 <-> 72.200.174.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:57.264493 0.217799 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:58.254570 0.043613 udp 10.0.2.104 54523 <-> 80.200.192.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:26:59.254747 0.000000 udp 10.0.2.104 54523 -> 190.203.207.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:00.256717 1.215219 udp 10.0.2.104 54523 <-> 76.178.38.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:02.260005 1.151630 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:04.264449 0.301733 udp 10.0.2.104 54523 <-> 187.11.102.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:05.254565 0.275176 udp 10.0.2.104 54523 <-> 68.1.94.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:06.254761 0.142841 udp 10.0.2.104 54523 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:07.256368 0.353459 udp 10.0.2.104 54523 <-> 114.47.90.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:08.258257 0.040904 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:09.259662 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:10.261184 0.000000 udp 10.0.2.104 54523 -> 46.223.177.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:11.265320 0.076371 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:12.254398 0.055389 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:13.255067 0.465951 udp 10.0.2.104 54523 <-> 68.1.94.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:13.986295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:27:14.256571 0.958389 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:15.258037 0.056845 udp 10.0.2.104 54523 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:16.259168 0.318443 udp 10.0.2.104 54523 <-> 186.222.191.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:17.260896 0.191626 udp 10.0.2.104 54523 <-> 64.148.59.31 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:18.262589 0.159757 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:19.254364 3.090049 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:20.255115 0.141926 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:21.256585 0.773060 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:22.918878 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:27:23.259654 0.000000 udp 10.0.2.104 54523 -> 85.85.49.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:24.260840 0.158023 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:25.262775 0.000000 udp 10.0.2.104 54523 -> 14.96.187.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:26.254027 0.000000 udp 10.0.2.104 54523 -> 193.68.211.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:27.255111 0.000000 udp 10.0.2.104 54523 -> 200.126.150.83 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:28.256574 0.155518 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:29.258209 0.086224 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:30.259654 0.074800 udp 10.0.2.104 54523 <-> 92.32.95.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:31.261116 2.358675 udp 10.0.2.104 54523 <-> 75.97.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:32.262355 0.285756 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:33.254529 0.680627 udp 10.0.2.104 54523 <-> 190.198.144.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:34.255702 0.411216 udp 10.0.2.104 54523 <-> 186.36.246.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:35.256905 0.163056 udp 10.0.2.104 54523 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:36.258370 0.000000 udp 10.0.2.104 54523 -> 206.172.20.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:37.259816 0.440243 udp 10.0.2.104 54523 <-> 111.58.186.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:38.260903 0.430023 udp 10.0.2.104 54523 <-> 186.130.67.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:39.262878 0.146312 udp 10.0.2.104 54523 <-> 82.61.165.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:40.254348 0.000000 udp 10.0.2.104 54523 -> 87.198.109.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:41.255487 0.000000 udp 10.0.2.104 54523 -> 5.34.141.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:42.256850 0.000000 udp 10.0.2.104 54523 -> 201.213.98.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:43.258238 0.341173 udp 10.0.2.104 54523 <-> 1.175.43.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:44.259879 0.000000 udp 10.0.2.104 54523 -> 188.36.137.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:45.261294 0.387861 udp 10.0.2.104 54523 <-> 125.1.93.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:46.262934 0.165055 udp 10.0.2.104 54523 <-> 98.243.26.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:47.254187 0.000000 udp 10.0.2.104 54523 -> 213.217.45.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:27:48.255861 0.134511 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:49.257424 0.078294 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:50.258166 0.160787 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:51.259924 0.809577 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:52.261327 0.065244 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:53.262960 0.169871 udp 10.0.2.104 54523 <-> 106.51.61.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:54.254386 0.178674 udp 10.0.2.104 54523 <-> 76.26.172.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:55.255881 0.527350 udp 10.0.2.104 54523 <-> 31.185.115.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:56.256978 0.295007 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:57.258332 0.319515 udp 10.0.2.104 54523 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:58.260085 0.213236 udp 10.0.2.104 54523 <-> 187.247.181.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:27:59.261289 0.067344 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:00.262379 0.000000 udp 10.0.2.104 54523 -> 190.79.250.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:01.254567 0.294236 udp 10.0.2.104 54523 <-> 189.120.4.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:02.256106 0.208153 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:03.257129 0.094760 udp 10.0.2.104 54523 <-> 2.192.240.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:04.258642 0.000000 udp 10.0.2.104 54523 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:05.264184 0.139577 udp 10.0.2.104 54523 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:06.264399 3.252950 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:07.264371 0.210746 udp 10.0.2.104 54523 <-> 187.247.181.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:08.254482 0.224562 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:09.916889 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:28:10.257412 0.151417 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:11.258541 0.000000 udp 10.0.2.104 54523 -> 79.148.108.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:12.259965 0.038759 udp 10.0.2.104 54523 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:13.262341 0.209277 udp 10.0.2.104 54523 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:14.262654 0.154881 udp 10.0.2.104 54523 <-> 67.253.48.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:15.254524 0.299421 udp 10.0.2.104 54523 <-> 220.216.24.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:16.255684 0.148279 udp 10.0.2.104 54523 <-> 67.80.121.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:17.257121 0.140843 udp 10.0.2.104 54523 <-> 69.119.31.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:18.258644 0.355844 udp 10.0.2.104 54523 <-> 187.75.19.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:19.259832 0.336924 udp 10.0.2.104 54523 <-> 181.26.51.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:20.261228 0.348770 udp 10.0.2.104 54523 <-> 114.46.235.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:21.263150 0.116874 udp 10.0.2.104 54523 <-> 24.122.208.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:22.254560 0.334250 udp 10.0.2.104 54523 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:23.256015 0.000000 udp 10.0.2.104 54523 -> 137.118.186.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:24.257207 0.000000 udp 10.0.2.104 54523 -> 186.49.52.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:25.258660 0.147411 udp 10.0.2.104 54523 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:26.260248 0.167868 udp 10.0.2.104 54523 <-> 98.224.153.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:27.261758 0.138181 udp 10.0.2.104 54523 <-> 67.86.193.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:28.263231 0.054394 udp 10.0.2.104 54523 <-> 91.219.80.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:29.254547 0.339607 udp 10.0.2.104 54523 <-> 114.36.128.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:30.255840 0.183341 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:31.257127 0.285763 udp 10.0.2.104 54523 <-> 118.237.85.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:32.258869 0.049038 udp 10.0.2.104 54523 <-> 213.245.163.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:33.260480 1.484275 udp 10.0.2.104 54523 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:34.265071 0.000000 udp 10.0.2.104 54523 -> 97.116.145.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:35.265162 0.151003 udp 10.0.2.104 54523 <-> 50.158.78.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:36.254525 1.048212 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:37.256859 0.142757 udp 10.0.2.104 54523 <-> 67.82.5.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:38.258018 0.064591 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:39.258639 0.062366 udp 10.0.2.104 54523 <-> 37.146.132.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:40.260290 0.151312 udp 10.0.2.104 54523 <-> 174.110.129.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:41.261870 0.168731 udp 10.0.2.104 54523 <-> 106.51.115.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:42.263118 0.262646 udp 10.0.2.104 54523 <-> 74.127.151.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:43.254527 1.052959 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:45.257372 0.069996 udp 10.0.2.104 54523 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:46.258610 0.820566 udp 10.0.2.104 54523 <-> 179.210.224.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:47.260709 0.000000 udp 10.0.2.104 54523 -> 126.123.91.123 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:48.262643 0.227831 udp 10.0.2.104 54523 <-> 186.90.235.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:49.264713 0.136120 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:28:50.254390 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:51.256221 0.000047 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:51.256268 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:28:52.258147 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:53.259136 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:54.260915 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:55.262627 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:56.263212 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:56.914166 0.000118 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:28:57.254526 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:58.255942 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:28:59.263321 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:00.264237 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:01.264286 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:02.264743 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:03.254515 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:04.254759 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:05.256474 0.146202 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:06.257732 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:07.259001 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:08.260430 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:09.262853 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:10.253873 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:11.254079 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:12.256636 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:13.258158 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:14.259162 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:15.260752 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:16.262134 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:17.258112 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:18.257225 0.000094 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:18.257319 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:29:19.257678 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:21.269511 1.194822 udp 10.0.2.104 54523 <-> 72.174.46.16 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:23.265764 0.173105 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:24.253890 0.204292 udp 10.0.2.104 54523 <-> 79.53.104.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:25.255095 0.235324 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:26.256327 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:27.257995 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:28.259171 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:29.260879 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:30.262266 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:31.254034 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:32.255332 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:33.256318 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:34.258160 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:35.259230 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:35.259323 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:29:36.261091 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:37.262265 0.000000 udp 10.0.2.104 54523 -> 38.104.172.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:38.253426 0.117271 udp 10.0.2.104 54523 <-> 72.200.174.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:39.254945 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:40.256452 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:41.257929 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:42.259138 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:43.260822 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:43.921809 0.000137 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:29:44.262749 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:45.254372 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:46.255281 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:47.256940 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:48.257676 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:49.259595 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:51.262618 0.000096 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:51.262714 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:29:52.253742 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:53.255561 0.346028 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:54.256785 0.900509 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:55.258583 0.226933 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:56.259629 0.146127 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:57.260917 4.392604 udp 10.0.2.104 54523 <-> 186.93.186.40 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:29:58.262720 0.000000 udp 10.0.2.104 54523 -> 23.226.168.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:29:59.254560 0.153418 udp 10.0.2.104 54523 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:00.255075 0.223635 udp 10.0.2.104 54523 <-> 186.90.235.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:02.258542 0.000000 udp 10.0.2.104 54523 -> 190.55.44.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:03.259393 0.000000 udp 10.0.2.104 54523 -> 187.13.223.190 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:04.261055 0.137050 udp 10.0.2.104 54523 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:05.262326 0.000000 udp 10.0.2.104 54523 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:06.253804 0.081067 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:07.255311 0.168157 udp 10.0.2.104 54523 <-> 173.174.185.34 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:08.256748 0.000000 udp 10.0.2.104 54523 -> 195.80.135.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:09.258691 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:10.259497 0.000000 udp 10.0.2.104 54523 -> 81.226.243.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:11.260996 0.000000 udp 10.0.2.104 54523 -> 69.1.2.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:12.262585 0.000000 udp 10.0.2.104 54523 -> 85.179.124.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:13.254215 0.161220 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:14.255822 0.138955 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:15.257266 0.450919 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:16.258160 0.338272 udp 10.0.2.104 54523 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:17.260112 0.147576 udp 10.0.2.104 54523 <-> 50.147.192.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:18.261372 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:19.262780 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:20.254518 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:21.255428 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:23.258431 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:23.258511 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:30:24.260059 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:25.261433 3.134692 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:26.262806 0.000000 udp 10.0.2.104 54523 -> 66.25.88.248 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:27.254056 0.311602 udp 10.0.2.104 54523 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:29.256896 0.146109 udp 10.0.2.104 54523 <-> 50.147.192.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:30.258144 2.053026 udp 10.0.2.104 54523 <-> 79.117.59.57 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:30.919250 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:30:31.259996 0.187653 udp 10.0.2.104 54523 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:33.269408 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:34.260505 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:35.264201 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:36.262291 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:37.260659 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:38.259363 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:39.261301 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:40.262827 0.328974 udp 10.0.2.104 54523 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:41.254562 0.324065 udp 10.0.2.104 54523 <-> 201.186.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:42.256378 0.062381 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:43.256928 0.125022 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:44.258769 0.000000 udp 10.0.2.104 54523 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:45.259868 0.123487 udp 10.0.2.104 54523 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:46.261314 4.997309 udp 10.0.2.104 54523 <-> 79.50.212.236 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:47.263070 0.000000 udp 10.0.2.104 54523 -> 63.131.13.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:48.254208 0.000000 udp 10.0.2.104 54523 -> 62.83.219.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:50.257225 0.065498 udp 10.0.2.104 54523 <-> 84.126.54.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:51.369886 0.000000 udp 10.0.2.104 54523 <- 79.50.212.236 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:52.259449 0.734319 udp 10.0.2.104 54523 <-> 78.94.228.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:53.261373 1.415482 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:54.263098 0.146334 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:55.254293 3.004313 udp 10.0.2.104 54523 -> 63.131.13.18 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:56.255951 0.000000 udp 10.0.2.104 54523 -> 200.109.142.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:30:57.257255 0.161587 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:30:59.259964 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:00.261497 0.351212 udp 10.0.2.104 54523 <-> 61.224.234.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:01.263156 0.000000 udp 10.0.2.104 54523 -> 187.57.16.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:02.254512 0.000000 udp 10.0.2.104 54523 -> 63.131.13.18 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:03.256252 0.288348 udp 10.0.2.104 54523 <-> 78.94.228.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:04.257123 0.281407 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:05.258867 0.159522 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:06.260360 0.136261 udp 10.0.2.104 54523 <-> 24.146.182.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:07.261872 0.060237 udp 10.0.2.104 54523 <-> 178.148.123.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:08.262856 0.372027 udp 10.0.2.104 54523 <-> 111.249.148.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:09.254521 0.170385 udp 10.0.2.104 54523 <-> 68.51.133.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:10.256097 0.146690 udp 10.0.2.104 54523 <-> 24.164.171.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:11.257289 0.000000 udp 10.0.2.104 54523 -> 76.78.208.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:12.258776 0.240322 udp 10.0.2.104 54523 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:13.260864 0.000000 udp 10.0.2.104 54523 -> 98.30.47.92 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:14.261998 0.031245 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:15.263150 1.035771 udp 10.0.2.104 54523 <-> 31.11.172.199 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:17.255885 0.156836 udp 10.0.2.104 54523 <-> 70.183.51.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:17.916641 0.000036 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:31:18.257874 0.000000 udp 10.0.2.104 54523 -> 71.84.132.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:19.258575 0.366563 udp 10.0.2.104 54523 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:20.260767 0.156994 udp 10.0.2.104 54523 <-> 75.143.148.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:21.262239 0.733300 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:22.263229 0.760156 udp 10.0.2.104 54523 <-> 186.14.10.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:23.254579 0.218223 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:24.256500 0.302046 udp 10.0.2.104 54523 <-> 69.221.161.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:25.258249 0.000000 udp 10.0.2.104 54523 -> 174.96.197.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:26.259191 0.207655 udp 10.0.2.104 54523 <-> 177.230.92.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:27.260472 0.130482 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:28.261791 0.067579 udp 10.0.2.104 54523 <-> 93.176.193.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:29.262856 0.024278 udp 10.0.2.104 54523 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:30.254618 0.492331 udp 10.0.2.104 54523 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:31.256160 0.186948 udp 10.0.2.104 54523 <-> 216.114.33.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:32.258311 0.000000 udp 10.0.2.104 54523 -> 95.169.196.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:33.258809 0.000000 udp 10.0.2.104 54523 -> 201.243.112.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:34.260266 0.038065 udp 10.0.2.104 54523 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:35.262208 0.057186 udp 10.0.2.104 54523 <-> 79.115.173.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:36.253348 0.000000 udp 10.0.2.104 54523 -> 81.224.195.13 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:37.254811 0.168184 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:38.256476 0.182541 udp 10.0.2.104 54523 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:39.257477 0.000000 udp 10.0.2.104 54523 -> 190.160.37.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:40.259289 0.153953 udp 10.0.2.104 54523 <-> 24.211.81.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:41.260675 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:42.261942 0.286760 udp 10.0.2.104 54523 <-> 210.191.155.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:43.253133 0.039621 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:44.254871 0.163624 udp 10.0.2.104 54523 <-> 98.252.185.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:45.256312 2.002815 udp 10.0.2.104 54523 <-> 68.113.165.98 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:46.258452 0.000000 udp 10.0.2.104 54523 -> 37.152.142.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:48.260514 0.065678 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:49.262113 0.000000 udp 10.0.2.104 54523 -> 178.148.123.102 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:31:50.253246 0.885341 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:51.254979 0.360678 udp 10.0.2.104 54523 <-> 190.135.171.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:52.256343 0.143455 udp 10.0.2.104 54523 <-> 69.124.115.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:53.258439 0.204277 udp 10.0.2.104 54523 <-> 76.121.242.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:54.259152 0.202235 udp 10.0.2.104 54523 <-> 190.242.37.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:55.260786 0.290041 udp 10.0.2.104 54523 <-> 200.122.70.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:56.262156 0.335050 udp 10.0.2.104 54523 <-> 114.45.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:57.253440 0.119914 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:58.254796 0.142547 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:31:59.256318 3.063833 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:00.262045 0.157792 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:01.265151 1.999403 udp 10.0.2.104 54523 -> 216.211.244.243 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:04.254130 1.721309 udp 10.0.2.104 54523 <-> 190.79.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:04.914411 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:32:05.254963 0.405910 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:06.256564 0.291600 udp 10.0.2.104 54523 <-> 190.79.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:07.258080 0.000000 udp 10.0.2.104 54523 -> 94.21.66.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:08.259304 1.544154 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:09.260950 0.386123 udp 10.0.2.104 54523 <-> 76.94.105.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:10.262093 0.161572 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:11.253930 2.056592 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:12.255058 0.146977 udp 10.0.2.104 54523 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:14.258152 0.211803 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:15.259318 0.000000 udp 10.0.2.104 54523 -> 188.53.107.32 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:16.261130 0.151426 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:17.262414 0.149742 udp 10.0.2.104 54523 <-> 96.30.149.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:18.253464 0.278876 udp 10.0.2.104 54523 <-> 210.191.155.231 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:19.255815 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:20.257507 0.066858 udp 10.0.2.104 54523 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:21.258000 0.120695 udp 10.0.2.104 54523 <-> 46.167.88.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:22.259144 0.237838 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:23.261158 0.182674 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:24.262812 0.283453 udp 10.0.2.104 54523 <-> 179.209.249.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:25.253563 0.070482 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:26.254941 0.035817 udp 10.0.2.104 54523 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:27.256750 0.046540 udp 10.0.2.104 54523 <-> 213.46.47.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:28.258323 0.000000 udp 10.0.2.104 54523 -> 24.59.42.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:29.259601 0.000000 udp 10.0.2.104 54523 -> 77.47.75.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:30.262191 0.000000 udp 10.0.2.104 54523 -> 68.151.100.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:31.262928 0.183831 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:32.253854 0.074684 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:33.255358 0.153450 udp 10.0.2.104 54523 <-> 24.231.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:34.256626 1.067662 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:36.259464 2.003187 udp 10.0.2.104 54523 <-> 188.24.11.33 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:39.253936 0.000000 udp 10.0.2.104 54523 -> 108.2.145.191 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:40.256017 1.179434 udp 10.0.2.104 54523 <-> 181.177.5.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:41.257442 0.000000 udp 10.0.2.104 54523 -> 162.199.124.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:42.258203 0.000000 udp 10.0.2.104 54523 -> 71.60.62.202 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:43.259855 0.138076 udp 10.0.2.104 54523 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:44.260895 0.000000 udp 10.0.2.104 54523 -> 86.169.191.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:45.262721 0.058448 udp 10.0.2.104 54523 <-> 188.24.11.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:46.253831 0.000000 udp 10.0.2.104 54523 -> 68.81.40.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:47.255847 0.213447 udp 10.0.2.104 54523 <-> 185.12.171.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:48.257007 1.018522 udp 10.0.2.104 54523 <-> 181.177.5.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:49.258252 0.000000 udp 10.0.2.104 54523 -> 71.60.62.202 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:50.260706 0.000000 udp 10.0.2.104 54523 -> 201.241.2.173 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:51.261367 0.317952 udp 10.0.2.104 54523 <-> 81.191.116.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:51.911690 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:32:52.262108 1.241216 udp 10.0.2.104 54523 <-> 69.176.164.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:53.253901 0.454770 udp 10.0.2.104 54523 <-> 75.214.146.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:54.255597 0.133229 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:55.256645 0.160377 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:56.258346 0.168401 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:57.259586 0.141003 udp 10.0.2.104 54523 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:32:58.261375 0.000000 udp 10.0.2.104 54523 -> 186.11.17.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:32:59.262846 0.000000 udp 10.0.2.104 54523 -> 206.253.148.89 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:00.254391 0.079911 udp 10.0.2.104 54523 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:01.255883 1.049824 udp 10.0.2.104 54523 <-> 190.198.137.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:02.257138 0.874987 udp 10.0.2.104 54523 <-> 190.193.96.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:03.258758 0.000000 udp 10.0.2.104 54523 -> 89.252.221.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:04.259942 0.000000 udp 10.0.2.104 54523 -> 190.193.26.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:06.262581 0.399600 udp 10.0.2.104 54523 <-> 190.204.90.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:07.254187 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:08.255627 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:09.257642 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:10.259215 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:11.260235 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:12.261257 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:13.262678 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:14.254520 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:15.255731 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:16.256987 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:17.258687 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:17.992724 3.001149 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:33:18.259931 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:19.261497 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:20.262574 0.000000 udp 10.0.2.104 54523 -> 190.204.90.176 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:21.254207 0.029287 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:22.255643 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:24.258538 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:24.999777 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:33:25.260361 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:26.261572 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:27.263106 0.000144 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:27.263250 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:33:28.254471 2.003122 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:29.256039 0.167705 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:31.258635 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:32.260300 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:33.001099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:33:33.261503 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:34.263027 2.342776 udp 10.0.2.104 54523 <-> 190.204.90.176 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:35.254619 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:37.257403 0.551244 udp 10.0.2.104 54523 <-> 186.92.198.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:38.258651 2.002779 udp 10.0.2.104 54523 <-> 186.108.164.82 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:38.919275 0.000137 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:33:39.259579 0.000000 udp 10.0.2.104 54523 -> 201.19.246.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:41.263212 2.994216 udp 10.0.2.104 54523 -> 178.10.117.87 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:42.254528 0.000000 udp 10.0.2.104 54523 -> 85.86.103.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:43.256344 0.277845 udp 10.0.2.104 54523 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:45.258576 2.323229 udp 10.0.2.104 54523 <-> 201.241.75.109 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:46.260626 0.471765 udp 10.0.2.104 54523 <-> 177.106.39.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:48.263078 0.160081 udp 10.0.2.104 54523 <-> 12.39.137.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:49.003715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:33:49.254253 0.000000 udp 10.0.2.104 54523 -> 190.204.90.176 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:50.256145 0.158244 udp 10.0.2.104 54523 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:51.257298 0.193003 udp 10.0.2.104 54523 <-> 99.235.131.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:52.258885 1.106691 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:53.260694 0.141035 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:54.262167 0.000000 udp 10.0.2.104 54523 -> 79.19.32.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:55.263156 0.160785 udp 10.0.2.104 54523 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:56.254568 0.149489 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:57.256107 3.076956 udp 10.0.2.104 54523 <-> 79.109.248.238 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:33:58.258063 0.000000 udp 10.0.2.104 54523 -> 66.251.214.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:33:59.258849 0.710624 udp 10.0.2.104 54523 <-> 186.93.166.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:01.262223 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:02.253169 0.464163 udp 10.0.2.104 54523 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:03.254532 0.000000 udp 10.0.2.104 54523 -> 70.173.254.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:04.256281 0.067016 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:05.258005 0.142000 udp 10.0.2.104 54523 <-> 37.45.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:06.258773 4.063327 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:07.260171 0.162107 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:08.262127 0.688541 udp 10.0.2.104 54523 <-> 89.231.196.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:09.253148 0.328423 udp 10.0.2.104 54523 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:11.258002 0.082889 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:12.264308 0.213878 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:13.262252 0.195313 udp 10.0.2.104 54523 <-> 82.54.253.86 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:14.260462 0.373733 udp 10.0.2.104 54523 <-> 122.121.244.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:15.262315 0.000000 udp 10.0.2.104 54523 -> 74.98.182.80 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:16.253519 0.000000 udp 10.0.2.104 54523 -> 87.198.109.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:17.254859 0.152276 udp 10.0.2.104 54523 <-> 2.69.249.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:18.256466 0.155847 udp 10.0.2.104 54523 <-> 173.169.137.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:19.258196 0.337712 udp 10.0.2.104 54523 <-> 123.110.35.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:20.258817 0.000000 udp 10.0.2.104 54523 -> 186.91.102.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:21.010707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:34:21.261388 3.995119 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:22.262327 0.000000 udp 10.0.2.104 54523 -> 173.243.75.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:23.254032 0.031680 udp 10.0.2.104 54523 <-> 46.33.10.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:24.254917 0.340380 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:25.917122 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:34:26.258066 1.163809 udp 10.0.2.104 54523 <-> 184.162.25.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:28.260650 0.231006 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:29.262458 0.217841 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:30.253965 0.469106 udp 10.0.2.104 54523 <-> 201.252.94.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:31.258740 0.000000 udp 10.0.2.104 54523 -> 94.21.162.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:32.259375 0.176130 udp 10.0.2.104 54523 <-> 173.176.228.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:33.259411 0.060498 udp 10.0.2.104 54523 <-> 109.245.61.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:34.260760 0.575139 udp 10.0.2.104 54523 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:35.260725 1.992632 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:36.262533 2.057426 udp 10.0.2.104 54523 <-> 85.204.248.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:39.256565 0.077433 udp 10.0.2.104 54523 <-> 178.74.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:40.257956 3.212377 udp 10.0.2.104 54523 <-> 174.102.48.34 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:41.259239 0.291434 udp 10.0.2.104 54523 <-> 110.133.134.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:42.260842 0.236477 udp 10.0.2.104 54523 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:44.254009 0.332600 udp 10.0.2.104 54523 <-> 190.38.81.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:45.255250 0.638213 udp 10.0.2.104 54523 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:46.257045 0.065308 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:47.258207 0.046689 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:48.259188 0.290223 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:49.261928 0.165826 udp 10.0.2.104 54523 <-> 66.66.140.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:50.262816 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:51.253486 1.521371 udp 10.0.2.104 54523 <-> 92.78.41.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:52.255132 0.465322 udp 10.0.2.104 54523 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:53.256543 1.367016 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:54.258261 1.001025 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:56.260870 4.997563 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:57.262058 4.997103 udp 10.0.2.104 54523 <-> 82.245.78.248 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:34:58.253839 0.000000 udp 10.0.2.104 54523 -> 83.36.116.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:34:59.255116 0.126916 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:00.256587 0.000000 udp 10.0.2.104 54523 -> 24.244.127.249 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:02.470633 0.000000 udp 10.0.2.104 54523 <- 82.245.78.248 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:03.260772 0.154644 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:04.262435 2.644365 udp 10.0.2.104 54523 <-> 186.22.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:05.254197 0.123117 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:06.255019 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:07.256662 2.072630 udp 10.0.2.104 54523 -> 83.36.116.2 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:09.329292 0.000000 icmp 83.36.116.2 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:35:08.258305 4.996850 udp 10.0.2.104 54523 <-> 75.253.15.243 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:10.261182 0.316447 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:11.262406 3.995813 udp 10.0.2.104 54523 -> 190.246.109.252 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:12.254138 0.175066 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:12.915052 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:35:13.644240 0.886435 udp 10.0.2.104 54523 <-> 75.253.15.243 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:16.259065 0.316165 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:16.550662 0.000000 udp 10.0.2.104 54523 <- 190.246.109.252 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:17.261148 1.220051 udp 10.0.2.104 54523 <-> 186.176.186.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:18.262695 0.698691 udp 10.0.2.104 54523 <-> 78.94.228.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:19.253948 0.154440 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:20.255508 0.145779 udp 10.0.2.104 54523 <-> 24.183.237.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:21.256825 0.081604 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:22.258457 0.000000 udp 10.0.2.104 54523 -> 77.100.159.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:23.260050 0.143656 udp 10.0.2.104 54523 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:24.261036 0.205916 udp 10.0.2.104 54523 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:25.262718 0.643990 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:26.254085 0.059083 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:27.255724 0.000000 udp 10.0.2.104 54523 -> 65.65.137.161 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:28.256691 0.499814 udp 10.0.2.104 54523 <-> 98.122.114.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:29.258680 0.136666 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:30.259879 1.361553 udp 10.0.2.104 54523 <-> 93.105.145.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:31.261226 0.000000 udp 10.0.2.104 54523 -> 88.252.19.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:32.262552 3.000702 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:33.253997 0.348982 udp 10.0.2.104 54523 <-> 118.160.153.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:34.255477 0.167679 udp 10.0.2.104 54523 <-> 68.51.223.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:35.256751 0.645132 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:36.258729 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:37.259998 0.264683 udp 10.0.2.104 54523 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:38.261293 1.053580 udp 10.0.2.104 54523 <-> 27.5.228.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:39.262663 0.228887 udp 10.0.2.104 54523 <-> 186.115.125.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:40.253828 0.363588 udp 10.0.2.104 54523 <-> 117.204.145.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:41.255490 0.180457 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:42.256892 0.241616 udp 10.0.2.104 54523 <-> 76.178.38.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:43.258802 0.000000 udp 10.0.2.104 54523 -> 174.102.151.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:44.259848 0.000000 udp 10.0.2.104 54523 -> 79.33.127.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:45.261280 3.063222 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:46.262694 3.135966 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:47.254398 0.163286 udp 10.0.2.104 54523 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:50.258848 2.003361 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:51.261987 0.228844 udp 10.0.2.104 54523 <-> 76.178.38.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:53.262763 0.178127 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:54.254380 4.053804 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:55.255749 0.151318 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:56.256948 0.036426 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:35:57.258428 0.000000 udp 10.0.2.104 54523 -> 82.48.52.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:59.261601 0.000000 udp 10.0.2.104 54523 -> 79.33.127.104 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:35:59.912207 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:36:00.262933 0.153143 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:01.254555 0.150336 udp 10.0.2.104 54523 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:02.255652 0.055506 udp 10.0.2.104 54523 <-> 109.87.252.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:03.257334 0.333406 udp 10.0.2.104 54523 <-> 190.204.21.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:04.258558 0.317653 udp 10.0.2.104 54523 <-> 190.38.10.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:05.259910 0.000000 udp 10.0.2.104 54523 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:06.261583 0.106377 udp 10.0.2.104 54523 <-> 78.251.227.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:07.263374 4.997376 udp 10.0.2.104 54523 <-> 61.58.145.53 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:08.254260 0.267846 udp 10.0.2.104 54523 <-> 181.165.212.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:10.257422 0.651537 udp 10.0.2.104 54523 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:11.258564 3.995983 udp 10.0.2.104 54523 -> 188.214.34.53 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:12.610211 2.019485 udp 10.0.2.104 54523 <-> 61.58.145.53 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:13.261704 0.000000 udp 10.0.2.104 54523 -> 190.25.152.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:16.255937 0.129529 udp 10.0.2.104 54523 <-> 78.251.227.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:17.257258 0.169383 udp 10.0.2.104 54523 <-> 24.27.15.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:18.258800 0.228260 udp 10.0.2.104 54523 <-> 200.93.57.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:19.260147 0.192863 udp 10.0.2.104 54523 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:20.261874 0.337505 udp 10.0.2.104 54523 <-> 187.101.113.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:21.263333 0.158256 udp 10.0.2.104 54523 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:22.254579 1.396653 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:23.255749 0.206856 udp 10.0.2.104 54523 <-> 70.30.90.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:24.257835 0.144726 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:25.258921 0.164001 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:26.260212 0.329491 udp 10.0.2.104 54523 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:27.261993 0.339843 udp 10.0.2.104 54523 <-> 122.121.12.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:28.263384 0.173327 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:29.254347 0.035537 udp 10.0.2.104 54523 <-> 130.43.184.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:30.256168 0.309383 udp 10.0.2.104 54523 <-> 61.89.179.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:31.257982 0.000000 udp 10.0.2.104 54523 -> 79.146.191.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:32.258733 0.205049 udp 10.0.2.104 54523 <-> 49.207.122.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:33.260560 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:34.262223 0.316511 udp 10.0.2.104 54523 <-> 190.38.10.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:35.253157 0.000000 udp 10.0.2.104 54523 -> 78.73.29.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:36.254542 0.038449 udp 10.0.2.104 54523 <-> 195.182.199.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:37.256196 0.000000 udp 10.0.2.104 54523 -> 187.78.40.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:38.257765 0.163500 udp 10.0.2.104 54523 <-> 74.194.199.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:39.258980 0.000000 udp 10.0.2.104 54523 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:40.260211 0.015862 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:41.261515 0.201203 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:42.253402 0.045056 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:43.254586 1.707441 udp 10.0.2.104 54523 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:44.256209 0.271008 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:45.257504 0.000000 udp 10.0.2.104 54523 -> 24.176.139.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:46.258970 0.000000 udp 10.0.2.104 54523 -> 94.197.217.173 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:46.920025 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:36:47.260497 0.130416 udp 10.0.2.104 54523 <-> 76.106.23.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:48.262041 0.000000 udp 10.0.2.104 54523 -> 216.113.109.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:49.253393 0.000000 udp 10.0.2.104 54523 -> 216.49.32.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:50.254804 0.000000 udp 10.0.2.104 54523 -> 65.60.162.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:51.256312 0.136651 udp 10.0.2.104 54523 <-> 24.3.193.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:52.258076 0.000000 udp 10.0.2.104 54523 -> 151.245.131.149 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:53.259440 0.000000 udp 10.0.2.104 54523 -> 110.233.68.105 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:54.260359 0.140866 udp 10.0.2.104 54523 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:55.261964 2.468471 udp 10.0.2.104 54523 <-> 95.158.96.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:56.253483 0.055556 udp 10.0.2.104 54523 <-> 46.249.179.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:57.254719 0.322547 udp 10.0.2.104 54523 <-> 113.61.156.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:36:58.256297 0.000000 udp 10.0.2.104 54523 -> 151.245.131.149 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:36:59.257765 0.000000 udp 10.0.2.104 54523 -> 190.204.58.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:00.258935 0.046936 udp 10.0.2.104 54523 <-> 188.241.183.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:01.260449 0.175739 udp 10.0.2.104 54523 <-> 97.85.181.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:02.262163 0.174554 udp 10.0.2.104 54523 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:03.253520 0.071023 udp 10.0.2.104 54523 <-> 85.152.226.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:04.254603 0.134454 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:05.256204 0.000000 udp 10.0.2.104 54523 -> 74.193.143.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:06.258215 0.260341 udp 10.0.2.104 54523 <-> 92.46.145.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:07.258907 0.206620 udp 10.0.2.104 54523 <-> 207.210.39.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:08.260653 0.138661 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:09.262318 0.075044 udp 10.0.2.104 54523 <-> 46.37.71.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:10.253530 0.078337 udp 10.0.2.104 54523 <-> 84.125.139.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:11.255043 0.017421 udp 10.0.2.104 54523 <-> 89.173.235.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:12.256310 0.057187 udp 10.0.2.104 54523 <-> 95.180.20.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:13.258134 0.261537 udp 10.0.2.104 54523 <-> 67.248.185.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:14.259426 1.359307 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:15.261091 4.997107 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:16.262340 0.000000 udp 10.0.2.104 54523 -> 5.60.217.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:17.253895 0.169559 udp 10.0.2.104 54523 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:18.255046 0.027223 udp 10.0.2.104 54523 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:19.256448 0.000000 udp 10.0.2.104 54523 -> 2.219.6.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:20.436280 0.000000 udp 10.0.2.104 54523 <- 69.1.2.245 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:22.264145 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:23.264474 0.000115 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:23.264589 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:37:24.254237 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:25.254620 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:26.256384 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:27.258443 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:28.259424 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:29.260756 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:30.262815 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:31.254534 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:32.255200 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:33.256708 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:33.917617 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:37:34.258428 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:35.259814 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:36.260804 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:37.262724 0.037681 udp 10.0.2.104 54523 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:38.253732 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:39.255184 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:40.256796 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:41.258550 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:42.259449 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:43.260849 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:44.262527 0.000060 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:44.262587 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:37:45.253698 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:46.255013 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:47.256660 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:48.258557 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:49.259529 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:50.261363 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:51.262554 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:53.255439 0.160557 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:37:54.256819 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:55.258506 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:56.259883 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:57.261152 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:58.262709 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:37:59.254159 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:00.255446 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:01.256632 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:02.258660 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:03.259565 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:04.260786 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:04.260862 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:38:05.262619 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:06.254202 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:07.255267 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:08.256983 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:09.258358 0.000000 udp 10.0.2.104 54523 -> 176.201.3.9 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:10.259478 0.233250 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:11.261286 0.164974 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:12.262696 2.994217 udp 10.0.2.104 54523 -> 177.143.107.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:13.254358 0.065826 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:14.255449 1.662883 arp 10.0.2.104 who 169.254.71.252 INT 3 126 flow=Background-ARP 1970/01/01 12:38:16.258503 0.144714 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:17.259746 0.308135 udp 10.0.2.104 54523 <-> 92.46.145.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:18.261627 1.155846 udp 10.0.2.104 54523 <-> 216.49.32.84 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:20.254392 3.004482 udp 10.0.2.104 54523 <-> 82.124.235.110 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:20.915041 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:38:21.255439 0.167279 udp 10.0.2.104 54523 <-> 173.199.217.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:22.257054 1.219917 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:24.260021 4.997341 udp 10.0.2.104 54523 -> 118.160.130.247 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:25.261032 0.000000 udp 10.0.2.104 54523 -> 97.106.251.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:26.262903 0.000000 udp 10.0.2.104 54523 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:27.254080 0.052899 udp 10.0.2.104 54523 <-> 95.43.102.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:28.255810 2.232085 udp 10.0.2.104 54523 <-> 89.155.210.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:29.622386 0.000000 udp 10.0.2.104 54523 <- 118.160.130.247 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:30.258851 0.193309 udp 10.0.2.104 54523 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:31.260105 0.113160 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:32.261605 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:33.262924 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:34.254572 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:35.255825 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:36.257305 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:37.258653 3.995873 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:38.260625 0.173905 udp 10.0.2.104 54523 <-> 173.23.208.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:39.262252 0.459253 udp 10.0.2.104 54523 <-> 190.195.52.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:40.263050 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:42.255768 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:43.257223 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:44.258542 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:45.260020 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:46.261786 3.995996 udp 10.0.2.104 54523 -> 190.78.188.114 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:47.263044 0.000000 udp 10.0.2.104 54523 -> 190.195.52.28 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:48.254392 3.179159 udp 10.0.2.104 54523 <-> 173.23.208.52 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:49.255963 0.175307 udp 10.0.2.104 54523 <-> 50.171.133.68 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:52.260148 0.162298 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:53.261534 0.059089 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:54.263112 0.164677 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:55.254479 0.752909 udp 10.0.2.104 54523 <-> 69.176.164.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:56.256297 0.000000 udp 10.0.2.104 54523 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:38:57.257343 0.146165 udp 10.0.2.104 54523 <-> 68.197.61.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:58.258783 0.143400 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:38:59.260502 0.134144 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:00.262296 0.624380 udp 10.0.2.104 54523 <-> 181.165.132.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:01.263168 3.099773 udp 10.0.2.104 54523 -> 83.38.139.227 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:04.362941 0.000000 icmp 83.38.139.227 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:39:02.254566 0.597874 udp 10.0.2.104 54523 <-> 77.222.27.243 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:03.256034 0.179190 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:05.258732 4.419939 udp 10.0.2.104 54523 <-> 190.179.200.225 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:06.260752 0.267293 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:07.261249 0.067031 udp 10.0.2.104 54523 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:07.912388 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:39:08.252579 0.000000 udp 10.0.2.104 54523 -> 190.79.249.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:10.255935 0.000000 udp 10.0.2.104 54523 -> 186.30.204.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:11.257351 3.004296 udp 10.0.2.104 54523 -> 1.172.166.20 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:12.258865 0.040922 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:13.260791 0.287179 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:15.253220 0.000000 udp 10.0.2.104 54523 -> 159.146.5.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:16.254410 4.531602 udp 10.0.2.104 54523 <-> 190.150.96.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:17.256026 3.114458 udp 10.0.2.104 54523 <-> 178.127.14.232 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:18.257524 0.000000 udp 10.0.2.104 54523 -> 190.79.249.244 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:19.258885 0.674782 udp 10.0.2.104 54523 <-> 77.222.27.243 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:21.264261 3.131953 udp 10.0.2.104 54523 <-> 190.150.96.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:22.254325 0.211677 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:23.254678 0.693611 udp 10.0.2.104 54523 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:24.256164 0.000000 udp 10.0.2.104 54523 -> 92.46.145.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:25.258345 0.189689 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:26.260239 4.996210 udp 10.0.2.104 54523 -> 186.30.204.20 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:27.260297 0.000000 udp 10.0.2.104 54523 -> 1.172.166.20 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:28.262012 0.076090 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:29.253520 0.040330 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:30.254849 0.174705 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:32.258298 0.000000 udp 10.0.2.104 54523 -> 83.38.139.227 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:33.260463 0.186325 udp 10.0.2.104 54523 <-> 206.158.34.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:34.266968 0.173043 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:35.266548 0.126725 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:36.256745 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:37.256426 1.319445 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:39.257849 0.287933 udp 10.0.2.104 54523 <-> 186.93.186.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:40.260602 0.000000 udp 10.0.2.104 54523 -> 178.149.186.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:41.260720 0.281330 udp 10.0.2.104 54523 <-> 187.64.242.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:42.261939 0.380617 udp 10.0.2.104 54523 <-> 70.184.95.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:43.259197 0.000000 udp 10.0.2.104 54523 -> 188.52.97.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:44.258215 0.350126 udp 10.0.2.104 54523 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:45.259005 2.155275 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:46.258971 0.265788 udp 10.0.2.104 54523 <-> 177.182.184.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:48.260663 0.061104 udp 10.0.2.104 54523 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:49.262416 0.000000 udp 10.0.2.104 54523 -> 173.23.113.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:50.253946 0.150042 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:51.255105 0.159108 udp 10.0.2.104 54523 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:52.256200 0.338841 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:53.257833 0.397607 udp 10.0.2.104 54523 <-> 186.52.130.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:54.259251 0.000000 udp 10.0.2.104 54523 -> 95.74.4.147 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:54.920123 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:39:55.260512 0.267198 udp 10.0.2.104 54523 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:56.262299 0.188443 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:57.253430 0.032782 udp 10.0.2.104 54523 <-> 178.79.29.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:58.255170 0.084907 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:39:58.966021 0.011370 udp 10.0.2.104 54617 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 12:39:58.977686 0.000000 udp 10.0.2.104 54618 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:39:59.256355 1.169040 udp 10.0.2.104 54523 <-> 190.78.188.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:00.257607 0.303702 udp 10.0.2.104 54523 <-> 189.1.24.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:01.259432 0.361310 udp 10.0.2.104 54523 <-> 68.122.149.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:02.260704 0.000000 udp 10.0.2.104 54523 -> 77.47.75.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:03.262207 1.008747 udp 10.0.2.104 54523 <-> 179.210.224.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:04.253754 0.000000 udp 10.0.2.104 54523 -> 75.60.10.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:05.255350 0.034319 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:06.256434 1.222710 udp 10.0.2.104 54523 <-> 190.78.188.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:07.258004 0.211993 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:08.259313 0.658590 udp 10.0.2.104 54523 <-> 79.47.30.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:09.261017 0.000000 udp 10.0.2.104 54523 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:10.262537 0.000000 udp 10.0.2.104 54523 -> 98.224.153.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:11.253589 0.000000 udp 10.0.2.104 54523 -> 85.108.9.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:12.255401 0.051775 udp 10.0.2.104 54523 <-> 85.67.109.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:13.256699 0.000000 udp 10.0.2.104 54523 -> 98.240.160.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:14.258233 0.157109 udp 10.0.2.104 54523 <-> 74.192.111.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:15.259422 0.157369 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:16.260962 0.010399 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:17.262568 0.265540 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:18.253733 0.119183 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:19.255067 4.005828 udp 10.0.2.104 54523 -> 82.139.93.94 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:20.256670 0.274957 udp 10.0.2.104 54523 <-> 190.245.43.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:21.258314 0.144728 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:22.259573 0.000000 udp 10.0.2.104 54523 -> 70.191.247.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:24.262469 4.351116 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:25.016667 3.001340 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:40:25.253929 0.000000 udp 10.0.2.104 54523 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:26.255243 1.411571 udp 10.0.2.104 54523 <-> 190.204.12.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:27.256798 0.268412 udp 10.0.2.104 54523 <-> 190.245.43.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:29.259423 0.000000 udp 10.0.2.104 54523 -> 75.61.74.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:30.260796 4.138082 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:31.262739 0.000000 udp 10.0.2.104 54523 -> 77.77.235.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:32.023345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:40:32.253226 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:33.255388 0.332632 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:35.258426 0.192957 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:36.259448 0.621592 udp 10.0.2.104 54523 <-> 190.245.43.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:37.261169 0.161202 udp 10.0.2.104 54523 <-> 70.191.247.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:38.262562 2.023233 udp 10.0.2.104 54523 -> 31.221.48.242 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:38.293189 1.992606 icmp 31.221.48.242 0x0303 -> 10.0.2.104 0x5040 URP 192 2 140 flow=Background 1970/01/01 12:40:39.254415 2.335348 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:40.025102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:40:41.917790 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:40:42.258183 0.116400 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:43.260212 0.354254 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:44.260940 0.112165 udp 10.0.2.104 54523 <-> 77.222.27.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:45.262903 0.206744 udp 10.0.2.104 54523 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:46.253352 0.174486 udp 10.0.2.104 54523 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:47.255420 0.079455 udp 10.0.2.104 54523 <-> 5.34.141.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:48.257004 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:49.258190 0.219733 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:50.260146 0.000000 udp 10.0.2.104 54523 -> 5.110.40.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:51.261312 3.078758 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:52.262612 0.155468 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:53.254262 0.293114 udp 10.0.2.104 54523 <-> 190.75.107.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:55.256977 0.305669 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:56.028096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:40:56.258548 0.277376 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:57.259888 0.000000 udp 10.0.2.104 54523 -> 201.68.62.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:40:58.261457 0.074285 udp 10.0.2.104 54523 <-> 178.149.186.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:40:59.262881 0.086339 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:00.254207 0.000000 udp 10.0.2.104 54523 -> 204.191.252.162 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:01.255545 0.168548 udp 10.0.2.104 54523 <-> 184.170.169.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:02.257025 0.445284 udp 10.0.2.104 54523 <-> 24.210.74.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:03.258377 0.200031 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:04.260348 0.000000 udp 10.0.2.104 54523 -> 96.22.131.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:05.261232 4.058603 udp 10.0.2.104 54523 <-> 188.25.238.66 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:06.263005 2.055474 udp 10.0.2.104 54523 <-> 95.158.96.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:07.254494 0.149332 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:08.255757 0.329837 udp 10.0.2.104 54523 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:10.258319 0.040379 udp 10.0.2.104 54523 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:11.260430 0.201303 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:12.261260 0.159164 udp 10.0.2.104 54523 <-> 174.64.178.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:13.262949 0.000000 udp 10.0.2.104 54523 -> 70.173.74.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:14.254251 0.316539 udp 10.0.2.104 54523 <-> 186.36.140.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:15.255717 0.199596 udp 10.0.2.104 54523 <-> 76.105.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:16.257311 0.166332 udp 10.0.2.104 54523 <-> 98.252.185.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:17.258632 0.000000 udp 10.0.2.104 54523 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:18.260103 0.000000 udp 10.0.2.104 54523 -> 69.33.250.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:19.261445 0.000000 udp 10.0.2.104 54523 -> 217.199.99.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:20.263173 0.232979 udp 10.0.2.104 54523 <-> 190.78.154.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:21.254373 1.001609 udp 10.0.2.104 54523 <-> 201.46.181.58 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:23.257368 0.000000 udp 10.0.2.104 54523 -> 71.197.28.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:24.258684 0.338073 udp 10.0.2.104 54523 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:25.268434 0.000000 udp 10.0.2.104 54523 -> 65.28.244.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:26.265757 3.252042 udp 10.0.2.104 54523 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:27.263428 0.352291 udp 10.0.2.104 54523 <-> 1.172.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:28.033914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:41:28.254602 0.436814 udp 10.0.2.104 54523 <-> 200.175.127.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:28.915424 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:41:29.256136 0.217891 udp 10.0.2.104 54523 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:30.313795 0.216591 udp 10.0.2.104 54523 <-> 181.65.199.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:31.309516 0.236141 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:32.304238 0.000000 udp 10.0.2.104 54523 -> 187.78.4.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:33.298702 0.084659 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:34.295494 0.387768 udp 10.0.2.104 54523 <-> 186.136.207.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:35.317744 0.128416 udp 10.0.2.104 54523 <-> 206.74.136.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:36.314003 0.343684 udp 10.0.2.104 54523 <-> 114.36.70.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:37.309735 0.144448 udp 10.0.2.104 54523 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:38.305490 0.358237 udp 10.0.2.104 54523 <-> 75.214.226.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:39.300452 0.691289 udp 10.0.2.104 54523 <-> 64.184.108.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:40.336507 0.316369 udp 10.0.2.104 54523 <-> 115.124.194.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:41.318768 0.139729 udp 10.0.2.104 54523 <-> 24.187.175.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:42.309837 0.526725 udp 10.0.2.104 54523 <-> 72.201.124.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:43.304788 0.155944 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:44.298709 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:45.292523 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:46.285852 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:47.278663 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:48.260292 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:49.254470 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:50.256001 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:51.257551 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:52.258903 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:53.260387 0.093586 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:54.261921 0.272873 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:55.253328 0.000000 udp 10.0.2.104 54523 -> 76.178.38.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:41:56.254580 2.118407 udp 10.0.2.104 54523 <-> 65.50.60.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:57.255957 0.043876 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:58.257310 1.625394 udp 10.0.2.104 54523 <-> 93.105.145.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:41:59.258997 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:00.260640 0.159155 udp 10.0.2.104 54523 <-> 110.5.74.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:01.261376 0.048823 udp 10.0.2.104 54523 <-> 92.36.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:02.252802 0.193274 udp 10.0.2.104 54523 <-> 64.185.54.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:03.254714 0.226028 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:04.256285 0.338470 udp 10.0.2.104 54523 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:05.257988 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:06.258810 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:07.260454 0.000051 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:07.260505 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:42:08.262085 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:09.253395 0.000000 udp 10.0.2.104 54523 -> 137.118.186.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:10.254706 0.049620 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:11.259026 0.088764 udp 10.0.2.104 54523 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:12.259172 0.050830 udp 10.0.2.104 54523 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:13.259048 0.107974 udp 10.0.2.104 54523 -> 77.224.237.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:13.367022 0.000000 icmp 77.224.237.33 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:42:14.260649 0.134793 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:15.264038 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:15.913322 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:42:16.253179 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:17.254980 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:18.256667 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:19.257826 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:20.259359 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:21.262653 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:22.262578 0.000138 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:22.262716 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:42:23.253248 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:25.256269 3.496244 udp 10.0.2.104 54523 <-> 137.118.186.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:26.260050 0.055959 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:27.260135 3.074518 udp 10.0.2.104 54523 <-> 178.172.245.47 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:28.260586 1.145350 udp 10.0.2.104 54523 <-> 68.189.177.80 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:31.255183 0.228310 udp 10.0.2.104 54523 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:32.256531 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:33.258426 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:34.259622 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:35.260685 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:36.262187 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:37.253736 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:38.255007 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:39.261019 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:40.260678 0.000000 udp 10.0.2.104 54523 -> 137.118.186.61 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:41.260365 0.045802 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:42.260773 0.141072 udp 10.0.2.104 54523 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:43.266494 0.295674 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:44.256446 0.039615 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:45.256241 0.065156 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:46.256672 0.000000 udp 10.0.2.104 54523 -> 84.124.183.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:47.258197 0.163798 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:48.259621 1.001206 udp 10.0.2.104 54523 <-> 85.230.38.241 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:50.262517 2.051432 udp 10.0.2.104 54523 <-> 94.21.162.26 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:51.253932 0.164094 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:53.256341 0.000000 udp 10.0.2.104 54523 -> 190.73.13.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:54.258123 0.718275 udp 10.0.2.104 54523 <-> 189.194.38.40 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:55.259614 1.738212 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:56.261001 0.160485 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:57.262723 0.000000 udp 10.0.2.104 54523 -> 99.236.194.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:42:58.254141 0.180715 udp 10.0.2.104 54523 <-> 65.65.137.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:42:59.255081 0.125680 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:00.256541 0.428193 udp 10.0.2.104 54523 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:01.258126 0.395949 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:02.259262 0.213655 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:02.920554 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:43:03.260885 0.161935 udp 10.0.2.104 54523 <-> 70.183.51.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:04.262471 0.000000 udp 10.0.2.104 54523 -> 50.160.106.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:05.254016 0.000000 udp 10.0.2.104 54523 -> 190.51.66.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:06.255329 0.164445 udp 10.0.2.104 54523 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:07.256687 0.151900 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:08.258284 0.143940 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:09.260076 0.220940 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:10.261132 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:11.262849 0.143296 udp 10.0.2.104 54523 <-> 24.192.199.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:12.254278 1.631810 udp 10.0.2.104 54523 <-> 190.79.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:13.255242 0.000000 udp 10.0.2.104 54523 -> 209.236.94.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:14.256781 0.100285 udp 10.0.2.104 54523 <-> 62.220.208.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:15.258855 0.163357 udp 10.0.2.104 54523 <-> 217.199.99.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:16.260464 0.737767 udp 10.0.2.104 54523 <-> 190.193.96.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:17.261202 0.000000 udp 10.0.2.104 54523 -> 68.59.56.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:18.262480 0.649025 udp 10.0.2.104 54523 <-> 190.16.22.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:19.253787 0.136851 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:20.255353 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:20.255448 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:43:21.256830 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:22.258362 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:23.261832 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:24.262233 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:25.262732 0.000000 udp 10.0.2.104 54523 -> 68.59.56.94 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:26.253554 0.140990 udp 10.0.2.104 54523 <-> 24.167.187.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:27.255632 0.249359 udp 10.0.2.104 54523 <-> 190.202.252.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:28.257123 0.073985 udp 10.0.2.104 54523 <-> 5.12.139.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:29.258328 1.001639 udp 10.0.2.104 54523 <-> 188.114.142.93 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:31.261002 0.150609 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:32.262831 0.000000 udp 10.0.2.104 54523 -> 69.204.114.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:33.254018 0.296077 udp 10.0.2.104 54523 <-> 187.64.242.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:34.255368 0.068263 udp 10.0.2.104 54523 <-> 82.130.134.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:35.257217 0.040241 udp 10.0.2.104 54523 <-> 94.156.86.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:36.258271 0.190382 udp 10.0.2.104 54523 <-> 75.54.70.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:37.260158 0.064655 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:38.261502 1.612134 udp 10.0.2.104 54523 <-> 190.79.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:39.262693 0.251019 udp 10.0.2.104 54523 <-> 105.225.179.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:40.254596 0.076696 udp 10.0.2.104 54523 <-> 86.126.0.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:41.255511 0.431008 udp 10.0.2.104 54523 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:42.257278 0.159768 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:43.258435 0.223846 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:44.260296 0.080836 udp 10.0.2.104 54523 <-> 78.221.218.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:45.261434 0.250470 udp 10.0.2.104 54523 <-> 70.184.95.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:46.265215 0.000000 udp 10.0.2.104 54523 -> 92.40.12.235 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:47.254688 0.163635 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:48.255718 0.343661 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:49.257564 0.053566 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:49.924040 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:43:50.263789 0.265712 udp 10.0.2.104 54523 <-> 177.182.119.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:51.261322 0.361679 udp 10.0.2.104 54523 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:52.261157 2.267937 udp 10.0.2.104 54523 <-> 181.166.240.133 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:53.265994 1.991357 udp 10.0.2.104 54523 -> 2.234.17.92 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:43:56.258513 0.158839 udp 10.0.2.104 54523 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:57.258721 0.202208 udp 10.0.2.104 54523 <-> 24.119.21.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:58.260464 1.118189 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:43:59.261586 0.043988 udp 10.0.2.104 54523 <-> 94.213.213.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:00.263067 0.302465 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:01.254464 0.373427 udp 10.0.2.104 54523 <-> 190.206.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:02.255836 2.754822 udp 10.0.2.104 54523 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:03.257238 0.000000 udp 10.0.2.104 54523 -> 190.217.209.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:44:04.258972 0.162499 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:05.260323 0.173421 udp 10.0.2.104 54523 <-> 76.184.250.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:06.260976 0.047968 udp 10.0.2.104 54523 <-> 212.117.27.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:07.263328 0.147279 udp 10.0.2.104 54523 <-> 82.56.162.25 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:08.254679 0.262828 udp 10.0.2.104 54523 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:09.256100 0.227223 udp 10.0.2.104 54523 <-> 50.170.179.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:10.257206 0.140947 udp 10.0.2.104 54523 <-> 173.176.169.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:11.258867 0.297956 udp 10.0.2.104 54523 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:12.260318 0.218442 udp 10.0.2.104 54523 <-> 91.72.117.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:13.261934 0.213086 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:14.252884 0.064522 udp 10.0.2.104 54523 <-> 188.27.196.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:15.254427 0.000000 udp 10.0.2.104 54523 -> 68.110.105.136 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:44:16.256132 0.207554 udp 10.0.2.104 54523 <-> 108.185.4.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:17.257353 2.159244 udp 10.0.2.104 54523 <-> 76.188.30.171 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:18.258853 2.167104 udp 10.0.2.104 54523 <-> 184.45.92.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:20.261870 0.233595 udp 10.0.2.104 54523 <-> 98.127.221.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:21.253454 0.048308 udp 10.0.2.104 54523 <-> 178.250.32.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:22.254592 0.310530 udp 10.0.2.104 54523 <-> 201.223.198.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:23.256118 0.344873 udp 10.0.2.104 54523 <-> 111.250.102.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:24.257831 0.258005 udp 10.0.2.104 54523 <-> 132.248.100.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:25.258783 2.009460 udp 10.0.2.104 54523 <-> 31.44.140.49 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:26.260947 0.000000 udp 10.0.2.104 54523 -> 87.18.54.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:44:28.256842 0.343568 udp 10.0.2.104 54523 <-> 111.250.102.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:29.262218 0.171038 udp 10.0.2.104 54523 <-> 24.200.185.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:30.261423 0.175267 udp 10.0.2.104 54523 <-> 75.94.163.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:31.259223 0.479518 udp 10.0.2.104 54523 <-> 31.44.140.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:32.259980 0.111527 udp 10.0.2.104 54523 <-> 46.42.57.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:33.260318 0.302524 udp 10.0.2.104 54523 <-> 201.95.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:34.261876 0.160307 udp 10.0.2.104 54523 <-> 50.148.31.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:35.252956 0.149555 udp 10.0.2.104 54523 <-> 72.198.68.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:36.254495 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:44:36.915692 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:44:37.256061 0.159786 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:38.257782 0.173524 udp 10.0.2.104 54523 <-> 69.73.42.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:39.262936 0.386266 udp 10.0.2.104 54523 <-> 190.201.123.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:40.263702 0.202717 udp 10.0.2.104 54523 <-> 98.237.214.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:41.264016 0.269782 udp 10.0.2.104 54523 <-> 186.95.67.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:42.254256 0.162611 udp 10.0.2.104 54523 <-> 66.30.24.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:43.258113 0.142421 udp 10.0.2.104 54523 <-> 173.2.97.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:44.258016 0.317721 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:45.257848 0.150656 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:46.259132 0.081054 udp 10.0.2.104 54523 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:47.260868 0.000000 udp 10.0.2.104 54523 -> 68.69.150.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:44:48.262809 0.215653 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:49.259933 0.000000 udp 10.0.2.104 54523 -> 100.44.68.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:44:50.255970 2.124814 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:51.386920 0.165289 udp 10.0.2.104 54523 <-> 71.61.44.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:53.379596 0.155209 udp 10.0.2.104 54523 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:54.377161 0.000000 udp 10.0.2.104 54523 -> 176.201.32.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:44:55.371871 0.000000 udp 10.0.2.104 54523 -> 190.129.4.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:44:56.355610 0.511753 udp 10.0.2.104 54523 <-> 211.36.185.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:57.350034 0.063935 udp 10.0.2.104 54523 <-> 5.13.214.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:58.344258 0.252026 udp 10.0.2.104 54523 <-> 190.37.37.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:44:59.338364 0.289307 udp 10.0.2.104 54523 <-> 177.9.188.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:00.332080 0.386923 udp 10.0.2.104 54523 <-> 111.249.249.198 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:01.324592 0.000000 udp 10.0.2.104 54523 -> 190.78.178.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:02.319381 0.166335 udp 10.0.2.104 54523 <-> 24.160.149.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:03.301079 0.213565 udp 10.0.2.104 54523 <-> 181.55.142.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:04.291911 0.000000 udp 10.0.2.104 54523 -> 207.34.234.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:05.286501 0.214198 udp 10.0.2.104 54523 <-> 187.243.128.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:06.280385 2.223918 udp 10.0.2.104 54523 <-> 186.92.110.45 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:07.273764 0.032305 udp 10.0.2.104 54523 <-> 87.97.240.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:09.267312 0.438036 udp 10.0.2.104 54523 <-> 190.77.245.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:10.253548 0.114473 udp 10.0.2.104 54523 <-> 217.203.199.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:11.255061 0.222692 udp 10.0.2.104 54523 <-> 75.84.176.143 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:12.256604 0.181947 udp 10.0.2.104 54523 <-> 2.195.213.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:13.257569 0.158011 udp 10.0.2.104 54523 <-> 76.29.7.253 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:14.259206 0.091390 udp 10.0.2.104 54523 <-> 88.245.27.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:15.261001 0.158698 udp 10.0.2.104 54523 <-> 174.100.67.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:16.262313 0.180090 udp 10.0.2.104 54523 <-> 75.108.181.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:17.253798 0.099111 udp 10.0.2.104 54523 <-> 62.42.122.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:18.254977 0.089191 udp 10.0.2.104 54523 <-> 78.227.31.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:19.257117 1.643752 udp 10.0.2.104 54523 <-> 111.248.57.34 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:21.259492 0.149501 udp 10.0.2.104 54523 <-> 204.210.133.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:22.260748 2.065236 udp 10.0.2.104 54523 <-> 90.224.66.98 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:23.262395 0.000000 udp 10.0.2.104 54523 -> 109.52.227.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:23.913047 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:45:25.255264 0.124052 udp 10.0.2.104 54523 <-> 46.167.88.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:26.256918 0.289344 udp 10.0.2.104 54523 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:27.257597 0.435578 udp 10.0.2.104 54523 <-> 186.56.147.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:28.259808 0.010138 udp 10.0.2.104 54523 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:29.260948 0.305254 udp 10.0.2.104 54523 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:30.262462 0.280053 udp 10.0.2.104 54523 <-> 187.65.107.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:31.254380 0.179210 udp 10.0.2.104 54523 <-> 98.194.254.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:32.255150 0.205620 udp 10.0.2.104 54523 <-> 88.73.109.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:33.256845 3.164474 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:34.258134 0.306702 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:35.259664 0.148236 udp 10.0.2.104 54523 <-> 68.197.61.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:37.262417 0.000000 udp 10.0.2.104 54523 -> 86.154.29.204 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:38.253949 0.299264 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:39.255293 0.635552 udp 10.0.2.104 54523 <-> 92.41.240.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:40.256932 1.472002 udp 10.0.2.104 54523 <-> 108.132.214.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:41.258193 0.155207 udp 10.0.2.104 54523 <-> 68.158.48.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:42.259530 0.156766 udp 10.0.2.104 54523 <-> 76.188.221.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:43.260978 0.059398 udp 10.0.2.104 54523 <-> 81.104.29.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:44.262701 0.145179 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:45.253793 0.021756 udp 10.0.2.104 54523 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:46.255442 0.362788 udp 10.0.2.104 54523 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:47.256742 0.381352 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:48.260217 1.161776 udp 10.0.2.104 54523 <-> 178.77.20.139 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:50.267875 1.286883 udp 10.0.2.104 54523 <-> 213.182.120.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:51.264897 0.150741 udp 10.0.2.104 54523 <-> 74.128.155.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:45:52.253942 0.000000 udp 10.0.2.104 54523 -> 181.65.199.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:54.256795 0.000069 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:54.256864 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:45:55.258571 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:56.259767 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:57.261066 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:58.262529 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:45:59.254169 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:00.255921 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:01.256849 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:02.258314 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:03.260704 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:04.260823 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:05.262734 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:06.254425 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:07.256024 4.005037 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:08.256958 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:09.258534 0.000000 udp 10.0.2.104 54523 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:10.259780 0.241810 udp 10.0.2.104 54523 <-> 190.203.162.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:10.920692 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:46:12.262750 0.150994 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:13.254283 0.000000 udp 10.0.2.104 54523 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:14.255644 0.082933 udp 10.0.2.104 54523 <-> 83.253.100.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:15.257395 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:16.258480 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:18.261250 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:19.262776 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:20.254571 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:21.255944 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:22.257346 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:22.257428 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:46:23.258854 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:24.260435 0.468742 udp 10.0.2.104 54523 <-> 77.47.75.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:25.261144 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:26.263075 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:27.254419 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:28.256160 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:29.257305 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:30.258708 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:31.260012 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:32.261552 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:33.263084 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:34.254305 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:35.255808 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:36.257118 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:37.258673 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:38.260383 0.000075 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:38.260458 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:46:40.263109 0.000000 udp 10.0.2.104 54523 -> 195.62.0.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:41.254456 3.165238 udp 10.0.2.104 54523 <-> 71.89.50.92 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:42.256149 0.773506 udp 10.0.2.104 54523 <-> 67.183.71.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:43.257312 0.197638 udp 10.0.2.104 54523 <-> 177.229.90.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:45.264219 0.079296 udp 10.0.2.104 54523 <-> 5.43.79.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:46.265890 0.000000 udp 10.0.2.104 54523 -> 195.62.0.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:47.256169 0.155731 udp 10.0.2.104 54523 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:48.255420 0.000000 udp 10.0.2.104 54523 -> 67.183.71.89 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:49.256559 0.000000 udp 10.0.2.104 54523 -> 2.192.240.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:50.257804 0.278721 udp 10.0.2.104 54523 <-> 177.229.90.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:51.258875 0.254237 udp 10.0.2.104 54523 <-> 109.53.117.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:52.260766 0.000000 udp 10.0.2.104 54523 -> 69.180.10.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:53.261769 2.255753 udp 10.0.2.104 54523 <-> 77.47.75.54 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:54.253178 0.076741 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:56.256258 0.000000 udp 10.0.2.104 54523 -> 71.45.42.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:57.257307 0.178369 udp 10.0.2.104 54523 <-> 76.85.171.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:46:57.918215 0.000126 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:46:58.258927 0.000000 udp 10.0.2.104 54523 -> 87.18.54.195 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:46:59.260375 0.000000 udp 10.0.2.104 54523 -> 89.173.235.151 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:00.261294 0.164188 udp 10.0.2.104 54523 <-> 98.162.159.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:01.253411 0.021801 udp 10.0.2.104 54523 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:02.254979 0.000000 udp 10.0.2.104 54523 -> 174.2.220.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:03.256518 0.131123 udp 10.0.2.104 54523 <-> 68.83.76.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:04.257987 0.147085 udp 10.0.2.104 54523 <-> 24.208.178.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:05.258942 0.089683 udp 10.0.2.104 54523 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:06.260423 0.000000 udp 10.0.2.104 54523 -> 80.99.49.236 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:07.261933 0.348093 udp 10.0.2.104 54523 <-> 190.198.184.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:08.253427 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:09.254747 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:10.256222 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:11.257256 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:12.259151 0.220666 udp 10.0.2.104 54523 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:13.260743 0.143894 udp 10.0.2.104 54523 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:14.261730 0.039083 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:15.253241 0.280228 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:16.254799 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:16.254862 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:47:17.256432 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:18.257897 4.997034 udp 10.0.2.104 54523 -> 181.55.80.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:19.258856 0.172737 udp 10.0.2.104 54523 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:20.260899 0.352556 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:21.262164 0.266678 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:22.253228 4.422891 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:24.256572 0.129266 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:26.259076 0.000000 udp 10.0.2.104 54523 -> 100.44.68.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:27.260600 0.123554 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:28.262213 4.023008 udp 10.0.2.104 54523 <-> 176.63.245.82 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:29.253541 0.000000 udp 10.0.2.104 54523 -> 98.67.228.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:30.255055 0.000000 udp 10.0.2.104 54523 -> 67.86.90.91 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:31.259964 0.000000 udp 10.0.2.104 54523 -> 77.47.75.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:32.043201 2.998292 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:47:33.260806 1.507390 udp 10.0.2.104 54523 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:34.260862 0.205353 udp 10.0.2.104 54523 <-> 177.229.90.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:35.262334 2.268844 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:36.253267 0.000000 udp 10.0.2.104 54523 -> 100.44.68.2 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:38.256792 0.064806 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:39.047338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:47:39.257894 0.128823 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:40.259371 0.294859 udp 10.0.2.104 54523 <-> 116.64.95.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:41.260942 0.140164 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:42.262380 1.427498 udp 10.0.2.104 54523 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:43.253518 0.187537 udp 10.0.2.104 54523 <-> 206.253.49.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:44.255250 0.388051 udp 10.0.2.104 54523 <-> 186.57.78.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:44.915833 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:47:45.256453 0.080300 udp 10.0.2.104 54523 <-> 217.77.24.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:46.257911 0.033699 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:47.049050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:47:47.259083 0.000000 udp 10.0.2.104 54523 -> 74.12.109.132 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:48.260670 0.158219 udp 10.0.2.104 54523 <-> 178.77.20.139 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:49.262523 0.000000 udp 10.0.2.104 54523 -> 2.192.240.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:50.253747 0.062176 udp 10.0.2.104 54523 <-> 95.42.254.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:51.255008 0.000000 udp 10.0.2.104 54523 -> 181.159.155.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:52.256686 0.039823 udp 10.0.2.104 54523 <-> 94.156.86.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:53.257958 0.000000 udp 10.0.2.104 54523 -> 95.169.211.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:54.259304 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:55.260881 0.050808 udp 10.0.2.104 54523 <-> 95.87.207.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:56.265037 0.047084 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:57.254612 0.000000 udp 10.0.2.104 54523 -> 200.80.180.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:47:58.255047 0.163910 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:47:59.256759 0.148725 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:00.258253 0.075715 udp 10.0.2.104 54523 <-> 2.107.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:01.259477 0.284305 udp 10.0.2.104 54523 <-> 177.34.180.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:02.260893 0.175130 udp 10.0.2.104 54523 <-> 76.184.250.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:03.052324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:48:03.262481 0.049053 udp 10.0.2.104 54523 <-> 92.36.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:04.254275 1.074008 udp 10.0.2.104 54523 <-> 213.254.71.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:06.257795 0.000000 udp 10.0.2.104 54523 -> 68.154.33.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:07.258003 0.157071 udp 10.0.2.104 54523 <-> 184.49.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:08.258972 0.000000 udp 10.0.2.104 54523 -> 76.189.34.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:09.260949 0.000000 udp 10.0.2.104 54523 -> 189.245.32.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:10.262457 0.262310 udp 10.0.2.104 54523 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:11.254022 0.135657 udp 10.0.2.104 54523 <-> 76.117.184.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:12.255677 0.418317 udp 10.0.2.104 54523 <-> 197.7.152.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:13.256724 0.000000 udp 10.0.2.104 54523 -> 190.146.82.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:14.258306 2.189133 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:15.259764 2.158856 udp 10.0.2.104 54523 <-> 98.235.61.126 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:18.254019 0.000000 udp 10.0.2.104 54523 -> 190.254.197.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:19.255483 0.000000 udp 10.0.2.104 54523 -> 72.230.110.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:20.256784 2.129794 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:23.260987 1.709715 udp 10.0.2.104 54523 <-> 201.74.127.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:24.262588 0.054938 udp 10.0.2.104 54523 <-> 80.4.111.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:25.254379 4.074580 udp 10.0.2.104 54523 <-> 79.113.103.156 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:26.255811 0.085785 udp 10.0.2.104 54523 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:27.257044 1.142828 udp 10.0.2.104 54523 <-> 184.57.25.149 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:30.261204 0.145831 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:31.262727 0.069285 udp 10.0.2.104 54523 <-> 79.113.103.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:31.913493 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:48:32.256506 0.085542 udp 10.0.2.104 54523 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:33.256761 0.258945 udp 10.0.2.104 54523 <-> 190.254.197.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:34.257258 0.398771 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:35.057881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:48:35.258283 0.039664 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:36.260023 0.180815 udp 10.0.2.104 54523 <-> 37.45.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:37.261124 0.312370 udp 10.0.2.104 54523 <-> 111.184.101.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:38.262685 0.028024 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:39.254189 0.211291 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:40.255501 1.219796 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:42.258602 0.000000 udp 10.0.2.104 54523 -> 68.116.158.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:43.259729 0.062475 udp 10.0.2.104 54523 <-> 95.42.254.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:44.261058 0.296304 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:45.262793 0.614210 udp 10.0.2.104 54523 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:46.254718 0.690134 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:47.255483 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:48.257008 0.239410 udp 10.0.2.104 54523 <-> 92.46.145.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:49.258302 0.064360 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:50.260144 2.162367 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:51.261547 0.207119 udp 10.0.2.104 54523 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:53.254320 0.359427 udp 10.0.2.104 54523 <-> 180.176.22.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:54.255873 0.604593 udp 10.0.2.104 54523 <-> 87.17.240.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:55.257101 1.033725 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 6 3676 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:57.259895 4.054080 udp 10.0.2.104 54523 <-> 188.241.10.7 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:48:58.263994 0.000000 udp 10.0.2.104 54523 -> 68.83.79.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:48:59.264153 0.149939 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:00.257973 0.000000 udp 10.0.2.104 54523 -> 79.44.147.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:02.263878 3.002658 udp 10.0.2.104 54523 -> 65.162.123.249 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:03.261365 0.191518 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:04.264689 0.492920 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:06.263306 0.139789 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:07.258383 0.379568 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:08.257407 0.334890 udp 10.0.2.104 54523 <-> 220.142.70.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:09.257305 0.142452 udp 10.0.2.104 54523 <-> 67.252.37.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:10.258621 0.165707 udp 10.0.2.104 54523 <-> 173.17.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:11.260141 4.997065 udp 10.0.2.104 54523 <-> 78.159.43.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:12.261592 0.000000 udp 10.0.2.104 54523 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:13.263116 0.054709 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:14.254524 0.067744 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:15.255914 4.179736 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:17.258824 0.000000 udp 10.0.2.104 54523 -> 77.47.75.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:18.260500 4.996937 udp 10.0.2.104 54523 -> 74.129.190.237 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:18.920954 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:49:20.253112 0.067393 udp 10.0.2.104 54523 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:21.254595 0.166501 udp 10.0.2.104 54523 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:22.256206 0.154975 udp 10.0.2.104 54523 <-> 173.26.253.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:24.258824 0.023131 udp 10.0.2.104 54523 <-> 95.168.48.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:25.260278 0.053983 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:26.261188 0.066390 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:27.253357 0.000000 udp 10.0.2.104 54523 -> 77.47.75.54 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:28.254403 0.000000 udp 10.0.2.104 54523 -> 50.176.20.52 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:29.256232 0.156207 udp 10.0.2.104 54523 <-> 173.26.253.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:30.257472 0.000000 udp 10.0.2.104 54523 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:31.259118 0.000000 udp 10.0.2.104 54523 -> 46.100.107.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:32.260868 2.046008 udp 10.0.2.104 54523 <-> 95.43.102.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:33.262362 1.054501 udp 10.0.2.104 54523 <-> 98.67.228.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:35.253974 0.118276 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:36.259081 0.207217 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:37.258581 0.000000 udp 10.0.2.104 54523 -> 71.197.28.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:38.258697 0.000000 udp 10.0.2.104 54523 -> 69.123.197.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:39.260457 0.041357 udp 10.0.2.104 54523 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:40.262015 3.320992 udp 10.0.2.104 54523 <-> 182.235.179.171 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:41.253322 0.084075 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:42.283803 0.499938 udp 10.0.2.104 54523 <-> 41.70.147.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:44.275424 0.000000 udp 10.0.2.104 54523 -> 65.34.89.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:45.270942 1.278104 udp 10.0.2.104 54523 <-> 187.243.128.80 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:47.261681 0.079792 udp 10.0.2.104 54523 <-> 86.124.225.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:48.253502 0.175854 udp 10.0.2.104 54523 <-> 183.83.74.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:49.254820 0.282995 udp 10.0.2.104 54523 <-> 177.80.161.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:50.256222 3.280619 udp 10.0.2.104 54523 <-> 190.113.141.193 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:51.257835 0.000000 udp 10.0.2.104 54523 -> 85.219.46.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:52.259008 0.000000 udp 10.0.2.104 54523 -> 72.26.130.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:54.262022 0.297266 udp 10.0.2.104 54523 <-> 110.133.134.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:55.253435 0.046190 udp 10.0.2.104 54523 <-> 213.46.47.81 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:56.257037 0.151968 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:57.256962 0.185108 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:49:58.257800 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:49:59.259120 0.000000 udp 10.0.2.104 54523 -> 98.235.69.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:00.260454 2.994529 udp 10.0.2.104 54523 -> 181.55.80.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:01.262097 3.271908 udp 10.0.2.104 54523 <-> 200.84.79.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:02.253089 4.314038 udp 10.0.2.104 54523 <-> 179.56.57.233 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:05.257306 0.654930 udp 10.0.2.104 54523 <-> 186.92.198.4 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:05.918474 0.000139 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:50:07.260591 0.000000 udp 10.0.2.104 54523 -> 98.235.69.7 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:08.262092 0.315418 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:09.253379 0.000000 udp 10.0.2.104 54523 -> 177.106.39.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:10.254898 0.000000 udp 10.0.2.104 54523 -> 98.219.34.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:11.256751 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:12.257817 0.150893 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:13.259104 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:14.260825 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:15.262107 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:16.253522 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:17.255010 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:18.256656 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:19.257887 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:20.259382 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:21.260759 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:22.262240 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:23.253631 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:24.255423 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:25.256412 0.156529 udp 10.0.2.104 54523 <-> 98.219.34.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:26.258218 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:26.258294 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:50:27.264808 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:28.264736 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:29.264092 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:30.258161 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:31.258985 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:32.258814 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:33.259375 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:34.260175 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:35.261008 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:36.262461 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:37.254008 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:38.255021 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:39.259526 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:41.264931 2.157060 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:42.265108 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:50:44.253895 0.157565 udp 10.0.2.104 54523 <-> 98.219.34.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:45.255326 0.152366 udp 10.0.2.104 54523 <-> 71.80.67.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:46.256525 0.169883 udp 10.0.2.104 54523 <-> 72.179.177.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:47.258405 0.137796 udp 10.0.2.104 54523 <-> 67.85.150.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:48.259669 0.450888 udp 10.0.2.104 54523 <-> 179.218.56.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:49.261018 1.170713 udp 10.0.2.104 54523 <-> 61.114.37.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:50.262495 0.242300 udp 10.0.2.104 54523 <-> 190.39.135.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:51.253828 0.233037 udp 10.0.2.104 54523 <-> 117.194.72.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:52.255449 0.164728 udp 10.0.2.104 54523 <-> 71.16.80.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:52.916469 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:50:53.256955 4.159635 udp 10.0.2.104 54523 <-> 72.192.115.228 16464 CON 0 0 10 4740 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:58.254503 0.160687 udp 10.0.2.104 54523 <-> 69.136.170.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:50:59.255169 0.283734 udp 10.0.2.104 54523 <-> 190.72.3.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:00.256696 0.203042 udp 10.0.2.104 54523 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:01.258268 0.060611 udp 10.0.2.104 54523 <-> 95.25.29.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:02.259845 0.000000 udp 10.0.2.104 54523 -> 76.87.27.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:03.261117 0.153196 udp 10.0.2.104 54523 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:04.269142 0.156490 udp 10.0.2.104 54523 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:05.257847 0.036435 udp 10.0.2.104 54523 <-> 188.127.103.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:06.265880 0.000000 udp 10.0.2.104 54523 -> 69.204.108.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:07.267282 0.080050 udp 10.0.2.104 54523 <-> 83.253.100.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:08.265774 0.332011 udp 10.0.2.104 54523 <-> 218.227.129.90 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:09.263693 0.000000 udp 10.0.2.104 54523 -> 70.82.157.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:10.261218 0.356954 udp 10.0.2.104 54523 <-> 71.155.230.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:11.262767 0.000000 udp 10.0.2.104 54523 -> 97.76.164.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:12.253566 0.167875 udp 10.0.2.104 54523 <-> 70.81.218.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:13.255586 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:14.256956 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:15.259739 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:16.264434 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:17.264715 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:19.258878 0.000099 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:19.258977 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:51:20.261499 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:21.263030 0.000000 udp 10.0.2.104 54523 -> 66.162.170.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:22.267453 0.018712 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:23.266447 0.083892 udp 10.0.2.104 54523 <-> 83.253.100.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:24.263843 0.000000 udp 10.0.2.104 54523 -> 50.90.102.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:25.266483 0.000000 udp 10.0.2.104 54523 -> 76.178.38.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:26.258054 0.135656 udp 10.0.2.104 54523 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:27.260220 0.051719 udp 10.0.2.104 54523 <-> 188.24.11.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:28.260347 0.294101 udp 10.0.2.104 54523 <-> 27.141.56.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:29.260085 0.255199 udp 10.0.2.104 54523 <-> 177.143.155.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:30.262205 0.181176 udp 10.0.2.104 54523 <-> 70.173.33.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:31.265046 0.342022 udp 10.0.2.104 54523 <-> 1.232.205.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:32.265046 0.162590 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:33.261711 0.000000 udp 10.0.2.104 54523 -> 92.28.99.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:34.260956 0.570117 udp 10.0.2.104 54523 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:35.261951 0.400994 udp 10.0.2.104 54523 <-> 190.135.171.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:36.264235 0.066366 udp 10.0.2.104 54523 <-> 213.254.71.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:37.261892 0.128506 udp 10.0.2.104 54523 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:38.261324 0.268288 udp 10.0.2.104 54523 <-> 186.90.119.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:39.262930 0.180841 udp 10.0.2.104 54523 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:39.918174 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:51:40.258254 0.168189 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:41.265759 0.135973 udp 10.0.2.104 54523 <-> 109.55.127.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:42.273824 0.202360 udp 10.0.2.104 54523 <-> 69.5.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:43.271774 0.107077 udp 10.0.2.104 54523 <-> 46.117.83.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:44.270026 0.198309 udp 10.0.2.104 54523 <-> 70.69.191.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:45.266910 0.041282 udp 10.0.2.104 54523 <-> 46.175.231.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:46.263305 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:47.254421 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:49.265184 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:50.262481 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:51.260122 0.000072 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:51.260194 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:51:52.261702 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:51:53.253053 0.174638 udp 10.0.2.104 54523 <-> 75.129.122.91 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:54.254449 0.145966 udp 10.0.2.104 54523 <-> 70.60.4.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:55.255787 0.523625 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:56.257422 0.536137 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:57.258505 0.127321 udp 10.0.2.104 54523 <-> 24.75.177.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:58.260374 0.216478 udp 10.0.2.104 54523 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:51:59.261676 0.224789 udp 10.0.2.104 54523 <-> 64.250.220.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:00.253061 0.577118 udp 10.0.2.104 54523 <-> 99.141.253.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:01.254527 0.010262 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:02.256184 0.323616 udp 10.0.2.104 54523 <-> 119.14.115.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:03.257306 0.366067 udp 10.0.2.104 54523 <-> 114.38.174.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:04.258613 0.000000 udp 10.0.2.104 54523 -> 108.132.224.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:05.260408 0.176978 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:06.261397 1.052257 udp 10.0.2.104 54523 <-> 213.238.228.152 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:08.254728 0.160000 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:09.256104 0.286119 udp 10.0.2.104 54523 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:10.257326 1.087199 udp 10.0.2.104 54523 <-> 78.236.112.132 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:12.260454 0.162668 udp 10.0.2.104 54523 <-> 66.66.140.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:13.261293 0.166550 udp 10.0.2.104 54523 <-> 71.87.79.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:14.253083 0.086059 udp 10.0.2.104 54523 <-> 178.74.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:15.254709 0.146948 udp 10.0.2.104 54523 <-> 184.59.92.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:16.256183 0.324681 udp 10.0.2.104 54523 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:17.257313 0.783410 udp 10.0.2.104 54523 <-> 69.176.164.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:18.262795 0.210442 udp 10.0.2.104 54523 <-> 118.97.174.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:19.262457 0.139269 udp 10.0.2.104 54523 <-> 72.240.76.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:20.262454 0.000000 udp 10.0.2.104 54523 -> 41.140.76.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:21.253234 0.143996 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:22.254932 0.212777 udp 10.0.2.104 54523 <-> 189.195.141.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:23.256119 0.170248 udp 10.0.2.104 54523 <-> 76.189.34.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:24.257146 0.042649 udp 10.0.2.104 54523 <-> 80.200.192.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:25.259127 0.371115 udp 10.0.2.104 54523 <-> 181.72.237.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:26.283788 3.120265 udp 10.0.2.104 54523 <-> 109.72.59.29 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:26.942198 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:52:27.281596 0.208035 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:28.268342 0.319713 udp 10.0.2.104 54523 <-> 181.31.162.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:30.264521 0.598918 udp 10.0.2.104 54523 <-> 24.135.16.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:31.262694 0.214359 udp 10.0.2.104 54523 <-> 190.38.216.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:32.259977 1.429482 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:33.260661 0.000000 udp 10.0.2.104 54523 -> 207.87.90.69 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:34.261954 0.223507 udp 10.0.2.104 54523 <-> 2.193.246.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:35.253364 0.000000 udp 10.0.2.104 54523 -> 70.239.90.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:36.254986 0.000000 udp 10.0.2.104 54523 -> 87.111.109.206 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:37.256288 0.288396 udp 10.0.2.104 54523 <-> 181.31.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:38.257557 0.226745 udp 10.0.2.104 54523 <-> 201.132.213.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:39.259148 1.171949 udp 10.0.2.104 54523 <-> 24.200.185.102 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:41.261969 0.140108 udp 10.0.2.104 54523 <-> 72.240.76.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:42.253831 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:43.254829 0.556896 udp 10.0.2.104 54523 <-> 189.110.82.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:44.256290 0.000000 udp 10.0.2.104 54523 -> 179.113.202.85 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:45.257819 0.334854 udp 10.0.2.104 54523 <-> 111.252.181.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:46.259319 0.039190 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:47.260776 0.140999 udp 10.0.2.104 54523 <-> 75.102.177.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:48.262021 0.295488 udp 10.0.2.104 54523 <-> 60.56.88.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:49.253157 0.342358 udp 10.0.2.104 54523 <-> 220.136.8.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:50.254943 0.283248 udp 10.0.2.104 54523 <-> 60.62.66.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:51.256507 0.167975 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:52.257852 0.000000 udp 10.0.2.104 54523 -> 41.211.70.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:53.259288 0.000000 udp 10.0.2.104 54523 -> 186.93.186.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:52:54.260863 0.231008 udp 10.0.2.104 54523 <-> 63.147.47.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:55.262201 0.119794 udp 10.0.2.104 54523 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:56.254167 0.148421 udp 10.0.2.104 54523 <-> 68.57.213.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:57.254942 0.080458 udp 10.0.2.104 54523 <-> 83.253.100.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:58.256420 0.872178 udp 10.0.2.104 54523 <-> 50.29.153.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:52:59.258038 0.141255 udp 10.0.2.104 54523 <-> 69.116.245.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:00.259194 0.070447 udp 10.0.2.104 54523 <-> 93.72.6.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:01.260725 0.000000 udp 10.0.2.104 54523 -> 75.118.148.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:02.262662 0.000000 udp 10.0.2.104 54523 -> 184.162.36.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:03.253854 0.138719 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:04.255153 0.470403 udp 10.0.2.104 54523 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:05.256315 1.662433 arp 10.0.2.104 who 169.254.195.33 INT 3 126 flow=Background-ARP 1970/01/01 12:53:06.257881 0.274779 udp 10.0.2.104 54523 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:07.259501 0.141650 udp 10.0.2.104 54523 <-> 65.185.76.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:08.260860 0.159794 udp 10.0.2.104 54523 <-> 68.207.245.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:09.262818 0.000000 udp 10.0.2.104 54523 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:10.254092 0.000000 udp 10.0.2.104 54523 -> 201.209.115.220 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:11.255370 0.314674 udp 10.0.2.104 54523 <-> 180.4.203.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:12.256670 0.149387 udp 10.0.2.104 54523 <-> 72.23.198.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:13.258060 0.233218 udp 10.0.2.104 54523 <-> 186.95.225.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:13.918867 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:53:14.259280 0.387722 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:15.260995 0.183118 udp 10.0.2.104 54523 <-> 75.87.91.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:16.262411 1.184320 udp 10.0.2.104 54523 <-> 71.199.86.134 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:18.255151 0.000000 udp 10.0.2.104 54523 -> 114.41.85.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:19.257099 1.354610 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:21.259473 0.166005 udp 10.0.2.104 54523 <-> 50.83.18.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:22.261070 0.163126 udp 10.0.2.104 54523 <-> 24.118.222.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:23.262354 0.174322 udp 10.0.2.104 54523 <-> 76.84.28.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:24.253859 0.149409 udp 10.0.2.104 54523 <-> 75.75.92.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:25.255557 0.164635 udp 10.0.2.104 54523 <-> 72.191.127.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:26.256936 0.757082 udp 10.0.2.104 54523 <-> 190.140.32.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:27.258233 0.180825 udp 10.0.2.104 54523 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:28.259910 0.319043 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:29.261210 0.323335 udp 10.0.2.104 54523 <-> 113.61.156.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:30.262706 2.134057 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:31.253950 0.154443 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:33.256811 0.000000 udp 10.0.2.104 54523 -> 61.227.18.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:34.258329 0.169781 udp 10.0.2.104 54523 <-> 174.55.72.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:35.259734 0.153336 udp 10.0.2.104 54523 <-> 75.138.21.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:36.260828 0.165379 udp 10.0.2.104 54523 <-> 66.69.28.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:37.262525 0.091877 udp 10.0.2.104 54523 <-> 78.227.210.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:38.253967 0.067429 udp 10.0.2.104 54523 <-> 86.123.120.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:39.255217 0.209953 udp 10.0.2.104 54523 <-> 108.185.42.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:40.256731 0.000000 udp 10.0.2.104 54523 -> 186.92.54.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:41.258322 0.156275 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:42.259505 0.000000 udp 10.0.2.104 54523 -> 181.16.55.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:43.261054 1.559330 udp 10.0.2.104 54523 <-> 186.89.100.162 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:45.254180 0.568309 udp 10.0.2.104 54523 <-> 190.97.47.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:46.255384 0.276854 udp 10.0.2.104 54523 <-> 208.90.245.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:47.256977 0.294182 udp 10.0.2.104 54523 <-> 49.250.81.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:48.258342 0.197902 udp 10.0.2.104 54523 <-> 142.129.85.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:49.259808 0.297081 udp 10.0.2.104 54523 <-> 190.191.188.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:50.261118 0.000000 udp 10.0.2.104 54523 -> 93.137.174.223 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:53:51.262577 0.732526 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:52.254027 0.300295 udp 10.0.2.104 54523 <-> 219.115.125.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:53.255828 0.043179 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:54.257116 0.176872 udp 10.0.2.104 54523 <-> 46.155.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:55.258373 0.055033 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:56.260110 0.453888 udp 10.0.2.104 54523 <-> 60.228.64.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:57.261595 0.178089 udp 10.0.2.104 54523 <-> 135.19.5.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:58.262772 0.029654 udp 10.0.2.104 54523 <-> 89.137.97.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:53:59.254050 0.099581 udp 10.0.2.104 54523 <-> 78.227.210.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:00.255980 0.200590 udp 10.0.2.104 54523 <-> 68.16.236.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:00.916407 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:54:01.257036 0.164915 udp 10.0.2.104 54523 <-> 24.249.57.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:02.258411 0.069071 udp 10.0.2.104 54523 <-> 85.84.86.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:03.260020 0.000000 udp 10.0.2.104 54523 -> 37.57.58.177 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:04.261602 0.150588 udp 10.0.2.104 54523 <-> 87.19.40.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:05.262985 0.147097 udp 10.0.2.104 54523 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:06.254190 0.138286 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:07.255938 0.279474 udp 10.0.2.104 54523 <-> 181.164.3.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:08.257324 0.055483 udp 10.0.2.104 54523 <-> 79.126.201.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:09.258392 0.078347 udp 10.0.2.104 54523 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:10.260014 0.312006 udp 10.0.2.104 54523 <-> 14.32.249.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:11.261345 3.193304 udp 10.0.2.104 54523 <-> 109.52.110.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:12.262860 1.197653 udp 10.0.2.104 54523 <-> 98.237.186.63 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:14.255977 0.129771 udp 10.0.2.104 54523 <-> 68.39.15.226 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:15.257138 0.143905 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:16.258597 0.158052 udp 10.0.2.104 54523 <-> 97.68.127.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:17.260383 0.032296 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:18.261190 0.611578 udp 10.0.2.104 54523 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:19.263071 0.212393 udp 10.0.2.104 54523 <-> 66.214.186.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:20.254436 1.209944 udp 10.0.2.104 54523 <-> 187.107.244.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:21.255978 0.046720 udp 10.0.2.104 54523 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:22.257338 3.556832 udp 10.0.2.104 54523 <-> 178.167.135.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:23.258578 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:24.259932 0.134208 udp 10.0.2.104 54523 <-> 71.225.111.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:26.252763 1.539141 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:27.254688 0.000064 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:27.254752 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:54:28.255994 0.000000 udp 10.0.2.104 54523 -> 186.220.88.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:29.257279 0.166406 udp 10.0.2.104 54523 <-> 50.154.137.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:30.258692 0.213443 udp 10.0.2.104 54523 <-> 76.178.38.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:31.261058 0.294087 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:32.261223 0.263660 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:33.252801 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:34.254606 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:35.256047 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:36.257370 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:37.258827 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:38.260329 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:39.063771 3.001868 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:54:39.261095 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:40.252887 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:41.254609 0.166964 udp 10.0.2.104 54523 <-> 50.154.137.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:42.256170 0.000000 udp 10.0.2.104 54523 -> 190.217.209.3 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:43.257349 0.030676 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:45.260345 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:46.071402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:54:46.261980 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:47.253210 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:47.913425 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:54:48.254871 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:49.256069 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:50.257309 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:51.258827 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:52.260334 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:53.261972 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:54.072948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:54:54.253048 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:55.254574 0.000112 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:55.254686 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:54:56.259825 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:57.260218 4.158972 udp 10.0.2.104 54523 <-> 50.154.137.13 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:58.260424 2.264939 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:54:58.970240 0.011689 udp 10.0.2.104 54619 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 12:54:58.982298 0.000000 udp 10.0.2.104 54620 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:54:59.260431 3.165980 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 4 496 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:03.256205 0.308871 udp 10.0.2.104 54523 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:04.257551 0.000000 udp 10.0.2.104 54523 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:05.258953 0.000000 udp 10.0.2.104 54523 -> 67.185.173.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:06.260562 0.000000 udp 10.0.2.104 54523 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:07.262136 0.302576 udp 10.0.2.104 54523 <-> 212.129.79.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:08.253479 0.308715 udp 10.0.2.104 54523 <-> 175.198.68.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:09.254808 0.343178 udp 10.0.2.104 54523 <-> 61.19.25.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:10.076118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:55:10.256366 1.300732 udp 10.0.2.104 54523 <-> 75.220.209.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:12.258996 0.287355 udp 10.0.2.104 54523 <-> 181.28.180.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:13.260485 0.167997 udp 10.0.2.104 54523 <-> 83.10.113.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:14.262185 0.150994 udp 10.0.2.104 54523 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:15.253424 0.000000 udp 10.0.2.104 54523 -> 69.198.6.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:16.255159 0.274693 udp 10.0.2.104 54523 <-> 186.19.173.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:17.256311 2.034708 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:18.257506 0.000000 udp 10.0.2.104 54523 -> 109.67.1.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:20.260697 0.156031 udp 10.0.2.104 54523 <-> 68.43.93.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:21.262048 0.397225 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:22.253374 0.652026 udp 10.0.2.104 54523 <-> 190.113.235.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:23.254932 0.164681 udp 10.0.2.104 54523 <-> 24.118.222.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:24.256405 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:25.257862 3.004289 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:26.259027 0.000075 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:26.259102 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:55:27.260670 2.138557 udp 10.0.2.104 54523 <-> 47.17.133.103 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:30.254967 0.140985 udp 10.0.2.104 54523 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:31.256333 0.182500 udp 10.0.2.104 54523 <-> 74.243.166.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:32.258042 0.039568 udp 10.0.2.104 54523 <-> 89.252.221.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:33.259237 0.128630 udp 10.0.2.104 54523 <-> 75.109.236.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:34.260924 1.289938 udp 10.0.2.104 54523 <-> 186.137.65.148 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:34.911801 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:55:36.253936 0.000000 udp 10.0.2.104 54523 -> 89.231.196.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:37.254956 0.160343 udp 10.0.2.104 54523 <-> 74.193.210.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:38.256709 0.000000 udp 10.0.2.104 54523 -> 50.166.115.146 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:39.257765 0.158363 udp 10.0.2.104 54523 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:40.259575 0.000000 udp 10.0.2.104 54523 -> 189.47.44.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:41.260800 0.000000 udp 10.0.2.104 54523 -> 82.137.80.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:42.082275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:55:42.262362 0.000000 udp 10.0.2.104 54523 -> 105.227.44.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:43.253891 0.428008 udp 10.0.2.104 54523 <-> 79.47.59.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:44.255633 0.159010 udp 10.0.2.104 54523 <-> 71.235.192.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:45.256334 0.077893 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:46.258048 0.300222 udp 10.0.2.104 54523 <-> 189.47.44.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:47.259434 0.000000 udp 10.0.2.104 54523 -> 50.88.67.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:48.260770 0.000000 udp 10.0.2.104 54523 -> 66.219.182.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:49.262514 0.361167 udp 10.0.2.104 54523 <-> 36.224.160.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:50.253122 0.165043 udp 10.0.2.104 54523 <-> 173.176.228.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:51.255020 0.130149 udp 10.0.2.104 54523 <-> 176.237.6.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:52.256497 2.144690 udp 10.0.2.104 54523 <-> 71.88.102.71 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:53.258107 4.223852 udp 10.0.2.104 54523 <-> 177.224.99.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:55.261217 0.155101 udp 10.0.2.104 54523 <-> 69.124.254.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:56.262749 0.164298 udp 10.0.2.104 54523 <-> 173.25.161.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:55:58.255420 0.000000 udp 10.0.2.104 54523 -> 186.92.198.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:55:59.256655 0.276490 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:00.257937 0.166532 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:01.259792 0.365348 udp 10.0.2.104 54523 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:02.261045 0.168551 udp 10.0.2.104 54523 <-> 74.192.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:03.262760 4.166469 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:04.253662 0.140253 udp 10.0.2.104 54523 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:05.255535 0.117388 udp 10.0.2.104 54523 <-> 68.230.129.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:06.256944 0.099351 udp 10.0.2.104 54523 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:08.259885 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:56:09.260905 0.370455 udp 10.0.2.104 54523 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:10.263053 0.743956 udp 10.0.2.104 54523 <-> 111.248.57.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:11.254036 0.189542 udp 10.0.2.104 54523 <-> 207.134.178.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:12.256387 0.340770 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:13.256742 0.157108 udp 10.0.2.104 54523 <-> 98.28.240.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:14.258496 2.522902 udp 10.0.2.104 54523 <-> 74.74.176.241 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:15.260306 0.248331 udp 10.0.2.104 54523 <-> 98.155.225.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:17.262831 0.139447 udp 10.0.2.104 54523 <-> 24.146.182.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:18.254398 0.177527 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:19.255515 3.004671 udp 10.0.2.104 54523 -> 186.93.166.249 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:56:20.257174 4.005549 udp 10.0.2.104 54523 <-> 192.95.208.228 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:21.258255 0.250105 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:21.918994 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:56:23.261731 0.528199 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:25.254406 0.219513 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:26.255630 0.489726 udp 10.0.2.104 54523 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:27.257095 0.147698 udp 10.0.2.104 54523 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:28.258539 0.000000 udp 10.0.2.104 54523 -> 183.80.0.143 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:56:29.260036 0.169196 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:30.261199 0.159162 udp 10.0.2.104 54523 <-> 72.128.65.225 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:31.262954 4.092245 udp 10.0.2.104 54523 <-> 96.63.150.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:32.254124 0.125729 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:33.255983 0.140459 udp 10.0.2.104 54523 <-> 50.177.222.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:34.257222 0.155534 udp 10.0.2.104 54523 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:35.258806 0.029201 udp 10.0.2.104 54523 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:36.259724 0.065360 udp 10.0.2.104 54523 <-> 82.36.57.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:37.262124 0.000000 udp 10.0.2.104 54523 -> 65.3.192.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:56:38.262841 0.146130 udp 10.0.2.104 54523 <-> 24.186.190.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:39.254356 0.264786 udp 10.0.2.104 54523 <-> 70.241.74.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:40.255807 0.247078 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:41.257235 0.165144 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:42.258817 0.210052 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:43.260264 0.000000 udp 10.0.2.104 54523 -> 71.12.81.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:56:44.261493 0.000000 udp 10.0.2.104 54523 -> 90.215.69.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:56:45.262851 0.071424 udp 10.0.2.104 54523 <-> 178.149.186.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:46.254169 3.281879 udp 10.0.2.104 54523 <-> 41.211.70.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:47.255756 1.018694 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:48.257230 0.332922 udp 10.0.2.104 54523 <-> 58.239.36.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:49.258584 0.116507 udp 10.0.2.104 54523 <-> 87.0.238.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:50.260106 0.221562 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:51.261587 0.153461 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:52.262885 0.156873 udp 10.0.2.104 54523 <-> 68.185.251.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:53.254540 4.005555 udp 10.0.2.104 54523 <-> 93.105.145.3 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:54.255989 0.000000 udp 10.0.2.104 54523 -> 207.42.135.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:56:56.258934 3.056465 udp 10.0.2.104 54523 <-> 109.60.22.219 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:56:58.261818 0.325452 udp 10.0.2.104 54523 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:00.254520 0.000000 udp 10.0.2.104 54523 -> 204.195.176.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:01.256395 0.341240 udp 10.0.2.104 54523 <-> 2.192.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:02.257257 0.000000 udp 10.0.2.104 54523 -> 109.67.249.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:03.258789 0.311237 udp 10.0.2.104 54523 <-> 124.39.243.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:04.260415 0.000000 udp 10.0.2.104 54523 -> 75.214.61.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:05.262013 0.148210 udp 10.0.2.104 54523 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:06.256867 0.146445 udp 10.0.2.104 54523 <-> 69.135.211.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:07.256101 0.053780 udp 10.0.2.104 54523 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:08.256360 0.138863 udp 10.0.2.104 54523 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:08.916847 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:57:09.257321 0.160142 udp 10.0.2.104 54523 <-> 12.39.137.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:10.258576 0.200430 udp 10.0.2.104 54523 <-> 103.24.86.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:11.260234 0.158555 udp 10.0.2.104 54523 <-> 50.142.111.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:12.261781 0.181352 udp 10.0.2.104 54523 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:13.253248 0.134172 udp 10.0.2.104 54523 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:14.254736 4.071205 udp 10.0.2.104 54523 <-> 5.12.139.89 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:15.256294 0.000000 udp 10.0.2.104 54523 -> 74.216.7.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:16.257579 4.171430 udp 10.0.2.104 54523 <-> 69.243.233.159 16464 CON 0 0 4 1616 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:17.259012 0.000000 udp 10.0.2.104 54523 -> 201.189.85.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:19.262025 0.000000 udp 10.0.2.104 54523 -> 5.12.139.89 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:21.254633 0.153875 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:22.256391 0.167559 udp 10.0.2.104 54523 <-> 68.185.251.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:23.257409 2.611275 udp 10.0.2.104 54523 <-> 186.19.203.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:24.258677 0.063672 udp 10.0.2.104 54523 <-> 188.27.119.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:25.260132 0.159640 udp 10.0.2.104 54523 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:26.262043 0.146791 udp 10.0.2.104 54523 <-> 71.75.221.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:27.253369 0.150747 udp 10.0.2.104 54523 <-> 95.74.19.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:28.255026 0.000000 udp 10.0.2.104 54523 -> 178.148.67.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:29.256399 1.127490 udp 10.0.2.104 54523 <-> 2.192.89.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:31.258898 0.000000 udp 10.0.2.104 54523 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:32.260418 0.051589 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:33.261764 0.103334 udp 10.0.2.104 54523 <-> 178.148.67.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:34.253304 0.048270 udp 10.0.2.104 54523 <-> 77.45.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:35.255003 0.123169 udp 10.0.2.104 54523 <-> 2.192.89.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:36.256117 0.290796 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:37.257577 0.081985 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:38.259237 0.514310 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:39.260927 0.322499 udp 10.0.2.104 54523 <-> 189.68.140.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:40.262333 0.272069 udp 10.0.2.104 54523 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:41.253811 0.070671 udp 10.0.2.104 54523 <-> 95.51.31.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:42.254978 0.000000 udp 10.0.2.104 54523 -> 94.191.221.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:43.256213 0.424090 udp 10.0.2.104 54523 <-> 190.94.233.98 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:44.257826 0.237049 udp 10.0.2.104 54523 <-> 71.155.230.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:45.259124 1.634100 udp 10.0.2.104 54523 <-> 97.107.193.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:46.260679 0.375468 udp 10.0.2.104 54523 <-> 111.249.127.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:47.262140 0.138586 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:48.253572 0.136032 udp 10.0.2.104 54523 <-> 98.124.92.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:49.254974 0.158144 udp 10.0.2.104 54523 <-> 68.185.251.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:50.256342 0.297770 udp 10.0.2.104 54523 <-> 125.4.4.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:51.258036 0.168562 udp 10.0.2.104 54523 <-> 71.7.176.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:52.259104 0.000000 udp 10.0.2.104 54523 -> 187.91.65.152 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:53.260730 0.288221 udp 10.0.2.104 54523 <-> 190.188.145.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:54.262256 0.171061 udp 10.0.2.104 54523 <-> 24.238.169.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:55.260145 0.000000 udp 10.0.2.104 54523 -> 108.198.192.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:57:55.916748 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:57:56.256122 0.306207 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:57.256351 0.292969 udp 10.0.2.104 54523 <-> 24.68.145.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:58.258079 0.072625 udp 10.0.2.104 54523 <-> 90.230.7.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:57:59.259338 0.137431 udp 10.0.2.104 54523 <-> 76.114.253.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:00.260642 0.201316 udp 10.0.2.104 54523 <-> 178.77.20.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:01.262054 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:02.253816 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:03.255426 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:04.256389 0.000000 udp 10.0.2.104 54523 -> 190.172.110.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:05.257860 0.010274 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:06.259260 1.132791 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:07.260847 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:08.262834 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:09.253913 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:10.254890 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:11.256397 1.556727 udp 10.0.2.104 54523 <-> 190.172.110.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:13.259258 0.135614 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:14.260866 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:15.262440 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:16.253590 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:17.255026 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:18.256471 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:19.257883 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:20.259814 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:21.261003 4.997144 udp 10.0.2.104 54523 -> 190.172.110.252 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:22.262679 0.000117 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:22.262796 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:58:23.254105 0.010208 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:24.255051 0.000000 udp 10.0.2.104 54523 -> 175.195.228.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:25.256801 0.172684 udp 10.0.2.104 54523 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:27.259946 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:28.261084 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:29.262448 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:30.253810 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:31.255278 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:32.257235 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:33.258029 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:34.259837 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:35.260944 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:36.262471 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:37.254172 0.000104 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:37.254276 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:58:39.256980 0.114941 udp 10.0.2.104 54523 <-> 2.193.64.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:40.258167 0.222947 udp 10.0.2.104 54523 <-> 177.224.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:41.259933 0.000000 udp 10.0.2.104 54523 -> 181.226.169.77 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:42.261225 0.249702 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:43.262462 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:43.913467 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:58:44.254432 0.456119 udp 10.0.2.104 54523 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:45.255386 0.167795 udp 10.0.2.104 54523 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:46.257211 0.046439 udp 10.0.2.104 54523 <-> 87.198.109.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:47.258401 0.000000 udp 10.0.2.104 54523 -> 201.68.62.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:48.259709 0.229433 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:49.261240 1.133792 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:50.262949 0.000000 udp 10.0.2.104 54523 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:51.253871 0.210605 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:52.255983 0.218688 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:53.256772 0.000000 udp 10.0.2.104 54523 -> 78.189.233.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:54.258368 0.000000 udp 10.0.2.104 54523 -> 64.252.3.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:55.260170 0.141461 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:56.261322 0.000000 udp 10.0.2.104 54523 -> 95.39.254.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:57.262956 0.268463 udp 10.0.2.104 54523 <-> 189.4.214.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:58:58.254062 0.000000 udp 10.0.2.104 54523 -> 169.199.121.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:58:59.255753 0.023393 udp 10.0.2.104 54523 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:00.256950 0.000000 udp 10.0.2.104 54523 -> 85.152.244.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:01.262521 0.070247 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:02.262884 1.129890 udp 10.0.2.104 54523 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:03.266185 0.143246 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:04.265433 0.176846 udp 10.0.2.104 54523 <-> 176.218.72.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:05.254804 0.328545 udp 10.0.2.104 54523 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:06.255317 0.148588 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:07.257239 0.000000 udp 10.0.2.104 54523 -> 81.226.243.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:08.258414 0.027970 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:09.268290 0.000000 udp 10.0.2.104 54523 -> 201.68.62.68 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:10.268477 0.151707 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:11.267257 0.211415 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:12.255803 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:13.256290 0.000062 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:13.256352 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:59:14.256971 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:15.258330 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:16.260080 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:17.261461 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:18.262850 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:19.254163 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:20.255720 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:21.257224 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:23.267785 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:24.265831 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:25.262798 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:26.254367 0.087377 udp 10.0.2.104 54523 <-> 217.77.24.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:27.256309 0.000000 udp 10.0.2.104 54523 -> 5.12.54.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:28.256947 0.205566 udp 10.0.2.104 54523 <-> 76.115.104.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:29.258554 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:30.263460 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:30.922530 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:59:31.262953 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:32.253018 0.000142 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:32.253160 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:59:33.254561 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:34.256075 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:35.257314 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:36.258996 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:37.260192 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:39.253185 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:40.255396 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:41.255993 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:42.257119 1.231783 udp 10.0.2.104 54523 <-> 70.30.90.88 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:44.260332 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:45.261458 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:46.253204 0.423341 udp 10.0.2.104 54523 <-> 37.215.190.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:47.254714 0.744827 udp 10.0.2.104 54523 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:48.256105 0.154570 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:49.257529 0.219238 udp 10.0.2.104 54523 <-> 178.42.149.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:50.258730 0.147815 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:51.260637 0.129096 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:52.261541 0.324189 udp 10.0.2.104 54523 <-> 114.180.181.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:53.253134 0.000000 udp 10.0.2.104 54523 -> 98.219.34.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 12:59:54.254558 0.166279 udp 10.0.2.104 54523 <-> 65.186.75.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:55.256156 4.184595 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:56.257762 0.147126 udp 10.0.2.104 54523 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:57.258897 0.303254 udp 10.0.2.104 54523 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 12:59:58.260539 0.000000 udp 10.0.2.104 54523 -> 71.168.211.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:00.253203 0.291745 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:01.255003 0.346567 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:02.256662 0.264582 udp 10.0.2.104 54523 <-> 190.181.162.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:03.257308 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:04.259330 0.076368 udp 10.0.2.104 54523 <-> 213.254.71.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:05.260662 0.069741 udp 10.0.2.104 54523 <-> 84.236.102.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:06.262110 0.170620 udp 10.0.2.104 54523 <-> 50.154.137.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:07.253264 0.149783 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:08.258257 2.188890 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:09.259931 0.000000 udp 10.0.2.104 54523 -> 190.94.222.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:11.260991 1.735769 udp 10.0.2.104 54523 <-> 89.155.210.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:12.260819 2.001818 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:13.262671 0.000000 udp 10.0.2.104 54523 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:15.079331 0.000000 udp 10.0.2.104 54523 <- 190.94.222.17 16464 RSP 0 0 1 750 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:15.254954 2.149970 udp 10.0.2.104 54523 <-> 173.86.134.158 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:16.256359 3.170036 udp 10.0.2.104 54523 <-> 65.186.75.59 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:17.918605 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:00:18.258928 0.351386 udp 10.0.2.104 54523 <-> 114.36.33.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:20.261996 0.278353 udp 10.0.2.104 54523 <-> 82.66.146.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:21.253369 0.000000 udp 10.0.2.104 54523 -> 87.10.29.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:22.255033 0.000000 udp 10.0.2.104 54523 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:23.256313 0.000000 udp 10.0.2.104 54523 -> 2.92.4.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:24.257536 0.000000 udp 10.0.2.104 54523 -> 187.56.135.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:25.259034 0.178060 udp 10.0.2.104 54523 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:26.260593 0.000000 udp 10.0.2.104 54523 -> 106.197.211.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:27.262058 0.000000 udp 10.0.2.104 54523 -> 177.189.104.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:28.253611 0.094533 udp 10.0.2.104 54523 <-> 37.214.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:29.255131 0.253230 udp 10.0.2.104 54523 <-> 190.254.197.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:30.256371 0.156859 udp 10.0.2.104 54523 <-> 71.91.36.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:31.257682 0.065006 udp 10.0.2.104 54523 <-> 178.26.94.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:32.259087 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:33.260870 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:34.262432 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:35.253948 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:36.255082 0.159362 udp 10.0.2.104 54523 <-> 67.167.82.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:37.256369 0.137715 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:38.260326 0.177796 udp 10.0.2.104 54523 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:39.260750 0.159067 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:40.260868 1.040989 udp 10.0.2.104 54523 <-> 109.202.246.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:42.253807 0.151095 udp 10.0.2.104 54523 <-> 24.51.140.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:43.255166 0.307339 udp 10.0.2.104 54523 <-> 220.86.55.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:44.256394 0.177996 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:45.257894 2.027263 udp 10.0.2.104 54523 <-> 24.101.248.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:46.259375 0.177657 udp 10.0.2.104 54523 <-> 24.48.169.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:47.260746 0.000000 udp 10.0.2.104 54523 -> 94.197.155.160 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:48.262617 0.199817 udp 10.0.2.104 54523 <-> 192.252.239.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:49.253678 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:50.255345 0.256007 udp 10.0.2.104 54523 <-> 187.107.244.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:51.256482 0.000000 udp 10.0.2.104 54523 -> 109.52.99.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:00:52.258108 0.271139 udp 10.0.2.104 54523 <-> 189.60.31.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:53.259263 1.316341 udp 10.0.2.104 54523 <-> 24.232.163.97 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:55.262475 0.112771 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:56.253494 0.122860 udp 10.0.2.104 54523 <-> 2.192.89.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:57.255065 0.149952 udp 10.0.2.104 54523 <-> 174.109.218.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:58.260545 0.132260 udp 10.0.2.104 54523 <-> 157.252.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:00:59.260664 0.148546 udp 10.0.2.104 54523 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:00.266960 0.265249 udp 10.0.2.104 54523 <-> 186.36.140.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:01.268384 0.422299 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:02.267861 1.011923 udp 10.0.2.104 54523 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:03.256221 0.477378 udp 10.0.2.104 54523 -> 113.210.9.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:03.733599 0.000000 icmp 113.210.9.15 0x0303 -> 10.0.2.104 0x5040 URP 192 1 86 flow=Background 1970/01/01 13:01:04.255371 0.000000 udp 10.0.2.104 54523 -> 77.102.200.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:04.916200 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:01:05.256838 0.263530 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:06.260167 1.565345 udp 10.0.2.104 54523 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:07.261386 0.049165 udp 10.0.2.104 54523 <-> 178.148.67.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:08.264064 0.261390 udp 10.0.2.104 54523 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:09.263640 0.130731 udp 10.0.2.104 54523 <-> 88.247.23.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:10.256875 0.200682 udp 10.0.2.104 54523 <-> 70.70.162.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:11.260572 0.145273 udp 10.0.2.104 54523 <-> 79.50.19.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:12.262895 0.000000 udp 10.0.2.104 54523 -> 116.48.75.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:13.266614 0.171165 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:14.264817 0.159032 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:15.261758 0.343387 udp 10.0.2.104 54523 <-> 177.103.57.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:16.263068 0.497082 udp 10.0.2.104 54523 <-> 95.180.171.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:17.257766 0.213688 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:18.269400 1.181957 udp 10.0.2.104 54523 <-> 68.8.70.128 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:20.270728 0.157541 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:21.270692 0.018721 udp 10.0.2.104 54523 <-> 176.199.74.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:22.267896 1.987205 udp 10.0.2.104 54523 -> 190.78.121.133 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:23.267968 0.756966 udp 10.0.2.104 54523 <-> 201.88.57.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:25.256758 1.332752 udp 10.0.2.104 54523 <-> 181.166.93.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:26.264063 0.055634 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:27.268921 0.136933 udp 10.0.2.104 54523 <-> 24.215.93.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:28.266241 0.116241 udp 10.0.2.104 54523 <-> 5.15.202.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:29.265775 0.119953 udp 10.0.2.104 54523 <-> 68.9.106.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:30.262359 0.287289 udp 10.0.2.104 54523 <-> 179.219.214.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:31.254081 3.569109 udp 10.0.2.104 54523 <-> 24.154.59.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:32.255785 0.192386 udp 10.0.2.104 54523 <-> 76.177.59.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:33.259964 0.177161 udp 10.0.2.104 54523 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:34.260354 0.140396 udp 10.0.2.104 54523 <-> 47.16.247.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:35.260024 0.000000 udp 10.0.2.104 54523 -> 174.57.124.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:36.261219 0.027048 udp 10.0.2.104 54523 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:37.269247 0.153805 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:38.258568 0.796887 udp 10.0.2.104 54523 <-> 172.243.139.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:39.257714 0.070345 udp 10.0.2.104 54523 <-> 95.252.24.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:40.257003 0.060309 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:41.258442 0.065008 udp 10.0.2.104 54523 <-> 85.87.142.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:42.259844 0.139513 udp 10.0.2.104 54523 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:43.261172 0.000000 udp 10.0.2.104 54523 -> 2.192.229.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:44.268848 0.240335 udp 10.0.2.104 54523 <-> 41.92.91.80 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:45.259767 0.135639 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:46.260932 0.081918 udp 10.0.2.104 54523 <-> 151.74.252.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:47.261381 0.224355 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:48.261328 0.336388 udp 10.0.2.104 54523 <-> 201.219.190.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:49.260922 0.332207 udp 10.0.2.104 54523 <-> 190.204.50.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:50.261360 4.997203 udp 10.0.2.104 54523 -> 186.205.161.16 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:51.262855 0.379048 udp 10.0.2.104 54523 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:51.913770 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:01:52.254090 2.276030 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:53.255870 0.000000 udp 10.0.2.104 54523 -> 172.243.183.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:56.260238 1.148409 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:01:58.263053 0.000000 udp 10.0.2.104 54523 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:01:59.254450 0.141739 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:00.255897 0.338278 udp 10.0.2.104 54523 <-> 190.207.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:01.257118 0.286471 udp 10.0.2.104 54523 <-> 187.15.239.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:02.258716 0.229472 udp 10.0.2.104 54523 <-> 186.93.97.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:03.260352 0.318162 udp 10.0.2.104 54523 <-> 177.68.211.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:04.261327 0.302978 udp 10.0.2.104 54523 <-> 186.25.241.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:05.253137 0.087349 udp 10.0.2.104 54523 <-> 89.142.118.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:06.254701 0.265267 udp 10.0.2.104 54523 <-> 187.158.80.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:07.256073 0.568908 udp 10.0.2.104 54523 <-> 117.198.21.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:08.257032 0.076495 udp 10.0.2.104 54523 <-> 178.149.186.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:09.260262 0.276377 udp 10.0.2.104 54523 <-> 179.208.168.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:10.260848 0.173327 udp 10.0.2.104 54523 <-> 96.20.104.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:11.261426 0.135526 udp 10.0.2.104 54523 <-> 67.87.15.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:12.253171 0.214820 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:13.254536 0.000000 udp 10.0.2.104 54523 -> 75.94.163.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:02:14.256294 2.669413 udp 10.0.2.104 54523 <-> 188.29.87.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:15.257338 0.158641 udp 10.0.2.104 54523 <-> 24.140.176.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:16.258753 0.000000 udp 10.0.2.104 54523 -> 72.204.77.150 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:02:17.260437 0.065395 udp 10.0.2.104 54523 <-> 83.213.201.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:18.261837 0.238977 udp 10.0.2.104 54523 <-> 186.93.97.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:19.253100 0.156772 udp 10.0.2.104 54523 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:20.254317 0.162022 udp 10.0.2.104 54523 <-> 68.102.125.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:21.256187 0.218539 udp 10.0.2.104 54523 <-> 190.38.83.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:22.257373 1.147491 udp 10.0.2.104 54523 <-> 24.138.62.113 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:24.260141 0.024697 udp 10.0.2.104 54523 <-> 95.85.182.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:25.261891 0.403369 udp 10.0.2.104 54523 <-> 201.221.100.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:26.253259 0.014868 udp 10.0.2.104 54523 <-> 213.47.113.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:27.254617 0.307567 udp 10.0.2.104 54523 <-> 110.134.54.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:28.256414 0.060325 udp 10.0.2.104 54523 <-> 91.237.245.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:29.257284 0.165288 udp 10.0.2.104 54523 <-> 71.234.210.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:30.258700 0.528942 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:31.260494 0.081670 udp 10.0.2.104 54523 <-> 88.162.229.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:32.261906 0.152567 udp 10.0.2.104 54523 <-> 24.188.69.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:33.253230 0.376509 udp 10.0.2.104 54523 <-> 201.242.148.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:34.254638 0.137289 udp 10.0.2.104 54523 <-> 71.224.28.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:35.256030 0.143652 udp 10.0.2.104 54523 <-> 69.115.153.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:36.257312 0.000000 udp 10.0.2.104 54523 -> 99.196.156.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:02:37.258844 0.208136 udp 10.0.2.104 54523 <-> 70.70.162.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:38.262283 0.159425 udp 10.0.2.104 54523 <-> 74.193.110.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:38.921812 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:02:39.262219 0.403140 udp 10.0.2.104 54523 <-> 1.163.82.147 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:40.253416 0.152842 udp 10.0.2.104 54523 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:41.254677 0.164269 udp 10.0.2.104 54523 <-> 71.57.228.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:42.256061 0.312572 udp 10.0.2.104 54523 <-> 24.68.145.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:43.257394 0.000000 udp 10.0.2.104 54523 -> 2.182.186.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:02:44.259149 0.154018 udp 10.0.2.104 54523 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:45.260855 0.116701 udp 10.0.2.104 54523 <-> 72.218.201.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:46.261357 0.176921 udp 10.0.2.104 54523 <-> 174.2.220.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:47.253191 0.160113 udp 10.0.2.104 54523 <-> 75.185.241.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:47.350734 0.000000 udp 10.0.2.104 54523 <- 99.196.156.159 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:02:48.254906 0.125572 udp 10.0.2.104 54523 <-> 68.39.69.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:49.256247 0.225649 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:50.294233 0.208756 udp 10.0.2.104 54523 <-> 76.94.114.208 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:51.289218 0.350189 udp 10.0.2.104 54523 <-> 74.176.160.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:52.283451 0.330634 udp 10.0.2.104 54523 <-> 118.166.167.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:53.278532 0.262053 udp 10.0.2.104 54523 <-> 200.109.62.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:54.262226 0.236113 udp 10.0.2.104 54523 <-> 75.133.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:55.321518 0.163294 udp 10.0.2.104 54523 <-> 66.227.200.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:56.316071 0.265387 udp 10.0.2.104 54523 <-> 190.203.162.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:57.310353 0.000000 udp 10.0.2.104 54523 -> 71.45.42.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:02:58.303930 0.199925 udp 10.0.2.104 54523 <-> 212.238.76.14 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:02:59.298103 0.243058 udp 10.0.2.104 54523 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:00.290247 0.170750 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:01.271798 0.345351 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:02.262697 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:03.260578 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:04.258060 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:05.259032 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:06.260654 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:07.262055 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:08.253442 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:09.254726 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:10.256570 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:11.258268 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:12.259064 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:13.260886 0.173654 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:14.262026 0.382608 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:15.253852 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:16.255342 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:17.256694 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:18.258436 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:19.259493 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:20.260833 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:21.262548 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:22.253924 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:23.255189 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:24.256553 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:25.258115 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:25.918892 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:03:26.259666 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:27.260908 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:29.253753 2.180632 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:30.255275 0.317077 udp 10.0.2.104 54523 <-> 181.72.237.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:32.258465 4.149283 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:33.259504 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:34.261028 0.163004 udp 10.0.2.104 54523 <-> 68.52.141.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:35.262439 0.043214 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:37.255504 0.067370 udp 10.0.2.104 54523 <-> 86.100.146.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:38.256516 0.095175 udp 10.0.2.104 54523 <-> 87.55.74.226 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:39.258176 1.146278 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:41.260856 0.000000 udp 10.0.2.104 54523 -> 75.95.145.229 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:42.262387 1.303813 udp 10.0.2.104 54523 <-> 179.56.57.233 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:44.255341 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:45.256908 0.000000 udp 10.0.2.104 54523 -> 83.221.86.2 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:46.257916 0.139273 udp 10.0.2.104 54523 <-> 85.219.46.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:47.260196 0.212536 udp 10.0.2.104 54523 <-> 198.72.159.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:48.261120 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:49.262486 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:03:50.253710 0.189906 udp 10.0.2.104 54523 <-> 156.26.82.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:51.255654 2.178713 udp 10.0.2.104 54523 <-> 98.250.1.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:52.257287 0.357286 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:54.259877 0.437869 udp 10.0.2.104 54523 <-> 219.203.89.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:55.261006 0.484645 udp 10.0.2.104 54523 <-> 190.206.231.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:56.262467 0.150187 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:57.254435 2.568208 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:03:58.255315 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:00.258923 0.211503 udp 10.0.2.104 54523 <-> 78.221.144.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:01.260115 0.149990 udp 10.0.2.104 54523 <-> 71.82.74.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:02.260961 0.345567 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:03.262603 0.174153 udp 10.0.2.104 54523 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:04.254220 0.152993 udp 10.0.2.104 54523 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:05.255830 0.159969 udp 10.0.2.104 54523 <-> 98.223.21.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:06.256878 0.156053 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:07.258676 0.285857 udp 10.0.2.104 54523 <-> 151.232.213.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:08.260079 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:09.261330 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:10.262541 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:11.254018 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:12.255952 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:12.917105 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:04:13.257364 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:14.258901 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:15.260211 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:16.261222 0.144741 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:17.262759 0.000000 udp 10.0.2.104 54523 -> 186.18.212.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:18.254286 0.139043 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:19.255682 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:20.257198 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:21.258571 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:22.260146 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:23.261525 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:24.263027 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:25.254347 0.416303 udp 10.0.2.104 54523 <-> 151.232.213.26 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:26.255784 0.336755 udp 10.0.2.104 54523 <-> 114.37.56.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:27.257833 0.069845 udp 10.0.2.104 54523 <-> 93.72.6.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:28.258503 0.373310 udp 10.0.2.104 54523 <-> 14.53.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:29.260112 0.176784 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:30.261372 0.075861 udp 10.0.2.104 54523 <-> 46.37.71.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:31.262997 0.364978 udp 10.0.2.104 54523 <-> 1.172.101.198 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:32.254454 0.147610 udp 10.0.2.104 54523 <-> 72.11.176.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:33.256034 0.191123 udp 10.0.2.104 54523 <-> 24.139.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:34.262866 0.100073 udp 10.0.2.104 54523 <-> 2.228.29.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:35.263524 0.000000 udp 10.0.2.104 54523 -> 105.226.121.131 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:36.264529 0.195172 udp 10.0.2.104 54523 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:37.264506 0.202593 udp 10.0.2.104 54523 <-> 76.202.129.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:38.254588 1.193716 udp 10.0.2.104 54523 <-> 46.238.69.152 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:40.256008 0.158706 udp 10.0.2.104 54523 <-> 68.207.245.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:41.257131 0.040912 udp 10.0.2.104 54523 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:42.258519 0.166136 udp 10.0.2.104 54523 <-> 67.248.85.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:43.260130 0.173346 udp 10.0.2.104 54523 <-> 74.197.79.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:44.261602 0.293167 udp 10.0.2.104 54523 <-> 179.219.214.223 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:45.253045 0.000000 udp 10.0.2.104 54523 -> 96.31.10.230 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:46.254720 0.143176 udp 10.0.2.104 54523 <-> 67.87.224.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:47.256512 0.172406 udp 10.0.2.104 54523 <-> 173.172.19.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:48.257219 0.198108 udp 10.0.2.104 54523 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:49.258836 0.165922 udp 10.0.2.104 54523 <-> 24.214.174.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:50.260315 0.147130 udp 10.0.2.104 54523 <-> 37.61.147.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:51.134518 0.000000 udp 10.0.2.104 54523 <- 96.31.10.230 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:51.261730 0.238236 udp 10.0.2.104 54523 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:52.253068 0.302808 udp 10.0.2.104 54523 <-> 61.46.123.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:53.254751 0.000000 udp 10.0.2.104 54523 -> 81.228.183.54 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:54.256103 0.057473 udp 10.0.2.104 54523 <-> 46.49.86.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:55.257181 0.000000 udp 10.0.2.104 54523 -> 92.36.144.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:56.258794 1.740441 udp 10.0.2.104 54523 <-> 186.22.10.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:57.260050 0.184032 udp 10.0.2.104 54523 <-> 97.79.248.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:58.261982 0.208313 udp 10.0.2.104 54523 <-> 76.121.20.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:04:59.253057 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:04:59.913994 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:05:00.254967 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:01.256081 0.193572 udp 10.0.2.104 54523 <-> 74.61.169.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:02.257821 0.143509 udp 10.0.2.104 54523 <-> 69.120.164.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:03.258878 0.295395 udp 10.0.2.104 54523 <-> 220.100.40.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:04.260258 0.038538 udp 10.0.2.104 54523 <-> 77.96.67.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:05.261603 0.174329 udp 10.0.2.104 54523 <-> 24.107.139.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:06.253126 0.000000 udp 10.0.2.104 54523 -> 108.181.202.185 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:07.254705 0.144515 udp 10.0.2.104 54523 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:08.256574 0.652227 udp 10.0.2.104 54523 <-> 24.144.11.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:09.257635 0.161073 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:10.258904 0.000000 udp 10.0.2.104 54523 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:11.260233 0.157409 udp 10.0.2.104 54523 <-> 70.180.79.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:12.261874 0.328338 udp 10.0.2.104 54523 <-> 187.123.164.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:13.253089 0.356506 udp 10.0.2.104 54523 <-> 190.204.21.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:14.254787 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:15.256201 0.000000 udp 10.0.2.104 54523 -> 174.97.209.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:16.614866 0.162818 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:17.607045 0.063279 udp 10.0.2.104 54523 <-> 82.22.216.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:18.598329 0.287712 udp 10.0.2.104 54523 <-> 190.47.200.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:19.589426 0.164356 udp 10.0.2.104 54523 <-> 74.56.191.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:20.569252 0.136176 udp 10.0.2.104 54523 <-> 24.148.4.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:21.558723 0.151985 udp 10.0.2.104 54523 <-> 67.61.188.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:22.552109 0.169018 udp 10.0.2.104 54523 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:23.545088 0.137554 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:24.537213 0.189539 udp 10.0.2.104 54523 <-> 49.205.131.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:25.528238 0.344843 udp 10.0.2.104 54523 <-> 61.63.115.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:26.518954 0.000000 udp 10.0.2.104 54523 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:27.499215 0.164779 udp 10.0.2.104 54523 <-> 65.34.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:28.488764 0.043335 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:29.482196 0.000000 udp 10.0.2.104 54523 -> 174.102.48.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:30.475265 0.151109 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:31.467599 0.959239 udp 10.0.2.104 54523 <-> 24.133.127.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:32.458665 0.146812 udp 10.0.2.104 54523 <-> 184.59.85.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:33.449602 0.217174 udp 10.0.2.104 54523 <-> 184.155.114.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:34.432163 0.000000 udp 10.0.2.104 54523 -> 134.3.82.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:35.422035 0.153664 udp 10.0.2.104 54523 <-> 216.20.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:36.415682 0.180436 udp 10.0.2.104 54523 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:37.408452 0.482872 udp 10.0.2.104 54523 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:38.400375 0.164020 udp 10.0.2.104 54523 <-> 76.180.211.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:39.391942 0.166622 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:40.382542 0.163117 udp 10.0.2.104 54523 <-> 182.237.145.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:41.362238 0.000000 udp 10.0.2.104 54523 -> 201.250.95.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:42.351965 0.176489 udp 10.0.2.104 54523 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:43.346725 3.256280 udp 10.0.2.104 54523 <-> 31.15.210.97 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:44.339700 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:05:45.332164 2.021207 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:46.969442 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:05:48.297921 0.127945 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:49.287640 0.168504 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:50.280669 0.379721 udp 10.0.2.104 54523 <-> 201.250.95.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:51.273568 0.198049 udp 10.0.2.104 54523 <-> 174.7.21.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:52.265465 0.164192 udp 10.0.2.104 54523 <-> 106.51.51.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:53.262113 0.372885 udp 10.0.2.104 54523 <-> 98.145.222.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:54.262084 0.143741 udp 10.0.2.104 54523 <-> 66.65.121.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:55.253420 0.158716 udp 10.0.2.104 54523 <-> 68.63.70.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:56.255224 0.331198 udp 10.0.2.104 54523 <-> 61.231.10.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:57.256506 0.118168 udp 10.0.2.104 54523 <-> 208.58.44.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:58.258021 0.601816 udp 10.0.2.104 54523 <-> 190.207.37.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:05:59.261815 0.000000 udp 10.0.2.104 54523 -> 201.68.62.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:00.270038 0.616335 udp 10.0.2.104 54523 <-> 177.34.180.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:01.273882 0.000000 udp 10.0.2.104 54523 -> 5.12.54.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:02.268377 0.000000 udp 10.0.2.104 54523 -> 114.143.8.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:03.267312 0.155466 udp 10.0.2.104 54523 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:04.265276 0.240222 udp 10.0.2.104 54523 <-> 186.115.125.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:05.263486 0.000000 udp 10.0.2.104 54523 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:06.261813 0.155345 udp 10.0.2.104 54523 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:07.265098 0.058545 udp 10.0.2.104 54523 <-> 5.12.54.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:08.262411 0.260823 udp 10.0.2.104 54523 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:09.253990 0.210147 udp 10.0.2.104 54523 <-> 186.89.3.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:10.256239 0.076388 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:11.258574 0.025014 udp 10.0.2.104 54523 <-> 83.142.16.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:12.260645 0.242121 udp 10.0.2.104 54523 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:13.260231 0.000000 udp 10.0.2.104 54523 -> 173.161.67.57 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:14.261127 0.091812 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:15.262601 0.333826 udp 10.0.2.104 54523 <-> 151.232.213.26 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:16.253683 0.195578 udp 10.0.2.104 54523 <-> 74.77.174.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:17.258054 0.162656 udp 10.0.2.104 54523 <-> 74.56.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:18.258234 0.000000 udp 10.0.2.104 54523 -> 105.129.24.89 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:19.258509 0.155335 udp 10.0.2.104 54523 <-> 37.45.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:20.259387 1.360601 udp 10.0.2.104 54523 <-> 186.92.81.61 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:22.262478 0.113157 udp 10.0.2.104 54523 <-> 79.55.129.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:23.253791 0.168344 udp 10.0.2.104 54523 <-> 71.229.16.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:24.255628 0.200124 udp 10.0.2.104 54523 <-> 96.49.44.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:25.256703 0.000000 udp 10.0.2.104 54523 -> 75.183.161.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:26.258448 0.382945 udp 10.0.2.104 54523 <-> 87.11.165.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:27.259903 0.218989 udp 10.0.2.104 54523 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:28.260822 0.148421 udp 10.0.2.104 54523 <-> 107.16.47.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:29.262637 0.138812 udp 10.0.2.104 54523 <-> 98.121.91.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:30.254163 0.158010 udp 10.0.2.104 54523 <-> 65.35.101.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:31.255807 0.000000 udp 10.0.2.104 54523 -> 78.214.164.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:32.257029 0.163626 udp 10.0.2.104 54523 <-> 97.95.43.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:33.258745 0.143910 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:33.919051 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:06:34.259556 0.000000 udp 10.0.2.104 54523 -> 92.46.145.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:35.261017 0.279185 udp 10.0.2.104 54523 <-> 187.78.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:36.262707 0.671036 udp 10.0.2.104 54523 <-> 190.112.98.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:37.254242 0.000000 udp 10.0.2.104 54523 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:38.255962 0.158207 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:39.257023 0.206307 udp 10.0.2.104 54523 <-> 67.160.217.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:40.258019 0.042895 udp 10.0.2.104 54523 <-> 178.148.67.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:41.260155 0.000000 udp 10.0.2.104 54523 -> 92.46.145.251 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:42.261106 0.198099 udp 10.0.2.104 54523 <-> 76.176.91.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:43.262893 0.150030 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:44.253908 0.000000 udp 10.0.2.104 54523 -> 23.25.165.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:45.255755 0.038142 udp 10.0.2.104 54523 <-> 94.73.1.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:46.256829 0.207812 udp 10.0.2.104 54523 <-> 76.28.167.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:47.258604 0.151980 udp 10.0.2.104 54523 <-> 24.212.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:48.259840 0.131461 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:49.261368 0.000000 udp 10.0.2.104 54523 -> 24.244.127.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:50.262759 0.337078 udp 10.0.2.104 54523 <-> 203.171.229.185 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:51.254199 0.000000 udp 10.0.2.104 54523 -> 177.64.94.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:06:52.255416 0.730493 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:53.257118 0.049644 udp 10.0.2.104 54523 <-> 109.86.167.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:54.258610 0.168561 udp 10.0.2.104 54523 <-> 76.122.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:55.259921 0.189193 udp 10.0.2.104 54523 <-> 65.65.137.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:56.261210 0.922137 udp 10.0.2.104 54523 <-> 68.3.172.85 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:57.263014 0.171839 udp 10.0.2.104 54523 <-> 64.110.249.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:58.254411 0.154680 udp 10.0.2.104 54523 <-> 71.70.83.28 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:06:59.256134 0.210548 udp 10.0.2.104 54523 <-> 173.18.197.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:00.256881 0.151154 udp 10.0.2.104 54523 <-> 184.170.68.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:01.258771 0.214133 udp 10.0.2.104 54523 <-> 66.214.186.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:02.260368 0.484528 udp 10.0.2.104 54523 <-> 187.107.244.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:03.261493 0.321930 udp 10.0.2.104 54523 <-> 189.68.131.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:04.262919 0.048699 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:05.254835 0.000000 udp 10.0.2.104 54523 -> 166.159.168.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:06.256005 0.205812 udp 10.0.2.104 54523 <-> 67.177.197.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:07.257352 0.000000 udp 10.0.2.104 54523 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:08.258957 3.307154 udp 10.0.2.104 54523 <-> 200.204.236.230 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:09.259940 3.139688 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:10.261393 0.000000 udp 10.0.2.104 54523 -> 204.195.53.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:13.255661 0.000083 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:13.255744 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:07:15.258732 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:16.260017 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:17.261479 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:18.253019 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:19.254426 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:20.256349 0.517852 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:20.916887 0.000129 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:07:21.257300 0.327985 udp 10.0.2.104 54523 <-> 190.110.186.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:22.258918 0.138905 udp 10.0.2.104 54523 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:23.260165 0.000000 udp 10.0.2.104 54523 -> 190.206.232.100 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:24.261343 0.319496 udp 10.0.2.104 54523 <-> 180.215.199.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:25.252917 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:26.254465 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:27.256198 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:28.258155 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:29.258912 0.276964 udp 10.0.2.104 54523 <-> 201.213.208.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:30.260501 3.261181 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:31.261796 3.060358 udp 10.0.2.104 54523 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:32.252988 0.295384 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:35.257590 0.033517 udp 10.0.2.104 54523 <-> 88.153.141.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:36.258774 0.287404 udp 10.0.2.104 54523 <-> 201.213.208.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:37.260058 0.070382 udp 10.0.2.104 54523 <-> 82.78.141.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:38.261648 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:39.253370 3.004116 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:40.254925 3.005600 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:41.256213 0.555940 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:44.262085 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:45.262041 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:46.253200 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:47.254906 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:48.260486 4.199241 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:49.260423 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:50.261958 0.000000 udp 10.0.2.104 54523 -> 142.136.206.4 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:51.261561 0.307611 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:53.253134 0.124602 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:54.261754 0.000000 udp 10.0.2.104 54523 -> 190.206.232.100 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:07:55.273882 1.726523 udp 10.0.2.104 54523 <-> 181.46.174.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:56.276073 1.268111 udp 10.0.2.104 54523 <-> 190.37.143.111 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:07:58.272359 1.003943 udp 10.0.2.104 54523 <-> 200.122.70.103 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:00.263388 0.160632 udp 10.0.2.104 54523 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:01.260211 0.116966 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:02.263049 0.317020 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:03.261105 0.069484 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:04.258969 0.000000 udp 10.0.2.104 54523 -> 2.156.61.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:05.260920 0.175044 udp 10.0.2.104 54523 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:06.262097 0.180567 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:07.256000 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:07.914981 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:08:08.255192 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:09.256370 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:11.259106 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:12.260752 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:13.262073 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:14.253172 0.000061 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:14.253233 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:08:15.254800 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:16.256755 0.173259 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:17.258772 0.000000 udp 10.0.2.104 54523 -> 46.161.110.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:18.259289 0.000000 udp 10.0.2.104 54523 -> 189.55.190.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:19.260843 0.507611 udp 10.0.2.104 54523 <-> 166.159.168.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:20.262007 1.169880 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:22.255021 0.176696 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:23.258342 0.155265 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:24.258085 1.591570 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:25.259405 0.040995 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:26.260666 0.050056 udp 10.0.2.104 54523 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:27.264413 0.172200 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:28.253849 0.260418 udp 10.0.2.104 54523 <-> 190.206.231.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:29.255350 0.000000 udp 10.0.2.104 54523 -> 31.19.34.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:30.256676 0.734046 udp 10.0.2.104 54523 <-> 186.92.133.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:31.258080 0.170466 udp 10.0.2.104 54523 <-> 173.178.75.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:32.259146 0.240164 udp 10.0.2.104 54523 <-> 186.89.3.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:33.260848 0.185088 udp 10.0.2.104 54523 <-> 68.7.239.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:34.264698 0.145099 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:35.254717 0.000000 udp 10.0.2.104 54523 -> 62.113.14.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:36.255334 0.483291 udp 10.0.2.104 54523 <-> 187.161.132.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:37.256621 0.047336 udp 10.0.2.104 54523 <-> 89.77.192.242 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:38.258117 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:39.259435 0.000000 udp 10.0.2.104 54523 -> 184.167.104.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:40.260966 1.001245 udp 10.0.2.104 54523 <-> 89.214.78.4 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:42.253765 3.158809 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:43.255152 0.719024 udp 10.0.2.104 54523 <-> 190.12.97.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:46.259646 0.038009 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:47.260808 4.108579 udp 10.0.2.104 54523 <-> 89.77.192.242 16464 CON 0 0 10 7236 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:48.262355 4.996984 udp 10.0.2.104 54523 -> 64.135.36.4 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:49.253327 0.140670 udp 10.0.2.104 54523 <-> 89.214.78.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:50.255863 0.000000 udp 10.0.2.104 54523 -> 219.205.248.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:52.258045 0.196255 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:54.260877 0.000000 udp 10.0.2.104 54523 -> 89.77.192.242 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:08:54.912049 0.000151 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:08:55.262569 0.498628 udp 10.0.2.104 54523 <-> 187.161.132.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:56.253485 0.229509 udp 10.0.2.104 54523 <-> 190.78.245.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:57.255644 0.352033 udp 10.0.2.104 54523 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:58.257306 0.154328 udp 10.0.2.104 54523 <-> 67.167.82.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:08:59.258256 0.442608 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:00.259748 0.144113 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:01.261078 0.045674 udp 10.0.2.104 54523 <-> 89.216.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:02.262577 0.203501 udp 10.0.2.104 54523 <-> 24.68.114.211 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:03.253978 0.170801 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:04.255326 1.051811 udp 10.0.2.104 54523 <-> 190.36.26.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:05.256853 0.055497 udp 10.0.2.104 54523 <-> 80.4.111.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:06.257725 0.000000 udp 10.0.2.104 54523 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:07.259237 0.000000 udp 10.0.2.104 54523 -> 172.243.169.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:08.261298 0.000000 udp 10.0.2.104 54523 -> 89.155.210.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:09.262804 1.993079 udp 10.0.2.104 54523 -> 89.214.78.4 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:10.253860 0.050565 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:12.256992 0.081414 udp 10.0.2.104 54523 <-> 83.213.33.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:13.258307 0.000000 udp 10.0.2.104 54523 -> 50.75.65.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:14.260275 0.411874 udp 10.0.2.104 54523 <-> 186.137.232.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:15.261376 0.679929 udp 10.0.2.104 54523 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:16.262566 0.271435 udp 10.0.2.104 54523 <-> 201.80.212.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:17.254109 0.219984 udp 10.0.2.104 54523 <-> 68.189.5.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:17.401675 0.000000 udp 10.0.2.104 54523 <- 172.243.169.7 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:18.255775 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:19.257090 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:20.258392 0.000000 udp 10.0.2.104 54523 -> 190.16.162.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:21.259917 0.142579 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:22.261223 4.049493 udp 10.0.2.104 54523 <-> 84.55.62.240 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:23.262915 0.000000 udp 10.0.2.104 54523 -> 78.88.219.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:24.254096 0.155245 udp 10.0.2.104 54523 <-> 216.115.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:25.255510 0.240397 udp 10.0.2.104 54523 <-> 177.227.19.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:27.258563 0.152331 udp 10.0.2.104 54523 <-> 69.124.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:28.259548 0.291731 udp 10.0.2.104 54523 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:29.261367 0.000000 udp 10.0.2.104 54523 -> 190.217.209.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:30.262759 2.681952 udp 10.0.2.104 54523 <-> 187.161.132.241 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:31.254235 0.038905 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:33.257086 0.000000 udp 10.0.2.104 54523 -> 184.43.31.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:34.258405 0.083689 udp 10.0.2.104 54523 <-> 178.149.186.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:35.260271 0.316543 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:36.261586 0.036616 udp 10.0.2.104 54523 <-> 91.89.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:37.262860 0.141373 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:38.254199 0.081436 udp 10.0.2.104 54523 <-> 217.129.118.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:39.255822 0.184125 udp 10.0.2.104 54523 <-> 75.65.20.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:40.257088 0.155874 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:41.258606 2.455135 udp 10.0.2.104 54523 <-> 46.196.151.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:41.919603 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:09:42.260375 0.300620 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:43.261500 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:44.252822 0.055340 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:45.254278 0.159296 udp 10.0.2.104 54523 <-> 67.251.65.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:46.255702 0.062842 udp 10.0.2.104 54523 <-> 31.19.34.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:47.257195 0.165674 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:48.258586 0.125809 udp 10.0.2.104 54523 <-> 79.179.165.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:49.260399 0.000000 udp 10.0.2.104 54523 -> 83.83.126.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:50.261520 0.208533 udp 10.0.2.104 54523 <-> 50.168.18.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:51.252921 0.325054 udp 10.0.2.104 54523 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:52.254200 0.000000 udp 10.0.2.104 54523 -> 84.126.230.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:53.256010 0.000000 udp 10.0.2.104 54523 -> 68.168.200.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:54.257318 0.387673 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:55.258648 0.328461 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:56.260133 0.093436 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:57.262380 4.154779 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:09:58.255221 0.000000 udp 10.0.2.104 54523 -> 87.187.109.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:09:59.255326 0.051468 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:00.256235 0.194793 udp 10.0.2.104 54523 <-> 190.79.214.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:02.259187 0.266950 udp 10.0.2.104 54523 <-> 190.78.121.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:03.261021 0.130009 udp 10.0.2.104 54523 <-> 76.117.184.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:04.262067 0.151304 udp 10.0.2.104 54523 <-> 92.86.65.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:05.253289 0.919247 udp 10.0.2.104 54523 <-> 172.243.139.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:06.254831 0.444784 udp 10.0.2.104 54523 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:07.257158 0.292746 udp 10.0.2.104 54523 <-> 187.11.63.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:08.258397 2.110783 udp 10.0.2.104 54523 <-> 31.44.140.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:09.260432 0.261481 udp 10.0.2.104 54523 <-> 72.130.237.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:11.262127 0.292240 udp 10.0.2.104 54523 <-> 190.188.145.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:12.253181 0.000000 udp 10.0.2.104 54523 -> 187.57.60.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:13.254487 0.294042 udp 10.0.2.104 54523 <-> 187.11.63.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:14.256173 0.374315 udp 10.0.2.104 54523 <-> 190.135.117.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:15.257563 0.103544 udp 10.0.2.104 54523 <-> 31.44.140.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:16.258879 0.261326 udp 10.0.2.104 54523 <-> 72.130.237.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:17.260555 0.270199 udp 10.0.2.104 54523 <-> 187.243.128.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:18.262950 0.085130 udp 10.0.2.104 54523 <-> 79.45.129.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:19.253208 0.296197 udp 10.0.2.104 54523 <-> 125.4.4.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:20.254821 0.000000 udp 10.0.2.104 54523 -> 72.54.27.22 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:21.256438 0.271863 udp 10.0.2.104 54523 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:22.258173 0.010369 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:23.259144 0.172449 udp 10.0.2.104 54523 <-> 27.106.49.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:24.261288 0.107369 udp 10.0.2.104 54523 <-> 46.167.88.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:25.261946 0.218615 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:26.253259 0.000000 udp 10.0.2.104 54523 -> 166.159.168.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:27.258232 0.335363 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:28.259839 0.139899 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:28.920734 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:10:29.261032 0.000000 udp 10.0.2.104 54523 -> 181.46.240.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:30.262101 2.991274 udp 10.0.2.104 54523 -> 179.246.100.103 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:31.262165 0.000000 udp 10.0.2.104 54523 -> 89.214.78.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:32.262068 0.093914 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:34.254825 3.920152 udp 10.0.2.104 54523 <-> 190.94.221.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:35.256469 0.020670 udp 10.0.2.104 54523 <-> 176.199.74.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:36.258188 0.302143 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:37.258937 0.313129 udp 10.0.2.104 54523 <-> 201.95.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:38.260971 0.183332 udp 10.0.2.104 54523 <-> 74.194.199.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:39.261954 0.308292 udp 10.0.2.104 54523 <-> 181.72.237.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:40.253352 0.352229 udp 10.0.2.104 54523 <-> 118.160.210.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:41.254959 0.520371 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:42.256235 0.160620 udp 10.0.2.104 54523 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:43.258214 0.000000 udp 10.0.2.104 54523 -> 75.193.62.134 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:44.259165 0.368277 udp 10.0.2.104 54523 <-> 106.1.36.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:45.261027 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:46.261956 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:47.253338 0.000000 udp 10.0.2.104 54523 -> 216.49.32.84 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:48.255812 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:48.255923 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:10:49.257443 0.287134 udp 10.0.2.104 54523 <-> 190.74.48.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:50.258109 0.000000 udp 10.0.2.104 54523 -> 92.40.157.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:10:51.260619 0.143144 udp 10.0.2.104 54523 <-> 69.121.228.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:52.260561 2.143496 udp 10.0.2.104 54523 <-> 71.70.83.28 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:53.261818 0.749637 udp 10.0.2.104 54523 <-> 186.34.157.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:55.255359 0.048635 udp 10.0.2.104 54523 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:56.256508 0.057149 udp 10.0.2.104 54523 <-> 95.180.191.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:57.257816 0.112140 udp 10.0.2.104 54523 <-> 87.14.65.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:58.259518 0.142370 udp 10.0.2.104 54523 <-> 24.47.139.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:10:59.260759 0.204583 udp 10.0.2.104 54523 <-> 67.174.109.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:00.262005 0.047710 udp 10.0.2.104 54523 <-> 89.69.149.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:01.253490 0.165408 udp 10.0.2.104 54523 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:02.254974 0.126339 udp 10.0.2.104 54523 <-> 158.181.242.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:03.256776 2.356707 udp 10.0.2.104 54523 <-> 27.106.49.170 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:04.257795 0.274577 udp 10.0.2.104 54523 <-> 177.143.155.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:06.260974 0.347927 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:07.262176 0.000000 udp 10.0.2.104 54523 -> 69.224.139.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:08.256905 0.257695 udp 10.0.2.104 54523 <-> 190.121.66.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:09.258026 0.171009 udp 10.0.2.104 54523 <-> 173.175.90.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:10.258508 0.354993 udp 10.0.2.104 54523 <-> 201.213.208.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:11.258917 0.190861 udp 10.0.2.104 54523 <-> 190.79.214.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:12.260639 0.319577 udp 10.0.2.104 54523 <-> 79.53.104.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:13.262699 0.561577 udp 10.0.2.104 54523 <-> 95.237.143.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:14.262739 0.163360 udp 10.0.2.104 54523 <-> 66.61.104.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:15.253893 0.157224 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:15.915077 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:11:16.255175 0.137364 udp 10.0.2.104 54523 <-> 79.18.211.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:17.257050 0.189361 udp 10.0.2.104 54523 <-> 68.225.217.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:18.257845 0.000000 udp 10.0.2.104 54523 -> 190.110.186.148 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:19.259316 0.296963 udp 10.0.2.104 54523 <-> 122.27.202.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:20.261153 0.000000 udp 10.0.2.104 54523 -> 187.143.192.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:21.262758 0.139992 udp 10.0.2.104 54523 <-> 69.124.115.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:22.253966 0.155826 udp 10.0.2.104 54523 <-> 71.70.83.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:23.256030 0.167586 udp 10.0.2.104 54523 <-> 71.90.56.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:24.257382 0.166343 udp 10.0.2.104 54523 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:25.258937 0.159265 udp 10.0.2.104 54523 <-> 108.170.53.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:26.260527 1.016240 udp 10.0.2.104 54523 <-> 190.97.41.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:27.261199 0.164982 udp 10.0.2.104 54523 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:28.262433 0.144038 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:30.255757 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:31.257351 0.000162 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:31.257513 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:11:32.258304 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:33.259367 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:34.261087 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:35.262470 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:36.254106 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:37.256343 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:38.257885 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:39.259036 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:40.260078 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:41.261117 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:42.262970 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:43.254004 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:44.255999 3.004103 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:45.257314 0.000000 udp 10.0.2.104 54523 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:46.258685 0.310726 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:11:48.261000 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:49.262684 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:50.253413 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:51.255861 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:53.258761 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:54.259647 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:55.261381 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:56.262879 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:57.254186 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:58.255323 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:59.257208 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:11:59.257303 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:12:00.259058 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:01.260178 0.000000 udp 10.0.2.104 54523 -> 95.14.229.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:02.264789 0.000000 udp 10.0.2.104 54523 -> 165.155.210.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:02.914654 0.000118 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:12:03.264538 0.140514 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:04.254513 0.040278 udp 10.0.2.104 54523 <-> 178.148.67.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:05.255735 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:06.257093 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:07.258537 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:08.260472 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:09.261153 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:10.262994 0.219851 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:11.254469 0.312367 udp 10.0.2.104 54523 <-> 180.19.158.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:12.256405 0.278959 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:13.257931 0.000000 udp 10.0.2.104 54523 -> 190.238.233.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:14.090843 3.002165 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 13:12:14.258479 0.000000 udp 10.0.2.104 54523 -> 2.192.89.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:15.260171 1.465128 udp 10.0.2.104 54523 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:16.261793 0.289640 udp 10.0.2.104 54523 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:17.253110 0.155087 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:18.254612 0.146301 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:19.256207 0.338430 udp 10.0.2.104 54523 <-> 125.230.11.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:20.257773 0.000000 udp 10.0.2.104 54523 -> 126.60.25.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:21.098540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:12:21.258756 0.105210 udp 10.0.2.104 54523 <-> 46.161.110.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:22.260166 1.561932 udp 10.0.2.104 54523 <-> 112.118.16.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:24.252879 0.219983 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:25.254424 0.207015 udp 10.0.2.104 54523 <-> 74.61.161.122 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:26.256245 0.156614 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:27.257359 0.000000 udp 10.0.2.104 54523 -> 190.193.115.178 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:28.258713 0.238259 udp 10.0.2.104 54523 <-> 201.227.74.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:29.099265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:12:29.259861 0.000000 udp 10.0.2.104 54523 -> 64.222.202.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:30.261436 0.323952 udp 10.0.2.104 54523 <-> 201.26.213.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:31.253116 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:32.254509 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:33.256287 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:34.257654 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:35.258762 0.000131 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:35.258893 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:12:36.261049 0.145369 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:37.261597 0.301369 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:38.253455 2.157584 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:39.255082 0.764010 udp 10.0.2.104 54523 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:41.258146 0.129053 udp 10.0.2.104 54523 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:42.258988 0.000000 udp 10.0.2.104 54523 -> 201.249.10.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:43.260415 4.893154 udp 10.0.2.104 54523 <-> 72.220.6.74 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:44.262281 0.200357 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:45.102985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:12:45.253063 1.066108 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:47.256027 0.215582 udp 10.0.2.104 54523 <-> 64.131.160.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:48.258048 0.048388 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:49.259019 0.136917 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:49.919835 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:12:50.260358 0.086492 udp 10.0.2.104 54523 <-> 91.89.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:51.262096 0.176964 udp 10.0.2.104 54523 <-> 68.184.206.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:12:52.253309 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:54.256509 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:55.257318 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:56.258988 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:57.260880 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:58.264390 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:12:59.255057 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:00.254802 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:01.256472 0.000111 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:01.256583 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:13:02.257417 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:03.259337 1.158798 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:05.262091 0.173202 udp 10.0.2.104 54523 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:06.253086 0.461983 udp 10.0.2.104 54523 <-> 189.63.204.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:07.254724 1.425350 udp 10.0.2.104 54523 <-> 190.150.187.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:08.256138 1.810267 udp 10.0.2.104 54523 <-> 72.220.6.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:09.258016 0.305926 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:10.259860 0.169916 udp 10.0.2.104 54523 <-> 75.94.163.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:11.260881 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:12.262079 0.704042 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:13.253567 0.129730 udp 10.0.2.104 54523 <-> 76.117.184.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:14.254580 0.231886 udp 10.0.2.104 54523 <-> 37.142.197.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:15.256914 0.211141 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:16.258852 0.190635 udp 10.0.2.104 54523 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:17.109263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:13:17.259687 0.334132 udp 10.0.2.104 54523 <-> 220.150.47.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:18.260420 0.311988 udp 10.0.2.104 54523 <-> 201.246.136.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:19.262593 0.369399 udp 10.0.2.104 54523 <-> 114.38.164.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:20.253374 0.029696 udp 10.0.2.104 54523 <-> 151.100.96.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:21.254963 0.085657 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:22.256613 0.119869 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:23.258520 3.155397 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:24.259345 0.030769 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:25.262612 0.000000 udp 10.0.2.104 54523 -> 5.34.141.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:27.253355 0.000000 udp 10.0.2.104 54523 -> 190.234.5.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:28.254933 0.261418 udp 10.0.2.104 54523 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:29.257197 0.169727 udp 10.0.2.104 54523 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:30.258203 0.178446 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:31.259579 0.084829 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:32.260752 0.081776 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:33.262374 0.332952 udp 10.0.2.104 54523 <-> 177.68.7.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:34.253782 3.004785 udp 10.0.2.104 54523 -> 212.181.65.250 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:35.255280 0.143595 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:36.256587 0.131851 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:36.917347 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:13:38.259212 4.998633 udp 10.0.2.104 54523 <-> 177.54.140.9 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:39.261798 0.078097 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:40.262204 2.062774 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:43.493343 0.000000 udp 10.0.2.104 54523 <- 177.54.140.9 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:44.259230 0.000000 udp 10.0.2.104 54523 -> 91.89.7.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:45.260809 0.077930 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:46.262108 3.140732 udp 10.0.2.104 54523 <-> 71.236.119.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:47.262227 3.035712 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:48.253990 0.150894 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:51.258232 0.167207 udp 10.0.2.104 54523 <-> 50.154.137.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:52.260358 0.000000 udp 10.0.2.104 54523 -> 166.159.168.43 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:13:53.262067 0.167134 udp 10.0.2.104 54523 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:54.262364 0.169827 udp 10.0.2.104 54523 <-> 68.69.36.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:55.253856 0.164114 udp 10.0.2.104 54523 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:56.255341 0.117207 udp 10.0.2.104 54523 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:57.256668 2.168779 udp 10.0.2.104 54523 <-> 174.102.151.90 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:58.258453 0.298917 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:13:58.969136 0.021824 udp 10.0.2.104 54621 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 13:13:58.991251 0.000000 udp 10.0.2.104 54622 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:00.260696 0.344222 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:01.262599 1.653797 udp 10.0.2.104 54523 <-> 181.55.154.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:01.567910 0.046376 udp 10.0.2.104 54523 <- 166.159.168.43 16464 RSP 0 0 2 1780 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:02.253799 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:03.255369 0.050466 udp 10.0.2.104 54523 <-> 93.79.133.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:04.257099 1.467769 udp 10.0.2.104 54523 <-> 190.204.12.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:05.258544 0.152560 udp 10.0.2.104 54523 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:06.259689 0.278282 udp 10.0.2.104 54523 <-> 181.166.30.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:07.261486 0.047223 udp 10.0.2.104 54523 <-> 146.52.161.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:08.263063 0.140310 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:09.254041 0.000000 udp 10.0.2.104 54523 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:10.255457 0.139166 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:11.257020 0.166016 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:12.258214 0.000000 udp 10.0.2.104 54523 -> 88.224.184.244 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:13.259983 0.143194 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:14.260921 0.082308 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:15.262654 0.000000 udp 10.0.2.104 54523 -> 89.151.151.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:16.254040 0.154234 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:17.256101 0.233398 udp 10.0.2.104 54523 <-> 72.174.46.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:18.256944 0.138999 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:19.258796 0.476355 udp 10.0.2.104 54523 <-> 190.200.0.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:20.259726 0.309740 udp 10.0.2.104 54523 <-> 190.194.109.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:21.273886 0.066953 udp 10.0.2.104 54523 <-> 188.126.36.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:22.271939 0.228138 udp 10.0.2.104 54523 <-> 92.46.145.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:23.258561 1.132464 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:23.917796 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:14:25.256883 0.981397 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:26.258439 1.342492 udp 10.0.2.104 54523 <-> 220.150.47.251 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:28.261628 0.511435 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:29.262832 0.000000 udp 10.0.2.104 54523 -> 89.214.78.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:30.254442 1.182002 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 4 496 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:32.257583 0.125983 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:33.258633 0.308160 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:34.260101 0.000000 udp 10.0.2.104 54523 -> 92.46.145.251 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:35.261356 0.139315 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:36.262796 0.339876 udp 10.0.2.104 54523 <-> 220.150.47.251 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:37.254378 0.091241 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:38.255968 1.318543 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:39.257556 0.572865 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:40.258434 0.124603 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:41.259914 0.000000 udp 10.0.2.104 54523 -> 41.140.76.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:42.261356 0.576509 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:43.263152 0.000000 udp 10.0.2.104 54523 -> 68.171.90.112 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:44.254451 0.278672 udp 10.0.2.104 54523 <-> 190.217.209.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:45.256153 0.156447 udp 10.0.2.104 54523 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:46.258092 0.062106 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:47.258596 0.237376 udp 10.0.2.104 54523 <-> 190.200.61.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:48.259999 0.000000 udp 10.0.2.104 54523 -> 190.121.66.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:49.261783 0.159424 udp 10.0.2.104 54523 <-> 206.74.136.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:50.253121 0.065036 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:51.254629 0.052162 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:52.256809 0.382556 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:53.258101 0.000000 udp 10.0.2.104 54523 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:54.262843 0.156978 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:55.262610 0.000000 udp 10.0.2.104 54523 -> 24.148.90.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:14:56.262741 0.062585 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:57.252851 0.208891 udp 10.0.2.104 54523 <-> 71.95.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:58.254243 0.660931 udp 10.0.2.104 54523 <-> 179.208.34.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:14:59.256337 0.303867 udp 10.0.2.104 54523 <-> 58.85.66.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:00.257365 0.163279 udp 10.0.2.104 54523 <-> 68.103.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:01.258556 0.316569 udp 10.0.2.104 54523 <-> 115.20.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:02.260416 0.386340 udp 10.0.2.104 54523 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:03.261832 0.350938 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:04.253313 0.071745 udp 10.0.2.104 54523 <-> 178.149.186.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:05.254170 1.941941 udp 10.0.2.104 54523 <-> 190.183.13.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:06.256255 0.191101 udp 10.0.2.104 54523 <-> 69.153.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:07.257877 0.052725 udp 10.0.2.104 54523 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:08.258968 0.163547 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:09.259971 0.168245 udp 10.0.2.104 54523 <-> 207.210.39.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:10.262062 0.058317 udp 10.0.2.104 54523 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:10.912453 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:15:11.253257 3.034499 udp 10.0.2.104 54523 <-> 78.42.232.14 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:12.254613 0.065465 udp 10.0.2.104 54523 <-> 77.47.75.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:13.256018 0.000000 udp 10.0.2.104 54523 -> 186.130.67.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:15.258977 2.002544 udp 10.0.2.104 54523 -> 108.18.241.26 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:16.260540 0.215596 udp 10.0.2.104 54523 <-> 186.95.246.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:18.252937 0.000000 udp 10.0.2.104 54523 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:19.254690 0.295534 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:20.256002 0.101144 udp 10.0.2.104 54523 <-> 2.192.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:21.257561 0.043217 udp 10.0.2.104 54523 <-> 78.22.30.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:22.258917 0.067981 udp 10.0.2.104 54523 <-> 178.42.149.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:23.260956 0.214699 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:24.262113 0.301996 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:25.253376 0.165326 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:26.254606 1.096500 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:28.258280 0.141281 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:29.258711 0.178619 udp 10.0.2.104 54523 <-> 24.27.70.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:30.261312 2.004111 udp 10.0.2.104 54523 <-> 179.208.34.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:31.261646 0.101732 udp 10.0.2.104 54523 <-> 85.65.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:32.253211 0.311781 udp 10.0.2.104 54523 <-> 181.31.210.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:33.254719 0.063370 udp 10.0.2.104 54523 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:34.256955 0.158634 udp 10.0.2.104 54523 <-> 66.131.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:35.257462 0.251167 udp 10.0.2.104 54523 <-> 70.70.164.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:36.258901 0.000000 udp 10.0.2.104 54523 -> 79.17.109.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:37.260651 0.000000 udp 10.0.2.104 54523 -> 188.173.73.135 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:38.261905 0.043789 udp 10.0.2.104 54523 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:39.253384 0.000000 udp 10.0.2.104 54523 -> 219.205.248.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:40.254845 0.197747 udp 10.0.2.104 54523 <-> 74.196.176.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:41.256673 0.299970 udp 10.0.2.104 54523 <-> 70.70.164.40 16464 CON 0 0 14 11628 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:42.258254 0.162377 udp 10.0.2.104 54523 <-> 68.103.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:43.259417 0.000000 udp 10.0.2.104 54523 -> 188.173.73.135 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:44.260504 0.505924 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:46.253322 0.174228 udp 10.0.2.104 54523 <-> 188.47.249.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:47.254679 0.134745 udp 10.0.2.104 54523 <-> 71.206.58.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:48.256468 1.002145 udp 10.0.2.104 54523 <-> 122.108.68.59 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:50.259312 0.316322 udp 10.0.2.104 54523 <-> 189.68.131.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:51.260588 0.195498 udp 10.0.2.104 54523 <-> 24.113.7.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:15:52.262107 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:53.253503 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:54.255414 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:55.257119 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:56.258484 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:57.259220 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:57.919893 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:15:58.260695 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:15:59.262087 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:00.253327 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:01.255161 0.048612 udp 10.0.2.104 54523 <-> 88.135.143.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:16:02.258687 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:03.259873 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:04.261064 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:05.261472 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:06.261895 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:07.254509 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:08.254926 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:10.258227 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:11.259248 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:12.261175 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:13.262061 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:14.253502 0.000131 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:14.253633 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:16:15.255687 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:16.257008 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:17.258713 0.074655 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:16:18.259375 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:19.260976 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:20.262147 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:21.253490 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:22.254909 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:24.258237 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:25.259323 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:26.260973 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:27.262726 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:28.253756 0.000135 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:28.253891 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:16:29.256187 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:30.257832 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:31.259243 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:32.260209 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:33.261171 0.334898 udp 10.0.2.104 54523 <-> 189.68.131.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:16:34.262593 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:36.255800 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:37.257279 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:38.258634 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:39.259823 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:40.261213 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:41.262460 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:42.254008 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:43.255326 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:44.257814 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:44.918243 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:16:45.258295 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:45.258390 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:16:46.260090 4.996915 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:47.260832 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:48.262630 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:49.254071 0.048578 udp 10.0.2.104 54523 <-> 88.135.143.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:16:50.255302 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:52.258753 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:53.259744 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:55.262585 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:56.254205 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:57.255770 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:58.257904 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:16:59.258450 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:00.260007 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:01.261104 0.000101 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:01.261205 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:17:02.262547 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:03.254070 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:04.255810 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:05.257019 0.048682 udp 10.0.2.104 54523 <-> 88.135.143.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:06.258460 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:07.259868 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:08.261186 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:09.262842 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:10.254324 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:11.256655 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:13.258502 0.073236 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:14.260359 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:16.262713 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:17.254171 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:18.255984 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:19.257128 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:20.258433 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:21.260159 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:22.261558 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:23.252959 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:24.254307 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:25.256500 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:26.257439 0.000081 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:26.257520 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:17:27.258596 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:28.260094 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:29.261751 0.073046 udp 10.0.2.104 54523 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:31.254483 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:31.915434 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:17:32.256179 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:33.257473 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:34.258533 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:35.260664 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:36.261348 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:37.253016 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:38.255356 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:39.256886 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:40.257822 0.000044 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:40.257866 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:17:41.258826 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:42.260434 0.337400 udp 10.0.2.104 54523 <-> 189.68.131.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:43.262096 0.039010 udp 10.0.2.104 54523 <-> 77.96.67.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:44.253246 0.158938 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:45.254605 0.248952 udp 10.0.2.104 54523 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:46.256499 0.158767 udp 10.0.2.104 54523 <-> 174.102.196.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:47.257313 0.000000 udp 10.0.2.104 54523 -> 2.180.138.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:48.258737 0.344094 udp 10.0.2.104 54523 <-> 124.247.112.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:49.260517 0.000000 udp 10.0.2.104 54523 -> 86.9.170.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:50.261910 0.121228 udp 10.0.2.104 54523 <-> 79.9.99.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:51.252877 0.000000 udp 10.0.2.104 54523 -> 24.202.216.106 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:52.254638 0.320239 udp 10.0.2.104 54523 <-> 116.82.82.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:53.256647 0.000000 udp 10.0.2.104 54523 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:54.258815 0.000000 udp 10.0.2.104 54523 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:55.260032 0.000000 udp 10.0.2.104 54523 -> 206.248.119.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:17:56.261340 1.325757 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:58.253299 0.141933 udp 10.0.2.104 54523 <-> 68.192.112.230 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:17:59.254662 0.151944 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:00.257026 0.310926 udp 10.0.2.104 54523 <-> 189.214.225.215 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:01.258419 0.243059 udp 10.0.2.104 54523 <-> 190.72.164.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:02.258865 0.020502 udp 10.0.2.104 54523 <-> 78.94.145.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:03.260508 0.000000 udp 10.0.2.104 54523 -> 86.124.225.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:04.261885 0.151858 udp 10.0.2.104 54523 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:05.253224 0.047912 udp 10.0.2.104 54523 <-> 78.22.30.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:06.254667 0.123742 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:07.256820 0.118599 udp 10.0.2.104 54523 <-> 24.36.117.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:08.258057 0.169294 udp 10.0.2.104 54523 <-> 66.25.93.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:09.258989 0.143766 udp 10.0.2.104 54523 <-> 24.159.153.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:10.260746 0.378323 udp 10.0.2.104 54523 <-> 124.11.140.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:11.262098 0.277677 udp 10.0.2.104 54523 <-> 124.45.204.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:12.253064 0.143896 udp 10.0.2.104 54523 <-> 76.116.153.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:13.254932 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:14.256676 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:15.257548 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:16.259046 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:17.260708 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:18.262112 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:18.912118 0.000111 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:18:19.253376 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:20.254975 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:21.256683 0.000093 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:21.256776 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:18:22.258515 0.498603 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:23.259665 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:24.260725 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:25.262068 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:26.253424 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:27.254879 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:28.256475 0.179737 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:29.257757 0.169348 udp 10.0.2.104 54523 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:30.259321 0.175709 udp 10.0.2.104 54523 <-> 76.8.184.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:31.260507 0.055600 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:32.262116 0.176779 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:33.253413 0.000000 udp 10.0.2.104 54523 -> 187.155.94.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:34.254984 0.678220 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:35.256688 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:36.257946 0.000000 udp 10.0.2.104 54523 -> 190.217.209.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:37.259954 0.142119 udp 10.0.2.104 54523 <-> 47.16.247.243 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:38.260696 0.103987 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:39.262751 1.992603 udp 10.0.2.104 54523 <-> 109.52.99.20 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:40.253555 0.277291 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:42.256848 0.147140 udp 10.0.2.104 54523 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:43.258475 0.168489 udp 10.0.2.104 54523 <-> 72.51.46.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:44.260077 1.407897 udp 10.0.2.104 54523 <-> 190.206.151.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:45.260738 0.227493 udp 10.0.2.104 54523 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:46.262285 0.423311 udp 10.0.2.104 54523 <-> 109.52.99.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:47.252930 0.246915 udp 10.0.2.104 54523 <-> 98.155.248.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:48.255695 0.165400 udp 10.0.2.104 54523 <-> 66.25.93.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:49.256422 0.166336 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:50.258550 0.210145 udp 10.0.2.104 54523 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:51.259381 0.228772 udp 10.0.2.104 54523 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:52.260838 0.329112 udp 10.0.2.104 54523 <-> 36.224.33.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:53.262483 0.100711 udp 10.0.2.104 54523 <-> 78.251.0.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:54.253554 0.000000 udp 10.0.2.104 54523 -> 124.247.137.90 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:55.255179 0.000000 udp 10.0.2.104 54523 -> 67.82.101.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:56.256767 0.143953 udp 10.0.2.104 54523 <-> 204.210.176.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:57.258468 0.047882 udp 10.0.2.104 54523 <-> 213.46.47.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:18:58.259307 0.000000 udp 10.0.2.104 54523 -> 190.182.128.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:18:59.261171 0.000000 udp 10.0.2.104 54523 -> 115.241.58.107 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:00.262473 0.889179 udp 10.0.2.104 54523 <-> 124.247.137.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:01.253768 1.266491 udp 10.0.2.104 54523 <-> 190.254.197.42 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:03.257161 0.060877 udp 10.0.2.104 54523 <-> 213.238.228.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:04.258501 0.000000 udp 10.0.2.104 54523 -> 76.179.185.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:05.259748 0.143243 udp 10.0.2.104 54523 <-> 67.82.101.93 16464 CON 0 0 5 3618 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:05.920432 0.000148 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:19:06.260849 0.335275 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:07.262463 0.147053 udp 10.0.2.104 54523 <-> 69.116.80.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:08.253280 0.334956 udp 10.0.2.104 54523 <-> 114.163.161.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:09.255734 0.126661 udp 10.0.2.104 54523 <-> 68.185.124.13 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:10.256980 0.000000 udp 10.0.2.104 54523 -> 195.62.0.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:11.258405 0.000000 udp 10.0.2.104 54523 -> 201.223.246.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:12.259571 0.244196 udp 10.0.2.104 54523 <-> 186.90.119.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:13.260981 0.219199 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:14.262510 0.271674 udp 10.0.2.104 54523 <-> 76.178.38.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:15.254121 0.180527 udp 10.0.2.104 54523 <-> 75.87.91.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:16.256263 1.001500 udp 10.0.2.104 54523 <-> 190.198.144.251 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:18.258502 3.995670 udp 10.0.2.104 54523 -> 46.22.172.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:19.259780 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:20.261162 0.975716 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:21.115203 3.001183 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 13:19:21.262936 0.180048 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:23.256004 0.147691 udp 10.0.2.104 54523 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:24.256963 0.372018 udp 10.0.2.104 54523 <-> 114.47.90.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:25.258729 0.000000 udp 10.0.2.104 54523 -> 216.183.150.240 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:26.259767 0.000000 udp 10.0.2.104 54523 -> 95.46.217.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:27.261327 1.933570 udp 10.0.2.104 54523 <-> 103.31.147.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:28.122132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:19:28.262595 0.000000 udp 10.0.2.104 54523 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:29.253809 0.134551 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:30.255709 0.360685 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:31.257444 0.349480 udp 10.0.2.104 54523 <-> 61.228.24.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:32.258419 0.080775 udp 10.0.2.104 54523 <-> 83.166.27.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:33.259727 0.214725 udp 10.0.2.104 54523 <-> 201.132.213.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:34.261257 0.433979 udp 10.0.2.104 54523 <-> 186.52.130.134 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:35.262760 2.626058 udp 10.0.2.104 54523 <-> 190.207.37.25 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:36.124196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:19:36.254232 0.075853 udp 10.0.2.104 54523 <-> 79.115.108.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:38.257510 0.091643 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:39.258613 0.145274 udp 10.0.2.104 54523 <-> 98.192.242.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:40.260486 0.151486 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:41.261277 0.137787 udp 10.0.2.104 54523 <-> 67.82.101.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:42.262857 0.163985 udp 10.0.2.104 54523 <-> 66.30.24.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:43.254197 0.000000 udp 10.0.2.104 54523 -> 190.160.244.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:44.255833 0.167554 udp 10.0.2.104 54523 <-> 173.172.19.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:45.257192 0.159322 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:46.258384 0.211400 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:47.262111 0.088485 udp 10.0.2.104 54523 <-> 92.225.103.122 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:48.261915 0.000000 udp 10.0.2.104 54523 -> 189.94.127.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:49.262948 0.038163 udp 10.0.2.104 54523 <-> 188.254.163.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:50.254253 0.194075 udp 10.0.2.104 54523 <-> 186.90.148.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:51.256696 4.996056 udp 10.0.2.104 54523 -> 63.147.47.73 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:52.127080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:19:52.257252 0.168123 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:52.918023 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:19:53.258463 0.000000 udp 10.0.2.104 54523 -> 201.27.37.226 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:19:54.260441 0.299508 udp 10.0.2.104 54523 <-> 122.27.16.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:55.261782 2.062288 udp 10.0.2.104 54523 <-> 94.240.166.61 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:58.256131 0.078372 udp 10.0.2.104 54523 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:19:59.257302 0.035904 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:00.258601 0.042540 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:01.260518 0.153769 udp 10.0.2.104 54523 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:02.261266 0.000000 udp 10.0.2.104 54523 -> 172.249.23.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:03.252864 0.095749 udp 10.0.2.104 54523 <-> 94.34.147.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:04.254157 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:05.256048 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:06.257305 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:07.258377 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:08.263039 0.000000 udp 10.0.2.104 54523 -> 50.80.122.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:09.262100 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:10.253226 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:11.254299 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:12.256681 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:13.257780 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:14.258766 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:15.260589 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:16.262051 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:17.253098 1.221199 udp 10.0.2.104 54523 <-> 172.249.23.18 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:19.256369 0.209836 udp 10.0.2.104 54523 <-> 201.217.105.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:20.257201 0.301745 udp 10.0.2.104 54523 <-> 189.6.137.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:21.259318 0.000000 udp 10.0.2.104 54523 -> 164.58.107.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:22.260482 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:23.262058 0.236546 udp 10.0.2.104 54523 <-> 172.249.23.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:24.133088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:20:24.253163 0.024570 udp 10.0.2.104 54523 <-> 83.142.16.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:25.254619 0.127007 udp 10.0.2.104 54523 <-> 78.213.115.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:26.256845 0.000000 udp 10.0.2.104 54523 -> 179.57.31.53 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:27.258313 4.996769 udp 10.0.2.104 54523 -> 174.100.202.195 16464 REQ 0 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:28.260523 2.992509 udp 10.0.2.104 54523 -> 189.69.201.129 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:29.261072 0.000000 udp 10.0.2.104 54523 -> 122.215.8.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:30.262095 0.227490 udp 10.0.2.104 54523 <-> 190.39.122.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:32.424635 0.000000 udp 10.0.2.104 54523 <- 174.100.202.195 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:33.256216 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:34.257856 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:35.258772 1.601266 udp 10.0.2.104 54523 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:36.260281 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:37.261965 0.134320 udp 10.0.2.104 54523 <-> 68.48.58.156 16464 CON 0 0 2 388 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:38.253316 0.000000 udp 10.0.2.104 54523 -> 94.253.205.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:39.254596 0.000000 udp 10.0.2.104 54523 -> 186.89.3.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:39.915706 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:20:40.256362 0.000000 udp 10.0.2.104 54523 -> 83.61.12.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:41.257828 0.278658 udp 10.0.2.104 54523 <-> 201.213.208.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:42.259074 0.000000 udp 10.0.2.104 54523 -> 80.194.4.187 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:43.260335 0.645979 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:44.261794 0.000000 udp 10.0.2.104 54523 -> 24.191.81.20 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:45.253278 0.153101 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:46.254862 0.197774 udp 10.0.2.104 54523 <-> 186.89.3.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:47.256511 0.000000 udp 10.0.2.104 54523 -> 83.61.12.31 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:48.258317 0.094761 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:49.259453 0.228183 udp 10.0.2.104 54523 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:50.260630 0.073247 udp 10.0.2.104 54523 <-> 188.24.11.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:51.262156 0.144124 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:52.253193 0.000000 udp 10.0.2.104 54523 -> 220.150.47.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:53.254695 0.000000 udp 10.0.2.104 54523 -> 92.46.145.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:54.256394 0.000000 udp 10.0.2.104 54523 -> 98.203.127.16 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:55.258315 0.000000 udp 10.0.2.104 54523 -> 177.9.242.7 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:20:56.259131 1.274327 udp 10.0.2.104 54523 <-> 75.85.212.148 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:58.262074 0.134893 udp 10.0.2.104 54523 <-> 47.16.108.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:20:59.253351 0.162714 udp 10.0.2.104 54523 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:00.255068 0.000000 udp 10.0.2.104 54523 -> 92.46.145.251 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:01.257004 0.159256 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:02.258050 0.134937 udp 10.0.2.104 54523 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:03.259075 0.143345 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:04.262067 0.311641 udp 10.0.2.104 54523 <-> 220.150.47.251 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:05.261910 0.308366 udp 10.0.2.104 54523 <-> 177.9.242.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:06.253383 0.214933 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:07.255042 0.136032 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:08.256846 0.367495 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:09.258427 4.140106 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:10.259358 0.176560 udp 10.0.2.104 54523 <-> 24.243.7.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:11.260588 0.126914 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:12.262028 0.161113 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:14.254830 0.157910 udp 10.0.2.104 54523 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:15.256715 0.225379 udp 10.0.2.104 54523 <-> 79.53.104.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:16.258426 0.155489 udp 10.0.2.104 54523 <-> 98.213.124.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:17.260472 0.468520 udp 10.0.2.104 54523 <-> 190.112.98.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:18.261118 0.187522 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:19.262104 0.255679 udp 10.0.2.104 54523 <-> 71.199.86.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:20.253311 0.000000 udp 10.0.2.104 54523 -> 75.197.101.170 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:21.255251 0.260976 udp 10.0.2.104 54523 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:22.257327 0.000000 udp 10.0.2.104 54523 -> 190.73.14.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:23.258290 0.169932 udp 10.0.2.104 54523 <-> 139.102.182.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:24.259129 0.226748 udp 10.0.2.104 54523 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:25.260813 0.047253 udp 10.0.2.104 54523 <-> 92.244.153.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:26.262639 3.483267 udp 10.0.2.104 54523 <-> 173.214.226.239 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:26.912797 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:21:27.253478 0.157224 udp 10.0.2.104 54523 <-> 98.213.124.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:28.255156 1.513792 udp 10.0.2.104 54523 <-> 186.136.104.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:30.257991 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:31.259466 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:32.261208 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:33.262246 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:34.253830 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:35.255366 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:37.258396 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:38.259713 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:39.261305 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:40.262938 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:41.253831 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:42.255651 0.000094 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:42.255745 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:21:43.256653 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:44.258888 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:45.259564 0.420314 udp 10.0.2.104 54523 <-> 112.118.16.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:46.260953 0.135099 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:47.262892 2.146075 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:48.253811 1.363740 udp 10.0.2.104 54523 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:50.256993 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:51.258634 0.000000 udp 10.0.2.104 54523 -> 94.78.184.117 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:52.259835 0.000000 udp 10.0.2.104 54523 -> 93.135.229.127 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:53.261592 0.000000 udp 10.0.2.104 54523 -> 88.73.109.31 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:54.262451 0.041503 udp 10.0.2.104 54523 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:55.253811 0.295136 udp 10.0.2.104 54523 <-> 211.124.245.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:56.255394 0.000000 udp 10.0.2.104 54523 -> 173.76.105.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:57.257472 2.418984 udp 10.0.2.104 54523 <-> 186.19.203.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:21:58.258716 0.000000 udp 10.0.2.104 54523 -> 78.22.30.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:21:59.259869 0.162109 udp 10.0.2.104 54523 <-> 184.162.25.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:00.261353 0.000000 udp 10.0.2.104 54523 -> 190.79.124.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:01.262606 1.287397 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:02.254132 0.000000 udp 10.0.2.104 54523 -> 93.135.229.127 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:03.255324 0.293472 udp 10.0.2.104 54523 <-> 211.124.245.175 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:04.257220 0.166530 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:05.258740 0.348351 udp 10.0.2.104 54523 <-> 114.40.182.72 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:06.259924 2.215010 udp 10.0.2.104 54523 <-> 68.189.5.0 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:07.261310 0.000000 udp 10.0.2.104 54523 -> 190.55.44.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:09.254080 1.169686 udp 10.0.2.104 54523 <-> 70.191.247.93 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:11.257010 0.191067 udp 10.0.2.104 54523 <-> 31.16.142.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:12.258971 0.060209 udp 10.0.2.104 54523 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:13.259863 0.188341 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:13.920540 0.000126 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:22:14.261334 0.000000 udp 10.0.2.104 54523 -> 50.11.51.213 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:15.262938 0.354214 udp 10.0.2.104 54523 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:16.254012 0.000000 udp 10.0.2.104 54523 -> 122.149.73.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:17.255873 0.169454 udp 10.0.2.104 54523 <-> 70.191.247.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:18.257030 3.304402 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:19.259043 0.000000 udp 10.0.2.104 54523 -> 172.249.23.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:20.260489 0.188466 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:22.262678 0.190437 udp 10.0.2.104 54523 <-> 68.7.239.37 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:23.254028 0.299927 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:24.256214 0.012005 udp 10.0.2.104 54523 <-> 89.102.253.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:25.257341 0.151321 udp 10.0.2.104 54523 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:26.258703 0.046742 udp 10.0.2.104 54523 <-> 146.52.161.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:27.259740 0.000000 udp 10.0.2.104 54523 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:28.266118 2.044150 udp 10.0.2.104 54523 <-> 94.21.162.26 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:29.257158 2.146260 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:32.258140 0.049969 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:33.258558 0.068909 udp 10.0.2.104 54523 <-> 212.104.169.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:34.260318 0.314410 udp 10.0.2.104 54523 <-> 190.244.206.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:35.262078 0.160360 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:36.252833 0.138616 udp 10.0.2.104 54523 <-> 24.187.31.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:37.254336 0.000000 udp 10.0.2.104 54523 -> 181.118.86.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:38.256136 1.742446 udp 10.0.2.104 54523 <-> 93.105.145.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:39.257354 0.143312 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:40.258448 0.255024 udp 10.0.2.104 54523 <-> 186.92.54.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:41.260721 0.000000 udp 10.0.2.104 54523 -> 190.121.66.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:42.261514 0.223756 udp 10.0.2.104 54523 <-> 72.129.64.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:43.253068 0.298236 udp 10.0.2.104 54523 <-> 190.161.202.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:44.254478 0.174255 udp 10.0.2.104 54523 <-> 108.183.125.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:45.256292 0.171691 udp 10.0.2.104 54523 <-> 210.212.99.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:46.257960 0.210281 udp 10.0.2.104 54523 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:47.258666 0.310228 udp 10.0.2.104 54523 <-> 79.16.230.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:48.260317 0.215931 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:49.262056 0.148781 udp 10.0.2.104 54523 <-> 182.237.185.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:50.252397 0.000000 udp 10.0.2.104 54523 -> 70.30.90.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:51.254545 0.074123 udp 10.0.2.104 54523 <-> 79.117.163.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:52.255860 0.151186 udp 10.0.2.104 54523 <-> 174.110.129.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:53.257144 0.200384 udp 10.0.2.104 54523 <-> 190.78.245.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:54.258526 0.000000 udp 10.0.2.104 54523 -> 179.203.215.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:22:55.260426 0.140525 udp 10.0.2.104 54523 <-> 178.42.149.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:56.261546 0.138152 udp 10.0.2.104 54523 <-> 75.138.114.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:57.253114 0.283305 udp 10.0.2.104 54523 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:58.254324 0.152874 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:22:59.256203 0.112928 udp 10.0.2.104 54523 <-> 208.58.44.85 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:00.258014 0.069235 udp 10.0.2.104 54523 <-> 94.240.166.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:00.918277 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:23:01.258759 3.996058 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:02.260392 1.976263 udp 10.0.2.104 54523 <-> 187.107.244.35 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:04.253215 0.038969 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:06.256517 0.166849 udp 10.0.2.104 54523 <-> 67.11.181.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:06.349136 0.000000 udp 10.0.2.104 54523 <- 181.166.124.51 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:23:07.258021 0.145086 udp 10.0.2.104 54523 <-> 67.81.193.55 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:08.258870 0.308578 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:09.260826 0.210303 udp 10.0.2.104 54523 <-> 78.221.144.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:10.262119 0.282043 udp 10.0.2.104 54523 <-> 190.245.59.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:11.253329 0.290092 udp 10.0.2.104 54523 <-> 187.66.45.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:12.254723 0.263733 udp 10.0.2.104 54523 <-> 24.249.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:13.256340 0.164191 udp 10.0.2.104 54523 <-> 72.137.144.197 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:14.258165 0.192371 udp 10.0.2.104 54523 <-> 70.180.235.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:15.258948 0.000000 udp 10.0.2.104 54523 -> 190.38.7.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:23:16.260450 1.992885 udp 10.0.2.104 54523 -> 100.44.68.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:23:17.262108 0.167627 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:19.254769 0.146343 udp 10.0.2.104 54523 <-> 68.196.251.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:20.256549 0.246537 udp 10.0.2.104 54523 <-> 179.233.163.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:21.257466 0.474088 udp 10.0.2.104 54523 <-> 14.96.91.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:22.259144 0.065635 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:23.260894 2.153837 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 4 1616 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:24.261878 0.000000 udp 10.0.2.104 54523 -> 108.132.190.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:23:26.254838 0.135986 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:27.256529 0.189600 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:28.257805 0.370414 udp 10.0.2.104 54523 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:29.259078 0.000000 udp 10.0.2.104 54523 -> 85.230.38.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:23:30.260757 0.315536 udp 10.0.2.104 54523 <-> 180.4.203.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:31.262110 0.148997 udp 10.0.2.104 54523 <-> 71.80.67.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:32.253258 3.158799 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:34.258925 4.994605 udp 10.0.2.104 54523 <-> 190.73.247.209 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:36.260639 2.734919 udp 10.0.2.104 54523 <-> 176.240.90.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:37.261769 0.000000 udp 10.0.2.104 54523 -> 190.198.184.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:23:38.262100 0.833849 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:39.529567 0.000000 udp 10.0.2.104 54523 <- 190.73.247.209 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:23:40.255337 0.451177 udp 10.0.2.104 54523 <-> 79.53.125.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:41.256962 0.623621 udp 10.0.2.104 54523 <-> 184.0.8.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:42.258694 0.366195 udp 10.0.2.104 54523 <-> 190.51.40.160 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:43.259120 0.155157 udp 10.0.2.104 54523 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:44.260655 0.048261 udp 10.0.2.104 54523 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:45.262124 3.995745 udp 10.0.2.104 54523 <-> 188.24.133.133 16464 CON 0 0 5 1954 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:46.253400 0.000000 udp 10.0.2.104 54523 -> 177.68.52.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:23:47.915786 0.000136 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:23:48.256210 0.365188 udp 10.0.2.104 54523 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:50.259410 0.287997 udp 10.0.2.104 54523 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:51.260875 0.313261 udp 10.0.2.104 54523 <-> 177.82.176.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:52.262088 0.039836 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:53.253747 0.662152 udp 10.0.2.104 54523 <-> 177.80.138.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:54.256200 0.274089 udp 10.0.2.104 54523 <-> 189.38.135.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:55.257605 0.161500 udp 10.0.2.104 54523 <-> 209.33.13.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:56.258572 0.039450 udp 10.0.2.104 54523 <-> 89.252.221.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:57.259054 0.346537 udp 10.0.2.104 54523 <-> 78.221.144.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:58.260944 0.394301 udp 10.0.2.104 54523 <-> 117.220.10.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:23:59.262274 0.172918 udp 10.0.2.104 54523 <-> 98.200.250.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:00.253783 0.031025 udp 10.0.2.104 54523 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:01.255164 0.141395 udp 10.0.2.104 54523 <-> 77.209.176.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:02.257223 0.181180 udp 10.0.2.104 54523 <-> 24.216.113.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:03.258053 0.000000 udp 10.0.2.104 54523 -> 178.172.245.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:04.259845 0.150820 udp 10.0.2.104 54523 <-> 68.12.180.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:05.260593 0.000000 udp 10.0.2.104 54523 -> 69.120.84.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:06.262162 0.000000 udp 10.0.2.104 54523 -> 1.172.59.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:07.254005 0.211320 udp 10.0.2.104 54523 <-> 50.154.137.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:08.255252 0.146854 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:09.256909 1.299909 udp 10.0.2.104 54523 <-> 24.201.226.137 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:11.259445 0.000000 udp 10.0.2.104 54523 -> 69.15.187.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:12.260686 0.265754 udp 10.0.2.104 54523 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:13.262454 0.000000 udp 10.0.2.104 54523 -> 200.84.79.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:14.253849 0.161194 udp 10.0.2.104 54523 <-> 68.63.7.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:15.255924 0.145824 udp 10.0.2.104 54523 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:16.256892 0.241965 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:17.258738 0.490293 udp 10.0.2.104 54523 <-> 76.8.184.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:18.260104 0.079887 udp 10.0.2.104 54523 <-> 85.136.97.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:19.261383 0.314864 udp 10.0.2.104 54523 <-> 201.210.198.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:20.263028 1.365320 udp 10.0.2.104 54523 <-> 24.244.127.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:22.255349 0.000000 udp 10.0.2.104 54523 -> 186.93.166.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:23.256647 0.000000 udp 10.0.2.104 54523 -> 70.45.158.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:24.258352 0.314117 udp 10.0.2.104 54523 <-> 220.150.47.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:25.259586 0.154784 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:26.261073 0.000000 udp 10.0.2.104 54523 -> 181.55.154.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:27.262607 0.141279 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:28.254023 0.297433 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:29.256330 0.053270 udp 10.0.2.104 54523 <-> 178.148.67.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:30.257965 0.057104 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:31.259621 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:32.260304 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:33.261933 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:34.262431 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:34.913469 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:24:35.254066 3.004547 udp 10.0.2.104 54523 -> 74.95.61.13 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:36.255193 0.156776 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:37.257331 0.259504 udp 10.0.2.104 54523 <-> 189.4.214.17 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:39.260138 0.000000 udp 10.0.2.104 54523 -> 186.136.104.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:40.261132 0.256728 udp 10.0.2.104 54523 <-> 72.174.46.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:41.262864 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:42.254239 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:43.255598 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:44.257475 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:45.258460 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:46.260381 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:47.261579 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:48.262630 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:49.253917 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:50.256129 0.000129 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:50.256258 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:24:51.257404 4.081802 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:52.262604 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:53.262065 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:54.262256 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:56.254497 0.000000 udp 10.0.2.104 54523 -> 201.27.50.183 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:57.256173 0.086053 udp 10.0.2.104 54523 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:24:58.257973 0.000000 udp 10.0.2.104 54523 -> 12.104.16.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:58.969140 0.012065 udp 10.0.2.104 54623 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 13:24:58.981532 0.000000 udp 10.0.2.104 54624 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:24:59.259075 0.223397 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:00.260951 0.616422 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:01.261496 0.626649 udp 10.0.2.104 54523 <-> 201.88.57.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:02.253046 0.169557 udp 10.0.2.104 54523 <-> 135.19.152.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:03.254322 0.297968 udp 10.0.2.104 54523 <-> 189.6.137.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:04.256006 1.311081 udp 10.0.2.104 54523 <-> 200.109.62.99 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:06.259077 0.000000 udp 10.0.2.104 54523 -> 201.164.45.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:07.260427 0.576216 udp 10.0.2.104 54523 <-> 201.88.57.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:08.261315 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:09.253037 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:10.254299 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:11.256451 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:12.257439 0.264851 udp 10.0.2.104 54523 <-> 201.164.45.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:13.259144 0.170813 udp 10.0.2.104 54523 <-> 178.90.11.35 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:14.259850 0.132438 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:15.261526 0.000000 udp 10.0.2.104 54523 -> 128.177.76.205 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:16.252932 0.315971 udp 10.0.2.104 54523 <-> 115.20.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:17.254421 0.249100 udp 10.0.2.104 54523 <-> 109.53.117.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:18.255986 0.144941 udp 10.0.2.104 54523 <-> 66.173.32.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:19.257344 0.157924 udp 10.0.2.104 54523 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:20.259055 0.137175 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:21.260199 3.995855 udp 10.0.2.104 54523 -> 190.121.66.121 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:21.921144 0.000153 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:25:22.261673 0.069569 udp 10.0.2.104 54523 <-> 24.134.185.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:23.253168 0.271893 udp 10.0.2.104 54523 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:24.254400 2.130797 udp 10.0.2.104 54523 <-> 190.135.234.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:26.257742 0.172429 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:27.259342 0.138094 udp 10.0.2.104 54523 <-> 50.176.20.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:28.261037 0.164624 udp 10.0.2.104 54523 <-> 74.192.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:29.262010 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:30.253154 0.000087 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:30.253241 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:25:31.254520 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:32.256782 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:33.257732 0.155052 udp 10.0.2.104 54523 <-> 24.179.39.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:34.258787 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:35.260435 0.000076 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:35.260511 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:25:36.262065 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:37.252916 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:38.254632 0.147197 udp 10.0.2.104 54523 <-> 66.173.32.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:39.256098 0.060283 udp 10.0.2.104 54523 <-> 91.237.245.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:40.257403 0.192818 udp 10.0.2.104 54523 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:41.258721 0.177465 udp 10.0.2.104 54523 <-> 69.169.145.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:42.260243 0.212717 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:43.262121 0.171208 udp 10.0.2.104 54523 <-> 68.51.223.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:44.253520 0.000000 udp 10.0.2.104 54523 -> 190.174.215.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:45.254720 4.540089 udp 10.0.2.104 54523 <-> 177.100.202.116 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:46.256221 1.586991 udp 10.0.2.104 54523 <-> 124.171.169.86 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:49.260977 0.334094 udp 10.0.2.104 54523 <-> 113.39.129.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:50.261657 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:51.253284 0.145386 udp 10.0.2.104 54523 <-> 24.183.237.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:52.254671 0.000000 udp 10.0.2.104 54523 -> 109.52.110.181 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:53.256403 0.069446 udp 10.0.2.104 54523 <-> 24.135.16.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:54.258004 0.586526 udp 10.0.2.104 54523 <-> 201.37.234.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:55.259382 2.088679 udp 10.0.2.104 54523 <-> 213.254.71.22 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:56.260547 0.000000 udp 10.0.2.104 54523 -> 188.31.199.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:25:58.253336 0.084853 udp 10.0.2.104 54523 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:25:59.255047 0.218994 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:00.256464 0.695790 udp 10.0.2.104 54523 <-> 190.77.110.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:01.257840 0.093101 udp 10.0.2.104 54523 <-> 90.229.251.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:02.259016 0.401416 udp 10.0.2.104 54523 <-> 2.187.205.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:03.260615 0.164957 udp 10.0.2.104 54523 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:04.261950 0.144697 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:05.256573 0.058890 udp 10.0.2.104 54523 <-> 46.35.97.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:06.256403 0.000000 udp 10.0.2.104 54523 -> 182.167.190.217 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:07.258573 0.138531 udp 10.0.2.104 54523 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:08.259016 0.117973 udp 10.0.2.104 54523 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:08.919797 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:26:09.260397 1.571872 udp 10.0.2.104 54523 <-> 187.18.235.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:10.261438 0.329942 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:11.262116 0.757382 udp 10.0.2.104 54523 <-> 190.193.96.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:12.253416 0.053000 udp 10.0.2.104 54523 <-> 91.134.72.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:13.254835 0.261549 udp 10.0.2.104 54523 <-> 190.36.193.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:14.256164 0.000000 udp 10.0.2.104 54523 -> 201.19.246.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:15.257983 0.336333 udp 10.0.2.104 54523 <-> 190.38.21.183 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:16.259239 1.082068 udp 10.0.2.104 54523 <-> 76.202.181.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:17.260752 0.051603 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:18.262046 0.000000 udp 10.0.2.104 54523 -> 193.68.211.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:19.253411 0.076193 udp 10.0.2.104 54523 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:20.254966 0.165870 udp 10.0.2.104 54523 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:22.258220 0.159449 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:23.258995 0.303605 udp 10.0.2.104 54523 <-> 61.86.180.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:24.260925 0.148993 udp 10.0.2.104 54523 <-> 69.206.136.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:25.262097 0.060784 udp 10.0.2.104 54523 <-> 5.13.239.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:26.253531 0.921449 udp 10.0.2.104 54523 <-> 75.214.226.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:27.255043 0.814936 udp 10.0.2.104 54523 <-> 190.97.41.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:28.139345 3.001492 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 13:26:28.256951 0.231530 udp 10.0.2.104 54523 <-> 93.184.81.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:29.257758 0.260034 udp 10.0.2.104 54523 <-> 78.213.115.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:30.259315 0.184950 udp 10.0.2.104 54523 <-> 78.247.174.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:31.260926 0.040787 udp 10.0.2.104 54523 <-> 89.216.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:32.262479 0.150562 udp 10.0.2.104 54523 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:33.253857 0.345761 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:34.256631 0.222130 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:35.147490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:26:35.257766 0.000000 udp 10.0.2.104 54523 -> 94.240.166.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:36.258003 0.000000 udp 10.0.2.104 54523 -> 72.222.72.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:37.259302 4.997816 udp 10.0.2.104 54523 <-> 181.72.146.35 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:38.260767 0.151279 udp 10.0.2.104 54523 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:39.262419 0.000000 udp 10.0.2.104 54523 -> 70.176.17.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:40.253789 0.000000 udp 10.0.2.104 54523 -> 111.254.125.242 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:41.255094 0.244272 udp 10.0.2.104 54523 <-> 186.92.214.207 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:42.856738 0.000000 udp 10.0.2.104 54523 <- 181.72.146.35 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:43.148113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:26:43.258160 1.328449 udp 10.0.2.104 54523 <-> 184.35.75.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:44.259377 0.148452 udp 10.0.2.104 54523 <-> 70.80.122.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:45.260979 1.263321 udp 10.0.2.104 54523 <-> 190.150.187.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:46.262229 0.160966 udp 10.0.2.104 54523 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:47.253953 0.000000 udp 10.0.2.104 54523 -> 112.136.106.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:48.255692 0.000000 udp 10.0.2.104 54523 -> 200.122.103.137 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:49.257399 0.205418 udp 10.0.2.104 54523 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:50.258083 0.843672 udp 10.0.2.104 54523 <-> 68.7.171.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:51.259425 0.121530 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:52.261316 1.001337 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:54.254033 0.000000 udp 10.0.2.104 54523 -> 66.42.164.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:55.255605 0.152653 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:55.915909 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:26:56.256761 0.044894 udp 10.0.2.104 54523 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:57.258701 0.000000 udp 10.0.2.104 54523 -> 201.19.246.78 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:26:58.259575 0.144159 udp 10.0.2.104 54523 <-> 68.198.80.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:26:59.150686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:26:59.260963 0.165160 udp 10.0.2.104 54523 <-> 72.135.193.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:00.262618 0.153161 udp 10.0.2.104 54523 <-> 68.194.88.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:01.253877 0.240170 udp 10.0.2.104 54523 <-> 69.138.162.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:02.256091 0.000000 udp 10.0.2.104 54523 -> 78.90.253.110 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:03.256790 0.210834 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:04.258493 0.000000 udp 10.0.2.104 54523 -> 177.100.202.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:05.259599 2.016281 udp 10.0.2.104 54523 <-> 186.14.31.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:06.261099 0.158060 udp 10.0.2.104 54523 <-> 70.183.51.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:07.262774 0.217235 udp 10.0.2.104 54523 <-> 201.164.238.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:08.253749 0.000000 udp 10.0.2.104 54523 -> 178.172.245.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:09.255883 0.483256 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:10.256917 0.216396 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:11.258286 0.000000 udp 10.0.2.104 54523 -> 190.121.66.121 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:12.259986 0.264952 udp 10.0.2.104 54523 <-> 190.36.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:13.261560 4.997775 udp 10.0.2.104 54523 -> 177.54.140.9 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:14.262762 0.060830 udp 10.0.2.104 54523 <-> 5.13.239.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:15.254329 0.000000 udp 10.0.2.104 54523 -> 85.219.46.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:16.256434 0.134662 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:17.256522 0.000000 udp 10.0.2.104 54523 -> 178.172.245.47 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:18.508633 0.000000 udp 10.0.2.104 54523 <- 177.54.140.9 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:19.260392 0.000000 udp 10.0.2.104 54523 -> 79.147.22.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:20.261214 0.256644 udp 10.0.2.104 54523 <-> 190.121.66.121 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:21.262800 3.172021 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 6 744 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:22.254448 4.515974 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:25.259127 4.036637 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:27.261549 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:28.252948 4.334862 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:30.256124 0.399872 udp 10.0.2.104 54523 <-> 177.103.57.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:31.157426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:27:31.257710 0.000000 udp 10.0.2.104 54523 -> 88.1.162.233 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:33.260090 1.567668 udp 10.0.2.104 54523 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:34.261581 0.144997 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:35.253255 0.173067 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:36.254567 0.212125 udp 10.0.2.104 54523 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:37.256018 0.413998 udp 10.0.2.104 54523 <-> 219.203.89.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:38.256907 0.157259 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:39.258553 4.997339 udp 10.0.2.104 54523 -> 65.74.25.137 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:40.260173 2.261548 udp 10.0.2.104 54523 <-> 186.18.235.123 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:41.261298 0.050738 udp 10.0.2.104 54523 <-> 95.43.102.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:42.913975 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:27:43.254148 0.416712 udp 10.0.2.104 54523 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:44.683225 0.000000 udp 10.0.2.104 54523 <- 65.74.25.137 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:45.257952 0.277788 udp 10.0.2.104 54523 <-> 190.37.3.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:46.258794 0.225311 udp 10.0.2.104 54523 <-> 190.203.162.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:47.260202 0.816160 udp 10.0.2.104 54523 <-> 190.142.155.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:48.261358 0.000000 udp 10.0.2.104 54523 -> 209.169.62.36 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:27:49.252725 0.162451 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:50.254260 0.058849 udp 10.0.2.104 54523 <-> 31.19.34.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:51.256030 0.062893 udp 10.0.2.104 54523 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:52.257267 0.138172 udp 10.0.2.104 54523 <-> 68.194.88.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:53.258714 0.203233 udp 10.0.2.104 54523 <-> 70.15.122.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:54.260396 0.157153 udp 10.0.2.104 54523 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:55.261840 0.158944 udp 10.0.2.104 54523 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:56.252722 1.281036 udp 10.0.2.104 54523 <-> 186.23.189.160 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:58.255897 0.142708 udp 10.0.2.104 54523 <-> 24.146.182.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:27:59.258004 0.128803 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:00.258674 1.988411 udp 10.0.2.104 54523 <-> 186.136.183.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:01.260173 0.010191 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:02.262236 0.314395 udp 10.0.2.104 54523 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:03.253098 0.141238 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:04.254460 0.177591 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:05.256965 0.281807 udp 10.0.2.104 54523 <-> 186.23.189.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:06.257925 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:07.258964 0.042438 udp 10.0.2.104 54523 <-> 78.22.30.243 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:08.260800 0.150770 udp 10.0.2.104 54523 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:09.261903 0.000000 udp 10.0.2.104 54523 -> 71.94.125.224 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:10.252820 0.260455 udp 10.0.2.104 54523 <-> 190.202.252.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:11.254619 0.134705 udp 10.0.2.104 54523 <-> 76.117.184.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:12.256233 0.168940 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:13.257831 0.160666 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:14.258695 0.149239 udp 10.0.2.104 54523 <-> 173.3.173.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:15.260789 0.119629 udp 10.0.2.104 54523 <-> 24.122.115.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:16.262111 0.000000 udp 10.0.2.104 54523 -> 87.1.137.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:17.252482 0.130611 udp 10.0.2.104 54523 <-> 147.194.99.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:18.254711 0.000000 udp 10.0.2.104 54523 -> 99.196.156.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:19.261353 0.000000 udp 10.0.2.104 54523 -> 186.122.187.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:20.260940 4.287862 udp 10.0.2.104 54523 <-> 201.210.232.153 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:21.260581 0.188711 udp 10.0.2.104 54523 <-> 190.140.32.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:22.261036 0.188973 udp 10.0.2.104 54523 <-> 173.81.217.204 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:23.262040 0.381160 udp 10.0.2.104 54523 <-> 186.90.127.140 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:25.254626 0.000000 udp 10.0.2.104 54523 -> 87.173.13.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:26.256497 2.385480 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:27.258626 2.080665 udp 10.0.2.104 54523 <-> 99.196.156.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:29.260667 0.000000 udp 10.0.2.104 54523 -> 114.43.0.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:29.911261 0.000121 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:28:30.262129 0.134200 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:31.253422 0.269186 udp 10.0.2.104 54523 <-> 98.155.225.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:32.254613 0.000000 udp 10.0.2.104 54523 -> 190.182.128.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:34.257582 0.324875 udp 10.0.2.104 54523 <-> 187.84.77.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:35.259340 0.000252 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:35.259592 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:28:36.260606 0.030482 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:37.261873 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:38.253186 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:38.419499 0.000000 udp 10.0.2.104 54523 <- 99.196.156.159 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:39.254830 0.170843 udp 10.0.2.104 54523 <-> 68.184.183.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:40.256510 0.290904 udp 10.0.2.104 54523 <-> 190.207.251.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:41.257971 0.291829 udp 10.0.2.104 54523 <-> 189.55.114.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:42.258937 4.997358 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:43.260515 0.155193 udp 10.0.2.104 54523 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:44.262034 0.144215 udp 10.0.2.104 54523 <-> 24.188.69.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:45.253316 0.123999 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:46.254876 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:48.258033 3.004060 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:49.259197 0.138403 udp 10.0.2.104 54523 <-> 76.120.210.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:28:50.260820 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:52.253248 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:53.255040 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:54.256497 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:55.258185 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:56.259261 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:57.261418 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:58.262257 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:28:59.253339 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:00.255109 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:02.258769 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:03.259360 0.000102 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:03.259462 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:29:04.260742 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:05.262170 0.211535 udp 10.0.2.104 54523 <-> 76.18.85.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:29:06.253483 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:07.255222 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:08.256407 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:09.257692 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:11.260732 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:12.262089 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:13.253554 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:14.255025 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:15.256619 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:16.258111 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:16.918776 0.000123 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:29:17.259878 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:18.261138 4.997730 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:18.261222 4.997646 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 2 172 flow=Background 1970/01/01 13:29:19.262301 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:20.253966 0.297992 udp 10.0.2.104 54523 <-> 201.95.139.200 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:29:21.255767 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:22.257121 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:24.259473 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:25.260956 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:26.262450 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:27.253773 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:28.255420 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:29.256564 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:30.258535 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:31.260135 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:32.260884 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:33.262517 4.998206 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:35.255401 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:36.257619 0.000000 udp 10.0.2.104 54523 -> 68.197.61.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:37.259850 0.059836 udp 10.0.2.104 54523 <-> 188.2.138.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:29:39.261578 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:40.262649 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:42.255967 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:43.257388 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:44.259174 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:45.259860 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:46.261257 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:47.262805 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:48.254187 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:49.256634 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:50.258325 0.000080 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:50.258405 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:29:51.259394 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:52.260518 0.167874 udp 10.0.2.104 54523 <-> 68.197.61.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:29:53.261295 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:54.262718 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:55.253865 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:56.256230 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:57.257406 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:58.258576 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:29:59.260216 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:00.261499 0.129075 udp 10.0.2.104 54523 <-> 62.83.45.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:01.252842 0.000000 udp 10.0.2.104 54523 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:02.254611 0.158471 udp 10.0.2.104 54523 <-> 75.133.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:03.256596 0.140336 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:03.917763 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:30:04.258342 0.000000 udp 10.0.2.104 54523 -> 93.105.145.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:05.258494 0.000000 udp 10.0.2.104 54523 -> 190.217.209.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:06.260166 0.169296 udp 10.0.2.104 54523 <-> 70.82.2.99 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:07.261928 0.000000 udp 10.0.2.104 54523 -> 24.122.250.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:08.253095 0.097682 udp 10.0.2.104 54523 <-> 88.184.199.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:09.254282 0.148773 udp 10.0.2.104 54523 <-> 8.28.208.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:10.255775 0.074025 udp 10.0.2.104 54523 <-> 79.115.108.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:11.257218 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:12.258440 0.000000 udp 10.0.2.104 54523 -> 79.156.74.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:13.260081 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:15.253185 0.780553 udp 10.0.2.104 54523 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:16.254471 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:17.256461 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:18.257426 0.475337 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:19.258535 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:20.260485 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:21.261359 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:22.252952 0.233482 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:23.254290 0.142862 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:24.256011 0.375282 udp 10.0.2.104 54523 <-> 179.209.194.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:25.257691 1.600022 udp 10.0.2.104 54523 <-> 182.235.122.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:26.258498 0.343660 udp 10.0.2.104 54523 <-> 125.230.96.171 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:27.260265 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:28.261742 0.000000 udp 10.0.2.104 54523 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:29.252906 0.257021 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:30.254562 0.154505 udp 10.0.2.104 54523 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:31.256264 0.640276 udp 10.0.2.104 54523 <-> 190.204.22.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:32.257881 0.998342 udp 10.0.2.104 54523 <-> 24.133.35.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:33.258495 0.223339 udp 10.0.2.104 54523 <-> 177.224.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:34.259614 0.168168 udp 10.0.2.104 54523 <-> 67.61.4.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:35.261283 0.000000 udp 10.0.2.104 54523 -> 173.176.177.119 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:36.252874 0.075706 udp 10.0.2.104 54523 <-> 91.244.184.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:37.254635 0.000000 udp 10.0.2.104 54523 -> 78.128.125.130 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:38.256478 0.136695 udp 10.0.2.104 54523 <-> 24.0.83.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:39.257764 1.386407 udp 10.0.2.104 54523 <-> 201.250.95.43 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:41.260328 0.226798 udp 10.0.2.104 54523 <-> 177.224.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:42.261497 0.294107 udp 10.0.2.104 54523 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:43.253030 0.000000 udp 10.0.2.104 54523 -> 195.55.193.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:44.254812 0.168967 udp 10.0.2.104 54523 <-> 67.61.4.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:45.256346 0.064168 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:46.257395 0.349233 udp 10.0.2.104 54523 <-> 201.250.95.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:47.258761 0.186232 udp 10.0.2.104 54523 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:48.260547 0.000000 udp 10.0.2.104 54523 -> 173.176.177.119 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:49.261917 0.355376 udp 10.0.2.104 54523 <-> 111.249.165.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:50.253052 0.315377 udp 10.0.2.104 54523 <-> 61.114.73.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:50.914080 0.000126 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:30:51.254568 0.140156 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:52.256182 0.000000 udp 10.0.2.104 54523 -> 172.249.166.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:53.257992 0.083158 udp 10.0.2.104 54523 <-> 88.174.239.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:54.258884 0.000000 udp 10.0.2.104 54523 -> 65.9.241.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:55.260903 1.545408 udp 10.0.2.104 54523 <-> 190.209.51.129 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:30:57.254875 0.000000 udp 10.0.2.104 54523 -> 190.97.47.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:30:58.255238 1.331448 udp 10.0.2.104 54523 <-> 187.34.192.126 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:00.257907 0.347674 udp 10.0.2.104 54523 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:01.258965 0.000000 udp 10.0.2.104 54523 -> 79.53.104.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:02.260529 0.000000 udp 10.0.2.104 54523 -> 178.43.165.175 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:03.262071 0.207322 udp 10.0.2.104 54523 <-> 190.78.29.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:04.253309 0.000000 udp 10.0.2.104 54523 -> 173.18.114.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:05.255089 0.217374 udp 10.0.2.104 54523 <-> 68.189.5.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:06.256154 0.000000 udp 10.0.2.104 54523 -> 24.242.53.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:07.258122 0.147036 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:08.258895 0.163234 udp 10.0.2.104 54523 <-> 176.237.6.25 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:09.260225 3.996095 udp 10.0.2.104 54523 -> 84.54.171.18 16464 INT 0 3 174 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:10.262092 0.216257 udp 10.0.2.104 54523 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:12.254690 0.051589 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:14.257953 0.000000 udp 10.0.2.104 54523 -> 190.173.38.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:15.259162 0.619705 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:16.260376 0.337730 udp 10.0.2.104 54523 <-> 99.236.194.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:17.262157 0.395995 udp 10.0.2.104 54523 <-> 186.222.191.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:18.253388 0.475329 udp 10.0.2.104 54523 <-> 174.61.20.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:19.254992 0.130412 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:20.256585 0.135511 udp 10.0.2.104 54523 <-> 24.47.139.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:21.257736 1.219004 udp 10.0.2.104 54523 <-> 85.49.83.185 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:23.260801 0.254323 udp 10.0.2.104 54523 <-> 186.206.186.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:24.262493 0.157050 udp 10.0.2.104 54523 <-> 97.102.123.184 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:25.253578 0.169610 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:26.254914 0.000000 udp 10.0.2.104 54523 -> 79.17.109.168 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:27.256858 0.232317 udp 10.0.2.104 54523 <-> 184.166.9.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:28.257915 0.212677 udp 10.0.2.104 54523 <-> 173.199.217.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:29.259141 0.143357 udp 10.0.2.104 54523 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:30.260599 0.000000 udp 10.0.2.104 54523 -> 178.172.245.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:31.261959 0.043914 udp 10.0.2.104 54523 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:32.253285 0.490688 udp 10.0.2.104 54523 <-> 189.68.140.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:33.255317 0.000000 udp 10.0.2.104 54523 -> 115.135.134.197 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:34.257184 0.000000 udp 10.0.2.104 54523 -> 75.177.1.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:35.258098 1.260236 udp 10.0.2.104 54523 <-> 71.23.119.65 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:37.260922 0.325312 udp 10.0.2.104 54523 <-> 114.36.30.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:37.911354 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:31:38.262435 0.302986 udp 10.0.2.104 54523 <-> 186.34.157.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:39.253898 0.000000 udp 10.0.2.104 54523 -> 209.236.94.60 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:40.256497 0.000000 udp 10.0.2.104 54523 -> 190.52.44.59 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:41.257326 0.149753 udp 10.0.2.104 54523 <-> 74.89.59.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:42.258005 0.000000 udp 10.0.2.104 54523 -> 84.54.171.18 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:43.259322 0.163791 udp 10.0.2.104 54523 <-> 69.180.106.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:44.261079 0.227488 udp 10.0.2.104 54523 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:45.262242 0.163067 udp 10.0.2.104 54523 <-> 184.162.25.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:46.253484 0.298400 udp 10.0.2.104 54523 <-> 219.115.125.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:47.255372 0.000000 udp 10.0.2.104 54523 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:48.256594 3.071572 udp 10.0.2.104 54523 <-> 178.164.167.94 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:49.258088 1.285766 udp 10.0.2.104 54523 <-> 201.214.63.238 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:52.262314 0.000000 udp 10.0.2.104 54523 -> 192.95.207.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:31:53.255433 0.116425 udp 10.0.2.104 54523 <-> 24.36.65.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:54.256803 0.239972 udp 10.0.2.104 54523 <-> 176.201.82.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:55.257486 0.220763 udp 10.0.2.104 54523 <-> 75.63.54.196 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:56.257899 0.205174 udp 10.0.2.104 54523 <-> 71.197.165.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:57.259205 0.395047 udp 10.0.2.104 54523 <-> 114.47.91.155 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:58.261004 0.140326 udp 10.0.2.104 54523 <-> 71.204.215.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:31:59.262499 0.147854 udp 10.0.2.104 54523 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:00.254034 0.172729 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:01.255987 0.000000 udp 10.0.2.104 54523 -> 92.241.134.172 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:02.256592 0.118702 udp 10.0.2.104 54523 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:03.258027 0.000000 udp 10.0.2.104 54523 -> 76.178.38.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:04.259574 0.071731 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:05.261093 0.154298 udp 10.0.2.104 54523 <-> 109.72.59.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:06.262618 0.000000 udp 10.0.2.104 54523 -> 24.193.202.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:07.253860 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:08.256309 3.068127 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 6 3676 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:09.257272 0.097381 udp 10.0.2.104 54523 <-> 178.149.186.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:10.258159 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:12.260946 3.356155 udp 10.0.2.104 54523 <-> 111.240.40.248 16464 CON 0 0 6 3676 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:13.262602 0.266701 udp 10.0.2.104 54523 <-> 190.208.117.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:14.254144 0.000000 udp 10.0.2.104 54523 -> 24.193.202.251 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:16.257930 0.000000 udp 10.0.2.104 54523 -> 176.201.32.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:17.258076 0.000000 udp 10.0.2.104 54523 -> 24.234.122.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:18.259611 0.000000 udp 10.0.2.104 54523 -> 174.78.252.35 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:19.261233 0.289435 udp 10.0.2.104 54523 <-> 95.180.5.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:20.262756 0.000000 udp 10.0.2.104 54523 -> 178.148.67.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:21.254132 0.064489 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:22.255810 0.355156 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:23.257534 0.167566 udp 10.0.2.104 54523 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:24.258362 0.377102 udp 10.0.2.104 54523 <-> 190.38.81.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:24.919282 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:32:25.259792 0.214747 udp 10.0.2.104 54523 <-> 131.191.68.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:26.261290 0.215475 udp 10.0.2.104 54523 <-> 72.188.185.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:27.262693 1.811074 udp 10.0.2.104 54523 <-> 207.210.56.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:28.254196 0.213677 udp 10.0.2.104 54523 <-> 186.92.109.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:29.255663 0.396279 udp 10.0.2.104 54523 <-> 186.57.78.224 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:30.257139 0.144590 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:31.258842 0.351397 udp 10.0.2.104 54523 <-> 218.173.72.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:32.260149 0.255709 udp 10.0.2.104 54523 <-> 190.37.93.189 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:33.260986 0.158032 udp 10.0.2.104 54523 <-> 24.217.45.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:34.252685 0.163374 udp 10.0.2.104 54523 <-> 68.102.1.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:35.254269 0.100429 udp 10.0.2.104 54523 <-> 2.33.152.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:36.255595 0.540398 udp 10.0.2.104 54523 <-> 186.52.130.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:37.257133 2.050988 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:38.258389 0.000000 udp 10.0.2.104 54523 -> 24.4.97.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:40.261156 4.132741 udp 10.0.2.104 54523 <-> 24.0.83.237 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:41.254115 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:42.254522 0.126459 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:43.256262 4.057726 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:45.259009 0.365446 udp 10.0.2.104 54523 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:46.259866 0.283482 udp 10.0.2.104 54523 <-> 200.85.88.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:48.252709 0.136277 udp 10.0.2.104 54523 <-> 24.0.83.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:32:50.255672 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:51.257312 0.000075 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:51.257387 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:32:52.258769 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:53.260556 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:54.261777 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:55.253228 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:56.254261 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:57.256319 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:58.257167 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:32:59.258859 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:00.260464 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:01.261396 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:02.252876 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:03.254411 4.006091 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:04.256259 4.005355 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:05.257185 0.829295 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:06.258840 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:09.252842 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:10.254336 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:11.256173 0.000133 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:11.256306 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:33:11.916787 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:33:12.257256 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:13.258461 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:14.260295 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:15.261175 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:16.458491 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:17.447941 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:18.441508 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:19.434713 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:20.426749 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:21.417671 0.253292 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:22.408428 0.360407 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:23.389042 0.815860 udp 10.0.2.104 54523 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:24.378544 0.050034 udp 10.0.2.104 54523 <-> 31.223.219.194 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:25.372375 0.221515 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:26.365131 0.293582 udp 10.0.2.104 54523 <-> 187.22.29.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:27.357555 0.134005 udp 10.0.2.104 54523 <-> 66.117.244.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:28.349168 0.286214 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:29.339927 1.142628 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:31.309483 0.142219 udp 10.0.2.104 54523 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:32.303489 1.739448 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:33.299676 0.155374 udp 10.0.2.104 54523 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:34.291820 0.169519 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:35.186620 2.978648 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 13:33:35.283427 0.115850 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:36.274100 0.027548 udp 10.0.2.104 54523 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:37.254382 0.130285 udp 10.0.2.104 54523 <-> 78.251.241.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:38.255341 0.065428 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:39.256413 0.000000 udp 10.0.2.104 54523 -> 2.92.4.6 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:40.257560 1.504444 udp 10.0.2.104 54523 <-> 31.16.197.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:41.259018 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:42.170375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:33:42.260143 0.140160 udp 10.0.2.104 54523 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:43.262472 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:44.253392 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:45.254703 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:46.257048 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:47.257798 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:48.259136 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:49.260592 1.992811 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:50.172668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:33:50.262626 0.297071 udp 10.0.2.104 54523 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:52.254960 0.000000 udp 10.0.2.104 54523 -> 69.1.2.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:53.258070 0.129275 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:54.257905 0.156870 udp 10.0.2.104 54523 <-> 24.179.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:55.259370 0.000000 udp 10.0.2.104 54523 -> 189.241.254.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:33:56.260496 0.198583 udp 10.0.2.104 54523 <-> 75.85.75.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:57.262143 0.213964 udp 10.0.2.104 54523 <-> 79.53.104.10 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:58.253454 0.170201 udp 10.0.2.104 54523 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:33:58.914304 0.000125 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:33:59.255042 0.285999 udp 10.0.2.104 54523 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:00.256647 0.116062 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:01.258114 0.268907 udp 10.0.2.104 54523 <-> 201.46.181.58 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:02.259299 4.792693 udp 10.0.2.104 54523 <-> 46.35.110.44 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:03.260706 0.193603 udp 10.0.2.104 54523 <-> 75.85.75.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:05.253819 0.336393 udp 10.0.2.104 54523 <-> 114.25.138.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:06.174789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:34:06.255008 0.314794 udp 10.0.2.104 54523 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:07.257929 0.042350 udp 10.0.2.104 54523 <-> 188.254.158.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:08.258454 0.309665 udp 10.0.2.104 54523 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:09.259221 0.168822 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:10.260647 0.274413 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:11.262157 0.000000 udp 10.0.2.104 54523 -> 71.77.141.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:12.253675 0.179405 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:13.255134 0.000000 udp 10.0.2.104 54523 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:14.256319 0.284387 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:15.258469 4.012931 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:16.259077 0.381800 udp 10.0.2.104 54523 <-> 174.102.214.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:17.260780 4.997234 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:18.268493 0.167263 udp 10.0.2.104 54523 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:20.255127 0.094687 udp 10.0.2.104 54523 <-> 78.251.241.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:21.256985 0.069366 udp 10.0.2.104 54523 <-> 94.240.166.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:22.394732 1.006207 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:24.260890 0.284814 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:25.268782 0.000000 udp 10.0.2.104 54523 -> 201.68.62.68 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:26.258002 0.127510 udp 10.0.2.104 54523 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:27.257304 0.147704 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:28.257935 0.116446 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:29.258043 0.406934 udp 10.0.2.104 54523 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:30.259475 0.226239 udp 10.0.2.104 54523 <-> 186.89.3.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:31.260916 0.491136 udp 10.0.2.104 54523 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:32.262782 0.139399 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:33.254061 0.022620 udp 10.0.2.104 54523 <-> 5.146.210.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:34.255604 0.165905 udp 10.0.2.104 54523 <-> 66.66.140.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:35.257075 0.000000 udp 10.0.2.104 54523 -> 89.214.78.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:36.257843 0.000000 udp 10.0.2.104 54523 -> 195.62.0.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:37.259594 1.346297 udp 10.0.2.104 54523 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:38.180858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:34:38.260957 0.279602 udp 10.0.2.104 54523 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:39.262943 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:40.254456 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:41.256349 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:42.257344 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:43.257980 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:44.259597 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:45.261203 3.473525 udp 10.0.2.104 54523 <-> 89.214.78.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:45.912349 0.000118 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:34:46.262920 0.991264 udp 10.0.2.104 54523 <-> 187.84.77.2 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:49.257070 3.145891 udp 10.0.2.104 54523 <-> 24.47.109.126 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:50.258041 0.172375 udp 10.0.2.104 54523 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:51.260085 0.140289 udp 10.0.2.104 54523 <-> 63.131.171.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:53.262603 0.384342 udp 10.0.2.104 54523 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:54.254191 0.248066 udp 10.0.2.104 54523 <-> 186.89.254.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:55.255414 0.000000 udp 10.0.2.104 54523 -> 76.178.38.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:56.257106 0.000000 udp 10.0.2.104 54523 -> 184.162.187.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:34:57.258433 2.326780 udp 10.0.2.104 54523 <-> 190.110.186.252 16464 CON 0 0 5 2786 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:34:58.259760 0.217447 udp 10.0.2.104 54523 <-> 78.249.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:00.262992 0.492928 udp 10.0.2.104 54523 <-> 186.92.198.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:01.254444 0.151590 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:02.255674 0.965250 udp 10.0.2.104 54523 <-> 70.174.108.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:03.257440 0.326831 udp 10.0.2.104 54523 <-> 187.10.81.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:04.258452 0.217666 udp 10.0.2.104 54523 <-> 201.165.91.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:05.260029 0.000000 udp 10.0.2.104 54523 -> 116.73.204.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:06.261138 0.393784 udp 10.0.2.104 54523 <-> 186.191.27.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:07.252584 0.185989 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:08.253931 0.000000 udp 10.0.2.104 54523 -> 68.94.1.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:09.255794 0.340053 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:10.257438 0.147464 udp 10.0.2.104 54523 <-> 24.180.138.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:11.258363 0.000000 udp 10.0.2.104 54523 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:12.260006 0.228090 udp 10.0.2.104 54523 <-> 67.177.197.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:13.261527 0.000000 udp 10.0.2.104 54523 -> 98.95.254.63 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:14.252570 0.236108 udp 10.0.2.104 54523 <-> 190.78.30.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:15.254181 0.133503 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:16.255610 0.000000 udp 10.0.2.104 54523 -> 94.52.137.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:17.257050 1.145071 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 4 496 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:19.259837 0.313480 udp 10.0.2.104 54523 <-> 187.22.129.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:20.261453 1.992833 udp 10.0.2.104 54523 <-> 173.23.208.52 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:21.252930 0.000000 udp 10.0.2.104 54523 -> 188.24.133.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:23.255640 0.187632 udp 10.0.2.104 54523 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:24.257031 0.170213 udp 10.0.2.104 54523 <-> 207.98.183.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:25.258307 0.129297 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:26.259906 0.964933 udp 10.0.2.104 54523 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:27.261657 0.182343 udp 10.0.2.104 54523 <-> 68.108.105.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:28.252863 0.265898 udp 10.0.2.104 54523 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:29.254264 3.026071 udp 10.0.2.104 54523 <-> 5.146.89.28 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:30.256044 0.369056 udp 10.0.2.104 54523 <-> 186.14.10.123 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:31.257348 0.000000 udp 10.0.2.104 54523 -> 50.160.106.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:32.919464 0.000177 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:35:33.259870 0.123891 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:34.261366 0.181601 udp 10.0.2.104 54523 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:35.253011 0.041793 udp 10.0.2.104 54523 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:36.254343 0.000000 udp 10.0.2.104 54523 -> 74.61.161.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:37.255947 0.027165 udp 10.0.2.104 54523 <-> 89.176.72.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:38.257152 0.272466 udp 10.0.2.104 54523 <-> 186.89.100.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:39.258854 0.204826 udp 10.0.2.104 54523 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:40.259890 0.265556 udp 10.0.2.104 54523 <-> 72.130.237.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:41.261591 0.146581 udp 10.0.2.104 54523 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:42.252866 0.168499 udp 10.0.2.104 54523 <-> 64.185.54.156 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:43.255245 0.183812 udp 10.0.2.104 54523 <-> 65.65.137.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:44.255911 0.295189 udp 10.0.2.104 54523 <-> 189.124.2.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:45.257107 0.275546 udp 10.0.2.104 54523 <-> 189.195.85.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:46.258630 0.801452 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:47.260178 0.351329 udp 10.0.2.104 54523 <-> 216.49.32.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:48.261499 0.043315 udp 10.0.2.104 54523 <-> 5.103.62.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:49.253229 0.354756 udp 10.0.2.104 54523 <-> 190.78.30.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:50.255023 0.073737 udp 10.0.2.104 54523 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:51.256019 0.000000 udp 10.0.2.104 54523 -> 74.103.52.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:52.258045 0.211534 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:53.259008 0.333777 udp 10.0.2.104 54523 <-> 189.55.212.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:54.260318 0.062483 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:55.262091 0.000000 udp 10.0.2.104 54523 -> 186.93.198.50 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:56.252969 0.251199 udp 10.0.2.104 54523 <-> 189.195.85.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:35:57.254610 0.000000 udp 10.0.2.104 54523 -> 63.143.20.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:58.256075 0.000000 udp 10.0.2.104 54523 -> 65.65.137.161 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:35:59.257913 0.000000 udp 10.0.2.104 54523 -> 184.162.107.142 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:00.258875 0.145166 udp 10.0.2.104 54523 <-> 24.187.175.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:01.260243 0.000000 udp 10.0.2.104 54523 -> 216.49.32.84 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:02.261836 1.042986 udp 10.0.2.104 54523 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:03.253463 0.299880 udp 10.0.2.104 54523 <-> 189.124.2.118 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:04.254738 0.159399 udp 10.0.2.104 54523 <-> 24.148.135.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:05.256455 0.293067 udp 10.0.2.104 54523 <-> 189.55.212.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:06.257330 0.000000 udp 10.0.2.104 54523 -> 186.93.198.50 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:07.259210 0.205773 udp 10.0.2.104 54523 <-> 98.234.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:08.260464 0.743436 udp 10.0.2.104 54523 <-> 184.63.14.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:09.262200 0.151744 udp 10.0.2.104 54523 <-> 24.240.26.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:10.253207 0.169701 udp 10.0.2.104 54523 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:11.254721 0.340007 udp 10.0.2.104 54523 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:12.256035 3.004514 udp 10.0.2.104 54523 -> 69.143.205.14 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:13.258003 0.028918 udp 10.0.2.104 54523 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:14.259097 0.000000 udp 10.0.2.104 54523 -> 71.95.67.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:16.262106 0.826466 udp 10.0.2.104 54523 <-> 181.166.93.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:17.253072 0.303862 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:18.254836 0.402706 udp 10.0.2.104 54523 <-> 200.175.127.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:19.256645 0.362827 udp 10.0.2.104 54523 <-> 89.214.78.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:19.917206 0.000037 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:36:20.257766 0.142451 udp 10.0.2.104 54523 <-> 151.74.154.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:21.258876 0.307722 udp 10.0.2.104 54523 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:22.260329 0.000000 udp 10.0.2.104 54523 -> 85.179.124.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:23.262130 0.053375 udp 10.0.2.104 54523 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:24.253471 0.055067 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:25.254762 4.327705 udp 10.0.2.104 54523 <-> 24.232.19.31 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:26.256179 0.063954 udp 10.0.2.104 54523 <-> 31.19.34.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:27.258177 0.424567 udp 10.0.2.104 54523 <-> 50.149.228.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:28.259047 1.278663 udp 10.0.2.104 54523 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:30.262031 0.145872 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:31.253563 0.218114 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:32.254592 0.112300 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:33.256404 0.284861 udp 10.0.2.104 54523 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:34.257909 0.313963 udp 10.0.2.104 54523 <-> 14.96.91.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:35.259122 0.138984 udp 10.0.2.104 54523 <-> 24.187.31.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:36.260360 0.061066 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:37.262114 0.160311 udp 10.0.2.104 54523 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:38.253946 0.153243 udp 10.0.2.104 54523 <-> 50.82.206.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:39.254827 0.165609 udp 10.0.2.104 54523 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:40.256925 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:41.258471 0.341332 udp 10.0.2.104 54523 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:42.259228 0.064787 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:43.260576 0.000000 udp 10.0.2.104 54523 -> 174.69.157.24 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:44.262114 1.186913 udp 10.0.2.104 54523 <-> 69.125.160.55 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:46.266459 0.163437 udp 10.0.2.104 54523 <-> 64.185.54.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:47.265103 0.242999 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:48.262756 0.279158 udp 10.0.2.104 54523 <-> 190.195.85.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:49.260049 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:50.260899 0.283031 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:51.262228 1.057433 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:53.255296 0.000000 udp 10.0.2.104 54523 -> 174.69.157.24 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:54.256591 0.000000 udp 10.0.2.104 54523 -> 66.25.88.248 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:55.258475 0.000000 udp 10.0.2.104 54523 -> 76.173.112.46 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:36:56.259439 3.138263 udp 10.0.2.104 54523 <-> 24.187.31.24 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:36:57.260912 1.169238 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:37:00.255235 0.000000 udp 10.0.2.104 54523 -> 66.25.88.248 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:01.256718 0.324905 udp 10.0.2.104 54523 <-> 220.53.176.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:37:02.258156 1.053795 udp 10.0.2.104 54523 <-> 213.112.230.161 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:37:04.260942 0.064460 udp 10.0.2.104 54523 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:37:06.253801 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:06.914661 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:37:07.255016 0.000085 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:07.255101 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:37:08.257108 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:09.258265 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:10.259485 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:11.260830 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:12.262359 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:13.254354 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:14.255185 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:15.257235 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:16.258500 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:17.259637 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:18.261034 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:19.262460 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:20.253631 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:21.255385 0.363568 udp 10.0.2.104 54523 <-> 123.195.215.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:37:22.256891 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:23.258676 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:24.259832 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:25.260945 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:26.262304 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:28.255645 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:29.256811 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:30.258647 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:31.259456 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:32.261023 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:33.262750 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:34.254596 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:35.255786 0.000102 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:35.255888 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:37:36.256815 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:37.258364 0.144141 udp 10.0.2.104 54523 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:37:38.260126 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:39.261038 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:40.252342 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:41.253492 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:42.255941 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:43.256883 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:44.258393 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:45.260147 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:46.261154 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:47.252712 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:49.255465 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:50.257195 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:51.258340 0.000115 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:51.258455 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:37:52.260035 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:53.261123 0.173738 udp 10.0.2.104 54523 <-> 74.196.176.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:37:53.912132 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:37:54.252711 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:55.254497 0.275959 udp 10.0.2.104 54523 <-> 76.113.45.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:37:56.290738 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:57.286787 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:58.282889 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:37:59.278113 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:00.272977 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:01.257421 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:02.254016 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:03.255877 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:05.258871 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:06.260325 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:07.261489 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:08.253026 0.000072 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:08.253098 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:38:09.254567 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:10.255730 0.364848 udp 10.0.2.104 54523 <-> 123.195.215.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:11.257400 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:12.258659 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:14.261964 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:15.252814 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:16.254543 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:17.255945 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:18.257445 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:19.258566 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:20.260276 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:21.261974 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:22.253148 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:23.254193 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:24.255870 0.000063 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:24.255933 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:38:25.257460 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:26.258766 0.185457 udp 10.0.2.104 54523 <-> 64.130.141.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:27.260134 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:28.261342 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:29.253062 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:30.254678 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:31.256308 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:32.257528 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:34.260400 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:35.261972 0.000000 udp 10.0.2.104 54523 -> 69.207.13.122 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:36.253003 0.105192 udp 10.0.2.104 54523 <-> 79.7.112.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:37.254666 0.038489 udp 10.0.2.104 54523 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:38.255967 0.288827 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:39.257429 0.292548 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:40.259035 0.000000 udp 10.0.2.104 54523 -> 111.248.57.34 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:40.919951 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:38:41.260806 0.261530 udp 10.0.2.104 54523 <-> 181.53.197.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:42.261976 0.000000 udp 10.0.2.104 54523 -> 114.177.121.164 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:43.253308 0.264958 udp 10.0.2.104 54523 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:44.254625 0.311590 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:45.256225 0.053722 udp 10.0.2.104 54523 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:46.258332 0.140008 udp 10.0.2.104 54523 <-> 173.2.9.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:47.259032 0.000000 udp 10.0.2.104 54523 -> 24.225.217.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:48.260573 0.077052 udp 10.0.2.104 54523 <-> 85.136.97.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:49.262061 0.000000 udp 10.0.2.104 54523 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:50.253181 0.100721 udp 10.0.2.104 54523 <-> 79.7.112.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:51.254705 0.218592 udp 10.0.2.104 54523 <-> 24.205.95.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:52.256156 0.159931 udp 10.0.2.104 54523 <-> 142.105.229.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:53.257900 0.288365 udp 10.0.2.104 54523 <-> 190.163.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:54.258972 0.000000 udp 10.0.2.104 54523 -> 186.122.187.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:55.260552 0.000000 udp 10.0.2.104 54523 -> 76.202.181.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:38:56.261522 0.247562 udp 10.0.2.104 54523 <-> 161.200.212.141 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:57.252922 0.051340 udp 10.0.2.104 54523 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:58.254939 0.339784 udp 10.0.2.104 54523 <-> 123.248.233.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:38:59.256130 0.053598 udp 10.0.2.104 54523 <-> 147.156.194.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:00.258033 0.187024 udp 10.0.2.104 54523 <-> 64.130.141.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:01.259095 0.104863 udp 10.0.2.104 54523 <-> 94.55.147.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:02.260654 0.165354 udp 10.0.2.104 54523 <-> 209.224.198.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:03.262059 0.164920 udp 10.0.2.104 54523 <-> 173.23.103.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:04.253617 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:05.254612 0.214335 udp 10.0.2.104 54523 <-> 190.39.98.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:06.256325 0.000000 udp 10.0.2.104 54523 -> 68.48.58.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:07.257909 4.266800 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:08.259443 0.169219 udp 10.0.2.104 54523 <-> 68.59.168.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:09.260759 0.054499 udp 10.0.2.104 54523 <-> 95.43.88.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:12.254823 0.000000 udp 10.0.2.104 54523 -> 14.96.187.126 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:13.256316 0.000000 udp 10.0.2.104 54523 -> 189.94.127.101 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:14.257836 0.834692 udp 10.0.2.104 54523 <-> 198.45.154.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:15.259016 1.252312 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:17.262206 0.000000 udp 10.0.2.104 54523 -> 202.29.179.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:18.253401 1.227267 udp 10.0.2.104 54523 <-> 177.224.108.13 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:20.256519 0.172828 udp 10.0.2.104 54523 <-> 68.59.168.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:21.258072 0.000000 udp 10.0.2.104 54523 -> 86.133.144.169 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:22.259352 0.000000 udp 10.0.2.104 54523 -> 14.96.187.126 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:23.260960 0.281408 udp 10.0.2.104 54523 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:24.262170 0.000000 udp 10.0.2.104 54523 -> 68.48.58.156 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:25.253272 0.072515 udp 10.0.2.104 54523 <-> 79.116.15.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:26.254927 0.132886 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:27.256522 0.232393 udp 10.0.2.104 54523 <-> 117.200.102.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:27.917528 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:39:28.258704 0.156919 udp 10.0.2.104 54523 <-> 173.44.108.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:29.259605 0.166808 udp 10.0.2.104 54523 <-> 76.119.129.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:30.261302 0.159617 udp 10.0.2.104 54523 <-> 68.13.40.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:31.262395 0.658146 udp 10.0.2.104 54523 <-> 186.92.198.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:32.253527 0.076136 udp 10.0.2.104 54523 <-> 85.85.12.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:33.255070 0.181237 udp 10.0.2.104 54523 <-> 98.176.21.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:34.256704 0.075654 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:35.258404 0.181657 udp 10.0.2.104 54523 <-> 173.248.230.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:36.259531 3.995673 udp 10.0.2.104 54523 -> 69.180.104.201 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:37.260872 0.217484 udp 10.0.2.104 54523 <-> 68.189.5.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:38.262225 0.078049 udp 10.0.2.104 54523 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:39.253539 3.004806 udp 10.0.2.104 54523 -> 67.101.218.88 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:41.257440 0.400183 udp 10.0.2.104 54523 <-> 189.68.140.210 16464 CON 0 0 4 2728 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:43.259479 1.220541 udp 10.0.2.104 54523 <-> 68.189.5.0 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:45.262287 0.000000 udp 10.0.2.104 54523 -> 70.191.247.93 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:46.253741 0.279544 udp 10.0.2.104 54523 <-> 200.85.88.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:47.255166 0.184248 udp 10.0.2.104 54523 <-> 187.160.31.109 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:48.256414 4.084182 udp 10.0.2.104 54523 <-> 85.87.83.70 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:49.258531 0.357226 udp 10.0.2.104 54523 <-> 190.74.23.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:50.260049 0.369724 udp 10.0.2.104 54523 <-> 190.151.153.99 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:51.261139 0.000000 udp 10.0.2.104 54523 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:53.254127 2.146941 udp 10.0.2.104 54523 <-> 75.177.1.114 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:54.255289 0.000000 udp 10.0.2.104 54523 -> 209.234.167.45 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:56.258036 0.155627 udp 10.0.2.104 54523 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:57.259657 0.307249 udp 10.0.2.104 54523 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:58.260918 0.177268 udp 10.0.2.104 54523 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:39:58.962175 0.011842 udp 10.0.2.104 54625 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 13:39:58.974339 0.000000 udp 10.0.2.104 54626 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:39:59.262488 0.319255 udp 10.0.2.104 54523 <-> 77.45.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:00.254401 1.546347 udp 10.0.2.104 54523 <-> 76.72.128.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:01.255428 0.143650 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:02.257099 0.167799 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:03.258276 0.181910 udp 10.0.2.104 54523 <-> 24.107.148.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:04.260128 0.171929 udp 10.0.2.104 54523 <-> 24.200.185.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:05.261179 0.181358 udp 10.0.2.104 54523 <-> 98.176.21.162 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:06.262516 0.409663 udp 10.0.2.104 54523 <-> 201.95.86.136 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:07.254179 0.174163 udp 10.0.2.104 54523 <-> 98.27.139.65 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:08.255309 0.000000 udp 10.0.2.104 54523 -> 190.55.44.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:09.256973 0.145666 udp 10.0.2.104 54523 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:10.258546 0.000000 udp 10.0.2.104 54523 -> 84.132.139.42 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:11.259770 0.158777 udp 10.0.2.104 54523 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:12.261118 0.164001 udp 10.0.2.104 54523 <-> 216.24.92.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:13.252943 0.000000 udp 10.0.2.104 54523 -> 98.197.215.231 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:14.253330 0.000000 udp 10.0.2.104 54523 -> 178.180.206.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:14.914853 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:40:15.255379 0.000000 udp 10.0.2.104 54523 -> 41.70.147.171 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:16.265709 0.000000 udp 10.0.2.104 54523 -> 114.38.192.157 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:17.265009 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:18.263115 0.206207 udp 10.0.2.104 54523 <-> 76.115.104.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:19.261326 0.174775 udp 10.0.2.104 54523 <-> 68.54.38.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:20.253009 0.864470 udp 10.0.2.104 54523 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:21.254112 0.000000 udp 10.0.2.104 54523 -> 184.89.182.202 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:22.255348 0.000000 udp 10.0.2.104 54523 -> 201.37.234.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:23.257224 0.415153 udp 10.0.2.104 54523 <-> 186.94.152.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:24.258449 0.343543 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:25.260223 0.040319 udp 10.0.2.104 54523 <-> 178.148.67.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:26.264676 0.152162 udp 10.0.2.104 54523 <-> 98.214.215.233 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:27.254130 0.000000 udp 10.0.2.104 54523 -> 78.172.232.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:28.254330 0.294232 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:29.255535 0.000000 udp 10.0.2.104 54523 -> 201.81.27.49 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:30.256947 2.003091 udp 10.0.2.104 54523 -> 177.68.211.15 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:31.258412 0.306688 udp 10.0.2.104 54523 <-> 186.237.170.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:33.261296 0.210974 udp 10.0.2.104 54523 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:34.252874 0.000000 udp 10.0.2.104 54523 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:35.254110 0.174889 udp 10.0.2.104 54523 <-> 24.40.241.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:36.255976 0.000000 udp 10.0.2.104 54523 -> 78.159.43.12 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:37.257430 0.000000 udp 10.0.2.104 54523 -> 116.73.204.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:38.258601 0.165362 udp 10.0.2.104 54523 <-> 70.112.106.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:39.259747 0.144582 udp 10.0.2.104 54523 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:40.261418 0.000000 udp 10.0.2.104 54523 -> 176.201.32.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:41.252723 0.151483 udp 10.0.2.104 54523 <-> 50.82.206.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:42.254173 0.045922 udp 10.0.2.104 54523 <-> 178.119.205.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:43.255588 0.000000 udp 10.0.2.104 54523 -> 108.89.100.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:44.257057 0.000000 udp 10.0.2.104 54523 -> 123.26.37.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:45.258694 0.000000 udp 10.0.2.104 54523 -> 95.180.171.234 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:46.193313 3.000715 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 13:40:46.260433 0.193348 udp 10.0.2.104 54523 <-> 75.109.173.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:47.263967 0.029634 udp 10.0.2.104 54523 <-> 78.42.36.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:48.253991 0.792774 udp 10.0.2.104 54523 <-> 184.63.28.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:49.254164 0.189805 udp 10.0.2.104 54523 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:50.255592 0.135788 udp 10.0.2.104 54523 <-> 72.226.86.7 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:51.257273 0.182988 udp 10.0.2.104 54523 <-> 64.179.179.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:52.258671 0.000000 udp 10.0.2.104 54523 -> 217.203.109.39 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:40:53.200321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:40:53.260500 0.153518 udp 10.0.2.104 54523 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:54.261433 0.125427 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:55.253011 1.527752 udp 10.0.2.104 54523 <-> 190.79.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:56.254563 0.135426 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:57.255963 0.159337 udp 10.0.2.104 54523 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:58.257415 0.044378 udp 10.0.2.104 54523 <-> 5.103.62.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:40:59.258702 0.146952 udp 10.0.2.104 54523 <-> 24.187.175.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:00.260172 0.267576 udp 10.0.2.104 54523 <-> 177.182.119.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:01.201579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:41:01.261816 0.214209 udp 10.0.2.104 54523 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:01.912017 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:41:02.253368 0.164025 udp 10.0.2.104 54523 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:03.254546 0.112275 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:04.255873 0.026493 udp 10.0.2.104 54523 <-> 159.149.85.164 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:05.257911 0.170857 udp 10.0.2.104 54523 <-> 97.81.50.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:06.258802 0.000000 udp 10.0.2.104 54523 -> 67.189.32.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:07.260325 0.156826 udp 10.0.2.104 54523 <-> 67.61.188.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:08.261277 0.140628 udp 10.0.2.104 54523 <-> 67.82.101.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:09.253342 0.160626 udp 10.0.2.104 54523 <-> 96.21.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:10.255086 0.133943 udp 10.0.2.104 54523 <-> 24.147.124.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:11.255969 0.268437 udp 10.0.2.104 54523 <-> 68.125.98.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:12.257322 0.316946 udp 10.0.2.104 54523 <-> 112.170.230.167 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:13.258752 0.060876 udp 10.0.2.104 54523 <-> 82.43.52.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:14.260492 0.284961 udp 10.0.2.104 54523 <-> 177.82.176.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:15.261936 0.304785 udp 10.0.2.104 54523 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:16.253020 0.147586 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:17.204774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:41:17.254933 0.140632 udp 10.0.2.104 54523 <-> 184.56.142.17 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:18.256179 0.000000 udp 10.0.2.104 54523 -> 78.78.34.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:19.257944 0.000000 udp 10.0.2.104 54523 -> 179.98.145.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:20.259000 0.236475 udp 10.0.2.104 54523 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:22.261622 0.137758 udp 10.0.2.104 54523 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:23.253215 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:23.253310 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:41:24.254486 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:25.256350 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:26.280432 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:27.278090 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:28.275968 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:29.273823 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:30.260530 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:31.257794 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:32.259227 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:33.257731 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:34.258477 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:35.260389 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:36.262198 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:37.253127 0.000000 udp 10.0.2.104 54523 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:38.254689 0.000000 udp 10.0.2.104 54523 -> 207.38.191.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:39.256144 0.065337 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:40.257903 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:41.260104 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:42.260434 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:43.262327 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:44.265739 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:45.262469 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:47.258750 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:48.259326 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:48.920200 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:41:49.210709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:41:49.260621 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:50.261494 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:51.253406 0.000079 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:51.253485 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:41:52.254810 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:53.262267 0.379661 udp 10.0.2.104 54523 <-> 186.130.28.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:41:55.262509 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:56.262156 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:57.262198 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:58.254047 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:41:59.254863 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:00.256405 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:01.257826 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:02.264124 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:03.263952 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:04.263283 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:05.253793 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:06.255129 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:07.256596 0.000085 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:07.256681 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:42:08.258657 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:09.259166 0.398428 udp 10.0.2.104 54523 <-> 186.130.28.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:42:10.260794 0.153306 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:42:11.262299 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:12.253714 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:13.254870 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:14.256622 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:16.259503 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:17.261178 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:18.262278 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:19.253303 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:20.256148 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:21.256455 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:22.257972 0.000067 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:22.258039 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:42:23.262442 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:24.262259 0.363784 udp 10.0.2.104 54523 <-> 122.107.150.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:42:25.262328 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:26.253876 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:28.256557 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:29.258133 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:30.259335 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:31.260904 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:32.262444 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:33.253424 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:34.255293 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:35.256611 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:35.918140 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:42:36.258301 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:37.259914 0.000108 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:37.260022 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:42:38.261206 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:39.262573 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:40.254092 0.365333 udp 10.0.2.104 54523 <-> 122.107.150.0 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:42:41.255344 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:42.256867 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:43.258846 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:44.259823 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:45.261019 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:46.252761 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:47.253864 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:48.255305 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:49.256955 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:50.258510 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:51.259632 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:52.268000 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:53.257208 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:54.259417 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:55.260131 0.000087 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:55.260218 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:42:56.260788 0.059479 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:42:57.260605 0.000000 udp 10.0.2.104 54523 -> 207.38.191.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:42:58.262517 0.140290 udp 10.0.2.104 54523 <-> 98.14.83.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:42:59.262026 0.337113 udp 10.0.2.104 54523 <-> 220.208.214.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:00.252431 0.000000 udp 10.0.2.104 54523 -> 46.37.84.124 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:01.254107 0.188695 udp 10.0.2.104 54523 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:02.255618 0.160049 udp 10.0.2.104 54523 <-> 68.191.141.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:03.257242 2.165235 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:04.258509 0.000000 udp 10.0.2.104 54523 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:06.261541 0.230929 udp 10.0.2.104 54523 <-> 186.93.233.100 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:07.252953 0.018685 udp 10.0.2.104 54523 <-> 89.173.235.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:08.254134 0.338076 udp 10.0.2.104 54523 <-> 111.252.28.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:09.255891 0.206601 udp 10.0.2.104 54523 <-> 142.136.121.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:10.257400 0.160366 udp 10.0.2.104 54523 <-> 98.214.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:11.258570 1.847640 udp 10.0.2.104 54523 <-> 83.173.151.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:12.260337 0.256020 udp 10.0.2.104 54523 <-> 178.26.138.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:13.261411 0.206788 udp 10.0.2.104 54523 <-> 24.19.205.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:14.254081 0.125780 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:15.254209 0.145235 udp 10.0.2.104 54523 <-> 98.102.132.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:16.255740 0.000000 udp 10.0.2.104 54523 -> 189.79.136.236 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:17.257443 0.143091 udp 10.0.2.104 54523 <-> 24.145.54.236 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:18.259028 0.144869 udp 10.0.2.104 54523 <-> 89.214.78.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:19.260094 1.669241 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 6 4508 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:20.261548 0.166922 udp 10.0.2.104 54523 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:21.252830 0.000000 udp 10.0.2.104 54523 -> 178.42.149.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:22.254296 0.163759 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:22.915114 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:43:23.255809 0.048578 udp 10.0.2.104 54523 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:24.257099 4.161848 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:25.258806 0.000000 udp 10.0.2.104 54523 -> 189.79.136.236 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:26.260176 0.457307 udp 10.0.2.104 54523 <-> 178.42.149.246 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:27.261863 0.155155 udp 10.0.2.104 54523 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:29.254759 0.149336 udp 10.0.2.104 54523 <-> 174.109.218.187 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:30.255680 0.165091 udp 10.0.2.104 54523 <-> 174.102.196.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:31.257192 0.342219 udp 10.0.2.104 54523 <-> 112.133.130.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:32.258668 0.160488 udp 10.0.2.104 54523 <-> 68.61.139.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:33.260361 0.151934 udp 10.0.2.104 54523 <-> 74.90.138.42 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:34.261804 1.029373 udp 10.0.2.104 54523 <-> 27.5.228.120 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:35.253125 0.984992 udp 10.0.2.104 54523 <-> 103.20.65.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:36.254644 1.001296 udp 10.0.2.104 54523 <-> 81.226.243.247 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:38.257186 0.221050 udp 10.0.2.104 54523 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:39.258799 0.298539 udp 10.0.2.104 54523 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:40.260568 0.345381 udp 10.0.2.104 54523 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:41.261555 0.177473 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:42.253192 0.343572 udp 10.0.2.104 54523 <-> 186.133.252.114 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:43.254628 2.139022 udp 10.0.2.104 54523 <-> 68.34.31.19 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:44.256089 0.188663 udp 10.0.2.104 54523 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:46.259037 0.045989 udp 10.0.2.104 54523 <-> 178.119.205.46 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:47.260361 0.165529 udp 10.0.2.104 54523 <-> 98.238.78.76 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:48.261661 0.097738 udp 10.0.2.104 54523 <-> 79.6.38.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:49.253244 0.236170 udp 10.0.2.104 54523 <-> 190.36.174.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:50.254538 0.000000 udp 10.0.2.104 54523 -> 119.83.105.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:51.256068 0.000000 udp 10.0.2.104 54523 -> 180.215.166.88 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:52.257876 0.111732 udp 10.0.2.104 54523 <-> 89.231.196.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:43:53.258826 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:54.260443 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:55.261817 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:56.253276 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:57.254774 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:58.256363 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:43:59.257812 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:00.259063 0.000000 udp 10.0.2.104 54523 -> 119.83.105.141 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:01.260516 1.019255 udp 10.0.2.104 54523 <-> 103.20.65.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:02.262042 0.285627 udp 10.0.2.104 54523 <-> 190.190.227.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:03.252654 0.339063 udp 10.0.2.104 54523 <-> 115.241.73.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:04.254664 0.319713 udp 10.0.2.104 54523 <-> 181.53.197.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:05.256287 0.175012 udp 10.0.2.104 54523 <-> 98.200.250.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:06.257874 0.263416 udp 10.0.2.104 54523 <-> 187.121.67.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:07.258943 0.323686 udp 10.0.2.104 54523 <-> 188.246.92.212 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:08.260543 0.321279 udp 10.0.2.104 54523 <-> 190.230.85.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:09.261971 0.170235 udp 10.0.2.104 54523 <-> 72.179.177.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:09.912598 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:44:10.252996 0.160755 udp 10.0.2.104 54523 <-> 66.163.145.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:11.254766 0.000000 udp 10.0.2.104 54523 -> 216.158.117.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:12.256413 0.151381 udp 10.0.2.104 54523 <-> 24.190.243.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:13.257882 0.000000 udp 10.0.2.104 54523 -> 99.234.194.21 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:14.259300 0.015690 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:15.260785 0.312316 udp 10.0.2.104 54523 <-> 119.173.79.113 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:16.262106 0.318095 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:17.253260 0.223428 udp 10.0.2.104 54523 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:18.254900 0.510199 udp 10.0.2.104 54523 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:19.256267 0.276730 udp 10.0.2.104 54523 <-> 189.120.4.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:20.258194 0.000000 udp 10.0.2.104 54523 -> 201.167.48.159 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:21.259178 0.000000 udp 10.0.2.104 54523 -> 98.27.18.66 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:22.260416 4.997501 udp 10.0.2.104 54523 <-> 98.27.139.65 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:23.262258 3.142569 udp 10.0.2.104 54523 <-> 98.30.222.67 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:24.253370 0.310903 udp 10.0.2.104 54523 <-> 186.92.60.28 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:27.428075 0.000000 udp 10.0.2.104 54523 <- 98.27.139.65 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:28.268342 0.154864 udp 10.0.2.104 54523 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:29.265864 0.055192 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:30.263911 0.180353 udp 10.0.2.104 54523 <-> 24.107.75.181 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:31.255333 0.771038 udp 10.0.2.104 54523 <-> 63.195.75.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:32.254986 0.307589 udp 10.0.2.104 54523 <-> 177.102.16.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:33.256382 0.000000 udp 10.0.2.104 54523 -> 190.185.220.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:34.259006 0.305209 udp 10.0.2.104 54523 <-> 190.112.98.186 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:35.259797 1.093099 udp 10.0.2.104 54523 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:36.263983 0.000000 udp 10.0.2.104 54523 -> 190.245.43.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:37.264848 0.789335 udp 10.0.2.104 54523 <-> 63.195.75.242 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:38.254046 1.361988 udp 10.0.2.104 54523 <-> 93.105.145.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:39.257582 0.160227 udp 10.0.2.104 54523 <-> 68.207.245.156 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:40.257206 0.555603 udp 10.0.2.104 54523 <-> 116.75.42.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:41.265094 0.267908 udp 10.0.2.104 54523 <-> 117.196.234.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:42.262153 0.138053 udp 10.0.2.104 54523 <-> 72.226.92.80 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:43.260900 0.000000 udp 10.0.2.104 54523 -> 190.140.32.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:44.268261 0.070170 udp 10.0.2.104 54523 <-> 83.166.2.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:45.258568 0.182999 udp 10.0.2.104 54523 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:46.263931 0.071103 udp 10.0.2.104 54523 <-> 79.117.163.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:47.262105 0.464113 udp 10.0.2.104 54523 <-> 184.162.19.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:48.260597 0.216363 udp 10.0.2.104 54523 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:49.259918 0.000000 udp 10.0.2.104 54523 -> 65.60.119.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:50.260719 0.583396 udp 10.0.2.104 54523 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:51.262274 0.000000 udp 10.0.2.104 54523 -> 65.28.75.96 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:52.257860 0.073441 udp 10.0.2.104 54523 <-> 79.117.163.102 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:53.257980 0.321657 udp 10.0.2.104 54523 <-> 181.165.238.182 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:54.257817 0.156598 udp 10.0.2.104 54523 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:55.258112 0.157223 udp 10.0.2.104 54523 <-> 184.162.19.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:56.259720 2.358396 udp 10.0.2.104 54523 <-> 64.203.157.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:56.920480 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:44:57.260943 0.000000 udp 10.0.2.104 54523 -> 65.60.119.114 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:44:58.265238 0.212789 udp 10.0.2.104 54523 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:44:59.254131 0.141051 udp 10.0.2.104 54523 <-> 24.182.72.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:00.265874 0.273325 udp 10.0.2.104 54523 <-> 217.199.99.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:01.266247 0.683636 udp 10.0.2.104 54523 <-> 186.56.147.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:02.263815 0.094571 udp 10.0.2.104 54523 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:03.264755 0.000000 udp 10.0.2.104 54523 -> 113.168.119.237 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:04.262398 0.137986 udp 10.0.2.104 54523 <-> 180.148.54.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:05.264050 0.869714 udp 10.0.2.104 54523 <-> 213.245.163.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:06.262418 0.144936 udp 10.0.2.104 54523 <-> 76.125.212.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:07.265104 0.215936 udp 10.0.2.104 54523 <-> 190.206.219.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:08.263612 0.141612 udp 10.0.2.104 54523 <-> 75.138.193.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:09.266959 0.163304 udp 10.0.2.104 54523 <-> 68.102.168.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:10.264077 0.156611 udp 10.0.2.104 54523 <-> 66.56.172.177 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:11.261731 0.120535 udp 10.0.2.104 54523 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:12.262336 0.155487 udp 10.0.2.104 54523 <-> 66.168.217.110 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:13.254130 0.318814 udp 10.0.2.104 54523 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:14.255334 0.300243 udp 10.0.2.104 54523 <-> 182.165.97.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:15.256761 0.104870 udp 10.0.2.104 54523 <-> 188.29.46.143 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:16.258456 0.360531 udp 10.0.2.104 54523 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:17.260117 0.070128 udp 10.0.2.104 54523 <-> 83.166.2.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:18.260857 0.150388 udp 10.0.2.104 54523 <-> 69.116.80.50 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:19.252447 0.000000 udp 10.0.2.104 54523 -> 79.146.39.38 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:20.254140 0.329584 udp 10.0.2.104 54523 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:21.255357 0.175305 udp 10.0.2.104 54523 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:22.256789 0.157172 udp 10.0.2.104 54523 <-> 173.199.217.72 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:23.258416 0.162218 udp 10.0.2.104 54523 <-> 68.187.152.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:24.259953 0.173748 udp 10.0.2.104 54523 <-> 68.184.183.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:25.261347 0.262440 udp 10.0.2.104 54523 <-> 190.74.48.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:26.252684 0.362990 udp 10.0.2.104 54523 <-> 177.132.184.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:27.254135 0.338817 udp 10.0.2.104 54523 <-> 119.75.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:28.255521 0.119491 udp 10.0.2.104 54523 <-> 24.36.117.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:29.257010 0.194841 udp 10.0.2.104 54523 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:30.258224 4.295588 udp 10.0.2.104 54523 <-> 219.114.23.77 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:31.260026 4.201016 udp 10.0.2.104 54523 <-> 76.115.116.81 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:32.261455 4.134822 udp 10.0.2.104 54523 <-> 109.111.243.50 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:37.258391 0.146305 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:38.260042 0.058684 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:39.261419 0.000049 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:39.261468 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:45:40.252815 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:41.254206 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:42.255691 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:43.257059 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:44.258756 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:44.920597 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:45:45.263995 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:46.271462 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:47.259363 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:48.255860 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:49.255615 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:50.286256 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:51.281619 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:52.280230 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:53.275029 0.145619 udp 10.0.2.104 54523 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:45:54.258842 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:55.254570 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:56.255987 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:57.257298 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:58.258486 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:45:59.260234 3.995782 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:00.261509 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:01.253050 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:02.254441 0.353893 udp 10.0.2.104 54523 <-> 114.47.90.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:04.257167 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:05.258693 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:06.260368 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:07.262242 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:08.253096 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:09.254612 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:10.258909 0.000000 udp 10.0.2.104 54523 -> 114.47.90.238 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:11.258725 0.105748 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:12.258634 0.000000 udp 10.0.2.104 54523 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:13.260734 0.223941 udp 10.0.2.104 54523 <-> 201.165.33.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:14.261705 2.351853 udp 10.0.2.104 54523 <-> 111.254.125.242 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:15.253136 3.051210 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:17.255858 0.000000 udp 10.0.2.104 54523 -> 74.84.0.18 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:19.258763 0.000000 udp 10.0.2.104 54523 -> 84.7.122.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:20.260372 0.386581 udp 10.0.2.104 54523 <-> 114.47.90.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:21.262032 4.215120 udp 10.0.2.104 54523 <-> 85.85.49.251 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:23.254342 0.000000 udp 10.0.2.104 54523 -> 173.55.116.251 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:24.256369 0.094755 udp 10.0.2.104 54523 <-> 95.180.5.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:26.258991 0.059396 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:27.260669 0.126527 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:28.261766 0.713986 udp 10.0.2.104 54523 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:29.253241 0.334174 udp 10.0.2.104 54523 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:30.254418 3.004245 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:31.256212 0.000000 udp 10.0.2.104 54523 -> 76.212.204.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:31.916729 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:46:32.257372 0.000000 udp 10.0.2.104 54523 -> 69.170.62.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:34.260640 0.038391 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:35.262011 0.029880 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:36.253275 0.000000 udp 10.0.2.104 54523 -> 188.29.87.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:37.254768 0.061434 udp 10.0.2.104 54523 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:38.256258 0.000000 udp 10.0.2.104 54523 -> 89.214.78.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:39.257641 0.041976 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:40.259029 3.995703 udp 10.0.2.104 54523 -> 181.55.80.2 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:46:41.260515 2.252730 udp 10.0.2.104 54523 <-> 117.197.114.242 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:42.261436 0.138609 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:45.256481 0.490722 udp 10.0.2.104 54523 <-> 187.69.92.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:46.258009 0.143131 udp 10.0.2.104 54523 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:47.259037 0.129040 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:48.260546 0.151624 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:49.262237 0.071098 udp 10.0.2.104 54523 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:50.253112 0.156986 udp 10.0.2.104 54523 <-> 68.52.86.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:51.254818 3.084903 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:52.256280 0.059215 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:53.258166 0.051352 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:55.260635 0.320087 udp 10.0.2.104 54523 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:56.262321 0.161253 udp 10.0.2.104 54523 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:57.253236 0.283675 udp 10.0.2.104 54523 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:58.254917 0.141917 udp 10.0.2.104 54523 <-> 74.78.52.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:46:59.256739 1.198886 udp 10.0.2.104 54523 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:00.257906 0.353715 udp 10.0.2.104 54523 <-> 1.173.9.54 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:01.259146 0.325470 udp 10.0.2.104 54523 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:02.260488 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:03.262453 0.145175 udp 10.0.2.104 54523 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:04.253372 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:05.254935 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:06.256294 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:07.257832 0.031769 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:08.259056 0.044689 udp 10.0.2.104 54523 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:09.260780 0.169547 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:10.262529 0.170457 udp 10.0.2.104 54523 <-> 72.51.46.90 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:11.253491 0.201256 udp 10.0.2.104 54523 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:12.256709 0.144597 udp 10.0.2.104 54523 <-> 69.121.228.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:13.256851 0.065804 udp 10.0.2.104 54523 <-> 78.52.122.236 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:14.258147 0.000000 udp 10.0.2.104 54523 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:15.259206 0.325997 udp 10.0.2.104 54523 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:16.261185 0.000000 udp 10.0.2.104 54523 -> 217.114.188.94 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:17.262106 0.030849 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:18.253778 0.058356 udp 10.0.2.104 54523 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:18.914431 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:47:19.255085 0.407828 udp 10.0.2.104 54523 <-> 82.225.160.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:20.256772 0.123230 udp 10.0.2.104 54523 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:21.258433 0.169579 udp 10.0.2.104 54523 <-> 69.204.114.84 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:22.259434 0.157698 udp 10.0.2.104 54523 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:23.260813 0.166435 udp 10.0.2.104 54523 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:24.262077 0.154407 udp 10.0.2.104 54523 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:25.253823 0.167693 udp 10.0.2.104 54523 <-> 24.28.6.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:26.255520 0.127020 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:27.256717 0.152677 udp 10.0.2.104 54523 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:28.258566 0.140065 udp 10.0.2.104 54523 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:29.259750 0.130565 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:30.261187 0.000000 udp 10.0.2.104 54523 -> 192.168.1.3 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:31.262545 0.000000 udp 10.0.2.104 54523 -> 181.55.80.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:32.254310 0.000000 udp 10.0.2.104 54523 -> 201.230.81.243 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:33.255679 0.227636 udp 10.0.2.104 54523 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:34.256555 0.065237 udp 10.0.2.104 54523 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:35.258274 0.326269 udp 10.0.2.104 54523 <-> 190.73.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:36.259660 1.325676 udp 10.0.2.104 54523 <-> 190.120.48.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:37.260950 0.000000 udp 10.0.2.104 54523 -> 190.48.74.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:38.262498 0.017275 udp 10.0.2.104 54523 <-> 95.168.48.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:39.253822 0.031680 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:40.255657 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:41.256485 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:42.258524 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:43.259537 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:44.261094 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:45.262695 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:46.253773 0.211539 udp 10.0.2.104 54523 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:47.255366 1.287132 udp 10.0.2.104 54523 <-> 190.120.48.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:48.256643 0.278693 udp 10.0.2.104 54523 <-> 190.73.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:49.258317 0.055492 udp 10.0.2.104 54523 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:50.259715 0.143644 udp 10.0.2.104 54523 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:51.260937 0.000000 udp 10.0.2.104 54523 -> 71.174.58.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:52.252648 0.000000 udp 10.0.2.104 54523 -> 68.69.150.40 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:53.216386 3.001986 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 13:47:53.253823 1.260959 udp 10.0.2.104 54523 <-> 190.203.238.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:54.255170 0.187800 udp 10.0.2.104 54523 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:55.256859 0.000000 udp 10.0.2.104 54523 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:47:56.258488 0.403492 udp 10.0.2.104 54523 <-> 201.246.136.27 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:57.259685 2.181002 udp 10.0.2.104 54523 <-> 71.45.42.26 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:47:58.261268 0.046562 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:00.224062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:48:00.254040 0.364017 udp 10.0.2.104 54523 <-> 114.36.33.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:01.255610 0.318825 udp 10.0.2.104 54523 <-> 203.114.192.74 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:02.256828 0.150294 udp 10.0.2.104 54523 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:03.258364 2.162135 udp 10.0.2.104 54523 <-> 107.5.244.202 16464 CON 0 0 6 2844 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:05.912274 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:48:06.252671 0.022447 udp 10.0.2.104 54523 <-> 176.63.245.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:07.254175 0.172730 udp 10.0.2.104 54523 <-> 139.102.182.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:08.225796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:48:08.255932 0.214293 udp 10.0.2.104 54523 <-> 200.93.75.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:09.256758 0.163306 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:10.258368 0.325233 udp 10.0.2.104 54523 <-> 220.53.176.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:11.259862 0.754948 udp 10.0.2.104 54523 <-> 184.0.8.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:12.261426 0.157070 udp 10.0.2.104 54523 <-> 173.169.137.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:13.252769 3.004025 udp 10.0.2.104 54523 -> 201.4.16.136 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:14.254256 4.005743 udp 10.0.2.104 54523 -> 184.167.186.68 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:15.255464 0.284451 udp 10.0.2.104 54523 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:17.258408 0.572809 udp 10.0.2.104 54523 <-> 190.245.135.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:19.261187 0.000000 udp 10.0.2.104 54523 -> 71.43.164.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:20.253469 0.000000 udp 10.0.2.104 54523 -> 184.0.8.108 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:21.254824 1.161316 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:23.257395 4.997107 udp 10.0.2.104 54523 <-> 190.245.135.83 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:24.228437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:48:24.258524 1.132131 udp 10.0.2.104 54523 <-> 68.83.76.147 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:26.261402 0.142874 udp 10.0.2.104 54523 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:27.252785 0.405100 udp 10.0.2.104 54523 <-> 75.214.61.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:28.580368 0.000000 udp 10.0.2.104 54523 <- 190.245.135.83 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:29.256254 0.150006 udp 10.0.2.104 54523 <-> 110.5.74.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:30.257312 0.036792 udp 10.0.2.104 54523 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:31.258520 2.283791 udp 10.0.2.104 54523 <-> 190.193.89.54 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:32.260042 0.000000 udp 10.0.2.104 54523 -> 92.36.144.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:34.252779 0.000000 udp 10.0.2.104 54523 -> 27.5.228.120 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:35.254300 0.000000 udp 10.0.2.104 54523 -> 113.193.104.184 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:36.255792 0.177306 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:37.257166 0.194371 udp 10.0.2.104 54523 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:38.258684 0.000000 udp 10.0.2.104 54523 -> 50.240.222.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:39.260433 3.014702 udp 10.0.2.104 54523 <-> 95.59.21.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:40.261333 0.372870 udp 10.0.2.104 54523 <-> 190.73.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:40.543717 0.000000 udp 10.0.2.104 54523 <- 113.193.104.184 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:41.252973 0.000000 udp 10.0.2.104 54523 -> 201.69.176.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:42.254494 2.172416 udp 10.0.2.104 54523 <-> 69.73.42.153 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:43.256307 0.184959 udp 10.0.2.104 54523 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:45.258575 0.000000 udp 10.0.2.104 54523 -> 126.60.25.25 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:46.260121 0.140581 udp 10.0.2.104 54523 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:47.261971 0.137617 udp 10.0.2.104 54523 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:48.253447 0.419140 udp 10.0.2.104 54523 <-> 200.85.88.243 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:49.254267 0.177951 udp 10.0.2.104 54523 <-> 99.121.92.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:50.256193 0.137302 udp 10.0.2.104 54523 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:51.257338 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:52.258896 0.000000 udp 10.0.2.104 54523 -> 186.92.198.4 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:52.919284 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:48:53.260092 0.000000 udp 10.0.2.104 54523 -> 78.213.115.15 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:54.263394 0.000000 udp 10.0.2.104 54523 -> 204.16.10.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:55.253032 0.179679 udp 10.0.2.104 54523 <-> 99.121.92.180 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:56.234567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:48:56.254594 0.000000 udp 10.0.2.104 54523 -> 98.217.103.252 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:57.260142 0.000000 udp 10.0.2.104 54523 -> 66.25.88.248 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:48:58.260737 3.578291 udp 10.0.2.104 54523 <-> 186.92.198.4 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:48:59.260926 0.000000 udp 10.0.2.104 54523 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:00.261088 0.368535 udp 10.0.2.104 54523 <-> 78.213.115.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:02.252992 0.341438 udp 10.0.2.104 54523 <-> 1.238.135.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:03.257956 0.172399 udp 10.0.2.104 54523 <-> 24.215.82.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:04.258714 0.000000 udp 10.0.2.104 54523 -> 76.16.28.17 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:05.258768 0.387020 udp 10.0.2.104 54523 <-> 186.191.27.29 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:06.259026 0.098317 udp 10.0.2.104 54523 <-> 37.214.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:07.260298 0.154948 udp 10.0.2.104 54523 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:08.263609 2.155343 udp 10.0.2.104 54523 <-> 69.180.10.64 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:09.253940 0.163842 udp 10.0.2.104 54523 <-> 70.191.247.93 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:11.256203 0.176077 udp 10.0.2.104 54523 <-> 24.13.103.235 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:12.257508 0.000000 udp 10.0.2.104 54523 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:13.259040 0.048165 udp 10.0.2.104 54523 <-> 212.117.27.216 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:14.260554 3.996306 udp 10.0.2.104 54523 -> 41.159.128.242 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:15.262097 0.396551 udp 10.0.2.104 54523 <-> 190.190.110.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:16.253401 0.137945 udp 10.0.2.104 54523 <-> 72.229.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:17.254908 0.000000 udp 10.0.2.104 54523 -> 181.118.86.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:19.257458 0.156015 udp 10.0.2.104 54523 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:20.258909 0.135640 udp 10.0.2.104 54523 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:21.260593 0.010183 udp 10.0.2.104 54523 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:22.262070 0.062698 udp 10.0.2.104 54523 <-> 95.42.254.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:23.253284 0.046291 udp 10.0.2.104 54523 <-> 213.46.47.81 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:24.256408 2.001505 udp 10.0.2.104 54523 -> 76.206.16.81 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:25.256755 0.139854 udp 10.0.2.104 54523 <-> 76.117.184.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:27.258991 0.000000 udp 10.0.2.104 54523 -> 49.124.220.56 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:28.263635 0.061110 udp 10.0.2.104 54523 <-> 95.42.254.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:29.264134 3.272513 udp 10.0.2.104 54523 <-> 190.73.192.75 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:30.254053 0.000000 udp 10.0.2.104 54523 -> 71.168.96.72 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:31.259635 0.000000 udp 10.0.2.104 54523 -> 69.180.59.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:33.257846 2.002821 udp 10.0.2.104 54523 <-> 111.253.127.116 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:34.259054 1.870733 udp 10.0.2.104 54523 <-> 177.100.202.116 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:36.262066 0.000000 udp 10.0.2.104 54523 -> 151.52.90.249 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:37.253408 0.867773 udp 10.0.2.104 54523 <-> 216.158.117.249 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:38.254810 0.131497 udp 10.0.2.104 54523 <-> 76.117.184.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:39.256572 0.000000 udp 10.0.2.104 54523 -> 111.253.127.116 16464 REQ 0 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:39.917275 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:49:40.257977 0.000000 udp 10.0.2.104 54523 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:41.259192 0.000000 udp 10.0.2.104 54523 -> 49.124.220.56 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:42.260769 1.127351 udp 10.0.2.104 54523 <-> 186.92.133.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:43.262226 0.062389 udp 10.0.2.104 54523 <-> 95.42.254.95 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:44.253629 0.000000 udp 10.0.2.104 54523 -> 41.71.189.103 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:45.254753 0.120575 udp 10.0.2.104 54523 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:46.256676 0.134300 udp 10.0.2.104 54523 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:47.257962 0.157448 udp 10.0.2.104 54523 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:48.259306 0.040469 udp 10.0.2.104 54523 <-> 94.253.205.252 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:49.260749 0.129642 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:50.262055 0.259427 udp 10.0.2.104 54523 <-> 187.121.44.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:51.098837 0.000000 udp 10.0.2.104 54523 <- 41.71.189.103 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:51.254059 0.000000 udp 10.0.2.104 54523 -> 114.163.161.247 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:52.254690 0.191921 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:53.256452 0.000000 udp 10.0.2.104 54523 -> 190.94.233.98 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:49:54.258092 0.048196 udp 10.0.2.104 54523 <-> 178.235.175.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:55.259299 0.134666 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:56.260752 1.172092 udp 10.0.2.104 54523 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:57.262265 0.141294 udp 10.0.2.104 54523 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:58.253654 0.105162 udp 10.0.2.104 54523 <-> 79.176.13.149 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:49:59.255951 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:00.256348 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:01.258243 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:02.259880 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:03.260719 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:04.262549 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:05.253535 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:06.255076 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:07.256359 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:08.258170 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:09.259888 0.000000 udp 10.0.2.104 54523 -> 87.111.161.82 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:10.261100 0.000000 udp 10.0.2.104 54523 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:11.262342 1.153106 udp 10.0.2.104 54523 <-> 24.249.56.178 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:13.255268 0.141152 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:14.256927 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:15.258136 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:16.259881 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:17.261244 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:18.262435 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:19.256321 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:20.256691 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:21.256804 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:21.256850 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:50:23.259892 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:24.261154 0.374504 udp 10.0.2.104 54523 <-> 177.226.167.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:25.252603 0.000000 udp 10.0.2.104 54523 -> 76.206.16.81 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:26.254220 0.115185 udp 10.0.2.104 54523 <-> 87.111.161.82 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:27.255629 0.153391 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:27.916320 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:50:28.256974 0.000000 udp 10.0.2.104 54523 -> 78.249.211.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:29.258355 0.145690 udp 10.0.2.104 54523 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:30.260184 1.072116 udp 10.0.2.104 54523 <-> 78.42.232.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:32.252493 0.398373 udp 10.0.2.104 54523 <-> 60.228.64.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:33.253989 0.163524 udp 10.0.2.104 54523 <-> 71.90.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:34.255483 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:35.256786 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:36.258362 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:37.260232 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:38.261121 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:39.252766 0.000082 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:39.252848 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:50:40.254092 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:41.255765 0.148195 udp 10.0.2.104 54523 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:42.256993 0.154403 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:43.258481 0.172926 udp 10.0.2.104 54523 <-> 173.177.19.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:44.259942 0.290735 udp 10.0.2.104 54523 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:45.261278 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:46.252798 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:47.254027 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:48.255810 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:49.256973 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:50.258456 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:51.259886 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:52.261115 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:53.252773 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:55.255349 3.004790 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:50:56.257074 0.147525 udp 10.0.2.104 54523 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:57.258524 0.169510 udp 10.0.2.104 54523 <-> 24.55.45.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:50:59.264176 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:00.253397 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:01.254479 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:02.255937 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:03.257239 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:04.258487 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:05.260405 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:06.261356 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:07.259817 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:08.260659 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:09.265716 0.000056 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:09.265772 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:51:11.261928 0.556211 udp 10.0.2.104 54523 <-> 201.43.188.193 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:12.263737 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:13.265696 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:14.253039 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:15.254528 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:15.915450 0.116669 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:51:16.360653 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:17.354948 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:18.348507 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:19.345655 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:20.341137 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:21.322966 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:22.314780 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:23.310797 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:24.308455 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:24.308528 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:51:25.305858 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:26.298545 0.000000 udp 10.0.2.104 54523 -> 68.231.114.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:27.293804 0.134694 udp 10.0.2.104 54523 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:28.275809 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:29.270788 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:30.269603 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:31.264313 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:32.259921 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:33.260486 0.200838 udp 10.0.2.104 54523 <-> 68.231.114.153 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:34.267930 0.180084 udp 10.0.2.104 54523 <-> 24.55.45.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:35.258093 0.152008 udp 10.0.2.104 54523 <-> 67.21.98.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:36.259132 0.000000 udp 10.0.2.104 54523 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:37.259547 0.146188 udp 10.0.2.104 54523 <-> 71.7.212.233 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:38.262205 0.000000 udp 10.0.2.104 54523 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:39.262347 0.000000 udp 10.0.2.104 54523 -> 116.73.204.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:40.262078 0.431339 udp 10.0.2.104 54523 <-> 190.75.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:41.261803 0.262879 udp 10.0.2.104 54523 <-> 190.245.50.38 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:42.253115 0.000000 udp 10.0.2.104 54523 -> 115.241.61.14 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:43.254501 0.165251 udp 10.0.2.104 54523 <-> 24.243.7.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:44.256313 0.160091 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:45.257275 0.136739 udp 10.0.2.104 54523 <-> 24.0.29.18 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:46.259033 0.067535 udp 10.0.2.104 54523 <-> 84.126.6.201 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:47.260514 0.035760 udp 10.0.2.104 54523 <-> 212.37.176.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:48.261920 0.248878 udp 10.0.2.104 54523 <-> 173.212.2.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:49.252928 0.134391 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:50.254607 1.218192 udp 10.0.2.104 54523 <-> 67.187.191.37 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:52.257501 0.000000 udp 10.0.2.104 54523 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:51:53.259176 0.034792 udp 10.0.2.104 54523 <-> 212.37.176.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:54.260431 0.130009 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:55.261852 0.344320 udp 10.0.2.104 54523 <-> 186.92.198.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:56.253076 0.241581 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:57.254700 0.158423 udp 10.0.2.104 54523 <-> 98.228.120.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:58.256244 0.080835 udp 10.0.2.104 54523 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:51:59.257525 0.000000 udp 10.0.2.104 54523 -> 63.147.47.73 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:00.259025 0.135490 udp 10.0.2.104 54523 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:01.260403 0.056694 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:02.262333 0.000000 udp 10.0.2.104 54523 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:02.912468 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:52:03.253125 0.171828 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:04.254645 0.225547 udp 10.0.2.104 54523 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:05.258315 0.415446 udp 10.0.2.104 54523 <-> 201.37.234.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:06.258928 0.170543 udp 10.0.2.104 54523 <-> 173.174.12.168 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:07.259393 0.067587 udp 10.0.2.104 54523 <-> 85.230.38.241 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:08.260646 0.000000 udp 10.0.2.104 54523 -> 114.27.146.41 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:09.262237 0.157220 udp 10.0.2.104 54523 <-> 75.76.12.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:10.253660 0.000000 udp 10.0.2.104 54523 -> 24.208.178.212 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:11.256966 0.740856 udp 10.0.2.104 54523 <-> 184.0.8.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:12.257016 0.334583 udp 10.0.2.104 54523 <-> 72.235.251.141 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:13.257936 0.160101 udp 10.0.2.104 54523 <-> 98.209.104.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:14.259188 0.030825 udp 10.0.2.104 54523 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:15.260528 0.119202 udp 10.0.2.104 54523 <-> 85.219.46.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:16.264637 1.208727 udp 10.0.2.104 54523 <-> 186.22.32.15 16464 CON 0 0 2 528 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:17.254155 0.363797 udp 10.0.2.104 54523 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:18.255181 0.053407 udp 10.0.2.104 54523 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:19.256895 0.204464 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:20.257971 0.284205 udp 10.0.2.104 54523 <-> 201.235.154.108 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:21.259125 0.000000 udp 10.0.2.104 54523 -> 190.124.132.154 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:22.260742 0.109188 udp 10.0.2.104 54523 <-> 41.98.152.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:23.261866 0.000000 udp 10.0.2.104 54523 -> 81.227.139.99 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:24.253334 0.116153 udp 10.0.2.104 54523 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:25.255115 0.143314 udp 10.0.2.104 54523 <-> 68.193.33.203 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:26.256601 0.156206 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:27.258010 0.163213 udp 10.0.2.104 54523 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:28.259317 0.331363 udp 10.0.2.104 54523 <-> 181.165.37.220 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:29.260694 0.196466 udp 10.0.2.104 54523 <-> 108.185.4.13 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:30.262106 0.297167 udp 10.0.2.104 54523 <-> 187.15.82.148 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:31.253728 4.008154 udp 10.0.2.104 54523 <-> 200.148.53.56 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:32.258745 0.202893 udp 10.0.2.104 54523 <-> 67.168.128.157 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:33.263736 0.169129 udp 10.0.2.104 54523 <-> 103.25.170.41 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:34.264096 0.000000 udp 10.0.2.104 54523 -> 2.193.87.176 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:36.261033 0.145106 udp 10.0.2.104 54523 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:37.262218 0.000000 udp 10.0.2.104 54523 -> 78.251.143.19 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:37.832354 0.000000 udp 10.0.2.104 54523 <- 200.148.53.56 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:38.253939 0.015426 udp 10.0.2.104 54523 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:39.255220 0.168671 udp 10.0.2.104 54523 <-> 216.24.92.16 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:40.256346 0.153041 udp 10.0.2.104 54523 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:41.257975 0.135747 udp 10.0.2.104 54523 <-> 24.229.176.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:42.259436 0.057145 udp 10.0.2.104 54523 <-> 81.233.173.12 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:43.261076 0.055426 udp 10.0.2.104 54523 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:44.262174 0.134559 udp 10.0.2.104 54523 <-> 68.81.243.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:45.253439 0.000000 udp 10.0.2.104 54523 -> 78.97.151.114 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:46.255037 0.000000 udp 10.0.2.104 54523 -> 71.54.143.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:47.256657 0.162425 udp 10.0.2.104 54523 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:48.258146 0.204478 udp 10.0.2.104 54523 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:49.259808 2.221947 udp 10.0.2.104 54523 <-> 177.227.19.113 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:49.920547 0.000036 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:52:50.260910 0.144119 udp 10.0.2.104 54523 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:52.253788 0.000000 udp 10.0.2.104 54523 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:53.255401 0.000000 udp 10.0.2.104 54523 -> 201.243.112.174 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:54.256901 0.000000 udp 10.0.2.104 54523 -> 201.208.6.133 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:52:55.258141 0.106940 udp 10.0.2.104 54523 <-> 2.193.17.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:56.259770 0.191307 udp 10.0.2.104 54523 <-> 68.108.105.140 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:57.261179 0.065535 udp 10.0.2.104 54523 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:58.252389 0.165480 udp 10.0.2.104 54523 <-> 72.191.127.222 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:52:59.253987 0.511571 udp 10.0.2.104 54523 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:00.255598 0.483514 udp 10.0.2.104 54523 <-> 59.102.184.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:01.257454 0.057187 udp 10.0.2.104 54523 <-> 31.11.113.191 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:02.258317 0.322220 udp 10.0.2.104 54523 <-> 220.208.150.104 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:03.259592 0.289880 udp 10.0.2.104 54523 <-> 75.56.206.163 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:04.261493 0.172648 udp 10.0.2.104 54523 <-> 75.64.134.53 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:05.252605 0.141423 udp 10.0.2.104 54523 <-> 207.180.74.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:06.253984 0.981992 udp 10.0.2.104 54523 <-> 174.64.190.144 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:07.256032 0.167876 udp 10.0.2.104 54523 <-> 75.67.90.173 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:08.256725 0.000000 udp 10.0.2.104 54523 -> 50.134.240.23 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:53:09.257997 0.046668 udp 10.0.2.104 54523 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:10.260052 0.000000 udp 10.0.2.104 54523 -> 186.88.203.250 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:53:11.261194 0.127105 udp 10.0.2.104 54523 <-> 216.121.246.15 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:12.252192 0.280636 udp 10.0.2.104 54523 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:13.254026 0.208039 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:14.255821 0.166622 udp 10.0.2.104 54523 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:15.256762 0.135743 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:16.258182 0.000000 udp 10.0.2.104 54523 -> 72.222.72.67 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:53:17.260140 1.463631 udp 10.0.2.104 54523 <-> 24.23.11.39 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:19.252699 0.161685 udp 10.0.2.104 54523 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:20.254130 0.078605 udp 10.0.2.104 54523 <-> 188.127.96.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:21.255808 0.237546 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:22.257196 0.284641 udp 10.0.2.104 54523 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:23.258453 0.203231 udp 10.0.2.104 54523 <-> 186.144.251.151 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:24.260080 0.160636 udp 10.0.2.104 54523 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:25.261119 0.161833 udp 10.0.2.104 54523 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:26.252532 0.808754 udp 10.0.2.104 54523 <-> 198.45.217.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:27.254324 0.154913 udp 10.0.2.104 54523 <-> 69.249.127.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:28.255894 0.000000 udp 10.0.2.104 54523 -> 76.188.182.141 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:53:29.257044 0.280711 udp 10.0.2.104 54523 <-> 181.135.175.210 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:30.258454 0.291893 udp 10.0.2.104 54523 <-> 122.210.119.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:31.260140 0.124700 udp 10.0.2.104 54523 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:32.261481 0.156898 udp 10.0.2.104 54523 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:33.252983 0.084546 udp 10.0.2.104 54523 <-> 46.120.207.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:34.254088 0.054965 udp 10.0.2.104 54523 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:35.255620 0.139298 udp 10.0.2.104 54523 <-> 68.81.243.250 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:36.257173 0.291655 udp 10.0.2.104 54523 <-> 189.120.4.254 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:36.918125 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:53:37.258448 0.158828 udp 10.0.2.104 54523 <-> 173.169.137.152 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:38.260142 0.153530 udp 10.0.2.104 54523 <-> 174.53.138.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:39.261292 0.183709 udp 10.0.2.104 54523 <-> 99.102.150.224 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:40.252915 0.185927 udp 10.0.2.104 54523 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:41.254266 0.073624 udp 10.0.2.104 54523 <-> 83.97.238.49 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:42.255957 0.059976 udp 10.0.2.104 54523 <-> 91.237.245.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:43.257045 0.180118 udp 10.0.2.104 54523 <-> 68.2.34.60 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:44.258585 0.137478 udp 10.0.2.104 54523 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:45.260331 3.051678 udp 10.0.2.104 54523 <-> 201.235.95.14 16464 CON 0 0 4 1896 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:46.261390 0.154116 udp 10.0.2.104 54523 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:48.254389 0.068740 udp 10.0.2.104 54523 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:49.255523 0.000000 udp 10.0.2.104 54523 -> 186.0.57.245 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:53:50.257286 0.312114 udp 10.0.2.104 54523 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:51.258428 0.000000 udp 10.0.2.104 54523 -> 71.15.96.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:53:52.260362 0.305723 udp 10.0.2.104 54523 <-> 187.84.77.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:53.261440 0.473890 udp 10.0.2.104 54523 <-> 1.44.244.111 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:54.252942 0.252517 udp 10.0.2.104 54523 <-> 98.112.167.196 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:55.254281 0.147181 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:56.256272 0.000000 udp 10.0.2.104 54523 -> 91.183.59.33 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:53:57.257421 0.133781 udp 10.0.2.104 54523 <-> 50.176.20.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:53:58.258729 0.000000 udp 10.0.2.104 54523 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:53:59.260355 0.165131 udp 10.0.2.104 54523 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:00.261259 0.137726 udp 10.0.2.104 54523 <-> 173.176.169.88 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:01.253093 0.119510 udp 10.0.2.104 54523 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:02.254622 0.279522 udp 10.0.2.104 54523 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:03.256108 4.997107 udp 10.0.2.104 54523 <-> 67.242.138.72 16464 CON 0 0 3 1006 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:04.257253 0.000000 udp 10.0.2.104 54523 -> 88.13.205.249 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:05.258833 0.319284 udp 10.0.2.104 54523 <-> 211.19.18.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:06.260536 0.000000 udp 10.0.2.104 54523 -> 190.11.194.47 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:07.261874 0.000000 udp 10.0.2.104 54523 -> 186.58.25.161 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:08.417836 0.000000 udp 10.0.2.104 54523 <- 67.242.138.72 16464 RSP 0 0 1 890 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:10.256134 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:11.257629 0.000078 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:11.257707 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:54:12.258819 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:13.260537 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:14.261721 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:15.253362 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:16.254641 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:17.256171 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:18.258088 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:19.258894 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:20.260465 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:21.261845 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:22.253291 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:23.254581 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:23.915815 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:54:24.256248 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:25.257940 0.211944 udp 10.0.2.104 54523 <-> 24.205.37.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:26.259005 0.140210 udp 10.0.2.104 54523 <-> 72.229.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:27.260832 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:28.262277 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:29.253344 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:30.254786 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:31.256082 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:32.257853 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:33.259251 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:34.260425 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:35.261906 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:36.253007 0.000046 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:36.253053 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:54:37.254961 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:38.256200 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:39.257565 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:40.259116 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:42.262030 0.137323 udp 10.0.2.104 54523 <-> 72.229.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:43.253344 0.000000 udp 10.0.2.104 54523 -> 64.131.160.146 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:44.255111 0.323018 udp 10.0.2.104 54523 <-> 211.19.18.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:45.256331 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:46.258271 0.000000 udp 10.0.2.104 54523 -> 2.136.126.27 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:47.259675 0.053385 udp 10.0.2.104 54523 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:48.260683 0.138059 udp 10.0.2.104 54523 <-> 69.120.84.63 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:49.262198 0.147018 udp 10.0.2.104 54523 <-> 107.5.46.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:50.252920 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:52.256408 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:53.258129 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:54.259428 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:55.260600 0.000043 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:55.260643 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:54:56.262227 0.205589 udp 10.0.2.104 54523 <-> 98.232.99.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:54:57.252884 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:58.255413 0.000000 udp 10.0.2.104 54523 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:58.966479 0.011579 udp 10.0.2.104 54627 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 13:54:58.978332 0.000000 udp 10.0.2.104 54628 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:54:59.256839 0.000000 udp 10.0.2.104 54523 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:00.240710 3.001516 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 13:55:00.257985 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:01.259270 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:02.260728 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:03.262322 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:05.255093 0.000059 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:05.255152 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:55:06.256791 0.155152 udp 10.0.2.104 54523 <-> 207.210.56.47 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:07.248077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:55:07.258041 0.242277 udp 10.0.2.104 54523 -> 69.234.188.61 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:07.500318 0.000000 icmp 69.234.188.61 0x0303 -> 10.0.2.104 0x5040 URP 192 1 70 flow=Background 1970/01/01 13:55:08.258919 0.426365 udp 10.0.2.104 54523 <-> 186.130.28.62 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:09.260783 0.275572 udp 10.0.2.104 54523 <-> 189.63.204.77 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:10.262299 0.035846 udp 10.0.2.104 54523 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:10.913091 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:55:11.253998 0.120417 udp 10.0.2.104 54523 <-> 81.182.185.161 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:12.255059 0.000000 udp 10.0.2.104 54523 -> 50.150.167.214 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:13.256426 4.006036 udp 10.0.2.104 54523 -> 190.174.215.72 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:14.258399 0.044165 udp 10.0.2.104 54523 <-> 5.103.62.70 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:15.249493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:55:15.259499 0.000000 udp 10.0.2.104 54523 -> 181.55.80.2 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:16.260908 0.435244 udp 10.0.2.104 54523 <-> 190.245.135.83 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:18.253821 0.129884 udp 10.0.2.104 54523 <-> 76.117.184.79 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:19.255139 0.316472 udp 10.0.2.104 54523 <-> 50.100.36.247 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:20.256787 0.153935 udp 10.0.2.104 54523 <-> 68.43.93.238 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:21.257929 0.000000 udp 10.0.2.104 54523 -> 186.14.142.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:22.259595 0.164288 udp 10.0.2.104 54523 <-> 71.57.228.150 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:23.260991 0.360840 udp 10.0.2.104 54523 <-> 122.121.39.179 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:24.262600 0.171335 udp 10.0.2.104 54523 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:25.253920 0.285988 udp 10.0.2.104 54523 <-> 219.110.97.73 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:26.255527 0.122724 udp 10.0.2.104 54523 <-> 146.115.58.135 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:27.256596 0.203875 udp 10.0.2.104 54523 <-> 24.119.21.218 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:28.258291 0.212048 udp 10.0.2.104 54523 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:29.259880 0.382704 udp 10.0.2.104 54523 <-> 190.207.212.165 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:30.261217 0.454484 udp 10.0.2.104 54523 <-> 75.197.51.176 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:31.252284 0.261015 udp 10.0.2.104 54523 <-> 190.247.210.115 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:31.252446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:55:32.253973 0.297688 udp 10.0.2.104 54523 <-> 119.150.164.209 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:33.255800 0.111889 udp 10.0.2.104 54523 <-> 80.25.215.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:34.256811 0.136773 udp 10.0.2.104 54523 <-> 24.168.107.242 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:35.258274 0.000000 udp 10.0.2.104 54523 -> 83.34.216.118 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:36.259331 0.051771 udp 10.0.2.104 54523 <-> 178.9.9.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:37.260959 0.338971 udp 10.0.2.104 54523 <-> 114.37.130.174 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:38.252589 0.231570 udp 10.0.2.104 54523 <-> 186.93.97.117 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:39.254170 0.284717 udp 10.0.2.104 54523 <-> 218.45.34.219 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:40.256093 0.178065 udp 10.0.2.104 54523 <-> 67.148.202.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:41.256991 3.995495 udp 10.0.2.104 54523 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:42.258295 0.126487 udp 10.0.2.104 54523 <-> 158.181.242.169 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:43.259956 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:44.260957 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:46.253852 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:47.255319 0.000000 udp 10.0.2.104 54523 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:48.257036 0.000073 udp 10.0.2.104 54523 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:48.257109 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:55:49.258552 0.000000 udp 10.0.2.104 54523 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:50.259375 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:51.261463 0.000000 udp 10.0.2.104 54523 -> 190.78.142.30 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:52.252591 0.000000 udp 10.0.2.104 54523 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:53.254157 4.005992 udp 10.0.2.104 54523 -> 197.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:54.255757 0.035249 udp 10.0.2.104 54523 <-> 109.202.246.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:55:55.256853 0.000000 udp 10.0.2.104 54523 -> 79.115.108.75 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:56.258571 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:57.920817 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:55:58.261431 0.000000 udp 10.0.2.104 54523 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:55:59.252767 0.000000 udp 10.0.2.104 54523 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:00.254078 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:01.255675 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:02.256968 0.000000 udp 10.0.2.104 54523 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:03.258656 0.000000 udp 10.0.2.104 54523 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:03.258818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:56:04.260307 0.000095 udp 10.0.2.104 54523 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:04.260402 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.104 0x0000 TXD 192 1 86 flow=Background 1970/01/01 13:56:05.261439 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:06.252861 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:07.254221 0.039706 udp 10.0.2.104 54523 <-> 109.202.246.39 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:08.255983 0.074196 udp 10.0.2.104 54523 <-> 79.115.108.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:09.257296 0.319267 udp 10.0.2.104 54523 <-> 189.32.235.121 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:10.258663 0.000000 udp 10.0.2.104 54523 -> 80.171.95.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:11.260236 0.228891 udp 10.0.2.104 54523 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:12.261289 0.294715 udp 10.0.2.104 54523 <-> 177.68.45.26 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:13.252716 0.173605 udp 10.0.2.104 54523 <-> 72.252.170.22 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:14.254441 0.136392 udp 10.0.2.104 54523 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:15.255948 0.306812 udp 10.0.2.104 54523 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:16.257110 1.427810 udp 10.0.2.104 54523 <-> 186.220.88.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:17.258992 0.368185 udp 10.0.2.104 54523 <-> 112.104.19.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:18.259972 0.163176 udp 10.0.2.104 54523 <-> 97.84.210.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:19.261570 2.010425 udp 10.0.2.104 54523 <-> 98.82.26.229 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:20.252966 0.000000 udp 10.0.2.104 54523 -> 70.45.239.8 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:21.254518 0.148969 udp 10.0.2.104 54523 <-> 174.110.129.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:22.256137 0.206024 udp 10.0.2.104 54523 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:23.257251 0.000000 udp 10.0.2.104 54523 -> 190.140.32.129 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:24.258650 0.000000 udp 10.0.2.104 54523 -> 177.59.222.253 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:25.260637 0.000000 udp 10.0.2.104 54523 -> 69.181.65.218 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:26.261821 0.137150 udp 10.0.2.104 54523 <-> 64.131.160.146 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:27.253125 0.209565 udp 10.0.2.104 54523 <-> 76.166.193.129 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:28.254340 0.271665 udp 10.0.2.104 54523 <-> 177.194.71.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:29.256328 0.000000 udp 10.0.2.104 54523 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:30.257575 0.000000 udp 10.0.2.104 54523 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:31.258661 0.000000 udp 10.0.2.104 54523 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:32.260340 0.000000 udp 10.0.2.104 54523 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:34.253368 0.000000 udp 10.0.2.104 54523 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:35.254536 0.221452 udp 10.0.2.104 54523 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:36.255909 0.243250 udp 10.0.2.104 54523 <-> 208.127.113.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:37.257345 0.031214 udp 10.0.2.104 54523 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:38.258838 0.214373 udp 10.0.2.104 54523 <-> 97.93.51.8 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:39.260243 0.273873 udp 10.0.2.104 54523 <-> 177.194.71.32 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:40.261958 0.144471 udp 10.0.2.104 54523 <-> 68.114.69.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:41.253251 0.166845 udp 10.0.2.104 54523 <-> 24.207.136.89 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:42.254697 0.055733 udp 10.0.2.104 54523 <-> 212.238.76.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:43.255917 0.000000 udp 10.0.2.104 54523 -> 67.183.71.221 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:44.257183 0.000000 udp 10.0.2.104 54523 -> 65.34.89.239 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:44.918310 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:56:45.258846 0.180681 udp 10.0.2.104 54523 <-> 70.176.164.131 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:46.260326 0.000000 udp 10.0.2.104 54523 -> 67.177.197.238 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:47.261839 0.279199 udp 10.0.2.104 54523 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:48.253146 0.316957 udp 10.0.2.104 54523 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:49.256127 0.038008 udp 10.0.2.104 54523 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:50.256763 0.351779 udp 10.0.2.104 54523 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:51.257349 0.144310 udp 10.0.2.104 54523 <-> 24.148.90.94 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:52.259105 0.000000 udp 10.0.2.104 54523 -> 72.0.251.222 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:53.260405 0.000000 udp 10.0.2.104 54523 -> 111.253.127.116 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:54.261422 0.262500 udp 10.0.2.104 54523 <-> 201.242.46.205 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:55.253230 0.121472 udp 10.0.2.104 54523 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:56.254562 0.000000 udp 10.0.2.104 54523 -> 173.18.114.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:56:57.256354 0.519622 udp 10.0.2.104 54523 <-> 71.7.176.107 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:58.257407 0.211695 udp 10.0.2.104 54523 <-> 97.71.86.126 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:56:59.259064 0.064435 udp 10.0.2.104 54523 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:00.260661 0.211048 udp 10.0.2.104 54523 <-> 76.170.240.9 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:01.262383 0.241956 udp 10.0.2.104 54523 <-> 208.127.113.35 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:02.253486 0.193755 udp 10.0.2.104 54523 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:03.254691 0.191452 udp 10.0.2.104 54523 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:04.262779 0.201609 udp 10.0.2.104 54523 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:05.262411 0.000000 udp 10.0.2.104 54523 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:06.262346 0.223520 udp 10.0.2.104 54523 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:07.264774 0.120840 udp 10.0.2.104 54523 <-> 24.57.20.228 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:08.264559 0.145064 udp 10.0.2.104 54523 <-> 173.44.108.11 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:09.254521 0.278302 udp 10.0.2.104 54523 <-> 201.19.114.213 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:10.254770 0.151645 udp 10.0.2.104 54523 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:11.256646 0.405697 udp 10.0.2.104 54523 <-> 208.1.38.221 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:12.257904 0.147848 udp 10.0.2.104 54523 <-> 98.30.222.67 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:13.259263 0.040895 udp 10.0.2.104 54523 <-> 94.156.86.154 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:14.260578 0.154128 udp 10.0.2.104 54523 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:15.262049 2.330622 udp 10.0.2.104 54523 <-> 200.126.193.166 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:16.253479 0.158875 udp 10.0.2.104 54523 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:17.255345 0.181213 udp 10.0.2.104 54523 <-> 24.57.120.65 16464 CON 0 0 3 1838 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:18.256322 0.999068 udp 10.0.2.104 54523 <-> 186.95.118.170 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:19.257884 0.398180 udp 10.0.2.104 54523 <-> 68.103.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:20.259032 0.000000 udp 10.0.2.104 54523 -> 89.139.162.115 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:21.260659 0.147060 udp 10.0.2.104 54523 <-> 173.86.134.158 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:22.262023 0.136885 udp 10.0.2.104 54523 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:23.252958 0.172120 udp 10.0.2.104 54523 <-> 50.123.134.214 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:24.255018 0.349245 udp 10.0.2.104 54523 <-> 201.250.143.159 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:25.256798 0.143778 udp 10.0.2.104 54523 <-> 47.23.94.142 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:26.257971 1.723141 udp 10.0.2.104 54523 <-> 190.189.63.86 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:27.259326 0.562840 udp 10.0.2.104 54523 <-> 186.92.198.4 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:28.260721 0.390157 udp 10.0.2.104 54523 <-> 186.65.64.75 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:29.262016 0.000000 udp 10.0.2.104 54523 -> 68.6.168.58 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:30.253369 0.140504 udp 10.0.2.104 54523 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:31.254553 0.208067 udp 10.0.2.104 54523 <-> 72.174.46.16 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:31.916073 0.000036 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:57:32.256442 0.314294 udp 10.0.2.104 54523 <-> 219.107.166.240 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:33.258136 0.158177 udp 10.0.2.104 54523 <-> 98.223.2.190 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:34.259125 0.045932 udp 10.0.2.104 54523 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:35.260625 0.000000 udp 10.0.2.104 54523 -> 184.160.96.125 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:36.262223 0.150929 udp 10.0.2.104 54523 <-> 24.231.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:37.253873 0.163476 udp 10.0.2.104 54523 <-> 68.57.136.125 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:38.255075 0.074749 udp 10.0.2.104 54523 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:39.256513 1.804558 udp 10.0.2.104 54523 <-> 189.54.80.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:40.258380 0.000000 udp 10.0.2.104 54523 -> 206.219.70.1 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:41.259032 0.067797 udp 10.0.2.104 54523 <-> 78.157.15.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:42.260851 0.000000 udp 10.0.2.104 54523 -> 190.185.220.95 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:43.262200 0.081056 udp 10.0.2.104 54523 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:44.253184 0.134893 udp 10.0.2.104 54523 <-> 24.229.176.155 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:45.255019 0.154572 udp 10.0.2.104 54523 <-> 69.47.169.61 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:46.256650 0.000000 udp 10.0.2.104 54523 -> 66.186.252.163 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:47.258282 0.131678 udp 10.0.2.104 54523 <-> 204.93.96.97 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:48.259423 0.000000 udp 10.0.2.104 54523 -> 78.90.230.28 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:49.261085 0.000000 udp 10.0.2.104 54523 -> 179.145.2.242 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:50.262341 0.062138 udp 10.0.2.104 54523 <-> 188.27.115.84 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:51.253960 0.000000 udp 10.0.2.104 54523 -> 95.169.211.29 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:52.255200 0.000000 udp 10.0.2.104 54523 -> 201.209.247.153 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:53.256947 0.000000 udp 10.0.2.104 54523 -> 95.57.180.55 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:54.258476 0.183964 udp 10.0.2.104 54523 <-> 70.75.88.30 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:55.259885 0.000000 udp 10.0.2.104 54523 -> 220.208.214.79 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:56.260919 0.296485 udp 10.0.2.104 54523 <-> 58.93.49.6 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:57.262179 0.000000 udp 10.0.2.104 54523 -> 94.21.162.26 16464 INT 0 1 58 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 13:57:58.253913 0.151682 udp 10.0.2.104 54523 <-> 74.133.226.34 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 13:57:59.255593 0.382064 udp 10.0.2.104 54523 <-> 190.244.206.192 16464 CON 0 0 2 948 flow=From-Botnet-V2-UDP-Established 1970/01/01 14:12:20.265959 3.002166 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 14:12:27.273260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:12:35.274596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:12:51.278012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:13:23.286416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:13:58.966091 0.000149 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 14:13:58.966331 0.014790 udp 10.0.2.104 54629 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 14:13:58.981434 0.000000 udp 10.0.2.104 54630 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 14:19:27.291118 3.000881 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:19:34.297100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:19:42.298525 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:19:58.302170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:20:30.308321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:24:58.963507 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 14:24:58.963616 0.011243 udp 10.0.2.104 54631 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 14:24:58.975163 0.000000 udp 10.0.2.104 54632 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 14:26:34.313893 3.001672 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:26:41.321216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:26:49.322839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:27:05.325843 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:27:37.331886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:33:41.338089 3.001168 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:33:48.345499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:33:56.346806 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:34:12.349597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:34:44.355824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:39:58.967502 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 14:39:58.967607 0.011372 udp 10.0.2.104 54633 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 14:39:58.979285 0.000000 udp 10.0.2.104 54634 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 14:40:53.368896 3.001744 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:41:00.376378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:41:08.378068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:41:24.380544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:41:56.387060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:48:00.393413 3.001096 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:48:07.400046 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:48:15.402385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:48:31.404997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:49:03.410769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:54:58.962174 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 14:54:58.962344 0.011480 udp 10.0.2.104 54635 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 14:54:58.974167 0.000000 udp 10.0.2.104 54636 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 14:55:07.416544 3.001788 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:55:14.424270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:55:22.426046 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:55:38.429187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:56:10.434838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:12:24.447958 3.001907 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:12:31.455732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:12:39.457717 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:12:55.459932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:13:27.466043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:13:58.961191 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:13:58.961343 0.021435 udp 10.0.2.104 54637 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 15:13:58.983055 0.000000 udp 10.0.2.104 54638 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 15:19:31.472920 3.000501 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:19:38.479292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:19:46.481325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:20:02.483703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:20:34.490028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:24:58.970302 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:24:58.970384 0.011312 udp 10.0.2.104 54639 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 15:24:58.981961 0.000000 udp 10.0.2.104 54640 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 15:26:38.495804 3.002050 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:26:45.503414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:26:53.504613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:27:09.508413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:27:41.513596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:33:45.520212 3.001845 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:33:52.527086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:34:00.528792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:34:16.532061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:34:48.540687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:39:58.964103 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:39:58.964345 0.011460 udp 10.0.2.104 54641 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 15:39:58.976094 0.000000 udp 10.0.2.104 54642 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 15:40:57.551187 3.001737 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:41:04.559002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:41:12.560125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:41:28.562784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:42:00.568994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:48:04.575114 3.002065 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:48:11.582375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:48:19.586006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:48:35.586871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:49:07.597233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:54:58.968319 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:54:58.968482 0.011291 udp 10.0.2.104 54643 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 15:54:58.980053 0.000000 udp 10.0.2.104 54644 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 15:55:11.599367 3.001152 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:55:18.606353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:55:26.607919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:55:42.610687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:56:14.616784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:12:26.627041 3.024911 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:12:33.644389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:12:41.645922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:12:57.648829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:13:29.655189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:13:58.967609 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 16:13:58.967842 0.011457 udp 10.0.2.104 54645 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 16:13:58.979659 0.000000 udp 10.0.2.104 54646 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 16:19:33.661050 3.001832 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:19:40.676443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:19:48.670084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:20:04.673051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:20:36.678971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:24:58.968574 0.000103 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 16:24:58.968772 0.022068 udp 10.0.2.104 54647 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 16:24:58.991161 0.000000 udp 10.0.2.104 54648 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 16:26:40.685072 3.001570 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:26:47.692418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:26:55.693950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:27:11.697222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:27:43.703224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:33:47.709340 3.001168 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:33:54.716421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:34:02.718567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:34:18.720760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:34:50.727299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:39:58.970243 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 16:39:58.970395 0.011685 udp 10.0.2.104 54649 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 16:39:58.982393 0.000000 udp 10.0.2.104 54650 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 16:40:59.739673 3.002248 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:41:06.747614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:41:14.748907 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:41:30.752064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:42:02.758091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:48:06.764789 3.001124 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:48:13.771291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:48:21.772981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:48:37.776115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:49:09.801846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:54:58.964158 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 16:54:58.964318 0.011459 udp 10.0.2.104 54651 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 16:54:58.976056 0.000000 udp 10.0.2.104 54652 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 16:55:13.788361 3.001142 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:55:20.795716 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:55:28.796956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:55:44.799988 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:56:16.805831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:12:28.815424 3.002224 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:12:35.823130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:12:43.825020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:12:59.828654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:13:31.834096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:13:58.963315 0.000141 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 17:13:58.963616 0.011578 udp 10.0.2.104 54653 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 17:13:58.975511 0.000000 udp 10.0.2.104 54654 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 17:19:35.839764 3.002157 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:19:42.847725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:19:50.849930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:20:06.851978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:20:38.857913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:24:58.962469 0.000147 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 17:24:58.962706 0.021186 udp 10.0.2.104 54655 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 17:24:58.984209 0.000000 udp 10.0.2.104 54656 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 17:26:42.863639 3.002165 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:26:49.872020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:26:57.872919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:27:13.876387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:27:45.882107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:33:49.887637 3.002034 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:33:56.895653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:34:04.898117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:34:20.902078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:34:52.906689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:39:58.966407 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 17:39:58.966555 0.011930 udp 10.0.2.104 54657 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 17:39:58.978802 0.000000 udp 10.0.2.104 54658 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 17:41:01.920316 3.000298 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:41:08.926704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:41:16.932736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:41:32.931020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:42:04.936824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:48:08.943939 3.000916 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:48:15.950635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:48:23.952043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:48:39.955162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:49:11.962415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:54:58.960156 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 17:54:58.960286 0.015330 udp 10.0.2.104 54659 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 17:54:58.975919 0.000000 udp 10.0.2.104 54660 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 17:55:15.966414 3.002231 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:55:22.974449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:55:30.976579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:55:46.978411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:56:18.985295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:12:30.995307 3.002614 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:12:38.001987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:12:46.003925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:13:02.007410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:13:34.012786 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:13:58.969396 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 18:13:58.969625 0.011463 udp 10.0.2.104 54661 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 18:13:58.981399 0.000000 udp 10.0.2.104 54662 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 18:19:38.019211 3.001150 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:19:45.027019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:19:53.028739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:20:09.031488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:20:41.038074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:24:58.968191 0.000143 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 18:24:58.968460 0.012079 udp 10.0.2.104 54663 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 18:24:58.980842 0.000000 udp 10.0.2.104 54664 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 18:26:45.043068 3.001918 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:26:52.052653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:27:00.057682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:27:16.055134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:27:48.061381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:33:52.067207 3.001680 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:33:59.074544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:34:07.077190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:34:23.079618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:34:55.086755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:39:58.961929 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 18:39:58.962083 0.011596 udp 10.0.2.104 54665 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 18:39:58.974026 0.000000 udp 10.0.2.104 54666 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 18:41:03.097871 3.000618 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:41:10.106582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:41:18.105806 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:41:34.108979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:42:06.114503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:48:10.122299 2.999980 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:48:17.151260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:48:25.139781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:48:41.142724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:49:13.148544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:54:58.966773 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 18:54:58.966924 0.011694 udp 10.0.2.104 54667 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 18:54:58.978943 0.000000 udp 10.0.2.104 54668 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 18:55:17.155137 3.001226 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:55:24.162090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:55:32.163839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:55:48.166804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:56:20.172698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:12:32.183284 3.001737 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:12:39.190699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:12:47.192159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:13:03.195203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:13:35.201488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:13:58.965081 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 19:13:58.965283 0.012286 udp 10.0.2.104 54669 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 19:13:58.977882 0.000000 udp 10.0.2.104 54670 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 19:19:39.207111 3.001732 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:19:46.214312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:19:54.216417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:20:10.218715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:20:42.225070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:24:58.964496 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 19:24:58.964651 0.011345 udp 10.0.2.104 54671 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 19:24:58.976308 0.000000 udp 10.0.2.104 54672 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 19:26:46.231942 3.002193 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:26:53.238264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:27:01.244012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:27:17.243006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:27:49.248912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:33:53.255780 3.002527 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:34:00.262681 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:34:08.263913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:34:24.267346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:34:56.273306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:39:58.968614 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 19:39:58.968743 0.024075 udp 10.0.2.104 54673 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 19:39:58.993150 0.000000 udp 10.0.2.104 54674 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 19:41:05.285603 3.002133 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:41:12.294013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:41:20.295145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:41:36.298291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:42:08.304086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:48:12.310479 3.001293 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:48:19.317238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:48:27.318838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:48:43.321819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:49:15.327827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:54:58.962252 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 19:54:58.962436 0.011265 udp 10.0.2.104 54675 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 19:54:58.974041 0.000000 udp 10.0.2.104 54676 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 19:55:19.333580 3.002419 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:55:26.341266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:55:34.343394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:55:50.346249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:56:22.351348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:12:29.365945 3.001893 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:12:36.372637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:12:44.374954 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:13:00.377326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:13:32.386303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:13:58.961225 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 20:13:58.961388 0.011477 udp 10.0.2.104 54677 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 20:13:58.973181 0.000000 udp 10.0.2.104 54678 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 20:19:36.389769 3.000792 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:19:43.397230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:19:51.398158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:20:07.400781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:20:39.406965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:24:58.960174 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 20:24:58.960355 0.011644 udp 10.0.2.104 54679 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 20:24:58.972317 0.000000 udp 10.0.2.104 54680 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 20:26:43.412315 3.002383 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:26:50.420597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:26:58.421650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:27:14.424665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:27:46.431155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:33:50.437413 3.001072 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:33:57.445139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:34:05.445935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:34:21.448685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:34:53.455057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:39:58.964106 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 20:39:58.964284 0.011299 udp 10.0.2.104 54681 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 20:39:58.975957 0.000000 udp 10.0.2.104 54682 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 20:41:01.466986 3.001205 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:41:08.474013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:41:16.475295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:41:32.478442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:42:04.484575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:48:08.490242 3.002238 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:48:15.497971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:48:23.499369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:48:39.502650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:49:11.508348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:54:58.957996 0.000135 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 20:54:58.958232 0.011916 udp 10.0.2.104 54683 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 20:54:58.970442 0.000000 udp 10.0.2.104 54684 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 20:55:15.515161 3.001067 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:55:22.521691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:55:30.523208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:55:46.526572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:56:18.532495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:12:27.548518 3.005736 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:12:34.555962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:12:42.557619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:12:58.560673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:13:30.566671 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:13:58.967186 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 21:13:58.967332 0.011855 udp 10.0.2.104 54685 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 21:13:58.979443 0.000000 udp 10.0.2.104 54686 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 21:19:34.571819 3.003024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:19:41.579903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:19:49.581859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:20:05.584539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:20:37.590313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:24:58.966279 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 21:24:58.966432 0.011685 udp 10.0.2.104 54687 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 21:24:58.978388 0.000000 udp 10.0.2.104 54688 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 21:26:41.596038 3.002638 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:26:48.603860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:26:56.605224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:27:12.608235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:27:44.614556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:33:48.620302 3.001799 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:33:55.628418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:34:03.630058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:34:19.633297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:34:51.638507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:39:58.960347 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 21:39:58.960444 0.012398 udp 10.0.2.104 54689 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 21:39:58.973133 0.000000 udp 10.0.2.104 54690 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 21:41:00.652441 3.001639 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:41:07.658794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:41:15.660521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:41:31.663272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:42:03.669158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:48:07.675648 3.001237 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:48:14.683006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:48:22.684378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:48:38.687261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:49:10.693136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:54:58.964236 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 21:54:58.964447 0.011833 udp 10.0.2.104 54691 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 21:54:58.976637 0.000000 udp 10.0.2.104 54692 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 21:55:14.699406 3.001470 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:55:21.706834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:55:29.708393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:55:45.711318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:56:17.718006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:12:27.725017 3.012657 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:12:34.742306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:12:42.743384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:12:58.746754 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:13:30.753569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:13:58.962772 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 22:13:58.962929 0.021602 udp 10.0.2.104 54693 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 22:13:58.984834 0.000000 udp 10.0.2.104 54694 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 22:19:34.759124 3.001054 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:19:41.766042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:19:49.770948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:20:05.770318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:20:37.777956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:24:58.962082 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 22:24:58.962219 0.011319 udp 10.0.2.104 54695 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 22:24:58.973894 0.000000 udp 10.0.2.104 54696 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 22:26:41.782669 3.001722 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:26:48.790318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:26:56.792389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:27:12.801037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:27:44.800167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:33:48.806382 3.001969 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:33:55.813902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:34:03.815316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:34:19.818223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:34:51.824011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:39:58.965998 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 22:39:58.966160 0.012187 udp 10.0.2.104 54697 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 22:39:58.978682 0.000000 udp 10.0.2.104 54698 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 22:41:00.839826 2.999477 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:41:07.845071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:41:15.846634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:41:31.849562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:42:03.855799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:48:07.860990 3.001885 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:48:14.868875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:48:22.870501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:48:38.873452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:49:10.879580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:54:58.960148 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 22:54:58.960233 0.011693 udp 10.0.2.104 54699 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 22:54:58.972218 0.000000 udp 10.0.2.104 54700 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 22:55:14.885743 3.001566 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:55:21.892926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:55:29.893801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:55:45.897385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:56:17.903367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:12:28.912365 3.001775 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:12:35.919865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:12:43.921522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:12:59.924245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:13:31.930284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:13:58.959155 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:13:58.959319 0.010346 udp 10.0.2.104 54701 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 23:13:58.969971 0.000000 udp 10.0.2.104 54702 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 23:19:35.938151 3.834828 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:19:43.725044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:19:51.633084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:20:07.445559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:20:39.057737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:24:58.958171 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:24:58.958317 0.011665 udp 10.0.2.104 54703 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 23:24:58.970287 0.000000 udp 10.0.2.104 54704 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 23:26:42.970419 3.001813 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:26:49.977313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:26:57.979056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:27:13.981597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:27:45.988303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:33:49.995220 3.047399 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:33:57.022057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:34:05.012983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:34:21.016545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:34:53.258945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:39:58.962043 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:39:58.962147 0.012181 udp 10.0.2.104 54705 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 23:39:58.974615 0.000000 udp 10.0.2.104 54706 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 23:41:01.043455 0.999088 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/01 23:41:15.985246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:41:32.143390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:41:40.029936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:41:55.805048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:42:35.509098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:48:34.092747 2.960179 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:48:40.994801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:48:48.880307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:49:04.652462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:49:36.168850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:55:18.763012 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:55:18.763103 0.010174 udp 10.0.2.104 54707 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/01 23:55:18.773552 0.000000 udp 10.0.2.104 54708 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/01 23:55:34.688226 2.949459 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:55:41.590699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:55:49.474960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:56:05.234285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:56:36.773743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:12:34.182988 2.954167 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:12:41.080655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:12:48.957752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:13:04.712471 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:13:36.242567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:14:01.665039 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 00:14:01.665145 0.011571 udp 10.0.2.104 54709 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 00:14:01.677015 0.000000 udp 10.0.2.104 54710 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 00:19:37.174223 3.001621 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:19:44.180871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:19:52.182375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:20:08.188367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:20:40.192211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:24:58.964279 0.021930 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 00:24:58.986414 0.010269 udp 10.0.2.104 54711 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 00:24:58.997067 0.000000 udp 10.0.2.104 54712 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 00:26:44.209356 3.000533 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:26:51.217955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:26:59.216771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:27:15.222552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:27:47.225686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:33:51.231315 3.002715 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:33:58.239748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:34:06.240869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:34:22.244275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:34:54.250013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:39:58.958078 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 00:39:58.958227 0.010814 udp 10.0.2.104 54713 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 00:39:58.969325 0.000000 udp 10.0.2.104 54714 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 00:41:04.265046 3.003738 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:41:11.272333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:41:19.273002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:41:35.276313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:42:07.282311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:48:11.288705 3.001344 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:48:18.296021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:48:26.297227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:48:42.300638 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:49:14.306327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:54:58.961592 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 00:54:58.961808 0.011449 udp 10.0.2.104 54715 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 00:54:58.973543 0.000000 udp 10.0.2.104 54716 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 00:55:18.312812 3.001359 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:55:25.319900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:55:33.321440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:55:49.324536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:56:21.330675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:12:32.339994 3.011543 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:12:39.356587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:12:47.368265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:13:03.371658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:13:35.383392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:13:58.961264 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 01:13:58.961360 0.024470 udp 10.0.2.104 54717 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 01:13:58.986152 0.000000 udp 10.0.2.104 54718 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 01:19:39.388896 2.997397 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:19:46.390847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:19:54.392359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:20:10.395056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:20:42.401458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:24:58.961191 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 01:24:58.961398 0.024216 udp 10.0.2.104 54719 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 01:24:58.985935 0.000000 udp 10.0.2.104 54720 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 01:26:46.413410 2.999614 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:26:53.414332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:27:01.415996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:27:17.419022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:27:49.425441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:33:53.431247 3.007882 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:34:00.444233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:34:08.444140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:34:24.443407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:34:56.449109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:39:58.964109 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 01:39:58.964266 0.011314 udp 10.0.2.104 54721 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 01:39:58.975854 0.000000 udp 10.0.2.104 54722 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 01:41:06.463607 3.001713 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:41:13.471144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:41:21.472414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:41:37.475883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:42:09.481764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:48:14.489078 3.001658 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:48:21.496462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:48:29.498078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:48:45.501052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:49:17.511455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:54:58.958397 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 01:54:58.958584 0.013202 udp 10.0.2.104 54723 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 01:54:58.972096 0.000000 udp 10.0.2.104 54724 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 01:55:21.513153 3.001520 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:55:28.520822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:55:36.522608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:55:52.525213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:56:24.531145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:12:34.539881 3.543181 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:12:42.037752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:12:49.948027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:13:05.759376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:13:38.732909 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:13:59.851643 1.980373 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 02:14:01.832137 0.011693 udp 10.0.2.104 54725 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 02:14:01.844270 0.000000 udp 10.0.2.104 54726 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 02:19:41.582747 3.001355 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:19:48.589804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:19:56.591220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:20:12.594614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:20:44.600350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:24:58.955975 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 02:24:58.956071 0.016101 udp 10.0.2.104 54727 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 02:24:58.972479 0.000000 udp 10.0.2.104 54728 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 02:26:48.606433 3.001257 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:26:55.613619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:27:03.615714 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:27:19.618508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:27:51.625003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:33:55.637489 3.027303 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:34:02.648211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:34:10.649009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:34:26.652367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:34:58.658190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:39:58.960140 0.000103 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 02:39:58.960333 0.021850 udp 10.0.2.104 54729 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 02:39:58.982515 0.000000 udp 10.0.2.104 54730 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 02:41:08.672746 3.001973 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:41:15.680243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:41:23.682161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:41:39.684810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:42:11.690876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:48:16.699096 3.005002 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:48:23.705989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:48:31.707922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:48:47.710443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:49:19.716361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:54:58.964223 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 02:54:58.964351 0.012100 udp 10.0.2.104 54731 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 02:54:58.976775 0.000000 udp 10.0.2.104 54732 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 02:55:23.733361 3.000677 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:55:30.740360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:55:38.741173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:55:54.747926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:56:26.752495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:12:31.761451 3.010509 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:12:38.836565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:12:46.789426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:13:02.792866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:13:34.798605 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:13:58.963163 0.000125 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:13:58.963399 0.012874 udp 10.0.2.104 54733 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 03:13:58.976571 0.000000 udp 10.0.2.104 54734 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 03:19:38.804207 3.001660 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:19:45.811365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:19:53.813117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:20:09.816138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:20:41.822233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:24:58.962142 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:24:58.962343 0.011504 udp 10.0.2.104 54735 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 03:24:58.974192 0.000000 udp 10.0.2.104 54736 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 03:26:45.827872 3.001994 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:26:52.835940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:27:00.837258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:27:16.840337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:27:48.846111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:33:52.852642 3.001313 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:33:59.859735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:34:07.861160 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:34:23.863956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:34:55.870272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:39:58.956140 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:39:58.956331 0.023295 udp 10.0.2.104 54737 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 03:39:58.979940 0.000000 udp 10.0.2.104 54738 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 03:41:06.887835 3.000296 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:41:13.893464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:41:21.895181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:41:37.898203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:42:09.904168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:48:14.911384 3.001832 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:48:21.919382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:48:29.920630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:48:45.923437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:49:17.929885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:54:58.960236 0.010000 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:54:58.970283 0.012198 udp 10.0.2.104 54739 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 03:54:58.982802 0.000000 udp 10.0.2.104 54740 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 03:55:21.935600 3.001847 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:55:28.942919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:55:36.944737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:55:52.947339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:56:24.953674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:12:31.965993 3.001753 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:12:38.974046 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:12:46.975429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:13:02.978918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:13:34.984645 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:13:58.959052 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 04:13:58.959247 0.011971 udp 10.0.2.104 54741 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 04:13:58.971651 0.000000 udp 10.0.2.104 54742 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 04:19:38.991290 3.001085 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:19:45.998537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:19:53.999604 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:20:10.004065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:20:42.008382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:24:58.958191 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 04:24:58.958288 0.011324 udp 10.0.2.104 54743 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 04:24:58.969905 0.000000 udp 10.0.2.104 54744 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 04:26:46.015743 3.000334 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:26:53.022530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:27:01.023266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:27:17.026432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:27:49.032390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:33:53.040957 3.000083 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:34:00.046263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:34:08.047172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:34:24.050655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:34:56.056753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:39:58.962042 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 04:39:58.962133 0.021212 udp 10.0.2.104 54745 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 04:39:58.983819 0.000000 udp 10.0.2.104 54746 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 04:41:06.072081 3.000636 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:41:13.078695 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:41:21.080212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:41:37.082388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:42:09.089024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:48:14.096408 3.001934 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:48:21.104131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:48:29.105638 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:48:45.108357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:49:17.114546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:54:58.956236 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 04:54:58.956378 0.010278 udp 10.0.2.104 54747 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 04:54:58.966958 0.000000 udp 10.0.2.104 54748 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 04:55:21.120884 3.001455 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:55:28.128316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:55:36.129329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:55:52.132491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:56:24.138438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:12:32.153263 3.001255 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:12:39.160504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:12:47.161357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:13:03.164849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:13:35.170795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:13:58.954940 0.000121 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 05:13:58.955143 0.011487 udp 10.0.2.104 54749 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 05:13:58.966935 0.000000 udp 10.0.2.104 54750 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 05:19:39.176965 3.001830 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:19:46.184040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:19:54.186174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:20:10.191777 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:20:42.194847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:24:58.954297 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 05:24:58.954455 0.011384 udp 10.0.2.104 54751 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 05:24:58.966112 0.000000 udp 10.0.2.104 54752 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 05:26:46.201004 3.001428 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:26:53.208197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:27:01.209926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:27:17.212705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:27:49.218798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:33:53.227163 2.999328 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:34:00.232509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:34:08.233819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:34:24.237007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:34:56.242509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:39:58.957978 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 05:39:58.958136 0.012044 udp 10.0.2.104 54753 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 05:39:58.970516 0.000000 udp 10.0.2.104 54754 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 05:41:06.258009 3.000903 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:41:13.264716 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:41:21.266274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:41:37.269186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:42:09.275416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:48:14.282938 3.001724 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:48:21.290314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:48:29.291916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:48:45.294416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:49:17.300547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:54:58.962077 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 05:54:58.962209 0.011352 udp 10.0.2.104 54755 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 05:54:58.973861 0.000000 udp 10.0.2.104 54756 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 05:55:21.306742 3.001727 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:55:28.313905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:55:36.315655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:55:52.318698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:56:24.324801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:12:33.341328 3.000868 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:12:40.348780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:12:48.354012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:13:04.358630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:13:36.360874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:13:58.961271 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 06:13:58.961349 0.022053 udp 10.0.2.104 54757 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 06:13:58.983831 0.000000 udp 10.0.2.104 54758 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 06:19:40.365039 3.001083 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:19:47.372450 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:19:55.373599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:20:11.376558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:20:43.388715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:24:58.959693 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 06:24:58.959844 0.021375 udp 10.0.2.104 54759 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 06:24:58.981547 0.000000 udp 10.0.2.104 54760 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 06:26:47.388718 3.001591 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:26:54.396733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:27:02.397519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:27:18.404512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:27:50.406513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:33:54.412077 3.002134 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:34:01.420384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:34:09.422086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:34:25.427732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:34:57.431229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:39:58.954078 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 06:39:58.954205 0.021729 udp 10.0.2.104 54761 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 06:39:58.976215 0.000000 udp 10.0.2.104 54762 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 06:41:07.445415 3.001857 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:41:14.452445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:41:22.454084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:41:38.457467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:42:10.462914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:48:15.470970 3.001216 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:48:22.478465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:48:30.479380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:48:46.482355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:49:18.488470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:54:58.958131 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 06:54:58.958236 0.011353 udp 10.0.2.104 54763 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 06:54:58.969918 0.000000 udp 10.0.2.104 54764 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 06:55:22.493749 3.002495 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:55:29.501939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:55:37.503773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:55:53.506492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:56:25.512655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:12:34.528564 3.001783 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:12:41.535991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:12:49.537226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:13:05.540366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:13:37.546102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:13:58.956778 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 07:13:58.956916 0.012140 udp 10.0.2.104 54765 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 07:13:58.969346 0.000000 udp 10.0.2.104 54766 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 07:19:41.552083 3.001914 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:19:48.560241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:19:56.561979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:20:12.564309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:20:44.570478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:24:58.958074 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 07:24:58.958222 0.011755 udp 10.0.2.104 54767 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 07:24:58.970298 0.000000 udp 10.0.2.104 54768 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 07:26:48.577476 3.000452 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:26:55.583528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:27:03.585094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:27:19.589131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:27:51.594251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:33:55.600445 3.001621 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:34:02.607318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:34:10.609119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:34:26.612055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:34:58.619309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:39:58.960113 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 07:39:58.960247 0.011679 udp 10.0.2.104 54769 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 07:39:58.972203 0.000000 udp 10.0.2.104 54770 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 07:41:09.634703 3.000964 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:41:16.641880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:41:24.643208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:41:40.646332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:42:12.652333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:48:18.660950 3.002157 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:48:25.668404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:48:33.670355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:48:49.673145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:49:21.686028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:54:58.954051 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 07:54:58.954225 0.011621 udp 10.0.2.104 54771 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 07:54:58.966124 0.000000 udp 10.0.2.104 54772 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 07:55:25.686046 3.001057 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:55:32.692464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:55:40.694222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:55:56.696865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:56:28.702921 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:12:36.717693 3.001430 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:12:43.724937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:12:51.726415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:13:07.729481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:13:39.736508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:13:58.953166 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 08:13:58.953294 0.010583 udp 10.0.2.104 54773 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 08:13:58.964217 0.000000 udp 10.0.2.104 54774 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 08:19:43.741239 3.002990 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:19:50.749068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:19:58.751823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:20:14.753507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:20:46.759817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:24:58.952101 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 08:24:58.952257 0.010097 udp 10.0.2.104 54775 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 08:24:58.962669 0.000000 udp 10.0.2.104 54776 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 08:26:50.765909 3.001709 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:26:57.773391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:27:05.774459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:27:21.777452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:27:53.784280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:33:57.790186 3.001093 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:34:04.796831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:34:12.798228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:34:28.801044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:35:00.807793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:39:58.956126 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 08:39:58.956291 0.012394 udp 10.0.2.104 54777 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 08:39:58.969000 0.000000 udp 10.0.2.104 54778 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 08:41:10.821446 3.001742 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:41:17.829164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:41:25.830713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:41:41.833576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:42:13.839957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:48:18.847208 3.001720 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:48:25.854755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:48:33.857893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:48:49.860174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:49:21.865285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:54:58.959886 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 08:54:58.960009 0.012442 udp 10.0.2.104 54779 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 08:54:58.972753 0.000000 udp 10.0.2.104 54780 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 08:55:25.870327 3.002319 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:55:32.878705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:55:40.880081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:55:56.883220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:56:28.889399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:12:32.901777 3.010815 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:12:39.915395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:12:47.917108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:13:03.920258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:13:35.926350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:13:58.959227 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 09:13:58.959413 0.023540 udp 10.0.2.104 54781 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 09:13:58.983278 0.000000 udp 10.0.2.104 54782 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 09:19:39.932755 3.000653 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:19:46.939267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:19:54.941044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:20:10.944221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:20:42.950911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:24:58.958533 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 09:24:58.958686 0.011498 udp 10.0.2.104 54783 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 09:24:58.970478 0.000000 udp 10.0.2.104 54784 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 09:26:46.956164 3.013020 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:26:53.973197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:27:01.974917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:27:17.978202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:27:49.983984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:33:53.989385 3.002255 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:34:00.997978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:34:08.998849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:34:25.002012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:34:57.007287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:39:58.952191 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 09:39:58.952365 0.014557 udp 10.0.2.104 54785 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 09:39:58.967239 0.000000 udp 10.0.2.104 54786 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 09:41:07.022441 3.001302 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:41:14.029959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:41:22.030906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:41:38.034226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:42:10.044106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:48:16.050241 3.002084 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:48:23.056824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:48:31.058343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:48:47.068030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:49:19.067382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:54:58.955996 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 09:54:58.956089 0.013146 udp 10.0.2.104 54787 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 09:54:58.969504 0.000000 udp 10.0.2.104 54788 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 09:55:23.073339 3.001569 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:55:30.080702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:55:38.082254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:55:54.085272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:56:26.091022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:12:32.102568 3.002043 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:12:39.110415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:12:47.111895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:13:03.114300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:13:35.120771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:13:58.955077 0.000116 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 10:13:58.955314 0.011445 udp 10.0.2.104 54789 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 10:13:58.967064 0.000000 udp 10.0.2.104 54790 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 10:19:39.126787 3.005933 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:19:46.134075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:19:54.135908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:20:10.140444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:20:42.144940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:24:58.953977 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 10:24:58.954233 0.012236 udp 10.0.2.104 54791 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 10:24:58.966762 0.000000 udp 10.0.2.104 54792 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 10:26:46.150757 3.001529 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:26:53.158160 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:27:01.160303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:27:17.162716 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:27:49.168699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:33:53.174783 3.001549 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:34:00.182066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:34:08.183666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:34:24.186723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:34:56.193105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:39:58.958191 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 10:39:58.958289 0.011388 udp 10.0.2.104 54793 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 10:39:58.969974 0.000000 udp 10.0.2.104 54794 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 10:41:06.208812 3.000305 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:41:13.214334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:41:21.216314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:41:37.219030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:42:09.225119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:48:15.235954 2.999793 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:48:22.241697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:48:30.243130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:48:46.246226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:49:18.252930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:54:58.952113 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 10:54:58.952269 0.012856 udp 10.0.2.104 54795 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 10:54:58.965414 0.000000 udp 10.0.2.104 54796 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 10:55:22.258296 3.001639 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:55:29.265350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:55:37.267052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:55:53.270088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:56:25.276036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:12:32.288549 3.002501 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:12:39.296601 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:12:47.298370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:13:03.300819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:13:35.308077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:13:58.955951 0.000152 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 11:13:58.956258 0.021600 udp 10.0.2.104 54797 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 11:13:58.978203 0.000000 udp 10.0.2.104 54798 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 11:19:39.313012 3.001813 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:19:46.320412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:19:54.322249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:20:10.325057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:20:42.330990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:24:58.949916 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 11:24:58.950060 0.011455 udp 10.0.2.104 54799 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 11:24:58.961777 0.000000 udp 10.0.2.104 54800 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 11:26:46.337123 3.005664 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:26:53.344677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:27:01.345905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:27:17.350590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:27:49.357958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:33:53.361449 3.001500 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:34:00.368783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:34:08.370604 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:34:24.372644 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:34:56.378794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:39:58.954338 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 11:39:58.954425 0.016376 udp 10.0.2.104 54801 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 11:39:58.971110 0.000000 udp 10.0.2.104 54802 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 11:41:06.393563 3.001586 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:41:13.400897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:41:21.402711 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:41:37.405423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:42:09.411815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:48:14.419552 3.001486 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:48:21.426743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:48:29.427918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:48:45.431048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:49:17.437351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:54:58.958123 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 11:54:58.958281 0.011927 udp 10.0.2.104 54803 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 11:54:58.970519 0.000000 udp 10.0.2.104 54804 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 11:55:21.443074 3.001601 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:55:28.451484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:55:36.452033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:55:52.454970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:56:24.461400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:12:32.475006 3.002009 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:12:39.482855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:12:47.484190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:13:03.487324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:13:35.493317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:13:58.957918 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 12:13:58.958109 0.011779 udp 10.0.2.104 54805 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 12:13:58.970217 0.000000 udp 10.0.2.104 54806 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 12:19:39.499395 3.001615 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:19:46.506734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:19:54.508516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:20:10.511422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:20:42.517254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:24:58.956310 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 12:24:58.956524 0.011919 udp 10.0.2.104 54807 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 12:24:58.968755 0.000000 udp 10.0.2.104 54808 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 12:26:46.524494 3.000914 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:26:53.530686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:27:01.532748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:27:17.535306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:27:49.541276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:33:53.547259 3.001613 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:34:00.554928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:34:08.556385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:34:24.559197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:34:56.565060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:39:58.950008 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 12:39:58.950234 0.011291 udp 10.0.2.104 54809 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 12:39:58.961831 0.000000 udp 10.0.2.104 54810 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 12:41:07.581322 3.001750 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:41:14.588880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:41:22.590327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:41:38.593354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:42:10.599189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:48:16.608038 3.001694 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:48:23.615659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:48:31.617564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:48:47.620575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:49:19.626788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:54:58.954007 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 12:54:58.954171 0.011303 udp 10.0.2.104 54811 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 12:54:58.965759 0.000000 udp 10.0.2.104 54812 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 12:55:23.632228 3.001956 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:55:30.639316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:55:38.640989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:55:54.644232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:56:26.650218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:12:34.665042 3.001220 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:12:41.672259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:12:49.673547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:13:05.676535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:13:37.682953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:13:58.952446 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 13:13:58.952658 0.022383 udp 10.0.2.104 54813 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 13:13:58.975387 0.000000 udp 10.0.2.104 54814 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 13:19:41.689344 3.000857 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:19:48.695882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:19:56.697311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:20:12.704272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:20:44.709947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:24:58.952105 0.000136 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 13:24:58.952415 0.015377 udp 10.0.2.104 54815 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 13:24:58.968088 0.000000 udp 10.0.2.104 54816 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 13:26:48.712765 3.001201 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:26:55.719983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:27:03.721583 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:27:19.724565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:27:51.730679 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:33:55.736013 3.002307 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:34:02.744324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:34:10.745191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:34:26.748182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:34:58.754236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:39:58.956348 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 13:39:58.956494 0.011531 udp 10.0.2.104 54817 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 13:39:58.968310 0.000000 udp 10.0.2.104 54818 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 13:41:09.771358 3.001326 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:41:16.777897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:41:24.779273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:41:40.782340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:42:12.788596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:48:18.797553 3.001169 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:48:25.804644 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:48:33.806129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:48:49.808992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:49:21.815164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:54:58.950096 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 13:54:58.950319 0.011570 udp 10.0.2.104 54819 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 13:54:58.962227 0.000000 udp 10.0.2.104 54820 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 13:55:25.821332 3.001410 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:55:32.828472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:55:40.829989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:55:56.833010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:56:28.839331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:12:35.851941 3.012121 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:12:42.870036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:12:50.871068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:13:06.883617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:13:38.890144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:13:58.949051 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 14:13:58.949184 0.011441 udp 10.0.2.104 54821 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 14:13:58.960910 0.000000 udp 10.0.2.104 54822 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 14:19:42.897049 3.001138 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:19:49.906126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:19:57.905394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:20:13.908143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:20:45.913565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:24:58.958297 0.000129 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 14:24:58.958563 0.011741 udp 10.0.2.104 54823 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 14:24:58.970632 0.000000 udp 10.0.2.104 54824 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 14:26:49.920129 3.001813 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:26:56.928059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:27:04.928495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:27:20.933598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:27:52.938382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:33:56.943769 3.002314 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:34:03.951608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:34:11.953218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:34:27.956256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:34:59.961941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:39:58.952058 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 14:39:58.952224 0.015607 udp 10.0.2.104 54825 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 14:39:58.968193 0.000000 udp 10.0.2.104 54826 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 14:41:09.976656 3.001809 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:41:16.984303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:41:24.985794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:41:40.988464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:42:12.994739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:48:18.006429 2.997479 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:48:25.009457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:48:33.011922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:48:49.013370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:49:21.024251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:54:58.958404 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 14:54:58.958622 0.012298 udp 10.0.2.104 54827 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 14:54:58.971248 0.000000 udp 10.0.2.104 54828 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 14:55:25.025850 3.002186 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:55:32.033451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:55:40.035048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:55:56.045234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:56:28.043628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:12:32.051911 3.002396 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:12:39.060381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:12:47.061781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:13:03.064148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:13:35.070540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:13:58.961751 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:13:58.961905 0.011699 udp 10.0.2.104 54829 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 15:13:58.973925 0.000000 udp 10.0.2.104 54830 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 15:19:39.076899 3.001935 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:19:46.084056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:19:54.085823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:20:10.088511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:20:42.098594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:24:58.954252 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:24:58.954417 0.011291 udp 10.0.2.104 54831 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 15:24:58.966034 0.000000 udp 10.0.2.104 54832 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 15:26:46.100325 3.002072 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:26:53.108020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:27:01.109792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:27:17.112737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:27:49.118808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:33:53.124536 3.001800 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:34:00.132192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:34:08.133064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:34:24.136708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:34:56.143251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:39:58.948196 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:39:58.948369 0.022327 udp 10.0.2.104 54833 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 15:39:58.971025 0.000000 udp 10.0.2.104 54834 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 15:41:07.158595 3.001588 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:41:14.166136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:41:22.168035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:41:38.170603 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:42:10.176602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:48:16.185372 3.001730 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:48:23.193779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:48:31.194551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:48:47.197928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:49:19.203341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:54:58.952376 0.000140 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:54:58.952645 0.011325 udp 10.0.2.104 54835 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 15:54:58.964358 0.000000 udp 10.0.2.104 54836 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 15:55:23.209333 3.001447 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:55:30.216859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:55:38.218378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:55:54.221189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:56:26.227479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:12:32.239071 3.001446 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:12:39.246403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:12:47.250967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:13:03.251161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:13:35.256808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:13:58.953096 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 16:13:58.953178 0.011316 udp 10.0.2.104 54837 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 16:13:58.964810 0.000000 udp 10.0.2.104 54838 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 16:19:39.263371 3.001226 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:19:46.270767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:19:54.272100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:20:10.275163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:20:42.280851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:24:58.950527 0.000116 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 16:24:58.950737 0.011434 udp 10.0.2.104 54839 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 16:24:58.962504 0.000000 udp 10.0.2.104 54840 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 16:26:46.286631 3.002381 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:26:53.294641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:27:01.295778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:27:17.298604 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:27:49.305112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:33:53.311369 3.001061 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:34:00.318245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:34:08.319917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:34:24.323234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:34:56.330409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:39:58.953922 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 16:39:58.954060 0.011560 udp 10.0.2.104 54841 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 16:39:58.965928 0.000000 udp 10.0.2.104 54842 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 16:41:06.343209 3.001878 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:41:13.351072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:41:21.352317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:41:37.355539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:42:09.361762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:48:15.370653 3.001610 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:48:22.377858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:48:30.379264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:48:46.382278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:49:18.388498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:54:58.948121 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 16:54:58.948316 0.016723 udp 10.0.2.104 54843 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 16:54:58.965353 0.000000 udp 10.0.2.104 54844 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 16:55:22.393819 3.002240 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:55:29.401682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:55:37.403142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:55:53.406031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:56:25.412298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:12:32.425004 3.001995 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:12:39.433063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:12:47.434413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:13:03.437327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:13:35.443407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:13:58.947185 0.000413 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 17:13:58.947768 0.012446 udp 10.0.2.104 54845 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 17:13:58.960508 0.000000 udp 10.0.2.104 54846 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 17:19:39.449325 3.001867 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:19:46.457442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:19:54.458163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:20:10.460985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:20:42.467079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:24:58.956189 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 17:24:58.956348 0.041597 udp 10.0.2.104 54847 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 17:24:58.998276 0.000000 udp 10.0.2.104 54848 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 17:26:46.472665 3.002491 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:26:53.481326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:27:01.482724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:27:17.485144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:27:49.491366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:33:53.498066 3.000743 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:34:00.505097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:34:08.505846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:34:24.509072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:34:56.514920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:39:58.950195 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 17:39:58.950326 0.011933 udp 10.0.2.104 54849 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 17:39:58.962565 0.000000 udp 10.0.2.104 54850 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 17:41:00.521199 3.003582 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:41:07.528587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:41:15.530170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:41:31.533286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:42:03.539143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:48:07.544788 3.002028 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:48:14.552373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:48:22.554035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:48:38.557374 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:49:10.562803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:54:58.953431 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 17:54:58.953577 0.011580 udp 10.0.2.104 54851 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 17:54:58.965510 0.000000 udp 10.0.2.104 54852 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 17:55:14.569478 3.001146 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:55:21.576521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:55:29.578310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:55:45.580797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:56:17.587226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:12:28.596713 3.001511 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:12:35.603085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:12:43.604575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:12:59.607841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:13:31.614541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:13:58.953025 0.000173 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 18:13:58.953351 0.011710 udp 10.0.2.104 54853 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 18:13:58.965521 0.000000 udp 10.0.2.104 54854 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 18:19:35.620822 3.001798 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:19:42.627176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:19:50.634250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:20:06.631423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:20:38.637823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:24:58.952121 0.000129 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 18:24:58.952359 0.011429 udp 10.0.2.104 54855 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 18:24:58.964132 0.000000 udp 10.0.2.104 54856 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 18:26:42.646681 2.998532 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:26:49.652965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:26:57.652608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:27:13.655968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:27:45.668173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:33:49.667680 3.001419 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:33:56.674969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:34:04.676539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:34:20.679886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:34:52.685837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:39:58.952051 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 18:39:58.952206 0.011651 udp 10.0.2.104 54857 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 18:39:58.964249 0.000000 udp 10.0.2.104 54858 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 18:40:56.691365 3.001956 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:41:03.700997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:41:11.700784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:41:27.703854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:41:59.710337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:48:03.715593 3.002222 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:48:10.722846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:48:18.724550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:48:34.737507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:49:06.743706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:54:58.949594 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 18:54:58.949794 0.021914 udp 10.0.2.104 54859 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 18:54:58.972050 0.000000 udp 10.0.2.104 54860 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 18:55:10.749560 3.002015 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:55:17.757777 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:55:25.758534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:55:41.761762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:56:13.767337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:12:28.783532 3.000577 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:12:35.789377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:12:43.790864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:12:59.793926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:13:31.799927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:13:58.948791 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 19:13:58.948881 0.022553 udp 10.0.2.104 54861 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 19:13:58.971851 0.000000 udp 10.0.2.104 54862 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 19:19:35.805416 3.001999 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:19:42.814122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:19:50.815208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:20:06.820792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:20:38.823965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:24:58.948530 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 19:24:58.948691 0.014822 udp 10.0.2.104 54863 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 19:24:58.963838 0.000000 udp 10.0.2.104 54864 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 19:26:42.829608 3.002148 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:26:49.837497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:26:57.839741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:27:13.842381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:27:45.848091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:33:49.854599 3.001464 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:33:56.861323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:34:04.862672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:34:20.867423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:34:52.871219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:39:58.952215 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 19:39:58.952311 0.011378 udp 10.0.2.104 54865 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 19:39:58.964000 0.000000 udp 10.0.2.104 54866 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 19:40:56.877939 3.001601 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:41:03.885391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:41:11.886826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:41:27.889912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:41:59.896248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:48:03.902290 3.001099 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:48:10.909099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:48:18.910755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:48:34.913241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:49:06.920146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:54:58.946038 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 19:54:58.946143 0.011380 udp 10.0.2.104 54867 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 19:54:58.957849 0.000000 udp 10.0.2.104 54868 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 19:55:10.926650 3.000664 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:55:17.932595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:55:25.934806 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:55:41.939996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:56:13.943888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:12:28.959268 3.000733 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:12:35.965927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:12:43.967400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:12:59.970248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:13:31.976443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:13:58.950414 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 20:13:58.950574 0.011567 udp 10.0.2.104 54869 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 20:13:58.962460 0.000000 udp 10.0.2.104 54870 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 20:19:35.982252 3.001679 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:19:42.989760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:19:50.990903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:20:06.995971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:20:39.000372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:24:58.954042 0.000152 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 20:24:58.954331 0.014166 udp 10.0.2.104 54871 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 20:24:58.968778 0.000000 udp 10.0.2.104 54872 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 20:26:43.006138 3.001806 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:26:50.013341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:26:58.015169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:27:14.018025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:27:46.024238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:33:50.030780 3.000999 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:33:57.037505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:34:05.038961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:34:21.042065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:34:53.049780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:39:58.948179 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 20:39:58.948314 0.021577 udp 10.0.2.104 54873 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 20:39:58.970226 0.000000 udp 10.0.2.104 54874 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 20:40:57.054242 3.001922 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:41:04.060916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:41:12.062881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:41:28.066669 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:42:00.072207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:48:04.078122 3.001507 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:48:11.085567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:48:19.087119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:48:35.090349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:49:07.106298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:54:58.952072 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 20:54:58.952257 0.011937 udp 10.0.2.104 54875 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 20:54:58.964521 0.000000 udp 10.0.2.104 54876 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 20:55:11.111866 3.001576 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:55:18.119638 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:55:26.121036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:55:42.124335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:56:14.130070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:12:30.136648 3.000651 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:12:37.143376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:12:45.146931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:13:01.147251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:13:33.153326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:13:58.951004 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 21:13:58.951156 0.023613 udp 10.0.2.104 54877 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 21:13:58.975110 0.000000 udp 10.0.2.104 54878 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 21:19:37.159486 3.002030 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:19:44.167232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:19:52.169047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:20:08.171204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:20:40.178091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:24:58.950131 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 21:24:58.950238 0.012820 udp 10.0.2.104 54879 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 21:24:58.963359 0.000000 udp 10.0.2.104 54880 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 21:26:44.183500 3.002024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:26:51.191228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:26:59.194545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:27:15.196593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:27:47.201359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:33:51.207853 3.001524 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:33:58.215251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:34:06.216813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:34:22.219745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:34:54.226144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:39:58.953947 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 21:39:58.954045 0.011463 udp 10.0.2.104 54881 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 21:39:58.965820 0.000000 udp 10.0.2.104 54882 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 21:40:58.231726 3.001375 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:41:05.239115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:41:13.240709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:41:29.244039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:42:01.249900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:48:05.255707 3.002062 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:48:12.262571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:48:20.264616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:48:36.267075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:49:08.273214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:54:58.948118 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 21:54:58.948215 0.011747 udp 10.0.2.104 54883 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 21:54:58.960310 0.000000 udp 10.0.2.104 54884 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 21:55:12.279402 3.001853 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:55:19.286993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:55:27.288653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:55:43.291742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:56:15.298062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:12:26.307983 3.000494 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:12:33.314743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:12:41.317472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:12:57.318338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:13:29.324688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:13:58.947054 0.000162 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 22:13:58.947315 0.011332 udp 10.0.2.104 54885 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 22:13:58.958963 0.000000 udp 10.0.2.104 54886 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 22:19:33.330838 3.001287 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:19:40.338521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:19:48.340555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:20:04.342283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:20:36.349136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:24:58.946165 0.000146 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 22:24:58.946421 0.022325 udp 10.0.2.104 54887 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 22:24:58.969057 0.000000 udp 10.0.2.104 54888 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 22:26:40.354551 3.001873 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:26:47.364685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:26:55.363232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:27:11.366461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:27:43.372302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:33:47.378793 3.001128 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:33:54.389164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:34:02.387342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:34:18.390378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:34:50.396385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:39:58.949553 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 22:39:58.949745 0.011619 udp 10.0.2.104 54889 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 22:39:58.961643 0.000000 udp 10.0.2.104 54890 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 22:40:54.402408 3.001698 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:41:01.413880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:41:09.411231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:41:25.414755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:41:57.420693 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:48:01.425305 3.003002 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:48:08.433818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:48:16.435240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:48:32.438059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:49:04.444101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:54:58.943435 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 22:54:58.943571 0.012973 udp 10.0.2.104 54891 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 22:54:58.956805 0.000000 udp 10.0.2.104 54892 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 22:55:08.450719 3.000633 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:55:15.458094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:55:23.460250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:55:39.462214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:56:11.468718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:12:24.483457 3.090384 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:12:31.548319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:12:39.498653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:12:55.501730 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:13:27.508136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:13:58.953033 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:13:58.953210 0.011344 udp 10.0.2.104 54893 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 23:13:59.060112 0.000000 udp 10.0.2.104 54894 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 23:19:31.514439 3.001166 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:19:38.521412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:19:46.522817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:20:02.525980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:20:34.532764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:24:58.951458 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:24:58.951623 0.012945 udp 10.0.2.104 54895 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 23:24:58.964845 0.000000 udp 10.0.2.104 54896 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 23:26:38.539093 3.001012 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:26:45.545237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:26:53.546555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:27:09.549859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:27:41.555858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:33:45.561430 3.002299 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:33:52.569268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:34:00.570836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:34:16.574075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:34:48.580316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:39:58.946001 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:39:58.946096 0.011316 udp 10.0.2.104 54897 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 23:39:58.957669 0.000000 udp 10.0.2.104 54898 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 23:40:52.585775 3.001533 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:40:59.593111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:41:07.594719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:41:23.597914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:41:55.603670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:47:59.719501 3.002908 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:48:06.727636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:48:14.729227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:48:30.731985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:49:02.737965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:54:59.060088 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:54:59.060185 0.011262 udp 10.0.2.104 54899 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/02 23:54:59.071776 0.000000 udp 10.0.2.104 54900 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/02 23:55:06.746511 2.998851 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:55:13.751195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:55:21.752814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:55:37.755858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:56:09.761544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:12:24.776233 3.001652 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:12:31.783854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:12:39.785155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:12:55.788411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:13:27.794366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:13:59.058997 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 00:13:59.059169 0.011405 udp 10.0.2.104 54901 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 00:13:59.070864 0.000000 udp 10.0.2.104 54902 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 00:19:31.800037 3.001826 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:19:38.807520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:19:46.809974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:20:02.811944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:20:34.817978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:24:59.058344 0.000112 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 00:24:59.058548 0.021583 udp 10.0.2.104 54903 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 00:24:59.080473 0.000000 udp 10.0.2.104 54904 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 00:26:38.826726 2.999457 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:26:45.831890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:26:53.833052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:27:09.836128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:27:41.842413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:33:45.849033 3.000674 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:33:52.855507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:34:00.857218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:34:16.860160 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:34:48.866165 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:39:59.062159 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 00:39:59.062284 0.022400 udp 10.0.2.104 54905 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 00:39:59.085057 0.000000 udp 10.0.2.104 54906 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 00:40:52.872042 3.001405 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:40:59.879418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:41:07.880771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:41:23.884491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:41:55.890134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:47:59.895889 3.002047 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:48:06.903316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:48:14.904884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:48:30.907439 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:49:02.913956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:54:59.056243 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 00:54:59.056438 0.012254 udp 10.0.2.104 54907 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 00:54:59.069014 0.000000 udp 10.0.2.104 54908 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 00:55:06.919573 3.001989 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:55:13.927611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:55:21.928904 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:55:37.931318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:56:09.938051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:12:26.946095 3.000326 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:12:33.952976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:12:41.954599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:12:57.957248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:13:29.968060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:13:59.055064 0.000142 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 01:13:59.055310 0.011486 udp 10.0.2.104 54909 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 01:13:59.067097 0.000000 udp 10.0.2.104 54910 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 01:19:33.969285 3.001672 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:19:40.976758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:19:48.978091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:20:04.981410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:20:36.987271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:24:59.054254 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 01:24:59.054393 0.023041 udp 10.0.2.104 54911 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 01:24:59.077738 0.000000 udp 10.0.2.104 54912 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 01:26:40.992686 3.002171 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:26:48.000775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:26:56.002201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:27:12.005269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:27:44.011365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:33:48.016920 3.001810 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:33:55.024672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:34:03.026084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:34:19.029370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:34:51.034938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:39:59.058458 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 01:39:59.058582 0.011823 udp 10.0.2.104 54913 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 01:39:59.070720 0.000000 udp 10.0.2.104 54914 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 01:40:55.040607 3.002300 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:41:02.048647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:41:10.050291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:41:26.052491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:41:58.059014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:48:02.079224 2.997769 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:48:09.082556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:48:17.083764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:48:33.087930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:49:05.092994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:54:59.051657 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 01:54:59.051780 0.011351 udp 10.0.2.104 54915 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 01:54:59.063412 0.000000 udp 10.0.2.104 54916 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 01:55:09.100078 3.000848 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:55:16.106663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:55:24.108205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:55:40.110834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:56:12.117819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:12:28.123211 3.001902 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:12:35.130564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:12:43.132037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:12:59.138825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:13:31.142239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:13:59.060769 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 02:13:59.060945 0.014056 udp 10.0.2.104 54917 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 02:13:59.075301 0.000000 udp 10.0.2.104 54918 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 02:19:35.146744 3.003745 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:19:42.154577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:19:50.156218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:20:06.160077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:20:38.165002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:24:59.060759 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 02:24:59.060969 0.012032 udp 10.0.2.104 54919 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 02:24:59.073326 0.000000 udp 10.0.2.104 54920 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 02:26:42.171600 3.000988 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:26:49.178385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:26:57.179823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:27:13.182958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:27:45.189060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:33:49.194871 3.001715 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:33:56.202441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:34:04.204109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:34:20.209158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:34:52.212900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:39:59.054081 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 02:39:59.054249 0.012863 udp 10.0.2.104 54921 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 02:39:59.067658 0.000000 udp 10.0.2.104 54922 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 02:40:56.219017 3.001664 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:41:03.226532 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:41:11.227800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:41:27.234415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:41:59.237061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:48:03.248408 2.998310 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:48:10.251882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:48:18.251988 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:48:34.259372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:49:06.260565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:54:59.057588 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 02:54:59.057768 0.011450 udp 10.0.2.104 54923 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 02:54:59.069485 0.000000 udp 10.0.2.104 54924 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 02:55:10.266868 3.006666 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:55:17.274199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:55:25.284254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:55:41.279937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:56:13.287304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:12:29.290789 3.011521 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:12:36.308665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:12:44.309894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:13:00.323924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:13:32.335807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:13:59.057288 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:13:59.057440 0.011589 udp 10.0.2.104 54925 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 03:13:59.069356 0.000000 udp 10.0.2.104 54926 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 03:19:36.335049 3.001247 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:19:43.342076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:19:51.344010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:20:07.346717 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:20:39.352628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:24:59.056210 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:24:59.056298 0.022629 udp 10.0.2.104 54927 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 03:24:59.079199 0.000000 udp 10.0.2.104 54928 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 03:26:43.358660 3.001981 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:26:50.366104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:26:58.367892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:27:14.370830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:27:46.376625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:33:50.382643 3.001897 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:33:57.394671 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:34:05.391792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:34:21.394632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:34:53.400626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:39:59.060381 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:39:59.060533 0.011326 udp 10.0.2.104 54929 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 03:39:59.072138 0.000000 udp 10.0.2.104 54930 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 03:40:57.406467 3.001736 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:41:04.414099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:41:12.415509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:41:28.418576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:42:00.424780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:48:04.431387 3.000927 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:48:11.438297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:48:19.440069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:48:35.442748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:49:07.448613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:54:59.054456 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:54:59.054562 0.011796 udp 10.0.2.104 54931 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 03:54:59.066687 0.000000 udp 10.0.2.104 54932 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 03:55:11.454842 3.001120 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:55:18.462203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:55:26.463202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:55:42.466558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:56:14.474125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:12:25.481317 3.001692 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:12:32.488569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:12:40.490585 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:12:56.493306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:13:28.499080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:13:59.053335 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 04:13:59.053547 0.011718 udp 10.0.2.104 54933 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 04:13:59.065760 0.000000 udp 10.0.2.104 54934 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 04:19:32.507410 2.999309 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:19:39.512659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:19:47.513914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:20:03.518127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:20:35.523736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:24:59.052345 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 04:24:59.052498 0.021895 udp 10.0.2.104 54935 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 04:24:59.074686 0.000000 udp 10.0.2.104 54936 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 04:26:39.528982 3.001951 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:26:46.536544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:26:54.538387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:27:10.540960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:27:42.546962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:33:46.554381 3.000448 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:33:53.560950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:34:01.562124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:34:17.564861 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:34:49.571441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:39:59.056346 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 04:39:59.056535 0.011828 udp 10.0.2.104 54937 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 04:39:59.068681 0.000000 udp 10.0.2.104 54938 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 04:40:53.577825 3.000900 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:41:00.584653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:41:08.586148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:41:24.589085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:41:56.595177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:48:00.601125 3.001837 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:48:07.608552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:48:15.610196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:48:31.613131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:49:03.618911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:54:59.059930 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 04:54:59.060113 0.012877 udp 10.0.2.104 54939 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 04:54:59.073280 0.000000 udp 10.0.2.104 54940 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 04:55:07.625386 3.001296 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:55:14.632471 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:55:22.634030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:55:38.637101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:56:10.642826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:12:24.656284 3.001611 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:12:31.728539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:12:39.675042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:12:55.678295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:13:27.684246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:13:59.058981 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 05:13:59.059109 0.012112 udp 10.0.2.104 54941 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 05:13:59.071505 0.000000 udp 10.0.2.104 54942 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 05:19:31.690362 3.001631 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:19:38.697791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:19:46.698962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:20:02.704550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:20:34.708175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:24:59.060948 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 05:24:59.061115 0.011448 udp 10.0.2.104 54943 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 05:24:59.072942 0.000000 udp 10.0.2.104 54944 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 05:26:38.714549 3.001308 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:26:45.722547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:26:53.723388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:27:09.726456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:27:41.732566 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:33:45.737886 3.001617 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:33:52.745498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:34:00.746900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:34:16.750087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:34:48.756329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:39:59.052236 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 05:39:59.052439 0.011675 udp 10.0.2.104 54945 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 05:39:59.064411 0.000000 udp 10.0.2.104 54946 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 05:40:52.765793 2.997653 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:40:59.769208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:41:07.771899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:41:23.773917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:41:55.780233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:47:59.787140 3.000161 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:48:06.793473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:48:14.796240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:48:30.798033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:49:02.803685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:54:59.056629 0.052060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 05:54:59.108844 0.011132 udp 10.0.2.104 54947 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 05:54:59.120345 0.000000 udp 10.0.2.104 54948 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 05:55:06.809511 3.001953 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:55:13.820254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:55:21.818556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:55:37.821348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:56:09.827953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:12:24.842216 3.001831 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:12:31.850018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:12:39.863056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:12:55.864332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:13:27.870695 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:13:59.058431 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 06:13:59.058580 0.011663 udp 10.0.2.104 54949 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 06:13:59.070573 0.000000 udp 10.0.2.104 54950 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 06:19:31.875799 3.002693 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:19:38.883724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:19:46.884560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:20:02.888129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:20:34.894381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:24:59.053964 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 06:24:59.054103 0.010867 udp 10.0.2.104 54951 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 06:24:59.065289 0.000000 udp 10.0.2.104 54952 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 06:26:38.900242 3.001728 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:26:45.908364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:26:53.909108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:27:09.911584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:27:41.919303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:33:45.923739 3.002348 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:33:52.934635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:34:00.933166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:34:16.936427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:34:48.942056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:39:59.057905 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 06:39:59.058124 0.012414 udp 10.0.2.104 54953 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 06:39:59.070836 0.000000 udp 10.0.2.104 54954 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 06:40:52.948308 3.001333 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:40:59.955798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:41:07.957114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:41:23.960041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:41:55.972225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:47:59.972219 3.001660 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:48:06.979391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:48:14.981241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:48:30.984049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:49:02.990030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:54:59.052127 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 06:54:59.052334 0.021722 udp 10.0.2.104 54955 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 06:54:59.074408 0.000000 udp 10.0.2.104 54956 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 06:55:06.995747 3.001480 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:55:14.002903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:55:22.013492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:55:38.008036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:56:10.014218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:12:26.020957 3.045496 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:12:33.046519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:12:41.038826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:12:57.046094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:13:29.051473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:13:59.051451 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:13:59.051622 0.010338 udp 10.0.2.104 54957 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 07:13:59.062277 0.000000 udp 10.0.2.104 54958 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 07:19:33.054163 3.001739 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:19:40.061573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:19:48.062917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:20:04.065907 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:20:36.072170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:24:59.050195 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:24:59.050323 0.000000 udp 10.0.2.104 54959 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 07:25:59.056700 0.011252 udp 10.0.2.104 54960 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 07:25:59.068256 0.000000 udp 10.0.2.104 54961 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 07:26:04.003181 0.000126 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:26:40.077441 3.002788 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/03 07:26:47.085197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:26:55.093215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:27:11.090280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:27:43.096114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:33:47.102041 3.001395 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:33:54.109749 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:34:02.110811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:34:18.114315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:34:50.120002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:40:54.125878 3.002158 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:40:59.049817 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:40:59.049979 0.010205 udp 10.0.2.104 54962 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 07:40:59.060454 0.000000 udp 10.0.2.104 54963 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 07:41:01.132890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:41:09.134752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:41:25.137945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:41:57.144041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:48:01.150790 3.005433 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:48:08.157568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:48:16.158612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:48:32.161130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:49:04.168228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:55:08.173932 3.001407 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:55:15.180586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:55:23.182842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:55:39.186041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:55:59.054433 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:55:59.054525 0.012263 udp 10.0.2.104 54964 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 07:55:59.067062 0.000000 udp 10.0.2.104 54965 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 07:56:11.192133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:12:27.200759 2.998694 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:12:34.204972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:12:42.206696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:12:58.210093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:13:30.216140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:14:59.054036 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:14:59.054308 0.013875 udp 10.0.2.104 54966 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 08:14:59.068482 0.000000 udp 10.0.2.104 54967 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 08:19:34.222385 3.000826 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:19:41.229186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:19:49.234094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:20:05.233822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:20:37.239764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:25:59.052734 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:25:59.052955 0.023313 udp 10.0.2.104 54968 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 08:25:59.076600 0.000000 udp 10.0.2.104 54969 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 08:26:41.245016 3.003021 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:26:48.253382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:26:56.254441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:27:12.258087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:27:44.263156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:33:48.269740 3.001390 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:33:55.277045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:34:03.278431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:34:19.281354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:34:51.288088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:40:55.293508 3.001506 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:40:59.056725 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:40:59.056873 0.021375 udp 10.0.2.104 54970 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 08:40:59.078593 0.000000 udp 10.0.2.104 54971 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 08:41:02.301138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:41:10.302613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:41:26.305427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:41:58.311116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:48:02.317175 3.001994 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:48:09.325047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:48:17.326401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:48:33.329385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:49:05.335504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:55:09.341765 3.001458 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:55:16.348980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:55:24.350493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:55:40.353210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:55:59.050222 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:55:59.050336 0.021944 udp 10.0.2.104 54972 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 08:55:59.072602 0.000000 udp 10.0.2.104 54973 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 08:56:12.359118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:12:28.365417 3.001541 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:12:35.373036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:12:43.376920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:12:59.379738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:13:31.383339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:14:59.050425 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 09:14:59.050628 0.012153 udp 10.0.2.104 54974 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 09:14:59.063107 0.000000 udp 10.0.2.104 54975 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 09:19:35.389293 3.001624 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:19:42.397247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:19:50.398492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:20:06.401316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:20:38.407086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:25:59.048548 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 09:25:59.048646 0.012003 udp 10.0.2.104 54976 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 09:25:59.060972 0.000000 udp 10.0.2.104 54977 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 09:26:42.413525 3.011532 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:26:49.430792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:26:57.432123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:27:13.435327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:27:45.441312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:33:49.447814 3.001091 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:33:56.454744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:34:04.456328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:34:20.459301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:34:52.465360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:40:56.471942 3.000876 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:40:59.052252 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 09:40:59.052400 0.014647 udp 10.0.2.104 54978 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 09:40:59.067348 0.000000 udp 10.0.2.104 54979 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 09:41:03.478652 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:41:11.480507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:41:27.483195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:41:59.489168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:48:03.495711 3.001026 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:48:10.502582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:48:18.503763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:48:34.507167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:49:06.513214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:55:10.519766 3.001117 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:55:17.527269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:55:25.527611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:55:41.530909 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:55:59.056304 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 09:55:59.056476 0.011237 udp 10.0.2.104 54980 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 09:55:59.068053 0.000000 udp 10.0.2.104 54981 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 09:56:13.537116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:12:24.545630 3.002426 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:12:31.553228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:12:39.554773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:12:55.560037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:13:27.564029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:14:59.055343 0.000297 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 10:14:59.055739 0.011288 udp 10.0.2.104 54982 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 10:14:59.067311 0.000000 udp 10.0.2.104 54983 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 10:19:31.570761 3.001036 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:19:38.577138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:19:46.578599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:20:02.582039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:20:34.588189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:25:59.054213 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 10:25:59.054386 0.011701 udp 10.0.2.104 54984 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 10:25:59.066378 0.000000 udp 10.0.2.104 54985 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 10:26:38.593993 3.001823 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:26:45.601380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:26:53.603141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:27:09.606082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:27:41.612201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:33:45.618853 3.000448 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:33:52.625296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:34:00.627305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:34:16.629536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:34:48.641234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:40:52.641850 3.001467 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:40:59.048454 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 10:40:59.048558 0.011899 udp 10.0.2.104 54986 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 10:40:59.060777 0.000000 udp 10.0.2.104 54987 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 10:40:59.649051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:41:07.650860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:41:23.653956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:41:55.659761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:47:59.665503 3.001879 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:48:06.673102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:48:14.674590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:48:30.677613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:49:02.683896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:55:06.689462 3.001835 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:55:13.697307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:55:21.698828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:55:37.702598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:55:59.058050 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 10:55:59.058197 0.011899 udp 10.0.2.104 54988 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 10:55:59.070385 0.000000 udp 10.0.2.104 54989 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 10:56:09.708129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:12:23.721467 3.010875 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:12:30.738184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:12:38.739755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:12:54.742704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:13:26.748578 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:14:59.051065 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 11:14:59.051249 0.022385 udp 10.0.2.104 54990 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 11:14:59.073948 0.000000 udp 10.0.2.104 54991 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 11:19:30.754636 3.001933 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:19:37.762555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:19:45.763655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:20:01.767122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:20:33.772518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:25:59.050814 0.000142 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 11:25:59.051092 0.011876 udp 10.0.2.104 54992 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 11:25:59.063296 0.000000 udp 10.0.2.104 54993 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 11:26:37.778956 3.001452 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:26:44.786081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:26:52.787443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:27:08.791112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:27:40.797987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:33:44.802748 3.001196 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:33:51.811735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:33:59.811440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:34:15.814546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:34:47.820691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:40:51.826118 3.002478 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:40:58.833864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:40:59.054567 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 11:40:59.054720 0.011399 udp 10.0.2.104 54994 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 11:40:59.066377 0.000000 udp 10.0.2.104 54995 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 11:41:06.835377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:41:22.838405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:41:54.844573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:47:58.851609 3.010596 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:48:05.868242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:48:13.869394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:48:29.872448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:49:01.878676 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:55:05.884743 3.001198 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:55:12.891286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:55:20.893212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:55:36.896480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:55:59.048576 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 11:55:59.048763 0.012011 udp 10.0.2.104 54996 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 11:55:59.061105 0.000000 udp 10.0.2.104 54997 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 11:56:08.902365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:12:24.908838 3.001017 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:12:31.916016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:12:39.917222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:12:55.920454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:13:27.929548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:14:59.047707 0.000135 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 12:14:59.047957 0.011561 udp 10.0.2.104 54998 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 12:14:59.059814 0.000000 udp 10.0.2.104 54999 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 12:19:31.932305 3.001832 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:19:38.939911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:19:46.941104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:20:02.943978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:20:34.950472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:25:59.046509 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 12:25:59.046598 0.012074 udp 10.0.2.104 55000 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 12:25:59.058988 0.000000 udp 10.0.2.104 55001 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 12:26:38.957452 3.001028 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:26:45.963758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:26:53.965427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:27:09.968387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:27:41.976198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:33:45.979613 3.004373 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:33:52.987915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:34:00.989228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:34:16.992211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:34:48.998203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:40:53.003581 3.002560 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:40:59.050355 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 12:40:59.050529 0.014460 udp 10.0.2.104 55002 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 12:40:59.065281 0.000000 udp 10.0.2.104 55003 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 12:41:00.012205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:41:08.012546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:41:24.016159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:41:56.022279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:48:00.027903 3.002338 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:48:07.035661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:48:15.037246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:48:31.040182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:49:03.047089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:55:07.053341 3.001240 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:55:14.062480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:55:22.060724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:55:38.073850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:55:59.053913 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 12:55:59.054029 0.022428 udp 10.0.2.104 55004 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 12:55:59.076768 0.000000 udp 10.0.2.104 55005 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 12:56:10.079949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:12:26.086399 3.001734 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:12:33.093368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:12:41.095123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:12:57.098194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:13:29.105062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:14:59.053428 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 13:14:59.053577 0.021690 udp 10.0.2.104 55006 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 13:14:59.075651 0.000000 udp 10.0.2.104 55007 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 13:19:33.110925 3.001023 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:19:40.118226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:19:48.119742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:20:04.121983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:20:36.128759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:25:59.052464 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 13:25:59.052650 0.021911 udp 10.0.2.104 55008 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 13:25:59.074892 0.000000 udp 10.0.2.104 55009 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 13:26:40.133707 3.002126 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:26:47.141482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:26:55.142851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:27:11.148926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:27:43.152060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:33:47.158115 3.001556 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:33:54.168130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:34:02.167023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:34:18.170222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:34:50.176089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:40:54.181511 3.001728 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:40:59.046295 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 13:40:59.046390 0.013373 udp 10.0.2.104 55010 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 13:40:59.060036 0.000000 udp 10.0.2.104 55011 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 13:41:01.189451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:41:09.191016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:41:25.193953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:41:57.200004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:48:01.205588 3.002163 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:48:08.212719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:48:16.214421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:48:32.218170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:49:04.224038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:55:08.229841 3.001877 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:55:15.237247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:55:23.238601 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:55:39.241249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:55:59.050461 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 13:55:59.050554 0.022343 udp 10.0.2.104 55012 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 13:55:59.073347 0.000000 udp 10.0.2.104 55013 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 13:56:11.247348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:12:27.253640 3.018230 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:12:34.271352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:12:42.272672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:12:58.276116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:13:30.282180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:14:59.049525 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 14:14:59.049715 0.011946 udp 10.0.2.104 55014 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 14:14:59.061992 0.000000 udp 10.0.2.104 55015 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 14:19:34.287721 3.001660 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:19:41.295142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:19:49.296859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:20:05.299902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:20:37.306404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:25:59.048558 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 14:25:59.048681 0.011514 udp 10.0.2.104 55016 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 14:25:59.060514 0.000000 udp 10.0.2.104 55017 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 14:26:41.311116 3.002522 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:26:48.319207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:26:56.320636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:27:12.323867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:27:44.329944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:33:48.335379 3.002668 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:33:55.343235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:34:03.344512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:34:19.348230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:34:51.354122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:40:55.359295 3.002042 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:40:59.052373 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 14:40:59.052524 0.022519 udp 10.0.2.104 55018 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 14:40:59.075389 0.000000 udp 10.0.2.104 55019 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 14:41:02.368562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:41:10.368596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:41:26.371868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:41:58.377589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:48:02.384642 3.000884 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:48:09.397912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:48:17.394172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:48:33.396348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:49:05.444672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:55:09.418880 3.000242 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:55:16.438088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:55:24.436448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:55:40.439973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:55:59.046372 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 14:55:59.046568 0.011821 udp 10.0.2.104 55020 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 14:55:59.058712 0.000000 udp 10.0.2.104 55021 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 14:56:12.448239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:12:28.451515 3.001637 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:12:35.459146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:12:43.464485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:12:59.464772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:13:31.469804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:14:59.045740 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:14:59.045847 0.011885 udp 10.0.2.104 55022 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 15:14:59.058069 0.000000 udp 10.0.2.104 55023 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 15:19:35.475372 3.002519 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:19:42.482881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:19:50.487868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:20:06.487348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:20:38.493278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:25:59.054510 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:25:59.054690 0.037627 udp 10.0.2.104 55024 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 15:25:59.092694 0.000000 udp 10.0.2.104 55025 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 15:26:42.499784 3.001137 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:26:49.507016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:26:57.508292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:27:13.511526 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:27:45.517598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:33:49.522980 3.002365 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:33:56.536974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:34:04.537881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:34:20.535213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:34:52.541656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:40:56.547747 3.001205 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:40:59.048294 0.000116 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:40:59.048509 0.011383 udp 10.0.2.104 55026 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 15:40:59.060202 0.000000 udp 10.0.2.104 55027 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 15:41:03.554666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:41:11.556208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:41:27.559254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:41:59.565176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:48:03.575366 2.997514 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:48:10.578914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:48:18.582124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:48:34.583202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:49:06.589263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:55:10.598810 3.001698 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:55:17.603028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:55:25.606357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:55:41.607214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:55:59.052290 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:55:59.052481 0.012100 udp 10.0.2.104 55028 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 15:55:59.064886 0.000000 udp 10.0.2.104 55029 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 15:56:13.613252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:12:29.621468 2.999214 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:12:36.626739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:12:44.628489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:13:00.631006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:13:32.637017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:14:59.051413 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 16:14:59.051524 0.022289 udp 10.0.2.104 55030 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 16:14:59.074132 0.000000 udp 10.0.2.104 55031 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 16:19:36.643375 3.001584 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:19:43.650729 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:19:51.652196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:20:07.654948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:20:39.661565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:25:59.050330 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 16:25:59.050505 0.011518 udp 10.0.2.104 55032 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 16:25:59.062396 0.000000 udp 10.0.2.104 55033 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 16:26:43.667970 3.000594 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:26:50.674665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:26:58.676526 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:27:14.679224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:27:46.685203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:33:50.690832 3.002079 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:33:57.698733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:34:05.702955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:34:21.703153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:34:53.710444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:40:57.715485 3.007897 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:40:59.044413 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 16:40:59.044575 0.011702 udp 10.0.2.104 55034 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 16:40:59.056514 0.000000 udp 10.0.2.104 55035 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 16:41:04.722968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:41:12.724219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:41:28.726883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:42:00.733104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:48:04.739099 3.001731 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:48:11.746380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:48:19.747779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:48:35.751003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:49:07.757134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:55:11.763668 3.010917 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:55:18.780415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:55:26.784052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:55:42.784734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:55:59.048392 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 16:55:59.048580 0.021229 udp 10.0.2.104 55036 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 16:55:59.070143 0.000000 udp 10.0.2.104 55037 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 16:56:14.791449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:12:25.799662 3.001271 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:12:32.806972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:12:40.808637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:12:56.811693 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:13:28.817684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:14:59.047380 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 17:14:59.047501 0.012440 udp 10.0.2.104 55038 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 17:14:59.060261 0.000000 udp 10.0.2.104 55039 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 17:19:32.823791 3.001474 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:19:39.830725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:19:47.832443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:20:03.836233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:20:35.842077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:25:59.046624 0.000157 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 17:25:59.046921 0.011822 udp 10.0.2.104 55040 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 17:25:59.059071 0.000000 udp 10.0.2.104 55041 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 17:26:39.847522 3.001618 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:26:46.855056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:26:54.856903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:27:10.858897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:27:42.865395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:33:46.871202 3.006055 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:33:53.882007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:34:01.880429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:34:17.883666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:34:49.889698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:40:53.895209 3.002019 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:40:59.050429 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 17:40:59.050535 0.011800 udp 10.0.2.104 55042 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 17:40:59.062669 0.000000 udp 10.0.2.104 55043 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 17:41:00.903030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:41:08.904424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:41:24.908026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:41:56.914414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:48:00.920649 3.000629 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:48:07.926868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:48:15.928632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:48:31.931590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:49:03.937804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:55:07.943837 3.001241 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:55:14.950563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:55:22.953648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:55:38.955957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:55:59.044576 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 17:55:59.044752 0.011837 udp 10.0.2.104 55044 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 17:55:59.056912 0.000000 udp 10.0.2.104 55045 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 17:56:10.961231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:12:24.974350 3.002306 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:12:31.981255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:12:39.983265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:12:55.986131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:13:27.992452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:14:59.043378 0.000222 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 18:14:59.043670 0.021356 udp 10.0.2.104 55046 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 18:14:59.065385 0.000000 udp 10.0.2.104 55047 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 18:19:31.998511 3.001380 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:19:39.006385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:19:47.007623 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:20:03.010624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:20:35.016660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:25:59.052375 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 18:25:59.052527 0.011790 udp 10.0.2.104 55048 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 18:25:59.064619 0.000000 udp 10.0.2.104 55049 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 18:26:39.022582 3.001645 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:26:46.029971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:26:54.031357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:27:10.034186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:27:42.040461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:33:46.047069 3.001160 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:33:53.056708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:34:01.055271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:34:17.058598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:34:49.064763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:40:53.070500 3.001498 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:40:59.046449 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 18:40:59.046559 0.012251 udp 10.0.2.104 55050 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 18:40:59.059122 0.000000 udp 10.0.2.104 55051 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 18:41:00.077800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:41:08.079315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:41:24.083086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:41:56.088199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:48:00.095716 3.003108 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:48:07.101215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:48:15.104432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:48:31.106237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:49:03.112270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:55:07.124050 2.997969 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:55:14.127143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:55:22.128428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:55:38.130243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:55:59.050055 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 18:55:59.050168 0.011757 udp 10.0.2.104 55052 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 18:55:59.062214 0.000000 udp 10.0.2.104 55053 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 18:56:10.136544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:12:26.142236 3.001436 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:12:33.150497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:12:41.150834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:12:57.153609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:13:29.162110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:14:59.049523 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 19:14:59.049701 0.011521 udp 10.0.2.104 55054 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 19:14:59.061545 0.000000 udp 10.0.2.104 55055 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 19:19:33.166928 3.001042 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:19:40.173610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:19:48.174840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:20:04.179060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:20:36.184057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:25:59.048577 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 19:25:59.048727 0.011527 udp 10.0.2.104 55056 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 19:25:59.060572 0.000000 udp 10.0.2.104 55057 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 19:26:40.189886 3.002036 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:26:47.197775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:26:55.202161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:27:11.202128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:27:43.208655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:33:47.214189 3.001757 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:33:54.221575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:34:02.222984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:34:18.226040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:34:50.232031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:40:54.238151 3.001568 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:40:59.041858 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 19:40:59.042053 0.015851 udp 10.0.2.104 55058 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 19:40:59.058196 0.000000 udp 10.0.2.104 55059 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 19:41:01.245307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:41:09.247236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:41:25.250108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:41:57.256165 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:48:01.261374 3.002025 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:48:08.269408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:48:16.270931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:48:32.273890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:49:04.280109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:55:08.286570 3.000973 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:55:15.292964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:55:23.294889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:55:39.297827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:55:59.046642 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 19:55:59.046764 0.013574 udp 10.0.2.104 55060 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 19:55:59.060659 0.000000 udp 10.0.2.104 55061 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 19:56:11.304066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:12:27.309442 3.024940 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:12:34.327200 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:12:42.328890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:12:58.332132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:13:30.338829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:14:59.047339 0.000148 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 20:14:59.047608 0.011793 udp 10.0.2.104 55062 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 20:14:59.059945 0.000000 udp 10.0.2.104 55063 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 20:19:34.343928 3.001876 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:19:41.351411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:19:49.352543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:20:05.355771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:20:37.362524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:25:59.044274 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 20:25:59.044457 0.012155 udp 10.0.2.104 55064 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 20:25:59.056910 0.000000 udp 10.0.2.104 55065 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 20:26:41.368098 3.007889 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:26:48.375061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:26:56.376868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:27:12.379758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:27:44.386053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:33:48.391958 3.001394 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:33:55.398898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:34:03.403239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:34:19.403754 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:34:51.409915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:40:55.415631 3.001592 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:40:59.048002 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 20:40:59.048095 0.023106 udp 10.0.2.104 55066 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 20:40:59.071490 0.000000 udp 10.0.2.104 55067 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 20:41:02.423145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:41:10.424687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:41:26.427884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:41:58.436260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:48:02.445123 2.997245 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:48:09.447276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:48:17.448410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:48:33.452596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:49:05.457818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:55:09.463466 3.002251 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:55:16.471113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:55:24.472465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:55:40.476006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:55:59.042586 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 20:55:59.042692 0.012075 udp 10.0.2.104 55068 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 20:55:59.055099 0.000000 udp 10.0.2.104 55069 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 20:56:12.481453 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:12:28.489251 3.001236 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:12:35.496198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:12:43.496335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:12:59.499938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:13:31.510852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:14:59.041372 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 21:14:59.041587 0.011373 udp 10.0.2.104 55070 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 21:14:59.053255 0.000000 udp 10.0.2.104 55071 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 21:19:35.511653 3.001914 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:19:42.518882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:19:50.520473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:20:06.523474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:20:38.530616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:25:59.050800 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 21:25:59.051035 0.021505 udp 10.0.2.104 55072 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 21:25:59.072813 0.000000 udp 10.0.2.104 55073 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 21:26:42.534860 3.003182 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:26:49.542766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:26:57.544438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:27:13.547520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:27:45.553301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:33:49.559505 3.001956 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:33:56.566712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:34:04.568556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:34:20.572884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:34:52.577761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:40:56.584437 3.000983 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:40:59.044408 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 21:40:59.044554 0.011658 udp 10.0.2.104 55074 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 21:40:59.056519 0.000000 udp 10.0.2.104 55075 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 21:41:03.590698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:41:11.592397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:41:27.595457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:41:59.606033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:48:03.607450 3.001366 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:48:10.614786 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:48:18.616420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:48:34.619404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:49:06.625231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:55:10.631323 3.001804 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:55:17.638806 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:55:25.640383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:55:41.643022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:55:59.048693 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 21:55:59.048893 0.021585 udp 10.0.2.104 55076 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 21:55:59.070881 0.000000 udp 10.0.2.104 55077 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 21:56:13.652976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:12:29.654870 3.002230 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:12:36.664214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:12:44.663762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:13:00.667322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:13:32.673302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:14:59.047684 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 22:14:59.047846 0.011872 udp 10.0.2.104 55078 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 22:14:59.059997 0.000000 udp 10.0.2.104 55079 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 22:19:36.681985 2.999247 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:19:43.686666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:19:51.688596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:20:07.691174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:20:39.702614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:25:59.046671 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 22:25:59.046873 0.021514 udp 10.0.2.104 55080 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 22:25:59.068737 0.000000 udp 10.0.2.104 55081 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 22:26:43.703308 3.001367 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:26:50.711099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:26:58.712876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:27:14.715642 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:27:46.721049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:33:50.727105 3.002494 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:33:57.734345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:34:05.736383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:34:21.739049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:34:53.745052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:40:57.750943 3.001764 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:40:59.050412 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 22:40:59.050515 0.011312 udp 10.0.2.104 55082 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 22:40:59.062129 0.000000 udp 10.0.2.104 55083 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 22:41:04.758345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:41:12.760227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:41:28.763010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:42:00.768843 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:48:04.775097 3.001777 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:48:11.782444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:48:19.784588 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:48:35.786808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:49:07.792918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:55:11.799325 3.003078 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:55:18.806462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:55:26.807977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:55:42.810464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:55:59.044429 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 22:55:59.044525 0.011332 udp 10.0.2.104 55084 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 22:55:59.056192 0.000000 udp 10.0.2.104 55085 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 22:56:14.817040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:12:25.825965 3.001217 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:12:32.837577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:12:40.834569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:12:56.837768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:13:28.843664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:14:59.043293 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:14:59.043614 0.011750 udp 10.0.2.104 55086 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 23:14:59.055781 0.000000 udp 10.0.2.104 55087 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 23:19:32.850159 3.000880 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:19:39.857086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:19:47.859037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:20:03.861623 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:20:35.867986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:25:59.042363 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:25:59.042524 0.011967 udp 10.0.2.104 55088 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 23:25:59.054788 0.000000 udp 10.0.2.104 55089 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 23:26:39.873954 3.001407 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:26:46.886587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:26:54.882519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:27:10.885856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:27:42.890939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:33:46.897705 3.001608 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:33:53.904990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:34:01.906731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:34:17.909839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:34:49.916001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:40:53.921633 3.001584 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:40:59.046187 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:40:59.046284 0.012119 udp 10.0.2.104 55090 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 23:40:59.058679 0.000000 udp 10.0.2.104 55091 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 23:41:00.928785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:41:08.929846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:41:24.933424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:41:56.939262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:48:00.955643 3.001555 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:48:07.963130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:48:15.964678 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:48:31.967563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:49:03.972990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:55:07.980282 3.001004 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:55:14.986772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:55:22.988421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:55:38.991301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:55:59.050359 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:55:59.050489 0.015174 udp 10.0.2.104 55092 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/03 23:55:59.066082 0.000000 udp 10.0.2.104 55093 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/03 23:56:10.997472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:12:25.010097 3.001863 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:12:32.018150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:12:40.024172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:12:56.022224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:13:28.028382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:14:59.059472 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 00:14:59.059643 0.011434 udp 10.0.2.104 55094 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 00:14:59.071370 0.000000 udp 10.0.2.104 55095 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 00:19:32.034279 3.001731 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:19:39.042878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:19:47.043054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:20:03.047803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:20:35.052481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:25:59.059476 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 00:25:59.059659 0.022607 udp 10.0.2.104 55096 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 00:25:59.082565 0.000000 udp 10.0.2.104 55097 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 00:26:39.058185 3.002087 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:26:46.065703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:26:54.066795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:27:10.070326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:27:42.076422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:33:46.087301 2.999081 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:33:53.089935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:34:01.091462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:34:17.094339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:34:49.100506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:40:53.106498 3.001570 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:40:59.051945 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 00:40:59.052092 0.013010 udp 10.0.2.104 55098 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 00:40:59.065393 0.000000 udp 10.0.2.104 55099 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 00:41:00.113756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:41:08.115606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:41:24.118215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:41:56.124376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:48:00.130603 3.001518 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:48:07.138440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:48:15.139108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:48:31.141978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:49:03.148634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:55:07.154662 3.001251 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:55:14.161180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:55:22.162650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:55:38.166391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:55:59.056457 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 00:55:59.056579 0.011899 udp 10.0.2.104 55100 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 00:55:59.068765 0.000000 udp 10.0.2.104 55101 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 00:56:10.172040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:12:25.188043 3.000401 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:12:32.194043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:12:40.195748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:12:56.198934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:13:28.204627 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:14:59.055825 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 01:14:59.072532 0.011211 udp 10.0.2.104 55102 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 01:14:59.084072 0.000000 udp 10.0.2.104 55103 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 01:19:32.210085 3.002446 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:19:39.218457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:19:47.220682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:20:03.222560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:20:35.229382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:25:59.054211 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 01:25:59.054391 0.010254 udp 10.0.2.104 55104 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 01:25:59.064943 0.000000 udp 10.0.2.104 55105 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 01:26:39.234884 3.001596 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:26:46.242025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:26:54.243130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:27:10.246786 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:27:42.252811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:33:46.258952 3.001694 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:33:53.266410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:34:01.267559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:34:17.270704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:34:49.276462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:40:53.282870 3.001540 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:40:59.058629 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 01:40:59.058786 0.022611 udp 10.0.2.104 55106 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 01:40:59.081709 0.000000 udp 10.0.2.104 55107 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 01:41:00.290260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:41:08.291417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:41:24.294598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:41:56.300827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:48:00.306729 3.001392 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:48:07.313966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:48:15.316521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:48:31.318475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:49:03.324539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:55:07.332375 2.999205 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:55:14.338599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:55:22.339546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:55:38.342558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:55:59.052458 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 01:55:59.052557 0.011448 udp 10.0.2.104 55108 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 01:55:59.064314 0.000000 udp 10.0.2.104 55109 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 01:56:10.348675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:12:26.353714 3.023226 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:12:33.372183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:12:41.373136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:12:57.376361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:13:29.382704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:14:59.050928 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 02:14:59.051019 0.023053 udp 10.0.2.104 55110 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 02:14:59.074357 0.000000 udp 10.0.2.104 55111 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 02:19:33.387978 3.002480 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:19:40.396051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:19:48.397765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:20:04.400884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:20:36.406708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:25:59.050427 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 02:25:59.050531 0.023399 udp 10.0.2.104 55112 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 02:25:59.074251 0.000000 udp 10.0.2.104 55113 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 02:26:40.412603 3.001562 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:26:47.420067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:26:55.421660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:27:11.424489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:27:43.431139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:33:47.436537 3.001008 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:33:54.443985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:34:02.445335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:34:18.448324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:34:50.455423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:40:54.461435 3.000220 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:40:59.054415 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 02:40:59.054603 0.012101 udp 10.0.2.104 55114 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 02:40:59.067012 0.000000 udp 10.0.2.104 55115 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 02:41:01.467243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:41:09.469195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:41:25.472367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:41:57.478355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:48:01.487876 3.006254 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:48:08.496313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:48:16.495481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:48:32.496330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:49:04.502779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:55:08.509268 3.000928 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:55:15.515801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:55:23.520156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:55:39.520472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:55:59.051495 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 02:55:59.051645 0.011818 udp 10.0.2.104 55116 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 02:55:59.063768 0.000000 udp 10.0.2.104 55117 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 02:56:11.527068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:12:27.534621 2.999097 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:12:34.539827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:12:42.541091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:12:58.544050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:13:30.550145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:14:59.057534 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:14:59.057725 0.013707 udp 10.0.2.104 55118 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 03:14:59.071729 0.000000 udp 10.0.2.104 55119 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 03:19:34.555634 3.001655 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:19:41.563476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:19:49.565326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:20:05.568507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:20:37.576269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:25:59.056332 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:25:59.056431 0.011866 udp 10.0.2.104 55120 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 03:25:59.068626 0.000000 udp 10.0.2.104 55121 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 03:26:41.580363 3.002205 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:26:48.587400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:26:56.588890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:27:12.592407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:27:44.598236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:33:48.604895 3.001141 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:33:55.611476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:34:03.612958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:34:19.615782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:34:51.626354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:40:55.628049 3.001745 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:40:59.050225 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:40:59.050317 0.011324 udp 10.0.2.104 55122 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 03:40:59.061934 0.000000 udp 10.0.2.104 55123 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 03:41:02.635373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:41:10.636929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:41:26.639982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:41:58.646130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:48:02.651619 3.002405 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:48:09.664945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:48:17.660893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:48:33.664101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:49:05.670114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:55:09.675986 3.001445 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:55:16.683228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:55:24.684869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:55:40.687351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:55:59.054440 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:55:59.054616 0.011365 udp 10.0.2.104 55124 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 03:55:59.066270 0.000000 udp 10.0.2.104 55125 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 03:56:12.694033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:12:28.705501 3.004578 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:12:35.709703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:12:43.708723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:12:59.711871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:13:31.718050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:14:59.053131 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 04:14:59.053276 0.021391 udp 10.0.2.104 55126 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 04:14:59.075005 0.000000 udp 10.0.2.104 55127 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 04:19:35.723856 3.001439 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:19:42.731172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:19:50.736190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:20:06.735728 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:20:38.741925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:25:59.052285 0.000118 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 04:25:59.052484 0.011690 udp 10.0.2.104 55128 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 04:25:59.064445 0.000000 udp 10.0.2.104 55129 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 04:26:42.757504 3.001924 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:26:49.765222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:26:57.766756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:27:13.769708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:27:45.775727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:33:49.787792 3.000241 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:33:56.790074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:34:04.790914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:34:20.793841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:34:52.799604 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:40:56.805159 3.002115 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:40:59.056253 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 04:40:59.056353 0.012471 udp 10.0.2.104 55130 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 04:40:59.069145 0.000000 udp 10.0.2.104 55131 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 04:41:03.813027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:41:11.815534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:41:27.817369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:41:59.823697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:48:03.829977 3.001286 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:48:10.836994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:48:18.838385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:48:34.841783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:49:06.847521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:55:10.853417 3.002006 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:55:17.860922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:55:25.862792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:55:41.865800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:55:59.054168 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 04:55:59.054339 0.011672 udp 10.0.2.104 55132 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 04:55:59.066309 0.000000 udp 10.0.2.104 55133 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 04:56:13.871932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:12:24.880619 3.001319 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:12:31.887960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:12:39.889245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:12:55.892046 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:13:27.898310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:14:59.049645 0.000180 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 05:14:59.049927 0.012048 udp 10.0.2.104 55134 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 05:14:59.062290 0.000000 udp 10.0.2.104 55135 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 05:19:31.905124 3.000946 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:19:38.911808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:19:46.913157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:20:02.916300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:20:34.922135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:25:59.048376 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 05:25:59.048519 0.011302 udp 10.0.2.104 55136 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 05:25:59.060113 0.000000 udp 10.0.2.104 55137 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 05:26:38.928307 3.001672 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:26:45.935474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:26:53.936989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:27:09.940210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:27:41.946686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:33:45.952030 3.002210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:33:52.959808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:34:00.961320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:34:16.963684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:34:48.970385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:40:52.976544 3.001291 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:40:59.052647 0.000103 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 05:40:59.052838 0.014038 udp 10.0.2.104 55138 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 05:40:59.067184 0.000000 udp 10.0.2.104 55139 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 05:40:59.983379 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:41:07.985136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:41:23.988170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:41:55.994564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:47:59.999251 3.001919 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:48:07.007249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:48:15.009037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:48:31.012065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:49:03.019048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:55:07.024054 3.001790 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:55:14.031640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:55:22.032988 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:55:38.036147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:55:59.063884 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 05:55:59.064000 0.013896 udp 10.0.2.104 55140 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 05:55:59.078228 0.000000 udp 10.0.2.104 55141 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 05:56:10.042118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:12:23.056513 2.998910 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:12:30.062354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:12:38.062681 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:12:54.065957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:13:26.071144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:14:59.055808 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 06:14:59.055989 0.022260 udp 10.0.2.104 55142 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 06:14:59.078593 0.000000 udp 10.0.2.104 55143 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 06:19:30.078205 3.002354 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:19:37.086440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:19:45.086508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:20:01.089384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:20:33.096499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:25:59.054304 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 06:25:59.054465 0.011720 udp 10.0.2.104 55144 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 06:25:59.066474 0.000000 udp 10.0.2.104 55145 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 06:26:37.101272 3.002024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:26:44.108995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:26:52.110981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:27:08.113416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:27:40.119994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:33:44.125201 3.002071 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:33:51.132483 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:33:59.134591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:34:15.137855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:34:47.143748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:40:51.149407 3.001363 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:40:58.157097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:40:59.048309 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 06:40:59.048510 0.021662 udp 10.0.2.104 55146 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 06:40:59.070491 0.000000 udp 10.0.2.104 55147 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 06:41:06.158539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:41:22.161329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:41:54.167287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:47:58.174953 3.000183 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:48:05.180525 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:48:13.182424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:48:29.185478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:49:01.191885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:55:05.197044 3.002087 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:55:12.204547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:55:20.205848 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:55:36.209583 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:55:59.052239 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 06:55:59.052372 0.011897 udp 10.0.2.104 55148 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 06:55:59.064612 0.000000 udp 10.0.2.104 55149 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 06:56:08.215455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:12:23.232251 3.066600 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:12:30.279380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:12:38.258616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:12:54.264131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:13:26.274736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:14:59.054631 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 07:14:59.054805 0.011880 udp 10.0.2.104 55150 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 07:14:59.067040 0.000000 udp 10.0.2.104 55151 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 07:19:30.273830 3.002051 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:19:37.281229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:19:45.282939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:20:01.285530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:20:33.291442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:25:59.050069 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 07:25:59.050237 0.012294 udp 10.0.2.104 55152 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 07:25:59.062814 0.000000 udp 10.0.2.104 55153 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 07:26:37.298564 3.001494 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:26:44.305773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:26:52.306881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:27:08.315263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:27:40.316215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:33:44.321819 3.002048 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:33:51.329307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:33:59.330811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:34:15.333870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:34:47.340157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:40:51.345968 3.001197 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:40:58.353285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:40:59.054233 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 07:40:59.054395 0.011945 udp 10.0.2.104 55154 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 07:40:59.066623 0.000000 udp 10.0.2.104 55155 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 07:41:06.354807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:41:22.358018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:41:54.363437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:47:58.370577 3.002267 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:48:05.377085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:48:13.384656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:48:29.381977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:49:01.388504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:55:05.393845 3.039890 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:55:12.414510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:55:20.412905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:55:36.416119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:55:59.048523 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 07:55:59.048658 0.013348 udp 10.0.2.104 55156 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 07:55:59.062317 0.000000 udp 10.0.2.104 55157 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 07:56:08.428026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:12:23.435220 3.002923 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:12:30.443797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:12:38.445396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:12:54.448609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:13:26.454326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:14:59.047641 0.000137 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 08:14:59.047887 0.011425 udp 10.0.2.104 55158 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 08:14:59.059606 0.000000 udp 10.0.2.104 55159 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 08:19:30.460503 3.001214 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:19:37.467908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:19:45.470096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:20:01.472099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:20:33.478529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:25:59.046890 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 08:25:59.047047 0.011960 udp 10.0.2.104 55160 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 08:25:59.059289 0.000000 udp 10.0.2.104 55161 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 08:26:37.483758 3.002169 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:26:44.491852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:26:52.493330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:27:08.496251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:27:40.502313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:33:44.507489 3.002609 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:33:51.516371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:33:59.517657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:34:15.520548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:34:47.528017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:40:51.532455 3.001360 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:40:58.539407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:40:59.050505 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 08:40:59.050619 0.012314 udp 10.0.2.104 55162 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 08:40:59.063254 0.000000 udp 10.0.2.104 55163 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 08:41:06.540951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:41:22.544104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:41:54.550275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:47:58.555976 3.002170 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:48:05.563553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:48:13.565169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:48:29.567981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:49:01.574173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:55:05.584307 2.997385 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:55:12.601232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:55:20.589821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:55:36.591315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:55:59.054456 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 08:55:59.054622 0.011407 udp 10.0.2.104 55164 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 08:55:59.066328 0.000000 udp 10.0.2.104 55165 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 08:56:08.598743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:12:24.603704 3.012083 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:12:31.621193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:12:39.629136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:12:55.632361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:13:27.632028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:14:59.058000 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 09:14:59.058208 0.022138 udp 10.0.2.104 55166 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 09:14:59.080675 0.000000 udp 10.0.2.104 55167 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 09:19:31.639145 3.000367 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:19:38.645323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:19:46.647132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:20:02.649923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:20:34.656078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:25:59.052350 0.000134 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 09:25:59.052613 0.013488 udp 10.0.2.104 55168 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 09:25:59.066383 0.000000 udp 10.0.2.104 55169 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 09:26:38.661385 3.002268 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:26:45.669334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:26:53.670801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:27:09.674100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:27:41.680125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:33:45.686918 3.000870 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:33:52.697457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:34:00.697722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:34:16.697820 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:34:48.704288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:40:52.709935 3.001475 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:40:59.046361 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 09:40:59.046539 0.011726 udp 10.0.2.104 55170 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 09:40:59.058632 0.000000 udp 10.0.2.104 55171 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 09:40:59.717570 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:41:07.719455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:41:23.722385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:41:55.727829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:47:59.733518 3.002045 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:48:06.741639 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:48:14.742581 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:48:30.745850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:49:02.751816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:55:06.759439 3.003271 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:55:13.766080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:55:21.766432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:55:37.770042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:55:59.181391 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 09:55:59.181514 0.011958 udp 10.0.2.104 55172 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 09:55:59.193800 0.000000 udp 10.0.2.104 55173 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 09:56:09.807119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:12:25.791436 3.002051 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:12:32.798757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:12:40.804397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:12:56.803345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:13:28.809388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:14:59.049545 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 10:14:59.049719 0.011185 udp 10.0.2.104 55174 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 10:14:59.061210 0.000000 udp 10.0.2.104 55175 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 10:19:32.816035 3.001130 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:19:39.822911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:19:47.824422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:20:03.828268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:20:35.833782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:25:59.049016 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 10:25:59.049164 0.012392 udp 10.0.2.104 55176 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 10:25:59.061844 0.000000 udp 10.0.2.104 55177 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 10:26:39.840541 3.003172 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:26:46.850770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:26:54.848520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:27:10.851644 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:27:42.857580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:33:46.862749 3.002521 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:33:53.870963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:34:01.875791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:34:17.875315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:34:49.892045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:40:53.888470 3.000503 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:40:59.052001 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 10:40:59.052110 0.011267 udp 10.0.2.104 55178 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 10:40:59.063716 0.000000 udp 10.0.2.104 55179 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 10:41:00.894583 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:41:08.896511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:41:24.899235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:41:56.905639 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:48:00.912808 3.002405 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:48:07.919030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:48:15.920572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:48:31.923220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:49:03.929390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:55:07.935100 3.004971 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:55:14.945060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:55:22.944116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:55:38.947518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:55:59.046137 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 10:55:59.046242 0.022454 udp 10.0.2.104 55180 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 10:55:59.069049 0.000000 udp 10.0.2.104 55181 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 10:56:10.953004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:12:27.962078 3.000165 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:12:34.972399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:12:42.969057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:12:58.972815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:13:30.980248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:14:59.047941 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 11:14:59.048111 0.011362 udp 10.0.2.104 55182 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 11:14:59.059808 0.000000 udp 10.0.2.104 55183 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 11:19:34.986958 2.999564 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:19:41.994061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:19:49.994075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:20:05.996544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:20:38.002102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:25:59.044584 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 11:25:59.044763 0.022962 udp 10.0.2.104 55184 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 11:25:59.068106 0.000000 udp 10.0.2.104 55185 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 11:26:42.009625 3.001247 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:26:49.015991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:26:57.017589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:27:13.019959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:27:45.027090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:33:49.036665 2.997653 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:33:56.040138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:34:04.044176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:34:20.044333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:34:52.050404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:40:56.055704 3.002728 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:40:59.048561 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 11:40:59.048706 0.011079 udp 10.0.2.104 55186 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 11:40:59.060063 0.000000 udp 10.0.2.104 55187 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 11:41:03.063953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:41:11.065425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:41:27.068380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:41:59.074091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:48:03.081092 3.001108 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:48:10.088023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:48:18.094008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:48:34.092318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:49:06.098444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:55:10.103675 3.002711 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:55:17.113232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:55:25.113431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:55:41.117138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:55:59.051961 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 11:55:59.052164 0.022635 udp 10.0.2.104 55188 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 11:55:59.075140 0.000000 udp 10.0.2.104 55189 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 11:56:13.124117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:12:25.132747 3.117432 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:12:32.275775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:12:40.212545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:12:56.164576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:13:28.170475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:14:59.054409 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 12:14:59.054519 0.012382 udp 10.0.2.104 55190 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 12:14:59.067280 0.000000 udp 10.0.2.104 55191 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 12:19:32.177452 3.001009 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:19:39.184376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:19:47.189913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:20:03.188523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:20:35.194625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:25:59.050579 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 12:25:59.050798 0.011350 udp 10.0.2.104 55192 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 12:25:59.062478 0.000000 udp 10.0.2.104 55193 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 12:26:39.200666 3.001702 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:26:46.208506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:26:54.209864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:27:10.212619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:27:42.218341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:33:46.223768 3.004934 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:33:53.232079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:34:01.233987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:34:17.236497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:34:49.244155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:40:53.248516 3.001701 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:40:59.044384 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 12:40:59.044532 0.014027 udp 10.0.2.104 55194 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 12:40:59.058879 0.000000 udp 10.0.2.104 55195 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 12:41:00.255993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:41:08.257306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:41:24.260647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:41:56.266670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:48:00.272664 3.001726 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:48:07.280050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:48:15.281455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:48:31.284339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:49:03.290616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:55:07.296712 3.003835 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:55:14.304052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:55:22.308628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:55:38.311788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:55:59.047742 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 12:55:59.047898 0.012013 udp 10.0.2.104 55196 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 12:55:59.060205 0.000000 udp 10.0.2.104 55197 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 12:56:10.314496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:12:24.327000 3.002162 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:12:31.335007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:12:39.336501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:12:55.339383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:13:27.345268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:14:59.047084 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 13:14:59.047263 0.012497 udp 10.0.2.104 55198 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 13:14:59.060074 0.000000 udp 10.0.2.104 55199 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 13:19:31.351247 3.001911 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:19:38.358931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:19:46.360383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:20:02.366110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:20:34.369386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:25:59.046206 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 13:25:59.046362 0.023676 udp 10.0.2.104 55200 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 13:25:59.070359 0.000000 udp 10.0.2.104 55201 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 13:26:38.380962 2.999366 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:26:45.386109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:26:53.384670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:27:09.387293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:27:41.395411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:33:45.400854 3.000315 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:33:52.406787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:34:00.408421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:34:16.411700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:34:48.417266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:40:52.424134 3.000707 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:40:59.050562 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 13:40:59.050661 0.010059 udp 10.0.2.104 55202 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 13:40:59.061092 0.000000 udp 10.0.2.104 55203 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 13:40:59.430668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:41:07.432329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:41:23.435558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:41:55.441461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:47:59.447458 3.192589 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:48:06.605741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:48:14.545836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:48:30.476741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:49:02.485355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:55:06.491671 3.001556 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:55:13.498992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:55:21.500405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:55:37.503192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:55:59.044282 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 13:55:59.044425 0.012026 udp 10.0.2.104 55204 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 13:55:59.056755 0.000000 udp 10.0.2.104 55205 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 13:56:09.509115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:12:24.523441 3.001886 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:12:31.534230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:12:39.533846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:12:55.535826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:13:27.552129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:14:59.044080 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 14:14:59.044247 0.011198 udp 10.0.2.104 55206 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 14:14:59.055915 0.000000 udp 10.0.2.104 55207 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 14:19:31.557717 3.006504 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:19:38.565189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:19:46.566502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:20:02.569926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:20:34.576028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:25:59.042492 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 14:25:59.042646 0.021144 udp 10.0.2.104 55208 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 14:25:59.064137 0.000000 udp 10.0.2.104 55209 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 14:26:38.581669 3.002118 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:26:45.589097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:26:53.591272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:27:09.596453 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:27:41.599969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:33:45.608654 2.998551 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:33:52.615293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:34:00.617844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:34:16.617834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:34:48.624599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:40:52.629263 3.001888 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:40:59.046237 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 14:40:59.046340 0.021299 udp 10.0.2.104 55210 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 14:40:59.067944 0.000000 udp 10.0.2.104 55211 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 14:40:59.637117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:41:07.638571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:41:24.266436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:41:55.890039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:48:00.665309 0.998775 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/04 14:48:06.432000 3.957997 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/04 14:48:18.291708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:48:34.101780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:49:05.732197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:55:07.708734 2.992039 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:55:14.706361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:55:22.708661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:55:38.716127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:55:59.050348 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 14:55:59.050532 0.011383 udp 10.0.2.104 55212 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 14:55:59.062239 0.000000 udp 10.0.2.104 55213 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 14:56:10.717619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:12:25.732439 3.001212 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:12:32.738812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:12:40.741254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:12:56.751616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:13:28.749306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:14:59.052185 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:14:59.052287 0.012240 udp 10.0.2.104 55214 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 15:14:59.064838 0.000000 udp 10.0.2.104 55215 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 15:19:32.755948 3.001290 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:19:39.764026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:19:47.764443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:20:03.767428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:20:35.773571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:25:59.048403 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:25:59.048529 0.011156 udp 10.0.2.104 55216 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 15:25:59.059993 0.000000 udp 10.0.2.104 55217 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 15:26:39.782046 3.001880 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:26:46.786675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:26:54.788775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:27:10.791617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:27:42.797402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:33:46.804171 3.000950 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:33:53.810541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:34:01.812152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:34:17.815229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:34:49.821171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:40:53.827907 3.001108 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:40:59.041728 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:40:59.041910 0.021888 udp 10.0.2.104 55218 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 15:40:59.064096 0.000000 udp 10.0.2.104 55219 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 15:41:00.834824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:41:08.836259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:41:24.839014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:41:56.845175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:48:02.861219 2.996744 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:48:09.861540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:48:17.866688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:48:33.866118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:49:05.872178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:55:09.878285 3.001671 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:55:16.888015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:55:24.887804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:55:40.890131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:55:59.046243 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:55:59.046384 0.022926 udp 10.0.2.104 55220 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 15:55:59.069631 0.000000 udp 10.0.2.104 55221 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 15:56:12.896171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:12:26.909326 3.001228 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:12:33.923103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:12:41.918290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:12:57.921325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:13:29.937003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:14:59.045387 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 16:14:59.045600 0.011290 udp 10.0.2.104 55222 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 16:14:59.057207 0.000000 udp 10.0.2.104 55223 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 16:19:33.943091 3.001586 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:19:40.950626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:19:48.952139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:20:04.955651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:20:36.961216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:25:59.043954 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 16:25:59.044052 0.011239 udp 10.0.2.104 55224 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 16:25:59.055734 0.000000 udp 10.0.2.104 55225 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 16:26:40.969854 2.998903 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:26:47.982589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:26:55.976133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:27:11.979440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:27:43.996722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:33:47.990644 3.003476 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:33:55.010816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:34:03.010010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:34:19.014234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:34:51.020743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:40:55.026284 3.000210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:40:59.048162 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 16:40:59.048249 0.011155 udp 10.0.2.104 55226 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 16:40:59.059681 0.000000 udp 10.0.2.104 55227 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 16:41:02.032640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:41:10.033532 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:41:26.036952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:41:58.043012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:48:03.051955 3.003455 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:48:10.059795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:48:18.063973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:48:34.065709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:49:06.068427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:55:10.074830 3.001053 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:55:17.081451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:55:25.083630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:55:41.096139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:55:59.047013 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 16:55:59.047159 0.014230 udp 10.0.2.104 55228 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 16:55:59.061730 0.000000 udp 10.0.2.104 55229 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 16:56:13.095142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:12:29.098777 3.192163 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:12:36.260183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:12:44.194638 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:13:00.120292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:13:32.128232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:14:59.041464 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 17:14:59.041568 0.011474 udp 10.0.2.104 55230 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 17:14:59.053361 0.000000 udp 10.0.2.104 55231 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 17:19:36.132418 3.001741 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:19:43.139735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:19:51.142835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:20:07.144228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:20:39.154041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:25:59.054348 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 17:25:59.054448 0.011331 udp 10.0.2.104 55232 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 17:25:59.066106 0.000000 udp 10.0.2.104 55233 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 17:26:43.156207 3.001193 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:26:50.163945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:26:58.165135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:27:14.168182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:27:46.174311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:33:50.180314 3.001722 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:33:57.187758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:34:05.189325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:34:21.196269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:34:53.198855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:40:57.203811 3.002241 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:40:59.043946 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 17:40:59.044057 0.011266 udp 10.0.2.104 55234 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 17:40:59.055833 0.000000 udp 10.0.2.104 55235 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 17:41:04.211026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:41:12.213674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:41:28.216202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:42:00.224058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:48:04.228797 3.001185 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:48:11.237473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:48:19.237189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:48:35.240199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:49:07.246216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:55:11.256538 3.000352 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:55:18.259285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:55:26.261061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:55:42.263900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:55:59.048572 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 17:55:59.048711 0.011683 udp 10.0.2.104 55236 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 17:55:59.060731 0.000000 udp 10.0.2.104 55237 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 17:56:14.270260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:12:25.279383 3.001437 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:12:32.288504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:12:40.291358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:12:56.293811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:13:28.296943 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:14:59.047400 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 18:14:59.047608 0.011312 udp 10.0.2.104 55238 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 18:14:59.059205 0.000000 udp 10.0.2.104 55239 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 18:19:32.305622 2.998207 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:19:39.310537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:19:47.311756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:20:03.314383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:20:35.320934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:25:59.046391 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 18:25:59.046492 0.011713 udp 10.0.2.104 55240 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 18:25:59.058535 0.000000 udp 10.0.2.104 55241 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 18:26:39.326910 3.001811 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:26:46.334197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:26:54.335821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:27:10.340606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:27:42.344819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:33:46.350718 3.006174 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:33:53.358385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:34:01.359699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:34:17.362571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:34:49.368717 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:40:53.374850 3.001677 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:40:59.040263 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 18:40:59.040452 0.021762 udp 10.0.2.104 55242 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 18:40:59.062595 0.000000 udp 10.0.2.104 55243 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 18:41:00.382306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:41:08.383702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:41:24.386825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:41:56.392694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:48:00.398767 3.001656 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:48:07.409062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:48:15.415226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:48:31.410743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:49:03.426589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:55:07.432736 3.011822 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:55:14.450283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:55:22.452456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:55:38.455182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:55:59.044359 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 18:55:59.044509 0.012308 udp 10.0.2.104 55244 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 18:55:59.057132 0.000000 udp 10.0.2.104 55245 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 18:56:10.467192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:12:23.471980 3.001920 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:12:30.480552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:12:38.482103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:12:54.484380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:13:26.492782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:14:59.043832 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 19:14:59.043981 0.011316 udp 10.0.2.104 55246 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 19:14:59.055748 0.000000 udp 10.0.2.104 55247 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 19:19:30.496961 3.001085 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:19:37.503906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:19:45.505492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:20:01.508468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:20:33.514649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:25:59.042421 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 19:25:59.042600 0.022009 udp 10.0.2.104 55248 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 19:25:59.064998 0.000000 udp 10.0.2.104 55249 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 19:26:37.519999 3.002299 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:26:44.528021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:26:52.528959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:27:08.532868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:27:40.538574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:33:44.543860 3.001955 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:33:51.552212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:33:59.553017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:34:15.556510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:34:47.562338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:40:51.567757 3.002103 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:40:58.575748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:40:59.046341 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 19:40:59.046526 0.011647 udp 10.0.2.104 55250 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 19:40:59.058535 0.000000 udp 10.0.2.104 55251 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 19:41:06.577214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:41:22.580271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:41:54.586106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:47:58.592677 3.032726 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:48:05.609846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:48:13.610982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:48:29.614206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:49:01.620322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:55:05.626282 3.001072 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:55:12.633476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:55:20.634889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:55:36.638226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:55:59.040429 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 19:55:59.040579 0.011367 udp 10.0.2.104 55252 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 19:55:59.052248 0.000000 udp 10.0.2.104 55253 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 19:56:08.644372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:12:23.659536 3.007548 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:12:30.667621 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:12:38.667316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:12:54.670631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:13:26.676560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:14:59.039178 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 20:14:59.039305 0.011321 udp 10.0.2.104 55254 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 20:14:59.050963 0.000000 udp 10.0.2.104 55255 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 20:19:30.682854 3.001632 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:19:37.690190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:19:45.691973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:20:01.694527 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:20:33.700538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:25:59.048214 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 20:25:59.048450 0.011960 udp 10.0.2.104 55256 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 20:25:59.060667 0.000000 udp 10.0.2.104 55257 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 20:26:37.711000 2.997764 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:26:44.717153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:26:52.715996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:27:08.720275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:27:40.724518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:33:44.730573 3.001693 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:33:51.737420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:33:59.739740 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:34:15.742315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:34:47.749142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:40:51.754462 3.001663 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:40:58.761987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:40:59.042007 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 20:40:59.042155 0.011880 udp 10.0.2.104 55258 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 20:40:59.054286 0.000000 udp 10.0.2.104 55259 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 20:41:06.763561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:41:22.766632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:41:54.772375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:47:58.777735 3.002269 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:48:05.786043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:48:13.787175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:48:29.794683 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:49:01.796227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:55:05.802925 3.000582 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:55:12.814250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:55:20.811420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:55:36.813930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:55:59.046783 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 20:55:59.046920 0.022812 udp 10.0.2.104 55260 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 20:55:59.070048 0.000000 udp 10.0.2.104 55261 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 20:56:08.820381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:12:24.826235 3.002769 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:12:31.833596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:12:39.838497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:12:55.838147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:13:27.844162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:14:59.045501 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 21:14:59.045725 0.011999 udp 10.0.2.104 55262 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 21:14:59.058025 0.000000 udp 10.0.2.104 55263 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 21:19:31.849637 3.002337 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:19:38.857931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:19:46.869020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:20:02.872383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:20:34.878411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:25:59.044538 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 21:25:59.044683 0.011973 udp 10.0.2.104 55264 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 21:25:59.056949 0.000000 udp 10.0.2.104 55265 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 21:26:38.884685 3.001249 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:26:45.891740 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:26:53.892967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:27:09.896435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:27:41.902072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:33:45.908300 3.000901 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:33:52.915463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:34:00.917197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:34:16.919391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:34:48.928215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:40:52.931964 3.001815 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:40:59.038404 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 21:40:59.038672 0.011265 udp 10.0.2.104 55266 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 21:40:59.050280 0.000000 udp 10.0.2.104 55267 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 21:40:59.939370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:41:07.940433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:41:23.944048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:41:55.949935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:48:00.957350 3.001863 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:48:07.968211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:48:15.968085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:48:31.969280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:49:03.976144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:55:07.980591 3.002395 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:55:14.989497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:55:22.990312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:55:38.993859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:55:59.041954 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 21:55:59.042131 0.011780 udp 10.0.2.104 55268 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 21:55:59.054202 0.000000 udp 10.0.2.104 55269 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 21:56:10.999393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:12:27.006070 3.011664 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:12:34.022459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:12:42.024243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:12:58.027495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:13:30.033729 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:14:59.041558 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 22:14:59.041746 0.011704 udp 10.0.2.104 55270 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 22:14:59.053793 0.000000 udp 10.0.2.104 55271 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 22:19:34.039290 3.001267 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:19:41.047923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:19:49.048564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:20:05.051148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:20:37.057274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:25:59.040242 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 22:25:59.040439 0.011546 udp 10.0.2.104 55272 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 22:25:59.052283 0.000000 udp 10.0.2.104 55273 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 22:26:41.063094 3.001913 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:26:48.070692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:26:56.072035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:27:12.075692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:27:44.081285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:33:48.086550 3.002497 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:33:55.094187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:34:03.096280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:34:19.099179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:34:51.107146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:40:55.111360 3.001014 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:40:59.044334 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 22:40:59.044434 0.011252 udp 10.0.2.104 55274 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 22:40:59.055974 0.000000 udp 10.0.2.104 55275 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 22:41:02.118686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:41:10.119940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:41:26.123192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:41:58.129042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:48:03.136895 3.001408 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:48:10.144212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:48:18.145823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:48:34.148822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:49:06.154352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:55:10.160646 3.001837 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:55:17.168586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:55:25.169463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:55:41.172312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:55:59.038338 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 22:55:59.038471 0.022628 udp 10.0.2.104 55276 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 22:55:59.061488 0.000000 udp 10.0.2.104 55277 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 22:56:13.178712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:12:28.193992 3.003114 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:12:35.200706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:12:43.201903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:12:59.212516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:13:31.211237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:14:59.037452 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:14:59.037622 0.011651 udp 10.0.2.104 55278 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 23:14:59.049584 0.000000 udp 10.0.2.104 55279 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 23:19:35.217793 3.000975 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:19:42.224839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:19:50.225859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:20:06.233239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:20:38.234909 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:25:59.046132 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:25:59.046323 0.011534 udp 10.0.2.104 55280 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 23:25:59.058144 0.000000 udp 10.0.2.104 55281 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 23:26:42.241347 3.001360 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:26:49.248381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:26:57.250364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:27:13.253002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:27:45.262261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:33:49.265090 3.001371 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:33:56.272386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:34:04.273844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:34:20.277031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:34:52.283053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:40:56.289064 3.001402 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:40:59.040601 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:40:59.040750 0.012870 udp 10.0.2.104 55282 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 23:40:59.053908 0.000000 udp 10.0.2.104 55283 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 23:41:03.296650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:41:11.297406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:41:27.300668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:41:59.757342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:48:04.765099 3.001831 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:48:11.772410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:48:19.776569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:48:35.776975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:49:07.782835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:55:11.795388 2.999739 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:55:18.796562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:55:26.805650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:55:42.800472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:55:59.494853 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:55:59.495048 0.011335 udp 10.0.2.104 55284 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/04 23:55:59.542907 0.000000 udp 10.0.2.104 55285 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/04 23:56:14.807212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:12:29.821936 3.001221 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:12:36.828527 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:12:44.830631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:13:00.833038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:13:32.840391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:14:59.494216 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 00:14:59.494356 0.012629 udp 10.0.2.104 55286 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 00:14:59.507312 0.000000 udp 10.0.2.104 55287 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 00:19:36.845105 3.002272 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:19:43.852900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:19:51.854121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:20:07.857326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:20:39.863239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:25:59.492962 0.000144 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 00:25:59.493212 0.013646 udp 10.0.2.104 55288 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 00:25:59.507178 0.000000 udp 10.0.2.104 55289 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 00:26:43.869353 3.001488 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:26:50.876665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:26:58.881884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:27:14.881267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:27:46.887424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:33:50.893542 3.001447 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:33:57.900706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:34:05.902641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:34:21.905170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:34:53.911240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:40:59.496810 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 00:40:59.496985 0.015400 udp 10.0.2.104 55290 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 00:40:59.512687 0.000000 udp 10.0.2.104 55291 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 00:41:01.923322 3.001392 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:41:08.930496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:41:16.931384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:41:32.935152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:42:04.941074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:48:08.946740 3.001879 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:48:15.954868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:48:23.956284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:48:39.964675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:49:11.965394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:55:15.972768 3.002625 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:55:22.982715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:55:30.979883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:55:46.982656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:55:59.490961 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 00:55:59.491179 0.011434 udp 10.0.2.104 55292 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 00:55:59.502967 0.000000 udp 10.0.2.104 55293 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 00:56:18.989098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:12:29.027154 3.001359 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:12:36.033069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:12:44.035211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:13:00.040833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:13:32.044166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:14:59.519994 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 01:14:59.520091 0.011573 udp 10.0.2.104 55294 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 01:14:59.531991 0.000000 udp 10.0.2.104 55295 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 01:19:36.049672 3.002371 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:19:43.058149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:19:51.059161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:20:07.062437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:20:39.067918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:25:59.519020 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 01:25:59.519184 0.011826 udp 10.0.2.104 55296 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 01:25:59.531275 0.000000 udp 10.0.2.104 55297 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 01:26:43.074171 3.002673 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:26:50.081099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:26:58.082882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:27:14.086461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:27:46.091903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:33:50.097559 3.002327 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:33:57.105459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:34:05.107220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:34:21.110021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:34:53.116162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:40:59.523240 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 01:40:59.523329 0.011157 udp 10.0.2.104 55298 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 01:40:59.534779 0.000000 udp 10.0.2.104 55299 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 01:41:03.132186 3.000302 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:41:10.138426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:41:18.139995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:41:34.142886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:42:06.148684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:48:11.158414 2.999643 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:48:18.165067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:48:26.170822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:48:42.168354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:49:14.174126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:55:18.179510 3.001784 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:55:25.187924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:55:33.189307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:55:49.192442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:55:59.517116 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 01:55:59.517254 0.021580 udp 10.0.2.104 55300 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 01:55:59.539155 0.000000 udp 10.0.2.104 55301 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 01:56:21.198208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:12:30.221622 3.000804 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:12:37.225799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:12:45.228307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:13:01.225952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:13:33.232176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:14:59.526148 0.000158 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 02:14:59.526440 0.011908 udp 10.0.2.104 55302 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 02:14:59.538830 0.000000 udp 10.0.2.104 55303 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 02:19:37.237988 3.001777 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:19:44.247443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:19:52.246905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:20:08.249870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:20:40.257333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:25:59.525175 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 02:25:59.525261 0.011417 udp 10.0.2.104 55304 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 02:25:59.536990 0.000000 udp 10.0.2.104 55305 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 02:26:44.261758 3.011427 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:26:51.279278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:26:59.280936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:27:15.283857 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:27:47.296510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:33:51.295462 3.002055 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:33:58.303095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:34:06.305036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:34:22.307335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:34:54.314645 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:40:59.519355 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 02:40:59.519521 0.011320 udp 10.0.2.104 55306 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 02:40:59.531153 0.000000 udp 10.0.2.104 55307 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 02:41:04.328603 3.002188 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:41:11.336005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:41:19.337397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:41:35.340609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:42:07.346605 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:48:12.354040 3.001796 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:48:19.361410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:48:27.363107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:48:43.365951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:49:15.371898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:55:19.377730 3.002041 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:55:26.387943 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:55:34.386646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:55:50.389880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:55:59.523197 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 02:55:59.523300 0.021338 udp 10.0.2.104 55308 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 02:55:59.545027 0.000000 udp 10.0.2.104 55309 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 02:56:22.396148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:12:31.411485 3.011833 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:12:38.428972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:12:46.430768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:13:02.433845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:13:34.448430 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:14:59.522020 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:14:59.522112 0.011493 udp 10.0.2.104 55310 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 03:14:59.533891 0.000000 udp 10.0.2.104 55311 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 03:19:38.448185 3.000467 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:19:45.453016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:19:53.454469 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:20:09.457217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:20:41.463852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:25:59.523366 0.000252 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:25:59.523702 0.011337 udp 10.0.2.104 55312 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 03:25:59.535373 0.000000 udp 10.0.2.104 55313 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 03:26:45.470774 3.002892 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:26:52.477262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:27:00.478449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:27:16.481381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:27:48.487418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:33:52.493949 3.001163 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:33:59.500896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:34:07.502974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:34:23.507111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:34:55.512201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:40:59.525043 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:40:59.525210 0.014942 udp 10.0.2.104 55314 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 03:40:59.540418 0.000000 udp 10.0.2.104 55315 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 03:41:06.527205 3.002076 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:41:13.535081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:41:21.536765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:41:37.539652 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:42:09.546272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:48:14.552906 3.001682 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:48:21.560509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:48:29.561886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:48:45.565032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:49:17.571046 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:55:21.576825 3.002146 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:55:28.584582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:55:36.585951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:55:52.590137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:55:59.519434 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:55:59.519570 0.011497 udp 10.0.2.104 55316 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 03:55:59.531375 0.000000 udp 10.0.2.104 55317 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 03:56:24.595152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:12:33.611734 3.004231 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:12:40.620876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:12:48.619953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:13:04.624435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:13:36.628924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:14:59.518384 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 04:14:59.518658 0.012334 udp 10.0.2.104 55318 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 04:14:59.531269 0.000000 udp 10.0.2.104 55319 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 04:19:40.635178 3.008016 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:19:47.642155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:19:55.644463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:20:11.647278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:20:43.652724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:25:59.518349 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 04:25:59.518529 0.022237 udp 10.0.2.104 55320 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 04:25:59.541086 0.000000 udp 10.0.2.104 55321 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 04:26:47.659138 3.002028 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:26:54.666496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:27:02.667333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:27:18.670710 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:27:50.676749 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:33:54.682392 3.002246 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:34:01.690331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:34:09.691956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:34:25.694746 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:34:57.702297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:40:59.521095 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 04:40:59.521187 0.011486 udp 10.0.2.104 55322 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 04:40:59.532974 0.000000 udp 10.0.2.104 55323 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 04:41:07.715080 3.002231 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:41:14.723085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:41:22.724254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:41:38.727294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:42:10.733536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:48:15.741334 3.000866 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:48:22.747667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:48:30.749613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:48:46.752655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:49:18.758553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:55:22.765295 3.000961 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:55:29.772110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:55:37.773762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:55:53.784070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:55:59.514930 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 04:55:59.515068 0.022459 udp 10.0.2.104 55324 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 04:55:59.537844 0.000000 udp 10.0.2.104 55325 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 04:56:25.787166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:12:34.803762 2.997970 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:12:41.807258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:12:49.808013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:13:05.810273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:13:37.816652 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:14:59.524268 0.000123 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 05:14:59.524488 0.011347 udp 10.0.2.104 55326 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 05:14:59.536180 0.000000 udp 10.0.2.104 55327 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 05:19:41.823601 3.000327 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:19:48.829911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:19:56.831509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:20:12.837031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:20:44.840451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:25:59.523195 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 05:25:59.523396 0.021499 udp 10.0.2.104 55328 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 05:25:59.545180 0.000000 udp 10.0.2.104 55329 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 05:26:48.846708 3.001412 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:26:55.853889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:27:03.856008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:27:19.858465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:27:51.864524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:33:55.869833 3.002015 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:34:02.879545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:34:10.879406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:34:26.881731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:34:58.888316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:40:59.519893 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 05:40:59.520029 0.012157 udp 10.0.2.104 55330 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 05:40:59.532496 0.000000 udp 10.0.2.104 55331 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 05:41:08.903429 3.001286 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:41:15.910378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:41:23.912082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:41:39.915217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:42:11.920971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:48:16.930643 3.008830 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:48:23.946686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:48:31.955479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:48:47.950295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:49:19.956753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:55:23.966758 3.006692 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:55:30.974402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:55:38.970847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:55:54.974100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:55:59.521044 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 05:55:59.521215 0.021725 udp 10.0.2.104 55332 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 05:55:59.543240 0.000000 udp 10.0.2.104 55333 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 05:56:26.980404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:12:36.988339 3.002579 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:12:43.995116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:12:51.996747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:13:07.999418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:13:40.007103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:14:59.520429 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 06:14:59.520545 0.012931 udp 10.0.2.104 55334 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 06:14:59.533808 0.000000 udp 10.0.2.104 55335 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 06:19:44.011668 3.001814 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:19:51.019057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:19:59.020688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:20:15.023382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:20:47.029811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:25:59.519209 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 06:25:59.519381 0.011544 udp 10.0.2.104 55336 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 06:25:59.531264 0.000000 udp 10.0.2.104 55337 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 06:26:51.035550 3.001700 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:26:58.043117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:27:06.046825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:27:22.047325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:27:54.053948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:33:58.061206 3.000061 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:34:05.067623 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:34:13.068501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:34:29.071324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:35:01.077379 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:40:59.523126 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 06:40:59.523361 0.011360 udp 10.0.2.104 55338 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 06:40:59.535053 0.000000 udp 10.0.2.104 55339 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 06:41:11.091798 3.001635 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:41:18.099801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:41:26.100691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:41:42.103747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:42:14.110225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:48:19.117582 3.002238 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:48:26.127191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:48:34.126416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:48:50.129487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:49:22.138043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:55:26.141493 3.001699 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:55:33.149022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:55:41.150531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:55:57.153354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:55:59.516908 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 06:55:59.517072 0.014330 udp 10.0.2.104 55340 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 06:55:59.531737 0.000000 udp 10.0.2.104 55341 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 06:56:29.163015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:12:33.172869 3.002293 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:12:40.175643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:12:48.188167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:13:04.190204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:13:36.196287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:14:59.521129 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 07:14:59.521266 0.022758 udp 10.0.2.104 55342 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 07:14:59.544331 0.000000 udp 10.0.2.104 55343 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 07:19:40.203652 3.000473 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:19:47.209388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:19:55.211253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:20:11.214055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:20:43.220428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:25:59.515117 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 07:25:59.515280 0.011121 udp 10.0.2.104 55344 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 07:25:59.526664 0.000000 udp 10.0.2.104 55345 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 07:26:47.226339 3.001308 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:26:54.233184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:27:02.235252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:27:18.238151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:27:50.244270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:33:54.249551 3.002542 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:34:01.257466 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:34:09.258975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:34:25.262290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:34:57.268087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:40:59.518950 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 07:40:59.519057 0.012131 udp 10.0.2.104 55346 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 07:40:59.531511 0.000000 udp 10.0.2.104 55347 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 07:41:08.284762 3.000690 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:41:15.291697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:41:23.293353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:41:39.296059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:42:11.302352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:48:17.311413 3.000977 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:48:24.318358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:48:32.320210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:48:48.323155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:49:20.329031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:55:24.334414 3.001991 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:55:31.342324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:55:39.344813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:55:55.348991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:55:59.523006 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 07:55:59.523110 0.013499 udp 10.0.2.104 55348 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 07:55:59.536930 0.000000 udp 10.0.2.104 55349 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 07:56:27.352993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:12:33.364689 3.011659 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:12:40.386246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:12:48.383308 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:13:04.386240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:13:36.394576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:14:59.522172 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 08:14:59.522345 0.011868 udp 10.0.2.104 55350 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 08:14:59.534517 0.000000 udp 10.0.2.104 55351 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 08:19:40.398957 3.001773 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:19:47.405874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:19:55.407218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:20:11.410672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:20:43.416837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:25:59.520976 0.000131 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 08:25:59.521246 0.015087 udp 10.0.2.104 55352 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 08:25:59.536632 0.000000 udp 10.0.2.104 55353 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 08:26:47.422603 3.001752 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:26:54.429737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:27:02.431293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:27:18.434225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:27:50.443001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:33:54.446870 3.000567 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:34:01.458142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:34:09.456350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:34:25.458575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:34:57.464574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:40:59.514987 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 08:40:59.515097 0.011524 udp 10.0.2.104 55354 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 08:40:59.526927 0.000000 udp 10.0.2.104 55355 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 08:41:07.479869 3.000813 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:41:14.486330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:41:22.487950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:41:38.490783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:42:10.497253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:48:16.506163 3.001390 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:48:23.513191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:48:31.514547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:48:47.518037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:49:19.523533 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:55:23.530946 3.000522 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:55:30.537197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:55:38.538608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:55:54.541936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:55:59.518794 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 08:55:59.518895 0.013462 udp 10.0.2.104 55356 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 08:55:59.532627 0.000000 udp 10.0.2.104 55357 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 08:56:26.550201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:12:33.560805 3.001648 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:12:40.569123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:12:48.569677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:13:04.572915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:13:36.578618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:14:59.518296 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 09:14:59.518396 0.011378 udp 10.0.2.104 55358 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 09:14:59.530075 0.000000 udp 10.0.2.104 55359 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 09:19:40.584959 3.001285 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:19:47.592783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:19:55.594094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:20:11.597196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:20:43.602620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:25:59.516904 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 09:25:59.517031 0.012976 udp 10.0.2.104 55360 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 09:25:59.530251 0.000000 udp 10.0.2.104 55361 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 09:26:47.609048 3.001285 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:26:54.616182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:27:02.617747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:27:18.622002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:27:50.627013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:33:54.633507 3.000820 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:34:01.640501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:34:09.642320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:34:25.645114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:34:57.651006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:40:59.521072 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 09:40:59.521239 0.011180 udp 10.0.2.104 55362 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 09:40:59.532723 0.000000 udp 10.0.2.104 55363 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 09:41:07.664882 3.002151 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:41:14.672804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:41:22.674262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:41:38.677202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:42:10.683144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:48:16.692334 3.002570 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:48:23.699619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:48:31.701030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:48:47.704226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:49:19.710230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:55:23.726286 3.032747 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:55:30.748880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:55:38.744910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:55:54.748092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:55:59.514981 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 09:55:59.515191 0.011995 udp 10.0.2.104 55364 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 09:55:59.527472 0.000000 udp 10.0.2.104 55365 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 09:56:26.753991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:12:33.766829 3.006360 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:12:40.774504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:12:48.777765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:13:04.778902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:13:36.785034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:14:59.513901 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 10:14:59.514050 0.012068 udp 10.0.2.104 55366 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 10:14:59.526433 0.000000 udp 10.0.2.104 55367 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 10:19:40.790696 3.002104 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:19:47.798259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:19:55.799597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:20:11.802845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:20:43.808910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:25:59.513241 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 10:25:59.513461 0.012870 udp 10.0.2.104 55368 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 10:25:59.526648 0.000000 udp 10.0.2.104 55369 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 10:26:47.815050 3.001779 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:26:54.822377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:27:02.823621 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:27:18.827078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:27:50.832849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:33:54.839275 3.001311 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:34:01.846345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:34:09.847963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:34:25.850802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:34:57.857104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:40:59.517134 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 10:40:59.517240 0.011765 udp 10.0.2.104 55370 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 10:40:59.529314 0.000000 udp 10.0.2.104 55371 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 10:41:07.871538 3.001125 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:41:14.878928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:41:22.880476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:41:38.883158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:42:10.895428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:48:15.896589 3.028186 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:48:22.924350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:48:30.926420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:48:46.928333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:49:18.934941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:55:22.946282 2.996160 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:55:29.948433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:55:37.950047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:55:53.958314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:55:59.521140 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 10:55:59.521290 0.014444 udp 10.0.2.104 55372 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 10:55:59.536122 0.000000 udp 10.0.2.104 55373 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 10:56:25.958941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:12:34.975219 3.001165 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:12:41.981890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:12:49.987912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:13:05.987226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:13:37.992464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:14:59.520054 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 11:14:59.520239 0.011650 udp 10.0.2.104 55374 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 11:14:59.532217 0.000000 udp 10.0.2.104 55375 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 11:19:41.998790 3.001806 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:19:49.006010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:19:57.008133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:20:13.010426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:20:45.016781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:25:59.518971 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 11:25:59.519056 0.026000 udp 10.0.2.104 55376 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 11:25:59.545379 0.000000 udp 10.0.2.104 55377 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 11:26:49.022639 3.001290 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:26:56.029786 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:27:04.031963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:27:20.034768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:27:52.040055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:33:56.046475 3.001810 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:34:03.054072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:34:11.055770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:34:27.058815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:34:59.064528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:40:59.513032 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 11:40:59.513198 0.012270 udp 10.0.2.104 55378 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 11:40:59.525748 0.000000 udp 10.0.2.104 55379 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 11:41:03.070855 3.001334 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:41:10.078250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:41:18.079561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:41:34.082455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:42:06.088565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:48:10.093639 3.002610 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:48:17.101906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:48:25.102895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:48:41.106448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:49:13.112545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:55:17.119798 3.000440 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:55:24.128347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:55:32.127307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:55:48.130817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:55:59.518144 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 11:55:59.518290 0.012202 udp 10.0.2.104 55380 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 11:55:59.530844 0.000000 udp 10.0.2.104 55381 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 11:56:20.142212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:12:33.148511 3.006540 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:12:40.155603 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:12:48.164252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:13:04.165713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:13:36.166224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:14:59.516172 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 12:14:59.516373 0.011412 udp 10.0.2.104 55382 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 12:14:59.528120 0.000000 udp 10.0.2.104 55383 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 12:19:40.172105 3.001863 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:19:47.180116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:19:55.181427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:20:11.184246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:20:43.190050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:25:59.514803 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 12:25:59.514998 0.022539 udp 10.0.2.104 55384 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 12:25:59.537874 0.000000 udp 10.0.2.104 55385 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 12:26:47.196015 3.001873 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:26:54.203194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:27:02.205067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:27:18.208519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:27:50.213880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:33:54.220128 3.001566 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:34:01.227660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:34:09.232251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:34:25.232085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:34:57.239945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:40:59.518861 0.000138 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 12:40:59.519097 0.011499 udp 10.0.2.104 55386 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 12:40:59.530899 0.000000 udp 10.0.2.104 55387 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 12:41:01.244132 3.001781 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:41:08.250961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:41:16.252805 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:41:32.256210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:42:04.261808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:48:08.270594 2.999989 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:48:15.277858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:48:23.276913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:48:39.280904 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:49:11.286069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:55:15.291900 3.001851 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:55:22.302913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:55:30.301032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:55:46.303941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:55:59.515774 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 12:55:59.515938 0.011884 udp 10.0.2.104 55388 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 12:55:59.528127 0.000000 udp 10.0.2.104 55389 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 12:56:18.310023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:12:27.330634 3.023885 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:12:34.343278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:12:42.344837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:12:58.348172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:13:30.353630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:14:59.513395 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 13:14:59.513507 0.011328 udp 10.0.2.104 55390 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 13:14:59.525162 0.000000 udp 10.0.2.104 55391 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 13:19:34.360377 3.001092 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:19:41.368584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:19:49.371600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:20:05.371601 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:20:37.377569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:25:59.511004 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 13:25:59.511103 0.011729 udp 10.0.2.104 55392 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 13:25:59.523220 0.000000 udp 10.0.2.104 55393 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 13:26:41.384681 3.003211 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:26:48.391207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:26:56.392787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:27:12.396108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:27:44.404876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:33:48.407948 3.001228 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:33:55.419157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:34:03.416787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:34:19.420116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:34:51.430181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:40:55.432132 3.001281 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:40:59.515077 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 13:40:59.515268 0.013138 udp 10.0.2.104 55394 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 13:40:59.528674 0.000000 udp 10.0.2.104 55395 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 13:41:02.439025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:41:10.440733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:41:26.443637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:41:58.449844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:48:02.455641 3.001420 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:48:09.463222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:48:17.464689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:48:33.470048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:49:05.489161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:55:09.489653 3.001667 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:55:16.497149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:55:24.498494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:55:40.501327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:55:59.520059 0.000125 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 13:55:59.520276 0.012432 udp 10.0.2.104 55396 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 13:55:59.533007 0.000000 udp 10.0.2.104 55397 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 13:56:12.507420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:12:25.519685 3.000969 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:12:32.527182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:12:40.528078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:12:56.531181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:13:28.537238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:14:59.518174 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 14:14:59.518330 0.011745 udp 10.0.2.104 55398 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 14:14:59.530428 0.000000 udp 10.0.2.104 55399 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 14:19:32.544418 3.010446 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:19:39.566812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:19:47.565182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:20:03.564942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:20:35.576496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:25:59.519089 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 14:25:59.519239 0.011576 udp 10.0.2.104 55400 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 14:25:59.531146 0.000000 udp 10.0.2.104 55401 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 14:26:39.577498 3.001378 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:26:46.584399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:26:54.588152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:27:10.589009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:27:42.595090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:33:46.606549 2.997897 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:33:53.609856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:34:01.612885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:34:17.614332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:34:49.620368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:40:53.625221 3.001229 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:40:59.511051 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 14:40:59.511133 0.011469 udp 10.0.2.104 55402 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 14:40:59.522915 0.000000 udp 10.0.2.104 55403 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 14:41:00.632703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:41:08.634225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:41:24.637238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:41:56.642952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:48:00.649039 3.001599 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:48:07.656539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:48:15.658537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:48:31.663862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:49:03.667887 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:55:07.673138 3.001401 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:55:14.680566 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:55:22.682183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:55:38.691104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:55:59.516250 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 14:55:59.516433 0.012138 udp 10.0.2.104 55404 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 14:55:59.528898 0.000000 udp 10.0.2.104 55405 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 14:56:10.691180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:12:24.704803 3.001358 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:12:31.711536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:12:39.712974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:12:55.716239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:13:27.722064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:14:59.520327 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:14:59.520482 0.014528 udp 10.0.2.104 55406 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 15:14:59.535325 0.000000 udp 10.0.2.104 55407 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 15:19:31.728116 3.001656 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:19:38.735771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:19:46.736856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:20:02.740613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:20:34.746164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:25:59.512993 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:25:59.513182 0.021347 udp 10.0.2.104 55408 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 15:25:59.534822 0.000000 udp 10.0.2.104 55409 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 15:26:38.751856 3.001987 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:26:45.759440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:26:53.760914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:27:09.766547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:27:41.770190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:33:45.778195 2.999969 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:33:52.783689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:34:00.784650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:34:16.788100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:34:48.794082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:40:52.801291 2.999801 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:40:59.517088 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:40:59.517217 0.011916 udp 10.0.2.104 55410 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 15:40:59.529474 0.000000 udp 10.0.2.104 55411 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 15:40:59.807124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:41:07.808753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:41:23.811875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:41:55.817764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:47:59.824067 3.001632 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:48:06.833788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:48:14.838076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:48:30.838285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:49:02.841799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:55:06.848925 3.006868 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:55:13.857742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:55:21.864732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:55:37.860039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:55:59.510932 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:55:59.511064 0.021411 udp 10.0.2.104 55412 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 15:55:59.532783 0.000000 udp 10.0.2.104 55413 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 15:56:09.865727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:12:25.871361 3.001595 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:12:32.879083 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:12:40.880489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:12:56.883739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:13:28.889444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:14:59.510242 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 16:14:59.510418 0.013225 udp 10.0.2.104 55414 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 16:14:59.523963 0.000000 udp 10.0.2.104 55415 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 16:19:32.895705 3.001555 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:19:39.903158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:19:47.904904 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:20:03.907789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:20:35.913545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:25:59.508962 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 16:25:59.509191 0.011683 udp 10.0.2.104 55416 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 16:25:59.521211 0.000000 udp 10.0.2.104 55417 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 16:26:39.919501 3.001822 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:26:46.928996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:26:54.929855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:27:10.931966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:27:42.938051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:33:46.943586 3.001725 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:33:53.951010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:34:01.952159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:34:17.955336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:34:49.961350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:40:53.968117 3.001227 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:40:59.513207 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 16:40:59.513410 0.023511 udp 10.0.2.104 55418 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 16:40:59.537276 0.000000 udp 10.0.2.104 55419 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 16:41:00.975038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:41:08.977199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:41:24.979141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:41:56.985853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:48:00.990867 3.003336 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:48:08.004784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:48:16.006208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:48:32.003582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:49:04.009659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:55:08.015013 3.009001 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:55:15.028180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:55:23.026188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:55:39.029894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:55:59.516864 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 16:55:59.516956 0.021763 udp 10.0.2.104 55420 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 16:55:59.539029 0.000000 udp 10.0.2.104 55421 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 16:56:11.033496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:12:27.042001 2.998796 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:12:34.046868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:12:42.048497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:12:58.050920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:13:30.056691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:14:59.516382 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 17:14:59.516578 0.011866 udp 10.0.2.104 55422 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 17:14:59.528777 0.000000 udp 10.0.2.104 55423 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 17:19:34.063637 3.001675 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:19:41.070720 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:19:49.072321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:20:05.075489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:20:37.085958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:25:59.515406 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 17:25:59.515604 0.012169 udp 10.0.2.104 55424 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 17:25:59.539866 0.000000 udp 10.0.2.104 55425 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 17:26:41.086807 3.001758 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:26:48.094760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:26:56.096360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:27:12.099211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:27:44.105279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:33:48.113111 2.999876 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:33:55.118674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:34:03.120674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:34:19.123475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:34:51.129146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:40:55.134951 3.001757 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:40:59.509041 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 17:40:59.509252 0.011583 udp 10.0.2.104 55426 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 17:40:59.521146 0.000000 udp 10.0.2.104 55427 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 17:41:02.142690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:41:10.144327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:41:26.147062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:41:58.153012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:48:02.160945 3.036917 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:48:09.186251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:48:17.178759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:48:33.181345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:49:05.187266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:55:09.197471 2.997133 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:55:16.200496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:55:24.207993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:55:40.205138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:55:59.515936 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 17:55:59.516165 0.011423 udp 10.0.2.104 55428 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 17:55:59.527915 0.000000 udp 10.0.2.104 55429 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 17:56:12.211078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:12:29.218975 3.023682 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:12:36.236240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:12:44.237606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:13:00.240564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:13:32.249674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:14:59.512336 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 18:14:59.512498 0.022756 udp 10.0.2.104 55430 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 18:14:59.535714 0.000000 udp 10.0.2.104 55431 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 18:19:36.252571 3.001687 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:19:43.260133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:19:51.262032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:20:07.264550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:20:39.270580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:25:59.511216 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 18:25:59.511394 0.022635 udp 10.0.2.104 55432 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 18:25:59.534333 0.000000 udp 10.0.2.104 55433 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 18:26:43.277783 3.004318 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:26:50.284018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:26:58.285828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:27:14.288582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:27:46.294274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:33:50.300835 3.001124 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:33:57.308260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:34:05.309391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:34:21.312492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:34:53.318531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:40:57.325458 3.004826 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:40:59.519614 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 18:40:59.519749 0.011190 udp 10.0.2.104 55434 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 18:40:59.531290 0.000000 udp 10.0.2.104 55435 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 18:41:04.331913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:41:12.333461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:41:28.336236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:42:00.343383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:48:04.348786 3.007019 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:48:11.356116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:48:19.357245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:48:35.360336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:49:07.372197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:55:11.373407 3.000518 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:55:18.379723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:55:26.381327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:55:42.384398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:55:59.515434 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 18:55:59.515610 0.012131 udp 10.0.2.104 55436 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 18:55:59.528037 0.000000 udp 10.0.2.104 55437 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 18:56:14.397462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:12:30.396122 3.001388 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:12:37.404105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:12:45.405269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:13:01.408487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:13:33.414274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:14:59.508609 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 19:14:59.508707 0.011575 udp 10.0.2.104 55438 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 19:14:59.520572 0.000000 udp 10.0.2.104 55439 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 19:19:37.420768 3.001350 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:19:44.428102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:19:52.432015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:20:08.432370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:20:40.438344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:25:59.507121 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 19:25:59.507216 0.022822 udp 10.0.2.104 55440 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 19:25:59.530294 0.000000 udp 10.0.2.104 55441 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 19:26:44.445787 3.001391 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:26:51.452079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:26:59.453234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:27:15.456401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:27:47.462140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:33:51.468944 3.001123 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:33:58.476144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:34:06.476942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:34:22.480550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:34:54.485864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:40:58.492228 3.001895 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:40:59.511054 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 19:40:59.511145 0.014247 udp 10.0.2.104 55442 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 19:40:59.525717 0.000000 udp 10.0.2.104 55443 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 19:41:05.499734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:41:13.501156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:41:29.504118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:42:01.510827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:48:05.516924 3.000575 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:48:12.523636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:48:20.537912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:48:36.527864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:49:08.534172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:55:12.549176 2.992623 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:55:19.550454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:55:27.548986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:55:43.552067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:55:59.518286 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 19:55:59.518417 0.011573 udp 10.0.2.104 55444 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 19:55:59.530301 0.000000 udp 10.0.2.104 55445 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 19:56:15.557952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:12:26.566817 3.001588 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:12:33.574159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:12:41.576928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:12:57.578428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:13:29.587875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:14:59.514118 0.000143 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 20:14:59.514357 0.021831 udp 10.0.2.104 55446 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 20:14:59.536539 0.000000 udp 10.0.2.104 55447 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 20:19:33.591298 3.001203 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:19:40.599084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:19:48.599428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:20:04.602512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:20:36.608614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:25:59.513190 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 20:25:59.513398 0.011313 udp 10.0.2.104 55448 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 20:25:59.525035 0.000000 udp 10.0.2.104 55449 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 20:26:40.615084 3.001194 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:26:47.623030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:26:55.623720 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:27:11.626528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:27:43.632833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:33:47.638517 3.001942 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:33:54.646337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:34:02.647598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:34:18.652112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:34:50.656932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:40:54.663010 3.001076 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:40:59.507215 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 20:40:59.507393 0.011320 udp 10.0.2.104 55450 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 20:40:59.519028 0.000000 udp 10.0.2.104 55451 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 20:41:01.670069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:41:09.671623 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:41:25.674338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:41:57.680340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:48:01.686745 3.001771 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:48:08.694277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:48:16.695414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:48:32.698394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:49:04.704421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:55:08.711479 3.000507 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:55:15.717894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:55:23.719382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:55:39.722287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:55:59.511037 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 20:55:59.511182 0.011262 udp 10.0.2.104 55452 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 20:55:59.522777 0.000000 udp 10.0.2.104 55453 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 20:56:11.728401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:12:26.743420 3.004391 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:12:33.750584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:12:41.752077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:12:57.754759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:13:29.760951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:14:59.510259 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 21:14:59.510425 0.022456 udp 10.0.2.104 55454 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 21:14:59.533185 0.000000 udp 10.0.2.104 55455 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 21:19:33.767547 3.001250 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:19:40.774492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:19:48.775978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:20:04.779158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:20:36.785224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:25:59.509153 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 21:25:59.509421 0.023901 udp 10.0.2.104 55456 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 21:25:59.533656 0.000000 udp 10.0.2.104 55457 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 21:26:40.791356 3.001344 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:26:47.798719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:26:55.799666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:27:11.803269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:27:43.808636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:33:47.815021 3.001407 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:33:54.822085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:34:02.823709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:34:18.826870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:34:50.833002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:40:54.839232 3.001212 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:40:59.512984 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 21:40:59.513081 0.010204 udp 10.0.2.104 55458 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 21:40:59.523713 0.000000 udp 10.0.2.104 55459 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 21:41:01.846324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:41:09.847258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:41:25.850625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:41:57.856710 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:48:01.866089 2.998178 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:48:08.870884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:48:16.877256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:48:32.874487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:49:04.880371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:55:08.892482 2.995772 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:55:15.894188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:55:23.898205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:55:39.898627 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:55:59.513115 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 21:55:59.513229 0.012715 udp 10.0.2.104 55460 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 21:55:59.526282 0.000000 udp 10.0.2.104 55461 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 21:56:11.906302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:12:26.919172 3.001681 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:12:33.936640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:12:41.938147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:12:57.941092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:13:29.947078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:14:59.506160 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:14:59.506307 0.012365 udp 10.0.2.104 55462 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 22:14:59.518963 0.000000 udp 10.0.2.104 55463 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 22:19:33.953481 3.003497 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:19:40.960722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:19:48.964650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:20:04.965207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:20:36.971332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:25:59.514853 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:25:59.515028 0.021692 udp 10.0.2.104 55464 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 22:25:59.537011 0.000000 udp 10.0.2.104 55465 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 22:26:40.976808 3.002206 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:26:47.985898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:26:55.986609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:27:11.988931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:27:43.995070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:33:48.001181 3.001545 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:33:55.010935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:34:03.009827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:34:19.012516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:34:51.018769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:40:55.024769 3.002122 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:40:59.508937 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:40:59.509038 0.012078 udp 10.0.2.104 55466 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 22:40:59.521418 0.000000 udp 10.0.2.104 55467 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 22:41:02.032680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:41:10.033635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:41:26.036572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:41:58.042377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:48:02.052830 3.015148 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:48:09.061303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:48:17.058227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:48:33.061146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:49:05.067087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:55:09.078409 3.067630 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:55:16.125396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:55:24.091445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:55:40.099531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:55:59.514944 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:55:59.515101 0.022414 udp 10.0.2.104 55468 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 22:55:59.537856 0.000000 udp 10.0.2.104 55469 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 22:56:12.101969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:12:28.106055 3.014351 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:12:35.123856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:12:43.125971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:12:59.129085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:13:31.139852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:14:59.512345 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 23:14:59.512478 0.012234 udp 10.0.2.104 55470 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 23:14:59.525014 0.000000 udp 10.0.2.104 55471 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 23:19:35.141085 3.001485 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:19:42.148950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:19:50.153167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:20:06.153752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:20:38.158948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:25:59.511178 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 23:25:59.511350 0.010259 udp 10.0.2.104 55472 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 23:25:59.521946 0.000000 udp 10.0.2.104 55473 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 23:26:42.164370 3.002216 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:26:49.172714 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:26:57.175344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:27:13.181199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:27:45.182873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:33:49.209569 3.001113 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:33:56.216554 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:34:04.218053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:34:20.220802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:34:52.226996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:40:56.233107 3.001569 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:40:59.525171 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 23:40:59.525322 0.011771 udp 10.0.2.104 55474 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 23:40:59.537369 0.000000 udp 10.0.2.104 55475 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 23:41:03.239974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:41:11.241166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:41:27.244672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:41:59.250739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:48:03.256972 3.005358 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:48:10.268563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:48:18.266051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:48:34.268773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:49:06.275259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:55:10.288821 2.993497 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:55:17.288284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:55:25.289539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:55:41.292436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:55:59.528793 0.000157 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 23:55:59.529063 0.011963 udp 10.0.2.104 55476 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/05 23:55:59.541355 0.000000 udp 10.0.2.104 55477 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/05 23:56:13.299070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:12:29.304545 3.001661 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:12:36.311706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:12:44.313304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:13:00.316584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:13:32.322688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:14:59.528507 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 00:14:59.528649 0.011555 udp 10.0.2.104 55478 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 00:14:59.540552 0.000000 udp 10.0.2.104 55479 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 00:19:36.329148 3.001120 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:19:43.336496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:19:51.338241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:20:07.340657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:20:39.346827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:25:59.527196 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 00:25:59.527320 0.011363 udp 10.0.2.104 55480 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 00:25:59.539020 0.000000 udp 10.0.2.104 55481 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 00:26:43.352767 3.001550 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:26:50.360218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:26:58.361280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:27:14.364764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:27:46.370594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:33:50.375915 3.002411 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:33:57.384345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:34:05.385371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:34:21.388405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:34:53.394398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:40:57.400747 3.001323 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:40:59.530970 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 00:40:59.531158 0.012164 udp 10.0.2.104 55482 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 00:40:59.543659 0.000000 udp 10.0.2.104 55483 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 00:41:04.408051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:41:12.409404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:41:28.412452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:42:00.418406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:48:04.424771 3.007946 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:48:11.435841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:48:19.436624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:48:35.436425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:49:07.452809 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:55:11.461898 2.998112 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:55:18.466807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:55:26.467328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:55:42.470375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:55:59.525174 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 00:55:59.525341 0.012742 udp 10.0.2.104 55484 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 00:55:59.538422 0.000000 udp 10.0.2.104 55485 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 00:56:14.476513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:12:30.483081 3.001073 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:12:37.489839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:12:45.491815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:13:01.494395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:13:33.500500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:14:59.524189 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 01:14:59.524309 0.013482 udp 10.0.2.104 55486 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 01:14:59.538130 0.000000 udp 10.0.2.104 55487 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 01:19:37.507029 3.012411 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:19:44.523950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:19:52.524994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:20:08.528280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:20:40.534575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:25:59.533195 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 01:25:59.533373 0.012002 udp 10.0.2.104 55488 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 01:25:59.545731 0.000000 udp 10.0.2.104 55489 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 01:26:44.540424 3.001467 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:26:51.547858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:26:59.549070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:27:15.552336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:27:47.558361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:33:51.564274 3.001992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:33:58.571976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:34:06.573077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:34:22.576601 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:34:54.582773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:40:58.588270 3.001840 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:40:59.526766 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 01:40:59.526863 0.011249 udp 10.0.2.104 55490 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 01:40:59.538410 0.000000 udp 10.0.2.104 55491 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 01:41:05.595953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:41:13.597075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:41:29.600203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:42:01.606162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:48:05.617252 2.999883 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:48:12.620429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:48:20.637943 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:48:36.624392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:49:08.640431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:55:12.646176 3.002071 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:55:19.653973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:55:27.654891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:55:43.659797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:55:59.537928 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 01:55:59.538123 0.022637 udp 10.0.2.104 55492 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 01:55:59.561170 0.000000 udp 10.0.2.104 55493 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 01:56:15.663893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:12:26.674574 3.000055 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:12:33.684518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:12:41.689134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:12:57.685373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:13:29.690681 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:14:59.530057 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 02:14:59.530253 0.011520 udp 10.0.2.104 55494 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 02:14:59.542097 0.000000 udp 10.0.2.104 55495 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 02:19:33.696853 3.001882 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:19:40.704491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:19:48.705860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:20:04.708792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:20:36.715188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:25:59.529050 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 02:25:59.529198 0.010649 udp 10.0.2.104 55496 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 02:25:59.540165 0.000000 udp 10.0.2.104 55497 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 02:26:40.720947 3.001680 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:26:47.728209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:26:55.730030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:27:11.733239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:27:43.739187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:33:47.745486 3.000937 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:33:54.751923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:34:02.754584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:34:18.756699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:34:50.763271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:40:54.768718 3.001655 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:40:59.523169 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 02:40:59.523313 0.024012 udp 10.0.2.104 55498 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 02:40:59.547899 0.000000 udp 10.0.2.104 55499 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 02:41:01.776274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:41:09.777579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:41:25.780793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:41:57.787156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:48:01.797085 2.997162 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:48:08.804286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:48:16.802646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:48:32.804615 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:49:04.810085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:55:08.816786 3.001496 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:55:15.823907 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:55:23.825708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:55:39.828919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:55:59.527015 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 02:55:59.527145 0.010297 udp 10.0.2.104 55500 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 02:55:59.537704 0.000000 udp 10.0.2.104 55501 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 02:56:11.834464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:12:25.847662 3.001631 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:12:32.855016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:12:40.856403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:12:56.859612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:13:28.869194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:14:59.526103 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:14:59.526242 0.021494 udp 10.0.2.104 55502 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 03:14:59.548200 0.000000 udp 10.0.2.104 55503 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 03:19:32.872862 3.001046 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:19:39.880445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:19:47.880427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:20:03.883902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:20:35.889513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:25:59.524929 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:25:59.525104 0.012743 udp 10.0.2.104 55504 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 03:25:59.538140 0.000000 udp 10.0.2.104 55505 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 03:26:39.895189 3.002104 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:26:46.903177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:26:54.904409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:27:10.907567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:27:42.913331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:33:46.919640 3.001591 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:33:53.927081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:34:01.927841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:34:17.931709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:34:49.938182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:40:53.943642 3.001353 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:40:59.528985 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:40:59.529179 0.010314 udp 10.0.2.104 55506 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 03:40:59.539771 0.000000 udp 10.0.2.104 55507 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 03:41:00.950685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:41:08.952297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:41:24.955493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:41:56.961140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:48:00.970071 3.072541 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:48:08.035728 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:48:16.001502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:48:31.994008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:49:03.995640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:55:08.001473 3.001596 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:55:15.008565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:55:23.010166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:55:39.013331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:55:59.523098 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:55:59.523220 0.010418 udp 10.0.2.104 55508 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 03:55:59.533977 0.000000 udp 10.0.2.104 55509 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 03:56:11.019715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:12:26.034145 3.001479 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:12:33.040793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:12:41.042158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:12:57.045972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:13:29.052179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:14:59.521652 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 04:14:59.521843 0.010665 udp 10.0.2.104 55510 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 04:14:59.532822 0.000000 udp 10.0.2.104 55511 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 04:19:33.058061 3.001376 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:19:40.065152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:19:48.067095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:20:04.069915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:20:36.075832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:25:59.531029 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 04:25:59.531185 0.011392 udp 10.0.2.104 55512 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 04:25:59.542807 0.000000 udp 10.0.2.104 55513 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 04:26:40.081763 3.002356 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:26:47.089371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:26:55.091008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:27:11.093307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:27:43.099667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:33:47.105472 3.001834 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:33:54.113014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:34:02.114891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:34:18.117156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:34:50.124002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:40:54.129951 3.001234 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:40:59.524964 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 04:40:59.525151 0.010188 udp 10.0.2.104 55514 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 04:40:59.535871 0.000000 udp 10.0.2.104 55515 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 04:41:01.137016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:41:09.138695 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:41:25.142226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:41:57.147137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:48:01.168811 2.988994 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:48:08.160790 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:48:16.162622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:48:32.165756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:49:04.172308 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:55:08.178201 3.001053 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:55:15.184899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:55:23.186913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:55:39.190343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:55:59.528815 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 04:55:59.528923 0.011383 udp 10.0.2.104 55516 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 04:55:59.540603 0.000000 udp 10.0.2.104 55517 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 04:56:11.198609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:12:27.201047 3.012183 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:12:34.218736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:12:42.220464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:12:58.223538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:13:30.229744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:14:59.528043 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 05:14:59.528227 0.011331 udp 10.0.2.104 55518 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 05:14:59.566666 0.000000 udp 10.0.2.104 55519 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 05:19:34.235653 3.001554 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:19:41.243009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:19:49.244657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:20:05.248136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:20:37.253570 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:25:59.527057 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 05:25:59.527210 0.011899 udp 10.0.2.104 55520 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 05:25:59.539411 0.000000 udp 10.0.2.104 55521 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 05:26:41.260387 3.000773 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:26:48.267177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:26:56.268492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:27:12.271314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:27:44.276958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:33:48.284295 3.000825 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:33:55.290759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:34:03.292760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:34:19.295392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:34:51.301545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:40:55.306930 3.002265 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:40:59.530825 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 05:40:59.530991 0.010798 udp 10.0.2.104 55522 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 05:40:59.542105 0.000000 udp 10.0.2.104 55523 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 05:41:02.314777 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:41:10.316337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:41:26.321230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:41:58.325548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:48:02.330923 3.002256 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:48:09.338822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:48:17.340411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:48:33.346525 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:49:05.349170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:55:09.355602 3.001446 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:55:16.362875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:55:24.365209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:55:40.367258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:55:59.524973 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 05:55:59.525147 0.010182 udp 10.0.2.104 55524 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 05:55:59.535761 0.000000 udp 10.0.2.104 55525 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 05:56:12.374151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:12:28.379294 3.016599 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:12:35.396637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:12:43.398990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:12:59.401134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:13:31.412630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:14:59.524413 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 06:14:59.524527 0.010098 udp 10.0.2.104 55526 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 06:14:59.534934 0.000000 udp 10.0.2.104 55527 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 06:19:35.414211 3.000868 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:19:42.425160 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:19:50.422324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:20:06.425100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:20:38.432140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:25:59.523184 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 06:25:59.523398 0.011585 udp 10.0.2.104 55528 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 06:25:59.546066 0.000000 udp 10.0.2.104 55529 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 06:26:42.437568 3.001196 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:26:49.446285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:26:57.446235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:27:13.450306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:27:45.455083 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:33:49.461604 3.001271 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:33:56.469306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:34:04.470171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:34:20.473230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:34:52.479333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:40:56.486437 3.000486 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:40:59.526998 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 06:40:59.527148 0.011900 udp 10.0.2.104 55530 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 06:40:59.539378 0.000000 udp 10.0.2.104 55531 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 06:41:03.492422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:41:11.494101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:41:27.497147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:41:59.503064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:48:03.520884 3.016215 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:48:10.548294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:48:18.543129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:48:34.541036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:49:06.547170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:55:10.553978 3.001918 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:55:17.560550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:55:25.562718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:55:41.565062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:55:59.520902 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 06:55:59.520997 0.022107 udp 10.0.2.104 55532 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 06:55:59.543447 0.000000 udp 10.0.2.104 55533 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 06:56:13.571322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:12:29.577149 3.001436 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:12:36.584560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:12:44.586079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:13:00.588879 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:13:32.595256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:14:59.530987 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 07:14:59.531193 0.011458 udp 10.0.2.104 55534 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 07:14:59.542970 0.000000 udp 10.0.2.104 55535 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 07:19:36.601255 3.001442 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:19:43.609366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:19:51.610331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:20:07.613064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:20:39.618912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:25:59.531020 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 07:25:59.531252 0.012334 udp 10.0.2.104 55536 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 07:25:59.543915 0.000000 udp 10.0.2.104 55537 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 07:26:43.624989 3.003239 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:26:50.632364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:26:58.637386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:27:14.636750 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:27:46.643053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:33:50.648937 3.001960 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:33:57.656368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:34:05.658421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:34:21.660686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:34:53.666897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:40:57.672712 3.001762 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:40:59.522916 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 07:40:59.523095 0.011807 udp 10.0.2.104 55538 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 07:40:59.535261 0.000000 udp 10.0.2.104 55539 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 07:41:04.680462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:41:12.681658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:41:28.684868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:42:00.690957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:48:04.704257 3.024896 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:48:11.724659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:48:19.721987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:48:35.718685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:49:07.724674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:55:11.731017 3.002684 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:55:18.741905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:55:26.739933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:55:42.759870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:55:59.528662 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 07:55:59.528772 0.010729 udp 10.0.2.104 55540 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 07:55:59.539836 0.000000 udp 10.0.2.104 55541 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 07:56:14.758859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:12:25.771132 2.997829 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:12:32.777801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:12:40.776317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:12:56.779328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:13:28.785499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:14:59.533869 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 08:14:59.534031 0.010329 udp 10.0.2.104 55542 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 08:14:59.544668 0.000000 udp 10.0.2.104 55543 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 08:19:32.794085 3.000266 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:19:39.798626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:19:47.800121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:20:03.805644 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:20:35.809520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:25:59.525043 0.000129 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 08:25:59.525268 0.015951 udp 10.0.2.104 55544 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 08:25:59.541519 0.000000 udp 10.0.2.104 55545 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 08:26:39.814807 3.002598 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:26:46.822651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:26:54.824311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:27:10.827174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:27:42.833397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:33:46.839351 3.001671 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:33:53.846948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:34:01.848282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:34:17.851171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:34:49.857363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:40:53.863954 3.000963 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:40:59.529021 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 08:40:59.529217 0.011209 udp 10.0.2.104 55546 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 08:40:59.540757 0.000000 udp 10.0.2.104 55547 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 08:41:00.870758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:41:08.872344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:41:24.875256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:41:56.881116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:48:00.887720 3.000604 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:48:07.898924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:48:15.900340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:48:31.900092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:49:03.905147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:55:07.910354 3.002276 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:55:14.918673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:55:22.919862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:55:38.928051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:55:59.523131 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 08:55:59.523315 0.010891 udp 10.0.2.104 55548 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 08:55:59.534495 0.000000 udp 10.0.2.104 55549 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 08:56:10.929192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:12:24.942704 3.016152 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:12:31.964036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:12:39.961332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:12:55.974433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:13:27.980518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:14:59.524660 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 09:14:59.524804 0.022463 udp 10.0.2.104 55550 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 09:14:59.547794 0.000000 udp 10.0.2.104 55551 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 09:19:31.986050 3.002388 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:19:38.994534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:19:46.995700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:20:02.998656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:20:35.004261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:25:59.520717 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 09:25:59.520873 0.012457 udp 10.0.2.104 55552 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 09:25:59.533604 0.000000 udp 10.0.2.104 55553 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 09:26:39.009660 3.002273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:26:46.022571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:26:54.018705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:27:10.022132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:27:42.028216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:33:46.033988 3.002279 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:33:53.042157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:34:01.043010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:34:17.046190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:34:49.052319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:40:53.059841 3.000353 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:40:59.524805 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 09:40:59.524938 0.010166 udp 10.0.2.104 55554 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 09:40:59.535388 0.000000 udp 10.0.2.104 55555 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 09:41:00.065672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:41:08.066938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:41:24.070621 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:41:56.076301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:48:00.083243 3.000528 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:48:07.089454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:48:15.091056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:48:31.094074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:49:11.408068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:55:10.344592 2.967886 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:55:17.257943 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:55:25.155180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:55:40.944202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:56:02.041985 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 09:56:02.042098 0.013095 udp 10.0.2.104 55556 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 09:56:02.055627 0.000000 udp 10.0.2.104 55557 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 09:56:12.502810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:12:25.148393 3.001766 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:12:32.156044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:12:40.157443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:12:56.160510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:13:28.166448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:14:59.528331 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 10:14:59.528457 0.012097 udp 10.0.2.104 55558 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 10:14:59.541027 0.000000 udp 10.0.2.104 55559 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 10:19:32.171663 3.002105 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:19:39.180246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:19:47.181076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:20:03.184417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:20:35.190896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:25:59.526849 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 10:25:59.526999 0.021660 udp 10.0.2.104 55560 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 10:25:59.548930 0.000000 udp 10.0.2.104 55561 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 10:26:39.197348 3.001713 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:26:46.203867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:26:54.205376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:27:10.208685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:27:42.214559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:33:46.220897 3.001336 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:33:53.228259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:34:01.229327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:34:17.232857 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:34:49.239004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:40:53.244834 3.001640 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:40:59.520983 0.000195 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 10:40:59.521284 0.011391 udp 10.0.2.104 55562 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 10:40:59.533105 0.000000 udp 10.0.2.104 55563 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 10:41:00.252104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:41:08.253299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:41:24.256465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:41:56.262564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:48:00.269737 3.024518 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:48:07.286016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:48:15.287415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:48:31.290465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:49:03.296291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:55:07.302219 3.002037 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:55:14.309999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:55:22.311249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:55:38.314072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:55:59.524883 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 10:55:59.524991 0.013390 udp 10.0.2.104 55564 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 10:55:59.538794 0.000000 udp 10.0.2.104 55565 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 10:56:10.320804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:12:26.325847 3.001517 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:12:33.333209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:12:41.345268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:12:57.348169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:13:29.354470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:14:59.524007 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 11:14:59.524118 0.011249 udp 10.0.2.104 55566 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 11:14:59.535928 0.000000 udp 10.0.2.104 55567 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 11:19:33.361725 3.000175 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:19:40.367933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:19:48.369017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:20:04.372377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:20:36.378680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:25:59.522925 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 11:25:59.523141 0.011384 udp 10.0.2.104 55568 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 11:25:59.535013 0.000000 udp 10.0.2.104 55569 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 11:26:40.384920 3.001048 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:26:47.391812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:26:55.393266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:27:11.396183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:27:43.402396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:33:47.409310 3.000444 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:33:54.415927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:34:02.417309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:34:18.420496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:34:50.426363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:40:54.431874 3.002362 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:40:59.526947 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 11:40:59.527167 0.024154 udp 10.0.2.104 55570 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 11:40:59.551792 0.000000 udp 10.0.2.104 55571 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 11:41:01.439808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:41:09.441259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:41:25.444337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:41:57.450070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:48:01.457135 3.000906 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:48:08.463856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:48:16.465086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:48:32.468451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:49:04.474280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:55:08.481363 3.000592 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:55:15.488115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:55:23.489205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:55:39.492273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:55:59.521103 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 11:55:59.521272 0.022367 udp 10.0.2.104 55572 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 11:55:59.544067 0.000000 udp 10.0.2.104 55573 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 11:56:11.498399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:12:27.503382 3.014544 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:12:34.521335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:12:42.522978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:12:58.526138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:13:30.532293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:14:59.520325 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 12:14:59.520430 0.012111 udp 10.0.2.104 55574 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 12:14:59.532991 0.000000 udp 10.0.2.104 55575 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 12:19:34.537839 3.001875 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:19:41.545359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:19:49.556992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:20:05.560222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:20:37.566057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:25:59.518899 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 12:25:59.519084 0.011402 udp 10.0.2.104 55576 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 12:25:59.530873 0.000000 udp 10.0.2.104 55577 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 12:26:41.572079 3.001952 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:26:48.579657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:26:56.581154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:27:12.584350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:27:44.589822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:33:48.595461 3.002865 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:33:55.603388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:34:03.604662 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:34:19.608227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:34:51.614413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:40:55.619596 3.002158 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:40:59.523107 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 12:40:59.523268 0.011996 udp 10.0.2.104 55578 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 12:40:59.535856 0.000000 udp 10.0.2.104 55579 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 12:41:02.627540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:41:10.628743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:41:26.631821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:41:58.638167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:48:02.644494 3.000965 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:48:09.651348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:48:17.652752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:48:33.656070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:49:05.661872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:55:09.668930 3.000574 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:55:16.675140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:55:24.676824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:55:40.679794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:55:59.527043 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 12:55:59.527241 0.011337 udp 10.0.2.104 55580 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 12:55:59.538951 0.000000 udp 10.0.2.104 55581 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 12:56:12.685859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:12:28.691233 3.001949 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:12:35.699188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:12:43.700759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:12:59.703645 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:13:31.709919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:14:59.526210 0.000137 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 13:14:59.526447 0.021721 udp 10.0.2.104 55582 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 13:14:59.548542 0.000000 udp 10.0.2.104 55583 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 13:19:35.716018 3.001273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:19:42.723748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:19:50.724634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:20:06.727734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:20:38.734063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:25:59.524976 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 13:25:59.525133 0.011577 udp 10.0.2.104 55584 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 13:25:59.537154 0.000000 udp 10.0.2.104 55585 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 13:26:42.739891 3.001976 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:26:49.747020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:26:57.748876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:27:13.751917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:27:45.757792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:33:49.763294 3.002688 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:33:56.771476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:34:04.773245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:34:20.775382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:34:52.781735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:40:56.787660 3.001496 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:40:59.519080 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 13:40:59.519278 0.011413 udp 10.0.2.104 55586 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 13:40:59.531118 0.000000 udp 10.0.2.104 55587 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 13:41:03.795162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:41:11.796700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:41:27.799270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:41:59.805440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:48:03.812137 3.000713 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:48:10.818798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:48:18.820552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:48:34.823359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:49:06.829530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:55:10.835575 3.001550 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:55:17.842592 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:55:25.843947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:55:41.847414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:55:59.523170 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 13:55:59.523263 0.011256 udp 10.0.2.104 55588 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 13:55:59.534953 0.000000 udp 10.0.2.104 55589 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 13:56:13.853166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:12:30.860477 3.021838 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:12:37.888577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:12:45.889800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:13:01.892973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:13:33.898910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:14:59.522125 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 14:14:59.522290 0.011387 udp 10.0.2.104 55590 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 14:14:59.534082 0.000000 udp 10.0.2.104 55591 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 14:19:37.904017 3.002627 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:19:44.921850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:19:52.923789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:20:08.926703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:20:40.932788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:25:59.521052 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 14:25:59.521279 0.011543 udp 10.0.2.104 55592 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 14:25:59.533243 0.000000 udp 10.0.2.104 55593 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 14:26:44.939783 3.000895 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:26:51.946538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:26:59.947753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:27:15.950835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:27:47.956849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:33:51.962764 3.001282 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:33:58.970214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:34:06.971594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:34:22.975461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:34:54.980664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:40:58.987339 3.001324 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:40:59.524872 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 14:40:59.524969 0.011716 udp 10.0.2.104 55594 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 14:40:59.537163 0.000000 udp 10.0.2.104 55595 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 14:41:05.993804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:41:13.995765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:41:29.998228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:42:02.004637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:48:06.010869 3.001262 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:48:13.017491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:48:21.019785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:48:37.021971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:49:09.038640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:55:13.044925 3.001422 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:55:20.051937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:55:28.053349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:55:44.056502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:55:59.518886 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 14:55:59.519012 0.011669 udp 10.0.2.104 55596 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 14:55:59.531075 0.000000 udp 10.0.2.104 55597 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 14:56:16.062620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:12:27.071712 3.019009 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:12:34.088658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:12:42.090256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:12:58.093254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:13:30.099659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:14:59.518166 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 15:14:59.518290 0.022698 udp 10.0.2.104 55598 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 15:14:59.541375 0.000000 udp 10.0.2.104 55599 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 15:19:34.105076 3.002103 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:19:41.112457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:19:49.114106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:20:05.117251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:20:37.122693 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:25:59.517065 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 15:25:59.517301 0.022680 udp 10.0.2.104 55600 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 15:25:59.540398 0.000000 udp 10.0.2.104 55601 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 15:26:41.128942 3.001969 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:26:48.136709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:26:56.138492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:27:12.141091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:27:44.147301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:33:48.153434 3.001603 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:33:55.161017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:34:03.162106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:34:19.165113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:34:51.171685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:40:55.176918 3.002075 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:40:59.521007 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 15:40:59.521173 0.017237 udp 10.0.2.104 55602 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 15:40:59.538820 0.000000 udp 10.0.2.104 55603 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 15:41:02.185294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:41:10.186809 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:41:26.189618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:41:58.196462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:48:02.201645 3.001186 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:48:09.208799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:48:17.210095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:48:33.213167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:49:05.219288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:55:09.226097 3.000786 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:55:16.232469 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:55:24.233997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:55:40.237205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:55:59.525307 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 15:55:59.525422 0.012032 udp 10.0.2.104 55604 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 15:55:59.537820 0.000000 udp 10.0.2.104 55605 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 15:56:12.243276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:12:26.256517 3.001523 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:12:33.263752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:12:41.265041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:12:57.268305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:13:29.274310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:14:59.524110 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 16:14:59.524208 0.011731 udp 10.0.2.104 55606 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 16:14:59.536349 0.000000 udp 10.0.2.104 55607 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 16:19:33.279978 3.001992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:19:40.287735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:19:48.289145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:20:04.292232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:20:36.298474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:25:59.523109 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 16:25:59.523294 0.012052 udp 10.0.2.104 55608 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 16:25:59.535936 0.000000 udp 10.0.2.104 55609 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 16:26:40.304263 3.001825 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:26:47.311512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:26:55.312934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:27:11.316027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:27:43.322287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:33:47.340367 2.999583 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:33:54.346354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:34:02.347148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:34:18.350374 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:34:50.356294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:40:54.362317 3.001452 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:40:59.517021 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 16:40:59.517226 0.011853 udp 10.0.2.104 55610 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 16:40:59.529482 0.000000 udp 10.0.2.104 55611 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 16:41:01.369839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:41:09.371143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:41:25.374278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:41:57.380087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:48:01.386663 3.000850 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:48:08.393498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:48:16.394861 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:48:32.398377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:49:04.404125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:55:08.409657 3.002214 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:55:15.417302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:55:23.418986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:55:39.422197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:55:59.521200 0.000103 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 16:55:59.521393 0.011613 udp 10.0.2.104 55612 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 16:55:59.533387 0.000000 udp 10.0.2.104 55613 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 16:56:11.428297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:12:26.442897 3.011302 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:12:33.460236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:12:41.461509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:12:57.464238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:13:29.470513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:14:59.519956 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 17:14:59.520112 0.011293 udp 10.0.2.104 55614 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 17:14:59.531834 0.000000 udp 10.0.2.104 55615 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 17:19:33.476367 3.001620 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:19:40.483714 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:19:48.485285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:20:04.488384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:20:36.494520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:25:59.519150 0.000126 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 17:25:59.519367 0.011365 udp 10.0.2.104 55616 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 17:25:59.531155 0.000000 udp 10.0.2.104 55617 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 17:26:40.501915 3.014696 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:26:47.517983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:26:55.519270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:27:11.522493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:27:43.528467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:33:47.536228 3.000460 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:33:54.542196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:34:02.543215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:34:18.546529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:34:50.552740 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:40:54.558448 3.001791 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:40:59.523057 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 17:40:59.523247 0.022197 udp 10.0.2.104 55618 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 17:40:59.545864 0.000000 udp 10.0.2.104 55619 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 17:41:01.565979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:41:09.567189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:41:25.570228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:41:57.576360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:48:01.582548 3.001507 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:48:08.590186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:48:16.591194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:48:32.594480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:49:04.600519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:55:08.606497 3.001559 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:55:15.613866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:55:23.615306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:55:39.618279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:55:59.516874 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 17:55:59.517019 0.011616 udp 10.0.2.104 55620 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 17:55:59.528987 0.000000 udp 10.0.2.104 55621 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 17:56:11.624354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:12:26.639885 3.000394 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:12:33.646385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:12:41.647712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:12:57.650769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:13:29.656575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:14:59.516299 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 18:14:59.516403 0.011370 udp 10.0.2.104 55622 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 18:14:59.528147 0.000000 udp 10.0.2.104 55623 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 18:19:33.663269 3.001262 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:19:40.670319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:19:48.672084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:20:04.674726 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:20:36.680778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:25:59.514932 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 18:25:59.515119 0.011495 udp 10.0.2.104 55624 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 18:25:59.527030 0.000000 udp 10.0.2.104 55625 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 18:26:40.686821 3.001553 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:26:47.694244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:26:55.696096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:27:11.698651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:27:43.704841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:33:47.710982 3.001883 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:33:54.718455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:34:02.719704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:34:18.722713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:34:50.728691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:40:54.735136 3.001029 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:40:59.519078 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 18:40:59.519193 0.012053 udp 10.0.2.104 55626 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 18:40:59.531627 0.000000 udp 10.0.2.104 55627 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 18:41:01.744500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:41:09.743770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:41:25.746593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:41:57.752477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:48:01.758876 3.001589 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:48:08.779688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:48:16.777389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:48:32.780546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:49:04.786576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:55:08.793655 3.000662 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:55:15.799842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:55:23.801363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:55:39.804551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:55:59.522888 0.093814 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 18:55:59.616867 0.011804 udp 10.0.2.104 55628 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 18:55:59.629104 0.000000 udp 10.0.2.104 55629 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 18:56:11.810560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:12:27.816454 3.001734 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:12:34.823579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:12:42.825431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:12:58.828282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:13:30.834233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:14:59.522374 0.000144 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 19:14:59.522624 0.013517 udp 10.0.2.104 55630 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 19:14:59.536589 0.000000 udp 10.0.2.104 55631 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 19:19:34.840510 3.001474 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:19:41.847853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:19:49.849292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:20:05.852032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:20:37.858239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:25:59.521113 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 19:25:59.521233 0.011213 udp 10.0.2.104 55632 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 19:25:59.532882 0.000000 udp 10.0.2.104 55633 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 19:26:41.864556 3.001707 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:26:48.871770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:26:56.873392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:27:12.876949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:27:44.882375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:33:48.888378 3.001878 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:33:55.896177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:34:03.897328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:34:19.899712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:34:51.906606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:40:55.913704 3.000184 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:40:59.514732 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 19:40:59.514821 0.011758 udp 10.0.2.104 55634 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 19:40:59.526991 0.000000 udp 10.0.2.104 55635 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 19:41:02.919870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:41:10.921180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:41:26.924153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:41:58.930190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:48:02.936231 3.014492 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:48:09.953814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:48:17.955308 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:48:33.958208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:49:05.963626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:55:09.970626 3.001408 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:55:16.977825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:55:24.979100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:55:40.982091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:55:59.518800 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 19:55:59.518907 0.011841 udp 10.0.2.104 55636 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 19:55:59.531135 0.000000 udp 10.0.2.104 55637 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 19:56:12.988622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:12:29.995479 3.001107 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:12:37.003010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:12:45.004116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:13:01.007571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:13:33.013649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:14:59.518200 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 20:14:59.518376 0.011494 udp 10.0.2.104 55638 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 20:14:59.530237 0.000000 udp 10.0.2.104 55639 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 20:19:37.019584 3.011416 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:19:44.036783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:19:52.038785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:20:08.041570 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:20:40.047342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:25:59.516852 0.000111 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 20:25:59.517062 0.011948 udp 10.0.2.104 55640 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 20:25:59.529448 0.000000 udp 10.0.2.104 55641 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 20:26:44.053820 3.001482 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:26:51.060736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:26:59.062266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:27:15.065503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:27:47.071403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:33:51.077469 3.001633 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:33:58.085085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:34:06.086812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:34:22.089461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:34:54.096275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:40:58.100827 3.002174 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:40:59.521022 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 20:40:59.521130 0.013314 udp 10.0.2.104 55642 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 20:40:59.534837 0.000000 udp 10.0.2.104 55643 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 20:41:05.108428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:41:13.110254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:41:29.113387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:42:01.119323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:48:05.125632 3.001320 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:48:12.132733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:48:20.134455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:48:36.137251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:49:08.143442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:55:12.149619 3.001080 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:55:19.156710 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:55:27.158346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:55:43.160847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:55:59.515123 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 20:55:59.515205 0.011290 udp 10.0.2.104 55644 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 20:55:59.526852 0.000000 udp 10.0.2.104 55645 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 20:56:15.167342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:12:27.176982 3.002372 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:12:34.185026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:12:42.186998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:12:58.190211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:13:30.195668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:14:59.513978 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 21:14:59.514135 0.021570 udp 10.0.2.104 55646 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 21:14:59.536100 0.000000 udp 10.0.2.104 55647 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 21:19:34.202079 3.000965 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:19:41.208841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:19:49.210494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:20:05.213618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:20:37.219617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:25:59.513553 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 21:25:59.513716 0.011814 udp 10.0.2.104 55648 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 21:25:59.525924 0.000000 udp 10.0.2.104 55649 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 21:26:41.226003 3.000856 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:26:48.233011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:26:56.234612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:27:12.237451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:27:44.243667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:33:48.249342 3.001838 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:33:55.256712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:34:03.258435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:34:19.261341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:34:51.267628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:40:55.273311 3.001747 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:40:59.517037 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 21:40:59.517210 0.011991 udp 10.0.2.104 55650 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 21:40:59.529635 0.000000 udp 10.0.2.104 55651 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 21:41:02.280927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:41:10.282261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:41:26.285459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:41:58.291289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:48:02.298951 3.000020 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:48:09.304694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:48:17.306151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:48:33.309146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:49:05.315451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:55:09.321189 3.001924 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:55:16.328557 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:55:24.330328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:55:40.333435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:55:59.520987 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 21:55:59.521148 0.011975 udp 10.0.2.104 55652 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 21:55:59.533496 0.000000 udp 10.0.2.104 55653 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 21:56:12.339093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:12:26.353189 3.012534 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:12:33.370005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:12:41.371304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:12:57.374607 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:13:29.390486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:14:59.520108 0.000125 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 22:14:59.520331 0.012770 udp 10.0.2.104 55654 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 22:14:59.533475 0.000000 udp 10.0.2.104 55655 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 22:19:33.397389 3.000817 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:19:40.404157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:19:48.405243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:20:04.408338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:20:36.414386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:25:59.518880 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 22:25:59.519032 0.011755 udp 10.0.2.104 55656 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 22:25:59.531177 0.000000 udp 10.0.2.104 55657 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 22:26:40.419929 3.001954 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:26:47.428159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:26:55.429277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:27:11.432570 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:27:43.438289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:33:47.444140 3.002124 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:33:54.451955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:34:02.453362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:34:18.456550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:34:50.462537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:40:54.468254 3.001897 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:40:59.513028 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 22:40:59.513250 0.012445 udp 10.0.2.104 55658 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 22:40:59.526098 0.000000 udp 10.0.2.104 55659 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 22:41:01.475557 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:41:09.477168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:41:25.480438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:41:57.486305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:48:01.492096 3.001894 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:48:08.499933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:48:16.501267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:48:32.504027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:49:04.510225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:55:08.515994 3.001624 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:55:15.524252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:55:23.525051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:55:39.528105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:55:59.517155 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 22:55:59.517286 0.011881 udp 10.0.2.104 55660 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 22:55:59.529578 0.000000 udp 10.0.2.104 55661 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 22:56:11.533546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:12:26.549832 3.000605 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:12:33.556065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:12:41.557438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:12:57.560658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:13:29.566599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:14:59.516311 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 23:14:59.516408 0.011211 udp 10.0.2.104 55662 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 23:14:59.528016 0.000000 udp 10.0.2.104 55663 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 23:19:33.572613 3.001531 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:19:40.579942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:19:48.581578 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:20:04.584424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:20:36.590464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:25:59.514919 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 23:25:59.515072 0.025483 udp 10.0.2.104 55664 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 23:25:59.540922 0.000000 udp 10.0.2.104 55665 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 23:26:40.596820 3.001621 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:26:47.604109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:26:55.605477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:27:11.608524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:27:43.614550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:33:47.620863 3.001740 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:33:54.628275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:34:02.629669 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:34:18.632624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:34:50.638419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:40:54.644643 3.001571 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:40:59.518939 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 23:40:59.519136 0.011678 udp 10.0.2.104 55666 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 23:40:59.531167 0.000000 udp 10.0.2.104 55667 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 23:41:01.652123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:41:09.653512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:41:25.656478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:41:57.662514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:48:01.669755 3.013161 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:48:08.686096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:48:16.687345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:48:32.690453 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:49:04.696511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:55:08.703024 3.001330 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:55:15.710196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:55:23.711436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:55:39.714253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:55:59.513239 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 23:55:59.513432 0.012148 udp 10.0.2.104 55668 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/06 23:55:59.526001 0.000000 udp 10.0.2.104 55669 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/06 23:56:11.720492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:12:26.734786 3.255340 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:12:33.957573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:12:41.895174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:12:57.766931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:13:29.772835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:14:59.511845 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 00:14:59.511961 0.014326 udp 10.0.2.104 55670 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 00:14:59.526797 0.000000 udp 10.0.2.104 55671 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 00:19:33.780137 3.001124 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:19:40.786228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:19:48.788161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:20:04.790656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:20:36.796823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:25:59.521162 0.000179 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 00:25:59.521449 0.022845 udp 10.0.2.104 55672 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 00:25:59.544695 0.000000 udp 10.0.2.104 55673 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 00:26:40.813396 3.001090 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:26:47.821398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:26:55.821516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:27:11.824784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:27:43.830528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:33:47.836501 3.002237 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:33:54.843997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:34:02.845495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:34:18.848657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:34:50.854862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:40:54.862231 2.999887 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:40:59.514948 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 00:40:59.515118 0.022595 udp 10.0.2.104 55674 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 00:40:59.538082 0.000000 udp 10.0.2.104 55675 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 00:41:01.868127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:41:09.869670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:41:25.872377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:41:57.878638 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:48:01.885762 3.000838 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:48:08.892121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:48:16.893505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:48:32.896708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:49:04.902606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:55:09.157308 2.983559 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:55:16.146399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:55:24.147610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:55:40.151133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:55:59.749388 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 00:55:59.749505 0.012229 udp 10.0.2.104 55676 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 00:55:59.762151 0.000000 udp 10.0.2.104 55677 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 00:56:12.156953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:12:28.162816 3.001531 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:12:35.170738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:12:43.171732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:12:59.174871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:13:31.180885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:14:59.748249 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 01:14:59.748353 0.022938 udp 10.0.2.104 55678 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 01:14:59.771689 0.000000 udp 10.0.2.104 55679 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 01:19:35.186914 3.001601 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:19:42.194360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:19:50.196337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:20:06.209096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:20:38.215076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:25:59.747618 0.000129 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 01:25:59.747836 0.022758 udp 10.0.2.104 55680 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 01:25:59.770953 0.000000 udp 10.0.2.104 55681 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 01:26:42.221112 3.001329 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:26:49.229139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:26:57.229942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:27:13.232780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:27:45.238860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:33:49.245530 3.000811 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:33:56.252155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:34:04.254018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:34:20.256586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:34:52.262865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:40:56.281598 2.998844 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:40:59.741442 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 01:40:59.741646 0.012052 udp 10.0.2.104 55682 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 01:40:59.754137 0.000000 udp 10.0.2.104 55683 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 01:41:03.286613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:41:11.288181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:41:27.290803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:41:59.296984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:48:03.303940 3.024066 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:48:10.320431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:48:18.321910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:48:34.324740 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:49:06.330692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:55:10.336718 3.001533 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:55:17.344222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:55:25.346093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:55:41.348497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:55:59.745339 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 01:55:59.745480 0.010211 udp 10.0.2.104 55684 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 01:55:59.756116 0.000000 udp 10.0.2.104 55685 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 01:56:13.354855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:12:29.360145 3.001926 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:12:36.367548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:12:44.369503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:13:00.372659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:13:32.378482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:14:59.743915 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 02:14:59.744074 0.011872 udp 10.0.2.104 55686 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 02:14:59.756321 0.000000 udp 10.0.2.104 55687 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 02:19:36.393813 3.002440 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:19:43.402245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:19:51.404192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:20:07.406612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:20:39.413368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:25:59.743427 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 02:25:59.743588 0.021518 udp 10.0.2.104 55688 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 02:25:59.765499 0.000000 udp 10.0.2.104 55689 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 02:26:43.420320 3.000243 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:26:50.426302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:26:58.427352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:27:14.430692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:27:46.436737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:33:50.442778 3.001626 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:33:57.450111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:34:05.451837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:34:21.454357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:34:53.460823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:40:57.466372 3.001546 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:40:59.747273 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 02:40:59.747447 0.013360 udp 10.0.2.104 55690 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 02:40:59.761231 0.000000 udp 10.0.2.104 55691 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 02:41:04.473759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:41:12.475279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:41:28.478300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:42:00.484699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:48:04.490800 3.001428 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:48:11.498235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:48:19.499347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:48:35.502392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:49:07.518597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:55:11.524949 3.001149 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:55:18.531791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:55:26.533549 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:55:42.536526 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:55:59.741378 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 02:55:59.741526 0.012770 udp 10.0.2.104 55692 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 02:55:59.754688 0.000000 udp 10.0.2.104 55693 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 02:56:14.542452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:12:25.552227 3.023097 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:12:32.568467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:12:40.570019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:12:56.573135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:13:28.579070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:14:59.740425 0.000181 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 03:14:59.740717 0.011348 udp 10.0.2.104 55694 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 03:14:59.752460 0.000000 udp 10.0.2.104 55695 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 03:19:32.585329 3.001912 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:19:39.592508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:19:47.594224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:20:03.597205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:20:35.602965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:25:59.749307 0.000140 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 03:25:59.749583 0.011980 udp 10.0.2.104 55696 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 03:25:59.761987 0.000000 udp 10.0.2.104 55697 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 03:26:39.609161 3.001844 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:26:46.616591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:26:54.618539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:27:10.621275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:27:42.627275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:33:46.633525 3.002216 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:33:53.640745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:34:01.642519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:34:17.645341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:34:49.651035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:40:53.657626 3.000893 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:40:59.743065 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 03:40:59.743228 0.011293 udp 10.0.2.104 55698 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 03:40:59.754921 0.000000 udp 10.0.2.104 55699 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 03:41:00.664371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:41:08.666155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:41:24.668785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:41:56.675191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:48:00.681759 3.000705 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:48:07.688418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:48:15.690155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:48:31.692804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:49:03.699102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:55:07.705115 3.001760 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:55:14.712336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:55:22.714117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:55:38.716962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:55:59.747429 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 03:55:59.747554 0.011244 udp 10.0.2.104 55700 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 03:55:59.759172 0.000000 udp 10.0.2.104 55701 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 03:56:10.722910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:12:23.734998 3.040796 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:12:30.755853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:12:38.753579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:12:54.756559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:13:26.762493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:14:59.746413 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 04:14:59.746561 0.014269 udp 10.0.2.104 55702 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 04:14:59.761222 0.000000 udp 10.0.2.104 55703 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 04:19:30.768611 3.001742 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:19:37.776031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:19:45.777377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:20:01.781043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:20:33.786507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:25:59.745766 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 04:25:59.745907 0.011795 udp 10.0.2.104 55704 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 04:25:59.758119 0.000000 udp 10.0.2.104 55705 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 04:26:37.793454 3.000596 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:26:44.800213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:26:52.811246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:27:08.815000 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:27:40.820760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:33:44.826829 3.000986 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:33:51.833899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:33:59.835846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:34:15.838972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:34:47.845203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:40:51.851591 3.000296 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:40:58.857895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:40:59.739159 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 04:40:59.739266 0.013292 udp 10.0.2.104 55706 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 04:40:59.752931 0.000000 udp 10.0.2.104 55707 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 04:41:06.859511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:41:22.862262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:41:54.868306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:47:58.874626 3.001361 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:48:05.881258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:48:13.883116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:48:29.886501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:49:01.892363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:55:05.898699 3.001225 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:55:12.905967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:55:20.907699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:55:36.910300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:55:59.743050 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 04:55:59.743149 0.011381 udp 10.0.2.104 55708 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 04:55:59.754863 0.000000 udp 10.0.2.104 55709 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 04:56:08.916206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:12:24.922439 3.024534 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:12:31.939309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:12:39.941084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:12:55.944257 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:13:27.949624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:14:59.742476 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 05:14:59.742680 0.011338 udp 10.0.2.104 55710 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 05:14:59.754451 0.000000 udp 10.0.2.104 55711 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 05:19:31.956783 3.001165 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:19:38.963905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:19:46.965195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:20:02.968105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:20:34.974490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:25:59.741479 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 05:25:59.741637 0.022247 udp 10.0.2.104 55712 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 05:25:59.764311 0.000000 udp 10.0.2.104 55713 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 05:26:38.980224 3.001822 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:26:45.987895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:26:53.991971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:27:09.991784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:27:41.998171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:33:46.003287 3.002768 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:33:53.011950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:34:01.012602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:34:17.016548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:34:49.021935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:40:53.028585 3.001232 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:40:59.745198 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 05:40:59.745354 0.012768 udp 10.0.2.104 55714 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 05:40:59.758507 0.000000 udp 10.0.2.104 55715 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 05:41:00.035456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:41:08.037362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:41:24.040095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:41:56.046206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:48:00.052391 3.001690 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:48:07.058945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:48:15.060692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:48:31.064198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:49:03.070027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:55:07.076469 3.000800 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:55:14.083233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:55:22.084863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:55:38.088026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:55:59.739362 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 05:55:59.739668 0.013018 udp 10.0.2.104 55716 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 05:55:59.789267 0.000000 udp 10.0.2.104 55717 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 05:56:10.093453 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:12:26.100389 3.001412 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:12:33.107860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:12:41.108951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:12:57.111310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:13:29.118133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:14:59.738432 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 06:14:59.738633 0.012078 udp 10.0.2.104 55718 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 06:14:59.751120 0.000000 udp 10.0.2.104 55719 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 06:19:33.124347 3.001275 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:19:40.131418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:19:48.132624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:20:04.136182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:20:36.141322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:25:59.747501 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 06:25:59.747646 0.011395 udp 10.0.2.104 55720 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 06:25:59.759417 0.000000 udp 10.0.2.104 55721 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 06:26:40.148935 3.000577 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:26:47.155932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:26:55.157143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:27:11.160012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:27:43.166129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:33:47.172685 3.000714 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:33:54.179162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:34:02.180584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:34:18.183902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:34:50.190067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:40:54.195636 3.001979 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:40:59.741187 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 06:40:59.741373 0.012744 udp 10.0.2.104 55722 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 06:40:59.754483 0.000000 udp 10.0.2.104 55723 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 06:41:01.203229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:41:09.204925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:41:25.208187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:41:57.213778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:48:01.220206 3.000850 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:48:08.227098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:48:16.228760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:48:32.231597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:49:04.238091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:55:08.244221 3.001257 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:55:15.251011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:55:23.252727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:55:39.255982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:55:59.745064 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 06:55:59.745268 0.011932 udp 10.0.2.104 55724 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 06:55:59.757580 0.000000 udp 10.0.2.104 55725 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 06:56:11.261476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:12:27.267437 3.049601 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:12:34.292679 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:12:42.286495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:12:58.289552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:13:30.295488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:14:59.744256 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 07:14:59.744371 0.011953 udp 10.0.2.104 55726 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 07:14:59.784711 0.000000 udp 10.0.2.104 55727 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 07:19:34.302205 3.001132 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:19:41.309028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:19:49.310295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:20:05.313502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:20:37.319851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:25:59.743077 0.000134 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 07:25:59.743300 0.011799 udp 10.0.2.104 55728 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 07:25:59.755486 0.000000 udp 10.0.2.104 55729 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 07:26:41.325762 3.001490 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:26:48.333265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:26:56.334842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:27:12.337292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:27:44.344035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:33:48.349562 3.001575 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:33:55.357202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:34:03.358661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:34:19.361575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:34:51.367657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:40:55.373927 3.001212 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:40:59.747296 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 07:40:59.747402 0.022244 udp 10.0.2.104 55730 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 07:40:59.770016 0.000000 udp 10.0.2.104 55731 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 07:41:02.380966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:41:10.382471 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:41:26.385545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:41:58.391306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:48:02.397643 3.001521 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:48:09.405438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:48:17.406815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:48:33.410020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:49:05.415662 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:55:09.421638 3.001355 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:55:16.428803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:55:24.430183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:55:40.433558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:55:59.741134 0.000111 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 07:55:59.741356 0.013005 udp 10.0.2.104 55732 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 07:55:59.754759 0.000000 udp 10.0.2.104 55733 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 07:56:12.439217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:12:28.445498 3.001466 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:12:35.452632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:12:43.454159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:12:59.457267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:13:31.463365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:14:59.740277 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 08:14:59.740466 0.012399 udp 10.0.2.104 55734 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 08:14:59.753299 0.000000 udp 10.0.2.104 55735 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 08:19:35.469127 3.001677 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:19:42.476647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:19:50.478092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:20:06.481175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:20:38.487183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:25:59.739668 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 08:25:59.739839 0.011171 udp 10.0.2.104 55736 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 08:25:59.751376 0.000000 udp 10.0.2.104 55737 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 08:26:42.493419 3.002218 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:26:49.500701 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:26:57.502259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:27:13.505025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:27:45.511414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:33:49.517549 3.001145 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:33:56.524604 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:34:04.526332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:34:20.529349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:34:52.535329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:40:56.541275 3.001449 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:40:59.743407 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 08:40:59.743581 0.011360 udp 10.0.2.104 55738 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 08:40:59.755328 0.000000 udp 10.0.2.104 55739 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 08:41:03.548844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:41:11.550260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:41:27.553243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:41:59.559051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:48:03.566121 3.010572 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:48:10.582607 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:48:18.584447 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:48:34.586982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:49:06.593244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:55:10.599426 3.001485 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:55:17.606698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:55:25.607929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:55:41.610983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:55:59.737632 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 08:55:59.737794 0.011447 udp 10.0.2.104 55740 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 08:55:59.749653 0.000000 udp 10.0.2.104 55741 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 08:56:13.616989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:12:29.624352 3.000180 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:12:36.630450 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:12:44.631970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:13:00.634959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:13:32.641095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:14:59.746212 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 09:14:59.746380 0.010934 udp 10.0.2.104 55742 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 09:14:59.757691 0.000000 udp 10.0.2.104 55743 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 09:19:36.647376 3.084347 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:19:43.700707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:19:51.666112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:20:07.668867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:20:39.675002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:25:59.745373 0.000111 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 09:25:59.745586 0.026262 udp 10.0.2.104 55744 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 09:25:59.772279 0.000000 udp 10.0.2.104 55745 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 09:26:43.681498 3.001366 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:26:50.688748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:26:58.690230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:27:14.693185 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:27:46.698891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:33:50.705211 3.001855 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:33:57.712707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:34:05.714299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:34:21.717061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:34:53.723171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:40:57.729939 3.000778 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:40:59.739083 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 09:40:59.739273 0.010101 udp 10.0.2.104 55746 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 09:40:59.749732 0.000000 udp 10.0.2.104 55747 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 09:41:04.735992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:41:12.737915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:41:28.740785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:42:00.746826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:48:04.753416 3.001002 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:48:11.760573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:48:19.762015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:48:35.764856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:49:07.770638 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:55:11.777915 3.000599 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:55:18.784273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:55:26.785938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:55:42.788518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:55:59.743242 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 09:55:59.743335 0.011242 udp 10.0.2.104 55748 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 09:55:59.754961 0.000000 udp 10.0.2.104 55749 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 09:56:14.794830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:12:26.804584 3.011914 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:12:33.822146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:12:41.823744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:12:57.827221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:13:29.832828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:14:59.742427 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 10:14:59.742623 0.016474 udp 10.0.2.104 55750 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 10:14:59.759483 0.000000 udp 10.0.2.104 55751 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 10:19:33.839841 3.000719 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:19:40.846271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:19:48.847885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:20:04.850832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:20:36.857022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:25:59.741064 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 10:25:59.741230 0.011563 udp 10.0.2.104 55752 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 10:25:59.761428 0.000000 udp 10.0.2.104 55753 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 10:26:40.864085 3.000726 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:26:47.870480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:26:55.871791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:27:11.875154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:27:43.880878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:33:47.887025 3.001348 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:33:54.894435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:34:02.895837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:34:18.899300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:34:50.904804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:40:54.910266 3.001574 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:40:59.745233 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 10:40:59.745337 0.011303 udp 10.0.2.104 55754 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 10:40:59.757017 0.000000 udp 10.0.2.104 55755 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 10:41:01.918064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:41:09.919739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:41:25.922759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:41:57.928797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:48:01.933735 3.002753 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:48:08.942415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:48:16.943520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:48:32.946552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:49:04.952662 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:55:08.959343 3.001108 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:55:15.966450 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:55:23.967867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:55:39.970594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:55:59.739302 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 10:55:59.739428 0.012281 udp 10.0.2.104 55756 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 10:55:59.752132 0.000000 udp 10.0.2.104 55757 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 10:56:11.976650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:12:25.990311 3.001403 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:12:32.997033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:12:40.998707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:12:57.001981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:13:29.007758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:14:59.738421 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 11:14:59.738617 0.010997 udp 10.0.2.104 55758 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 11:14:59.750049 0.000000 udp 10.0.2.104 55759 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 11:19:33.012954 3.002373 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:19:40.021091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:19:48.022637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:20:04.025808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:20:36.031894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:25:59.737449 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 11:25:59.737654 0.010334 udp 10.0.2.104 55760 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 11:25:59.748434 0.000000 udp 10.0.2.104 55761 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 11:26:40.038549 3.000632 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:26:47.045034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:26:55.047292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:27:11.049847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:27:43.056085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:33:47.061846 3.001533 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:33:54.069025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:34:02.070461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:34:18.073533 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:34:50.079256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:40:54.085813 3.001852 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:40:59.741070 0.000111 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 11:40:59.741280 0.011757 udp 10.0.2.104 55762 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 11:40:59.753377 0.000000 udp 10.0.2.104 55763 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 11:41:01.092982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:41:09.094264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:41:25.097531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:41:57.103648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:48:01.110442 3.025392 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:48:08.127216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:48:16.128810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:48:32.131173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:49:04.138002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:55:08.143980 3.001051 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:55:15.161425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:55:23.162306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:55:39.165466 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:55:59.735358 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 11:55:59.735525 0.015101 udp 10.0.2.104 55764 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 11:55:59.750993 0.000000 udp 10.0.2.104 55765 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 11:56:11.170925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:12:26.186556 3.001210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:12:33.193335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:12:41.195260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:12:57.198097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:13:29.204220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:14:59.744371 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 12:14:59.744477 0.010276 udp 10.0.2.104 55766 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 12:14:59.755093 0.000000 udp 10.0.2.104 55767 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 12:19:33.210154 3.001965 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:19:40.217511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:19:48.218964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:20:04.221819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:20:36.227992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:25:59.743414 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 12:25:59.743589 0.012548 udp 10.0.2.104 55768 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 12:25:59.756549 0.000000 udp 10.0.2.104 55769 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 12:26:40.233989 3.002484 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:26:47.241670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:26:55.242845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:27:11.246310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:27:43.252374 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:33:47.258924 3.000848 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:33:54.266088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:34:02.267231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:34:18.269697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:34:50.276391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:40:54.282281 3.001333 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:40:59.737622 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 12:40:59.737726 0.012640 udp 10.0.2.104 55770 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 12:40:59.750779 0.000000 udp 10.0.2.104 55771 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 12:41:01.289271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:41:09.290865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:41:25.293380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:41:57.299886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:48:01.306586 3.001351 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:48:08.313222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:48:16.314832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:48:32.318110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:49:04.324015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:55:08.330926 2.999926 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:55:15.337163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:55:23.338661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:55:39.341405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:55:59.741257 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 12:55:59.741411 0.021519 udp 10.0.2.104 55772 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 12:55:59.763319 0.000000 udp 10.0.2.104 55773 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 12:56:11.348296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:12:26.362171 3.023436 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:12:33.379320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:12:41.391181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:12:57.394357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:13:29.400680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:14:59.740535 0.000148 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 13:14:59.740795 0.011327 udp 10.0.2.104 55774 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 13:14:59.752550 0.000000 udp 10.0.2.104 55775 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 13:19:33.407623 3.002069 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:19:40.413657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:19:48.415210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:20:04.418207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:20:36.424262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:25:59.739628 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 13:25:59.739776 0.012899 udp 10.0.2.104 55776 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 13:25:59.753073 0.000000 udp 10.0.2.104 55777 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 13:26:40.430405 3.002030 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:26:47.438028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:26:55.439182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:27:11.442116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:27:43.449235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:33:47.454450 3.001549 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:33:54.461766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:34:02.463325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:34:18.466309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:34:50.472475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:40:54.478761 3.001220 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:40:59.743120 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 13:40:59.743268 0.012176 udp 10.0.2.104 55778 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 13:40:59.755894 0.000000 udp 10.0.2.104 55779 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 13:41:01.485687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:41:09.486944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:41:25.490210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:41:57.496152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:48:01.502287 3.001618 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:48:08.510031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:48:16.511248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:48:32.514154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:49:04.520181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:55:08.527087 3.000128 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:55:15.533833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:55:23.535112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:55:39.537963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:55:59.737281 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 13:55:59.737489 0.011304 udp 10.0.2.104 55780 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 13:55:59.749191 0.000000 udp 10.0.2.104 55781 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 13:56:11.544180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:12:27.550159 3.001635 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:12:34.557438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:12:42.558699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:12:58.562253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:13:30.568486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:14:59.736434 0.000135 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 14:14:59.736666 0.022323 udp 10.0.2.104 55782 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 14:14:59.759447 0.000000 udp 10.0.2.104 55783 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 14:19:34.574790 3.000893 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:19:41.581281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:19:49.583034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:20:05.585686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:20:37.592157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:25:59.735167 0.000143 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 14:25:59.735411 0.011838 udp 10.0.2.104 55784 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 14:25:59.747690 0.000000 udp 10.0.2.104 55785 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 14:26:41.598305 3.001263 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:26:48.605539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:26:56.606912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:27:12.610296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:27:44.615936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:33:48.621992 3.001751 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:33:55.629232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:34:03.631031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:34:19.634331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:34:51.639944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:40:55.645539 3.001791 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:40:59.739125 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 14:40:59.739295 0.011706 udp 10.0.2.104 55786 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 14:40:59.751365 0.000000 udp 10.0.2.104 55787 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 14:41:02.653300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:41:10.654915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:41:26.657494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:41:58.664430 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:48:02.669668 3.001889 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:48:09.677179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:48:17.678809 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:48:33.681836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:49:05.688038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:55:09.693701 3.001611 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:55:16.701011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:55:24.702734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:55:40.705914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:55:59.743432 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 14:55:59.743551 0.016177 udp 10.0.2.104 55788 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 14:55:59.760151 0.000000 udp 10.0.2.104 55789 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 14:56:12.712078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:12:28.717863 3.034981 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:12:35.735561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:12:43.736813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:12:59.739713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:13:31.745661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:14:59.742294 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 15:14:59.742410 0.011356 udp 10.0.2.104 55790 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 15:14:59.754131 0.000000 udp 10.0.2.104 55791 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 15:19:35.752754 3.000503 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:19:42.759124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:19:50.760782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:20:06.763507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:20:38.769508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:25:59.741335 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 15:25:59.741490 0.011347 udp 10.0.2.104 55792 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 15:25:59.753273 0.000000 udp 10.0.2.104 55793 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 15:26:42.776484 3.001586 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:26:49.782876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:26:57.784919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:27:13.788597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:27:45.793473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:33:49.799863 3.001457 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:33:56.807177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:34:04.809122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:34:20.811327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:34:52.817623 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:40:56.824706 3.000549 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:40:59.735303 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 15:40:59.735407 0.022307 udp 10.0.2.104 55794 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 15:40:59.758072 0.000000 udp 10.0.2.104 55795 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 15:41:03.830818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:41:11.832151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:41:27.835395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:41:59.841284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:48:03.847502 3.001528 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:48:10.855026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:48:18.856646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:48:34.859423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:49:06.865525 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:55:10.871172 3.001879 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:55:17.878772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:55:25.880128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:55:41.883369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:55:59.739210 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 15:55:59.739397 0.011397 udp 10.0.2.104 55796 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 15:55:59.751193 0.000000 udp 10.0.2.104 55797 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 15:56:13.889520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:12:25.899237 3.012632 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:12:32.917008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:12:40.918297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:12:56.921565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:13:28.927326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:14:59.738830 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 16:14:59.738939 0.011245 udp 10.0.2.104 55798 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 16:14:59.750599 0.000000 udp 10.0.2.104 55799 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 16:19:32.933375 3.002457 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:19:39.940675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:19:47.942406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:20:03.945530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:20:35.951458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:25:59.737933 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 16:25:59.738085 0.012295 udp 10.0.2.104 55800 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 16:25:59.750755 0.000000 udp 10.0.2.104 55801 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 16:26:39.957844 3.001404 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:26:46.965844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:26:54.966984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:27:10.969325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:27:42.976058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:33:46.981067 3.002052 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:33:53.989061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:34:01.991019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:34:17.993440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:34:50.000089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:40:54.006497 3.000270 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:40:59.741379 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 16:40:59.741531 0.011432 udp 10.0.2.104 55802 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 16:40:59.753330 0.000000 udp 10.0.2.104 55803 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 16:41:01.012894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:41:09.014485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:41:25.017250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:41:57.023676 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:48:01.029424 3.001794 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:48:08.036859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:48:16.038637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:48:32.040875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:49:04.047825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:55:08.052699 3.002227 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:55:15.060768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:55:23.062028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:55:39.065332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:55:59.735841 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 16:55:59.736010 0.021609 udp 10.0.2.104 55804 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 16:55:59.758027 0.000000 udp 10.0.2.104 55805 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 16:56:11.071333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:12:25.094678 3.017603 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:12:32.111908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:12:40.113545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:12:56.116325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:13:28.122219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:14:59.734584 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 17:14:59.734695 0.011297 udp 10.0.2.104 55806 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 17:14:59.746407 0.000000 udp 10.0.2.104 55807 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 17:19:32.129875 3.000407 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:19:39.136129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:19:47.137341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:20:03.140372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:20:35.146438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:25:59.733115 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 17:25:59.733284 0.011498 udp 10.0.2.104 55808 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 17:25:59.745216 0.000000 udp 10.0.2.104 55809 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 17:26:39.152667 3.001743 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:26:46.160242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:26:54.161504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:27:10.164133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:27:42.170467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:33:46.176391 3.002301 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:33:53.184107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:34:01.185323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:34:17.188451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:34:49.194382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:40:53.201131 3.001334 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:40:59.737344 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 17:40:59.737450 0.011824 udp 10.0.2.104 55810 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 17:40:59.749680 0.000000 udp 10.0.2.104 55811 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 17:41:00.208309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:41:08.209384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:41:24.212325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:41:56.218580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:48:00.225341 3.000730 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:48:07.231739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:48:15.233398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:48:31.236211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:49:03.242126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:55:07.248654 3.001616 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:55:14.255842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:55:22.257018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:55:38.260228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:55:59.741256 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 17:55:59.741360 0.021554 udp 10.0.2.104 55812 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 17:55:59.763292 0.000000 udp 10.0.2.104 55813 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 17:56:10.266381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:12:25.281178 3.001333 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:12:32.288599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:12:40.289870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:12:56.292958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:13:28.298879 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:14:59.740623 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 18:14:59.740733 0.011454 udp 10.0.2.104 55814 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 18:14:59.752588 0.000000 udp 10.0.2.104 55815 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 18:19:32.304375 3.051571 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:19:39.334661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:19:47.323499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:20:03.326746 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:20:35.332897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:25:59.739258 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 18:25:59.739357 0.046644 udp 10.0.2.104 55816 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 18:25:59.786410 0.000000 udp 10.0.2.104 55817 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 18:26:39.339184 3.001183 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:26:46.346507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:26:54.347842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:27:10.350870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:27:42.356972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:33:46.362727 3.001585 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:33:53.370339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:34:01.372052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:34:17.374690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:34:49.380681 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:40:53.388055 3.000169 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:40:59.733251 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 18:40:59.733379 0.011935 udp 10.0.2.104 55818 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 18:40:59.745786 0.000000 udp 10.0.2.104 55819 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 18:41:00.394100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:41:08.395345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:41:24.398653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:41:56.405337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:48:00.410984 3.001210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:48:07.418137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:48:15.419604 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:48:31.422677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:49:03.432157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:55:07.434558 3.001519 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:55:14.442120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:55:22.443738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:55:38.446523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:55:59.737256 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 18:55:59.737426 0.012202 udp 10.0.2.104 55820 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 18:55:59.750029 0.000000 udp 10.0.2.104 55821 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 18:56:10.452729 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:12:25.468113 3.012653 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:12:32.484598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:12:40.486535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:12:56.489056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:13:28.494823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:14:59.737147 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 19:14:59.737330 0.011778 udp 10.0.2.104 55822 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 19:14:59.749520 0.000000 udp 10.0.2.104 55823 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 19:19:32.501093 3.001460 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:19:39.508331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:19:47.510022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:20:03.512865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:20:35.519029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:25:59.735230 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 19:25:59.735390 0.011496 udp 10.0.2.104 55824 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 19:25:59.747254 0.000000 udp 10.0.2.104 55825 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 19:26:39.525066 3.001957 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:26:46.532590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:26:54.534434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:27:10.536930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:27:42.542997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:33:46.549882 3.000902 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:33:53.556065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:34:01.558663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:34:17.561136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:34:49.567414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:40:53.573765 3.000678 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:40:59.739347 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 19:40:59.739442 0.013554 udp 10.0.2.104 55826 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 19:40:59.753420 0.000000 udp 10.0.2.104 55827 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 19:41:00.580343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:41:08.581960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:41:24.584829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:41:56.591071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:48:00.597082 3.001778 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:48:07.614306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:48:15.616018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:48:31.619051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:49:03.624888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:55:07.632081 3.000415 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:55:14.638408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:55:22.639699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:55:38.642940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:55:59.733184 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 19:55:59.733332 0.011386 udp 10.0.2.104 55828 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 19:55:59.745075 0.000000 udp 10.0.2.104 55829 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 19:56:10.648711 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:12:26.655071 3.001556 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:12:33.662246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:12:41.663531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:12:57.666721 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:13:29.672783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:14:59.732238 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 20:14:59.732338 0.021482 udp 10.0.2.104 55830 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 20:14:59.754234 0.000000 udp 10.0.2.104 55831 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 20:19:33.679322 3.029454 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:19:40.698068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:19:48.697337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:20:04.700649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:20:36.706698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:25:59.731137 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 20:25:59.731247 0.022071 udp 10.0.2.104 55832 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 20:25:59.753687 0.000000 udp 10.0.2.104 55833 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 20:26:40.713740 3.000459 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:26:47.720344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:26:55.721916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:27:11.724702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:27:43.730461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:33:47.736953 3.002027 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:33:54.744455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:34:02.745615 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:34:18.748898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:34:50.754679 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:40:54.760984 3.001420 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:40:59.735248 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 20:40:59.735375 0.011317 udp 10.0.2.104 55834 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 20:40:59.747091 0.000000 udp 10.0.2.104 55835 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 20:41:01.767963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:41:09.769548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:41:25.772852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:41:57.778530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:48:01.784638 3.001554 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:48:08.791939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:48:16.793571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:48:32.796408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:49:04.802140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:55:08.808411 3.001512 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:55:15.815865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:55:23.817253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:55:39.820497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:55:59.739036 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 20:55:59.739193 0.011299 udp 10.0.2.104 55836 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 20:55:59.750867 0.000000 udp 10.0.2.104 55837 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 20:56:11.826618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:12:28.835017 3.000228 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:12:35.841040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:12:43.842407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:12:59.845894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:13:31.861876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:14:59.738188 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 21:14:59.738286 0.016124 udp 10.0.2.104 55838 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 21:14:59.754809 0.000000 udp 10.0.2.104 55839 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 21:19:35.868224 3.001210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:19:42.875133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:19:50.876631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:20:06.879835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:20:38.885931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:25:59.737132 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 21:25:59.737323 0.011162 udp 10.0.2.104 55840 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 21:25:59.748906 0.000000 udp 10.0.2.104 55841 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 21:26:42.891969 3.001567 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:26:49.899408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:26:57.900886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:27:13.903862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:27:45.909737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:33:49.915987 3.001380 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:33:56.923236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:34:04.924891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:34:20.928217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:34:52.933062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:40:56.939755 3.001614 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:40:59.731344 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 21:40:59.731475 0.011539 udp 10.0.2.104 55842 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 21:40:59.743361 0.000000 udp 10.0.2.104 55843 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 21:41:03.947155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:41:11.948707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:41:27.951852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:41:59.957399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:48:03.964422 3.001054 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:48:10.970443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:48:18.972534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:48:34.976162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:49:06.981621 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:55:10.987596 3.001843 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:55:17.995165 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:55:25.996616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:55:41.999346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:55:59.735113 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 21:55:59.735232 0.021315 udp 10.0.2.104 55844 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 21:55:59.756940 0.000000 udp 10.0.2.104 55845 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 21:56:14.005125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:12:31.013179 3.091605 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:12:38.078559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:12:46.031839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:13:02.034998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:13:34.040323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:14:59.734008 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 22:14:59.734218 0.011207 udp 10.0.2.104 55846 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 22:14:59.745793 0.000000 udp 10.0.2.104 55847 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 22:19:38.046846 3.011641 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:19:45.064063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:19:53.066091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:20:09.068851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:20:41.075078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:25:59.733448 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 22:25:59.733721 0.011153 udp 10.0.2.104 55848 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 22:25:59.745260 0.000000 udp 10.0.2.104 55849 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 22:26:45.080680 3.002082 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:26:52.088505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:27:00.089956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:27:16.092597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:27:48.098841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:33:52.104088 3.002524 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:33:59.112402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:34:07.114325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:34:23.116789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:34:55.122776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:40:59.130184 3.000047 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:40:59.737297 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 22:40:59.737449 0.011503 udp 10.0.2.104 55850 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 22:40:59.749315 0.000000 udp 10.0.2.104 55851 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 22:41:06.136391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:41:14.137588 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:41:30.140489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:42:02.146951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:48:06.154101 3.000282 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:48:13.160419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:48:21.161955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:48:37.164527 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:49:09.170793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:55:13.175993 3.002427 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:55:20.184181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:55:28.185818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:55:44.199151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:55:59.731334 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 22:55:59.731426 0.011510 udp 10.0.2.104 55852 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 22:55:59.743287 0.000000 udp 10.0.2.104 55853 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 22:56:16.204895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:12:27.213390 3.001903 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:12:34.221024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:12:42.222691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:12:58.225335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:13:30.231214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:14:59.730223 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 23:14:59.730339 0.012705 udp 10.0.2.104 55854 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 23:14:59.743464 0.000000 udp 10.0.2.104 55855 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 23:19:34.237971 3.001262 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:19:41.244784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:19:49.246314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:20:05.249390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:20:37.255359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:25:59.729311 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 23:25:59.729504 0.012216 udp 10.0.2.104 55856 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 23:25:59.742180 0.000000 udp 10.0.2.104 55857 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 23:26:41.261498 3.001454 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:26:48.269504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:26:56.270301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:27:12.273633 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:27:44.279446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:33:48.285276 3.001856 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:33:55.292923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:34:03.294408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:34:19.296950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:34:51.303747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:40:55.308983 3.002051 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:40:59.733179 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 23:40:59.733404 0.010557 udp 10.0.2.104 55858 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 23:40:59.744395 0.000000 udp 10.0.2.104 55859 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 23:41:02.317067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:41:10.318185 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:41:26.321323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:41:58.416711 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:48:02.373542 3.001670 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:48:09.380951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:48:17.382531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:48:33.385505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:49:05.391733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:55:09.397686 3.001218 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:55:16.404597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:55:24.406497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:55:40.409467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:55:59.777219 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 23:55:59.777320 0.011429 udp 10.0.2.104 55860 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/07 23:55:59.789131 0.000000 udp 10.0.2.104 55861 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/07 23:56:12.415387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:12:26.429961 3.000534 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:12:33.436915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:12:41.437905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:12:57.440608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:13:29.456305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:14:59.776135 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 00:14:59.776317 0.012721 udp 10.0.2.104 55862 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 00:14:59.789427 0.000000 udp 10.0.2.104 55863 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 00:19:33.462511 3.001577 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:19:40.469928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:19:48.471377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:20:04.474304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:20:36.480399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:25:59.775824 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 00:25:59.776057 0.011460 udp 10.0.2.104 55864 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 00:25:59.787991 0.000000 udp 10.0.2.104 55865 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 00:26:40.486446 3.001601 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:26:47.493952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:26:55.495264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:27:11.498247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:27:43.504662 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:33:47.512137 2.999818 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:33:54.517967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:34:02.519288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:34:18.522513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:34:50.528602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:40:54.534549 3.001625 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:40:59.769249 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 00:40:59.769354 0.010311 udp 10.0.2.104 55866 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 00:40:59.780061 0.000000 udp 10.0.2.104 55867 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 00:41:01.542044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:41:09.543259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:41:25.546101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:41:57.552134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:48:01.559168 3.000986 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:48:08.565831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:48:16.567276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:48:32.570339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:49:04.576150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:55:08.582723 3.001367 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:55:15.589615 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:55:23.591164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:55:39.594149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:55:59.773443 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 00:55:59.773595 0.011407 udp 10.0.2.104 55868 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 00:55:59.785445 0.000000 udp 10.0.2.104 55869 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 00:56:11.600290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:12:26.624840 3.027720 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:12:33.642120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:12:41.643730 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:12:57.646522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:13:29.652731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:14:59.849349 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 01:14:59.849447 0.010175 udp 10.0.2.104 55870 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 01:14:59.859980 0.000000 udp 10.0.2.104 55871 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 01:19:33.749226 3.001242 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:19:40.756523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:19:48.757471 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:20:04.761352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:20:36.766690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:25:59.871336 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 01:25:59.871441 0.010504 udp 10.0.2.104 55872 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 01:25:59.882327 0.000000 udp 10.0.2.104 55873 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 01:26:40.772720 3.001731 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:26:47.780538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:26:55.781969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:27:11.794964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:27:43.800815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:33:47.807278 3.001438 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:33:54.813933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:34:02.816137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:34:18.818733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:34:50.824738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:40:54.830765 3.001504 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:40:59.875223 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 01:40:59.875396 0.012624 udp 10.0.2.104 55874 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 01:40:59.888429 0.000000 udp 10.0.2.104 55875 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 01:41:01.837934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:41:09.839460 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:41:25.842323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:41:57.848536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:48:01.854236 3.002116 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:48:08.861863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:48:16.863027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:48:32.866447 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:49:04.872500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:55:08.878643 3.001940 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:55:15.886192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:55:23.887233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:55:39.890543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:55:59.869431 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 01:55:59.869544 0.021733 udp 10.0.2.104 55876 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 01:55:59.891706 0.000000 udp 10.0.2.104 55877 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 01:56:11.896709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:12:26.911361 3.001537 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:12:33.918392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:12:41.930218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:12:57.933055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:13:29.939090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:14:59.868504 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 02:14:59.868598 0.010314 udp 10.0.2.104 55878 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 02:14:59.879320 0.000000 udp 10.0.2.104 55879 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 02:19:33.945004 3.001386 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:19:40.951861 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:19:48.954093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:20:04.957274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:20:36.963211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:25:59.867265 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 02:25:59.867429 0.010767 udp 10.0.2.104 55880 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 02:25:59.878612 0.000000 udp 10.0.2.104 55881 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 02:26:40.969447 3.001344 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:26:47.976635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:26:55.978435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:27:11.980952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:27:43.986945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:33:47.993544 3.000850 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:33:55.000659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:34:03.001744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:34:19.004877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:34:51.010787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:40:55.016778 3.001322 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:40:59.871303 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 02:40:59.871628 0.010098 udp 10.0.2.104 55882 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 02:40:59.882097 0.000000 udp 10.0.2.104 55883 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 02:41:02.024111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:41:10.026022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:41:26.029121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:41:58.034978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:48:02.041369 3.001282 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:48:09.048155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:48:17.049936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:48:33.052658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:49:05.058676 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:55:09.065798 3.000912 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:55:16.071908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:55:24.073149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:55:40.076739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:55:59.875924 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 02:55:59.875997 0.013202 udp 10.0.2.104 55884 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 02:55:59.889726 0.000000 udp 10.0.2.104 55885 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 02:56:12.082999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:12:29.090220 3.001162 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:12:36.098474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:12:44.098994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:13:00.102352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:13:32.108504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:14:59.874333 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 03:14:59.874467 0.010247 udp 10.0.2.104 55886 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 03:14:59.885095 0.000000 udp 10.0.2.104 55887 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 03:19:36.113918 3.002235 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:19:43.121591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:19:51.123253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:20:07.126193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:20:39.132330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:25:59.873265 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 03:25:59.873386 0.011631 udp 10.0.2.104 55888 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 03:25:59.885457 0.000000 udp 10.0.2.104 55889 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 03:26:43.137636 3.002302 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:26:50.145560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:26:58.147204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:27:14.150472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:27:46.156809 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:33:50.162349 3.001348 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:33:57.169889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:34:05.171041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:34:21.174067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:34:53.179817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:40:57.185450 3.002661 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:40:59.867327 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 03:40:59.867421 0.010304 udp 10.0.2.104 55890 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 03:40:59.878194 0.000000 udp 10.0.2.104 55891 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 03:41:04.193125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:41:12.194955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:41:28.197966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:42:00.203453 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:48:04.210436 3.001457 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:48:11.217391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:48:19.218966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:48:35.222186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:49:07.228295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:55:11.234578 3.001435 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:55:18.241426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:55:26.242447 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:55:42.245905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:55:59.871719 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 03:55:59.871855 0.010217 udp 10.0.2.104 55892 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 03:55:59.882474 0.000000 udp 10.0.2.104 55893 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 03:56:14.251855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:12:30.258223 3.001234 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:12:37.265132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:12:45.266821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:13:01.269798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:13:33.276096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:14:59.870495 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 04:14:59.870613 0.015163 udp 10.0.2.104 55894 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 04:14:59.886217 0.000000 udp 10.0.2.104 55895 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 04:19:37.281649 3.001835 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:19:44.289056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:19:52.290771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:20:08.293119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:20:40.299911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:25:59.869323 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 04:25:59.869413 0.022851 udp 10.0.2.104 55896 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 04:25:59.892684 0.000000 udp 10.0.2.104 55897 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 04:26:44.306130 3.001201 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:26:51.313322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:26:59.314746 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:27:15.317426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:27:47.323615 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:33:51.329810 3.001455 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:33:58.337591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:34:06.338914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:34:22.341692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:34:54.347982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:40:58.353151 3.002125 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:40:59.873415 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 04:40:59.873511 0.011987 udp 10.0.2.104 55898 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 04:40:59.885870 0.000000 udp 10.0.2.104 55899 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 04:41:05.361160 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:41:13.362588 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:41:29.365503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:42:01.372039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:48:05.378395 3.000889 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:48:12.385390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:48:20.386631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:48:36.389905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:49:08.396144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:55:12.401334 3.012183 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:55:19.419151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:55:27.420720 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:55:43.423613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:55:59.867375 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 04:55:59.867543 0.012848 udp 10.0.2.104 55900 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 04:55:59.880797 0.000000 udp 10.0.2.104 55901 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 04:56:15.429964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:12:26.438773 3.001441 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:12:33.445939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:12:41.448052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:12:57.450438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:13:29.456208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:14:59.866186 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 05:14:59.866316 0.030660 udp 10.0.2.104 55902 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 05:14:59.897408 0.000000 udp 10.0.2.104 55903 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 05:19:33.462713 3.001501 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:19:40.480796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:19:48.481225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:20:04.484440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:20:36.491999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:25:59.875776 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 05:25:59.875886 0.012155 udp 10.0.2.104 55904 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 05:25:59.888489 0.000000 udp 10.0.2.104 55905 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 05:26:40.496216 3.002031 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:26:47.504204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:26:55.505199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:27:11.508732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:27:43.514785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:33:47.520729 3.001306 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:33:54.528014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:34:02.529315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:34:18.532542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:34:50.539145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:40:54.545464 3.000464 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:40:59.869157 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 05:40:59.869328 0.011444 udp 10.0.2.104 55906 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 05:40:59.881171 0.000000 udp 10.0.2.104 55907 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 05:41:01.551774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:41:09.553157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:41:25.556023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:41:57.562318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:48:01.568304 3.001771 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:48:08.575905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:48:16.577085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:48:32.580498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:49:04.586158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:55:08.591999 3.002319 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:55:15.599517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:55:23.601000 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:55:39.604192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:55:59.873521 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 05:55:59.873632 0.010630 udp 10.0.2.104 55908 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 05:55:59.884651 0.000000 udp 10.0.2.104 55909 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 05:56:11.610292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:12:25.624097 3.000684 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:12:32.630523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:12:40.632082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:12:56.635267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:13:28.641255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:14:59.872504 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 06:14:59.872601 0.010243 udp 10.0.2.104 55910 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 06:14:59.883219 0.000000 udp 10.0.2.104 55911 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 06:19:32.647523 3.001073 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:19:39.654625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:19:47.657841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:20:03.659079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:20:35.665464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:25:59.871634 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 06:25:59.871821 0.013865 udp 10.0.2.104 55912 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 06:25:59.886068 0.000000 udp 10.0.2.104 55913 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 06:26:39.672487 3.000499 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:26:46.678650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:26:54.680363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:27:10.683098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:27:42.688985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:33:46.695074 3.002248 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:33:53.703216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:34:01.704106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:34:17.707030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:34:49.713912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:40:53.719081 3.001491 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:40:59.865333 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 06:40:59.865491 0.017458 udp 10.0.2.104 55914 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 06:40:59.883318 0.000000 udp 10.0.2.104 55915 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 06:41:00.726687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:41:08.727761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:41:24.730842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:41:56.737289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:48:00.743253 3.001899 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:48:07.750507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:48:15.752175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:48:31.755078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:49:03.760977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:55:07.767024 3.001609 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:55:14.774613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:55:22.775876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:55:38.778719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:55:59.869393 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 06:55:59.869565 0.021765 udp 10.0.2.104 55916 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 06:55:59.891690 0.000000 udp 10.0.2.104 55917 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 06:56:10.785205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:12:25.800004 3.000886 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:12:32.807069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:12:40.808151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:12:56.811268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:13:28.817346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:14:59.868460 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 07:14:59.868565 0.013234 udp 10.0.2.104 55918 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 07:14:59.882170 0.000000 udp 10.0.2.104 55919 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 07:19:32.823275 3.001976 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:19:39.830817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:19:47.832373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:20:03.835446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:20:35.842012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:25:59.867268 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 07:25:59.867448 0.011339 udp 10.0.2.104 55920 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 07:25:59.879207 0.000000 udp 10.0.2.104 55921 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 07:26:39.847714 3.001248 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:26:46.855077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:26:54.856745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:27:10.859271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:27:42.865565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:33:46.871295 3.001772 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:33:53.878986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:34:01.879662 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:34:17.883337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:34:49.889477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:40:53.895295 3.001744 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:40:59.871390 0.000274 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 07:40:59.871755 0.010233 udp 10.0.2.104 55922 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 07:40:59.882379 0.000000 udp 10.0.2.104 55923 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 07:41:00.902932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:41:08.904325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:41:24.907398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:41:56.913275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:48:00.918820 3.002264 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:48:07.926548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:48:15.927789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:48:31.931192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:49:03.937109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:55:07.943685 3.001274 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:55:14.950762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:55:22.952337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:55:38.955378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:55:59.865434 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 07:55:59.865553 0.011931 udp 10.0.2.104 55924 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 07:55:59.877885 0.000000 udp 10.0.2.104 55925 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 07:56:10.961187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:12:25.976499 3.000913 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:12:32.983033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:12:40.984690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:12:56.987239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:13:28.993304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:14:59.864402 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 08:14:59.864586 0.021442 udp 10.0.2.104 55926 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 08:14:59.886387 0.000000 udp 10.0.2.104 55927 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 08:19:32.999169 3.002157 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:19:40.007025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:19:48.008642 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:20:04.011744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:20:36.018008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:25:59.873634 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 08:25:59.873730 0.012941 udp 10.0.2.104 55928 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 08:25:59.887081 0.000000 udp 10.0.2.104 55929 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 08:26:40.023228 3.016165 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:26:47.041088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:26:55.042175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:27:11.046033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:27:43.051073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:33:47.057781 3.001334 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:33:54.065279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:34:02.067279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:34:18.069912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:34:50.075579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:40:54.081649 3.001849 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:40:59.867289 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 08:40:59.867398 0.012806 udp 10.0.2.104 55930 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 08:40:59.880604 0.000000 udp 10.0.2.104 55931 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 08:41:01.088860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:41:09.090496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:41:25.093802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:41:57.099830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:48:01.105052 3.002274 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:48:08.112823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:48:16.114211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:48:32.117420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:49:04.123537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:55:08.129748 3.000847 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:55:15.136997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:55:23.138620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:55:39.141513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:55:59.871286 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 08:55:59.871660 0.015253 udp 10.0.2.104 55932 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 08:55:59.887308 0.000000 udp 10.0.2.104 55933 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 08:56:11.147405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:12:28.154433 3.019711 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:12:35.172195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:12:43.173807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:12:59.176804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:13:31.182841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:14:59.870593 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 09:14:59.870699 0.014358 udp 10.0.2.104 55934 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 09:14:59.885486 0.000000 udp 10.0.2.104 55935 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 09:19:35.188948 3.022863 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:19:42.206486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:19:50.207836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:20:06.210798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:20:38.216690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:25:59.869381 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 09:25:59.869539 0.010135 udp 10.0.2.104 55936 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 09:25:59.880074 0.000000 udp 10.0.2.104 55937 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 09:26:42.222716 3.001721 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:26:49.230644 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:26:57.231762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:27:13.234913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:27:45.240774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:33:49.246924 3.001779 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:33:56.254513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:34:04.255919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:34:20.258731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:34:52.264628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:40:59.863184 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 09:40:59.863381 0.016781 udp 10.0.2.104 55938 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 09:40:59.880540 0.000000 udp 10.0.2.104 55939 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 09:41:01.277951 3.001942 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:41:08.285296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:41:16.286780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:41:32.290098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:42:04.296148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:48:08.302468 3.001064 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:48:15.309351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:48:23.310660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:48:39.314137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:49:11.320097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:55:15.326034 3.001255 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:55:22.333480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:55:30.334685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:55:46.338297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:55:59.867486 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 09:55:59.867667 0.039364 udp 10.0.2.104 55940 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 09:55:59.907442 0.000000 udp 10.0.2.104 55941 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 09:56:18.343925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:12:32.357976 3.000596 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:12:39.364258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:12:47.366168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:13:03.368791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:13:35.384848 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:14:59.866348 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 10:14:59.866449 0.011026 udp 10.0.2.104 55942 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 10:14:59.877889 0.000000 udp 10.0.2.104 55943 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 10:19:39.390838 3.001758 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:19:46.398401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:19:54.399832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:20:10.402690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:20:42.408775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:25:59.865697 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 10:25:59.865880 0.012283 udp 10.0.2.104 55944 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 10:25:59.878537 0.000000 udp 10.0.2.104 55945 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 10:26:46.416022 3.001029 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:26:53.422371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:27:01.423873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:27:17.426699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:27:49.432793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:33:53.439026 3.001823 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:34:00.446131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:34:08.447974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:34:24.450610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:34:56.456779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:40:59.869254 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 10:40:59.869397 0.029634 udp 10.0.2.104 55946 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 10:40:59.899395 0.000000 udp 10.0.2.104 55947 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 10:41:05.470472 3.001477 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:41:12.477245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:41:20.478709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:41:36.482113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:42:08.487923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:48:12.494068 3.001720 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:48:19.501757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:48:27.502816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:48:43.506007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:49:15.512109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:55:19.518469 3.000909 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:55:26.525295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:55:34.527094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:55:50.530147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:55:59.863177 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 10:55:59.863347 0.010246 udp 10.0.2.104 55948 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 10:55:59.873943 0.000000 udp 10.0.2.104 55949 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 10:56:22.536424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:12:29.549297 3.001234 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:12:36.556393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:12:44.558185 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:13:00.560795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:13:32.566706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:14:59.862282 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 11:14:59.862454 0.051495 udp 10.0.2.104 55950 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 11:14:59.914365 0.000000 udp 10.0.2.104 55951 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 11:19:36.573715 3.000733 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:19:43.580387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:19:51.581814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:20:07.584609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:20:39.590818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:25:59.871620 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 11:25:59.871822 0.013496 udp 10.0.2.104 55952 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 11:25:59.885722 0.000000 udp 10.0.2.104 55953 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 11:26:43.596304 3.002288 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:26:50.604170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:26:58.605854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:27:14.608822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:27:46.614745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:33:50.621675 3.000937 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:33:57.628692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:34:05.630569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:34:21.632926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:34:53.639690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:40:59.865276 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 11:40:59.865432 0.032056 udp 10.0.2.104 55954 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 11:40:59.897845 0.000000 udp 10.0.2.104 55955 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 11:41:02.651385 3.002509 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:41:09.659134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:41:17.660846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:41:33.663911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:42:05.670110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:48:09.676081 3.001491 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:48:16.683684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:48:24.684915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:48:40.687875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:49:12.694012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:55:16.699503 3.001921 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:55:23.707304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:55:31.708932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:55:47.712101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:55:59.869240 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 11:55:59.869427 0.010177 udp 10.0.2.104 55956 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 11:55:59.879971 0.000000 udp 10.0.2.104 55957 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 11:56:19.717648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:12:28.734249 3.078700 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:12:35.789289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:12:43.752657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:12:59.756028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:13:31.762176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:14:59.868315 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 12:14:59.868439 0.010709 udp 10.0.2.104 55958 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 12:14:59.879519 0.000000 udp 10.0.2.104 55959 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 12:19:35.767872 3.001312 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:19:42.775099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:19:50.776572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:20:06.779763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:20:38.785932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:25:59.867322 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 12:25:59.867407 0.032105 udp 10.0.2.104 55960 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 12:25:59.899894 0.000000 udp 10.0.2.104 55961 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 12:26:42.791565 3.001630 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:26:49.798928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:26:57.800323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:27:13.803094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:27:45.809549 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:33:49.815684 3.002294 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:33:56.822767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:34:04.824395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:34:20.827801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:34:52.833174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:40:59.871293 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 12:40:59.871391 0.021902 udp 10.0.2.104 55962 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 12:40:59.893666 0.000000 udp 10.0.2.104 55963 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 12:41:01.846722 3.001902 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:41:08.853925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:41:16.856016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:41:32.858760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:42:04.864757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:48:08.871180 3.001184 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:48:15.878305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:48:23.879867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:48:39.882798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:49:11.888595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:55:15.894630 3.001564 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:55:22.902065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:55:30.903369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:55:46.906560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:55:59.865596 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 12:55:59.865748 0.013173 udp 10.0.2.104 55964 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 12:55:59.879319 0.000000 udp 10.0.2.104 55965 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 12:56:18.912851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:12:28.920398 3.001104 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:12:35.927195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:12:43.928754 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:12:59.932021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:13:31.937335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:14:59.864375 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 13:14:59.864559 0.011732 udp 10.0.2.104 55966 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 13:14:59.876718 0.000000 udp 10.0.2.104 55967 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 13:19:35.953960 3.001925 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:19:42.961449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:19:50.963138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:20:06.965762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:20:38.972015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:25:59.863420 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 13:25:59.863637 0.012803 udp 10.0.2.104 55968 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 13:25:59.876842 0.000000 udp 10.0.2.104 55969 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 13:26:42.977708 3.001675 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:26:49.985289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:26:57.987397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:27:13.990018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:27:45.996121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:33:50.001597 3.001991 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:33:57.009178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:34:05.010289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:34:21.014066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:34:53.020161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:40:59.867712 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 13:40:59.867813 0.011235 udp 10.0.2.104 55970 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 13:40:59.879437 0.000000 udp 10.0.2.104 55971 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 13:41:01.031118 3.002530 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:41:08.039048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:41:16.040437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:41:32.043410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:42:04.049414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:48:08.055362 3.001761 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:48:15.062371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:48:23.064209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:48:39.067488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:49:11.073521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:55:15.080414 3.000534 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:55:22.087007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:55:30.088620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:55:46.091436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:55:59.861400 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 13:55:59.861545 0.011589 udp 10.0.2.104 55972 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 13:55:59.873533 0.000000 udp 10.0.2.104 55973 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 13:56:18.097556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:12:30.107993 3.001286 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:12:37.115268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:12:45.116506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:13:01.119382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:13:33.125423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:14:59.870568 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 14:14:59.870732 0.014630 udp 10.0.2.104 55974 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 14:14:59.885800 0.000000 udp 10.0.2.104 55975 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 14:19:37.132227 3.000976 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:19:44.139145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:19:52.140631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:20:08.143225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:20:40.149783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:25:59.869256 0.000137 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 14:25:59.869544 0.011464 udp 10.0.2.104 55976 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 14:25:59.881384 0.000000 udp 10.0.2.104 55977 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 14:26:44.155724 3.001550 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:26:51.162961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:26:59.164620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:27:15.167647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:27:47.173349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:33:51.179913 3.001993 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:33:58.187341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:34:06.188294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:34:22.191263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:34:54.197668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:40:59.863068 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 14:40:59.863268 0.022752 udp 10.0.2.104 55978 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 14:40:59.886361 0.000000 udp 10.0.2.104 55979 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 14:41:03.211564 3.000817 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:41:10.218290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:41:18.220226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:41:34.222696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:42:06.228918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:48:10.234453 3.001776 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:48:17.242107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:48:25.243584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:48:41.246815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:49:13.252627 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:55:17.259899 3.000569 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:55:24.266205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:55:32.267518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:55:48.270684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:55:59.867220 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 14:55:59.867366 0.012167 udp 10.0.2.104 55980 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 14:55:59.879907 0.000000 udp 10.0.2.104 55981 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 14:56:20.276771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:12:32.286527 3.002201 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:12:39.294237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:12:47.295875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:13:03.308678 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:13:35.314722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:14:59.866704 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 15:14:59.866798 0.015232 udp 10.0.2.104 55982 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 15:14:59.882456 0.000000 udp 10.0.2.104 55983 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 15:19:39.321186 3.001061 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:19:46.328516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:19:54.330207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:20:10.333088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:20:42.338702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:25:59.865367 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 15:25:59.865522 0.022087 udp 10.0.2.104 55984 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 15:25:59.888043 0.000000 udp 10.0.2.104 55985 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 15:26:46.344708 3.001699 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:26:53.352320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:27:01.353447 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:27:17.356596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:27:49.362872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:33:53.370109 3.000606 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:34:00.376409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:34:08.378245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:34:24.380876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:34:56.386758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:40:59.869220 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 15:40:59.869362 0.022464 udp 10.0.2.104 55986 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 15:40:59.892228 0.000000 udp 10.0.2.104 55987 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 15:41:05.402603 2.999231 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:41:12.407345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:41:20.408558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:41:36.412042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:42:08.417905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:48:12.424643 3.000786 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:48:19.431258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:48:27.432815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:48:43.435808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:49:15.441881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:55:19.448527 3.000964 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:55:26.455162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:55:34.456719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:55:50.459872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:55:59.863253 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 15:55:59.863447 0.012406 udp 10.0.2.104 55988 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 15:55:59.876247 0.000000 udp 10.0.2.104 55989 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 15:56:22.466060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:12:33.474975 3.065985 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:12:40.513778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:12:48.493593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:13:04.496553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:13:36.502616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:14:59.862439 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 16:14:59.862612 0.012001 udp 10.0.2.104 55990 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 16:14:59.874990 0.000000 udp 10.0.2.104 55991 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 16:19:40.509375 3.000981 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:19:47.516078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:19:55.517569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:20:11.520553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:20:43.526624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:25:59.861743 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 16:25:59.861901 0.011916 udp 10.0.2.104 55992 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 16:25:59.874190 0.000000 udp 10.0.2.104 55993 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 16:26:47.533445 3.000579 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:26:54.539793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:27:02.541454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:27:18.544478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:27:50.550654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:33:54.557126 3.001210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:34:01.563734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:34:09.565379 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:34:25.568403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:34:57.574371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:40:59.865153 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 16:40:59.865289 0.011383 udp 10.0.2.104 55994 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 16:40:59.877007 0.000000 udp 10.0.2.104 55995 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 16:41:06.587449 3.001787 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:41:13.594929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:41:21.596414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:41:37.599383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:42:09.605505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:48:13.612719 3.000766 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:48:20.619086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:48:28.620607 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:48:44.623532 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:49:16.629367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:55:20.637149 3.000006 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:55:27.642780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:55:35.644296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:55:51.647290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:55:59.859373 0.000335 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 16:55:59.859864 0.014375 udp 10.0.2.104 55996 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 16:55:59.874634 0.000000 udp 10.0.2.104 55997 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 16:56:23.653373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:12:34.662803 3.001144 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:12:41.679925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:12:49.681371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:13:05.684082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:13:37.690696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:14:59.868476 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 17:14:59.868657 0.011448 udp 10.0.2.104 55998 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 17:14:59.880489 0.000000 udp 10.0.2.104 55999 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 17:19:41.696893 3.001394 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:19:48.703473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:19:56.705169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:20:12.708431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:20:44.714293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:25:59.867423 0.000126 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 17:25:59.867639 0.013476 udp 10.0.2.104 56000 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 17:25:59.881538 0.000000 udp 10.0.2.104 56001 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 17:26:48.720082 3.001951 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:26:55.728400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:27:03.728863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:27:19.732201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:27:51.738633 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:33:55.745189 3.000706 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:34:02.751311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:34:10.753584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:34:26.755856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:34:58.762359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:40:59.861304 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 17:40:59.861412 0.025399 udp 10.0.2.104 56002 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 17:40:59.887244 0.000000 udp 10.0.2.104 56003 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 17:41:07.775622 3.001486 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:41:14.782548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:41:22.784359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:41:38.787168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:42:10.793551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:48:14.800421 3.000147 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:48:21.806567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:48:29.808220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:48:45.810894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:49:17.817100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:55:21.823560 3.011405 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:55:28.840576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:55:36.841960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:55:52.844922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:55:59.865299 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 17:55:59.865495 0.011507 udp 10.0.2.104 56004 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 17:55:59.877398 0.000000 udp 10.0.2.104 56005 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 17:56:24.851040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:12:30.862969 3.001540 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:12:37.869945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:12:45.871307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:13:01.874016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:13:33.880153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:14:59.864520 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 18:14:59.864711 0.011794 udp 10.0.2.104 56006 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 18:14:59.876936 0.000000 udp 10.0.2.104 56007 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 18:19:37.886427 3.001449 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:19:44.893985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:19:52.895830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:20:08.898627 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:20:40.904611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:25:59.863382 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 18:25:59.863528 0.011417 udp 10.0.2.104 56008 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 18:25:59.875323 0.000000 udp 10.0.2.104 56009 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 18:26:44.910800 3.001622 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:26:51.918278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:26:59.918932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:27:15.922485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:27:47.928872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:33:51.933777 3.002769 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:33:58.942245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:34:06.943521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:34:22.946475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:34:54.952498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:40:59.867590 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 18:40:59.867709 0.031892 udp 10.0.2.104 56010 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 18:40:59.900084 0.000000 udp 10.0.2.104 56011 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 18:41:03.965470 3.001872 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:41:10.973140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:41:18.974522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:41:34.978011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:42:06.983473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:48:10.990514 3.000489 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:48:17.997327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:48:25.998284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:48:42.001893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:49:14.007327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:55:18.013704 3.001545 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:55:25.021309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:55:33.022188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:55:49.025742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:55:59.861481 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 18:55:59.861576 0.012019 udp 10.0.2.104 56012 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 18:55:59.873972 0.000000 udp 10.0.2.104 56013 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 18:56:21.031449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:12:31.039989 3.025101 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:12:38.057374 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:12:46.058027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:13:02.060779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:13:34.067004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:14:59.860390 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 19:14:59.860554 0.011484 udp 10.0.2.104 56014 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 19:14:59.872426 0.000000 udp 10.0.2.104 56015 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 19:19:38.073434 3.000581 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:19:45.080450 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:19:53.081357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:20:09.084839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:20:41.091092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:25:59.859312 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 19:25:59.859635 0.012057 udp 10.0.2.104 56016 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 19:25:59.872069 0.000000 udp 10.0.2.104 56017 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 19:26:45.097009 3.001771 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:26:52.104108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:27:00.105870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:27:16.108761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:27:48.114823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:33:52.120499 3.002205 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:33:59.128148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:34:07.129406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:34:23.133121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:34:55.138743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:40:59.863141 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 19:40:59.863264 0.011465 udp 10.0.2.104 56018 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 19:40:59.875108 0.000000 udp 10.0.2.104 56019 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 19:41:03.150649 3.001793 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:41:10.158039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:41:18.159672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:41:34.162676 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:42:06.168644 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:48:10.175854 3.000458 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:48:17.182063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:48:25.183238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:48:41.186529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:49:13.192428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:55:17.199292 3.000861 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:55:24.206127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:55:32.207434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:55:48.210235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:55:59.867185 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 19:55:59.867289 0.024147 udp 10.0.2.104 56020 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 19:55:59.891908 0.000000 udp 10.0.2.104 56021 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 19:56:20.216544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:12:31.225826 3.001096 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:12:38.233023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:12:46.234118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:13:02.237254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:13:34.243309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:14:59.866367 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 20:14:59.866518 0.015250 udp 10.0.2.104 56022 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 20:14:59.882171 0.000000 udp 10.0.2.104 56023 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 20:19:38.250458 3.000366 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:19:45.256660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:19:53.258414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:20:09.261330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:20:41.266937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:25:59.865391 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 20:25:59.865566 0.011440 udp 10.0.2.104 56024 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 20:25:59.877407 0.000000 udp 10.0.2.104 56025 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 20:26:45.273640 3.001235 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:26:52.280752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:27:00.282404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:27:16.284940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:27:48.290940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:33:52.297995 3.002809 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:33:59.304490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:34:07.306243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:34:23.309246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:34:55.315116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:40:59.859420 0.000206 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 20:40:59.859734 0.013659 udp 10.0.2.104 56026 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 20:40:59.873778 0.000000 udp 10.0.2.104 56027 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 20:41:04.328730 3.001464 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:41:11.336005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:41:19.337135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:41:35.340353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:42:07.346404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:48:11.352209 3.001872 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:48:18.359957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:48:26.361323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:48:42.364167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:49:14.370351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:55:18.376379 3.006596 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:55:25.383640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:55:33.384968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:55:49.388008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:55:59.863278 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 20:55:59.863421 0.011260 udp 10.0.2.104 56028 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 20:55:59.887729 0.000000 udp 10.0.2.104 56029 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 20:56:21.394153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:12:32.403881 3.095904 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:12:39.475807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:12:47.422248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:13:03.424947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:13:35.431169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:14:59.862238 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 21:14:59.862429 0.011596 udp 10.0.2.104 56030 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 21:14:59.874443 0.000000 udp 10.0.2.104 56031 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 21:19:39.437978 3.000538 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:19:46.444340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:19:54.446049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:20:10.448930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:20:42.455033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:25:59.861526 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 21:25:59.861649 0.040103 udp 10.0.2.104 56032 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 21:25:59.902162 0.000000 udp 10.0.2.104 56033 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 21:26:46.461118 3.001718 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:26:53.478302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:27:01.480317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:27:17.483024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:27:49.489009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:33:53.496170 3.000367 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:34:00.502347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:34:08.504043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:34:24.506795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:34:56.512908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:40:59.865209 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 21:40:59.865305 0.021337 udp 10.0.2.104 56034 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 21:40:59.887007 0.000000 udp 10.0.2.104 56035 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 21:41:05.526955 3.001290 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:41:12.534013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:41:20.534983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:41:36.537970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:42:08.543897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:48:12.549875 3.002037 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:48:19.557377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:48:27.558968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:48:43.561796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:49:15.567899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:55:19.575032 3.000847 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:55:26.581133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:55:34.582871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:55:50.586186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:55:59.859204 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 21:55:59.859404 0.026015 udp 10.0.2.104 56036 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 21:55:59.885816 0.000000 udp 10.0.2.104 56037 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 21:56:22.591883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:12:33.601728 3.010621 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:12:40.618079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:12:48.619468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:13:04.622657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:13:36.628646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:14:59.858251 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 22:14:59.858423 0.013451 udp 10.0.2.104 56038 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 22:14:59.872287 0.000000 udp 10.0.2.104 56039 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 22:19:40.634810 3.001421 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:19:47.642281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:19:55.643465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:20:11.646837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:20:43.652459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:25:59.857327 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 22:25:59.857499 0.011530 udp 10.0.2.104 56040 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 22:25:59.869419 0.000000 udp 10.0.2.104 56041 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 22:26:47.658849 3.001626 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:26:54.666332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:27:02.667773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:27:18.670767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:27:50.676582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:33:54.683418 3.000965 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:34:01.690316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:34:09.691671 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:34:25.694588 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:34:57.700657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:40:59.861719 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 22:40:59.861910 0.012552 udp 10.0.2.104 56042 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 22:40:59.874910 0.000000 udp 10.0.2.104 56043 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 22:41:06.714173 3.001085 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:41:13.721355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:41:21.722586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:41:37.725811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:42:09.732103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:48:13.737768 3.001510 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:48:20.744990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:48:28.746665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:48:44.749517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:49:16.755869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:55:20.761639 3.001683 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:55:27.769035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:55:35.770634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:55:51.773628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:55:59.865234 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 22:55:59.865415 0.010360 udp 10.0.2.104 56044 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 22:55:59.969420 0.000000 udp 10.0.2.104 56045 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 22:56:23.779880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:12:34.788360 3.001938 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:12:41.795803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:12:49.797114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:13:05.800014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:13:37.806314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:14:59.863954 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 23:14:59.864130 0.015908 udp 10.0.2.104 56046 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 23:14:59.880411 0.000000 udp 10.0.2.104 56047 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 23:19:41.812238 3.001438 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:19:48.819437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:19:56.821253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:20:12.823774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:20:44.830236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:25:59.863464 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 23:25:59.863590 0.011658 udp 10.0.2.104 56048 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 23:25:59.875655 0.000000 udp 10.0.2.104 56049 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 23:26:48.836118 3.001740 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:26:55.843210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:27:03.845422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:27:19.848159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:27:51.854303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:33:56.040717 3.001283 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:34:03.048280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:34:11.049406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:34:27.052085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:34:59.058576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:41:00.037680 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 23:41:00.037834 0.024148 udp 10.0.2.104 56050 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 23:41:00.062398 0.000000 udp 10.0.2.104 56051 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 23:41:03.063811 3.001916 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:41:10.071966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:41:18.073538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:41:34.076358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:42:06.082573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:48:10.088522 3.001699 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:48:17.095808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:48:25.097486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:48:41.100141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:49:13.106558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:55:17.129589 2.994476 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:55:24.129386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:55:32.130806 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:55:48.134341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:56:00.041681 0.000111 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 23:56:00.041885 0.010310 udp 10.0.2.104 56052 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/08 23:56:00.052609 0.000000 udp 10.0.2.104 56053 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/08 23:56:20.140698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:12:29.155692 3.001972 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:12:36.163812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:12:44.165137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:13:00.168380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:13:32.174085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:15:00.040648 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 00:15:00.040753 0.034981 udp 10.0.2.104 56054 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 00:15:00.076169 0.000000 udp 10.0.2.104 56055 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 00:19:36.180420 3.001406 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:19:43.187451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:19:51.188801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:20:07.192331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:20:39.198712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:26:00.039799 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 00:26:00.039914 0.012606 udp 10.0.2.104 56056 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 00:26:00.052915 0.000000 udp 10.0.2.104 56057 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 00:26:43.205044 3.001037 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:26:50.211751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:26:58.213171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:27:14.216094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:27:46.222497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:33:50.228183 3.001908 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:33:57.235398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:34:05.237002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:34:21.240593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:34:53.246098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:40:57.253181 3.000840 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:41:00.043602 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 00:41:00.043796 0.010123 udp 10.0.2.104 56058 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 00:41:00.054284 0.000000 udp 10.0.2.104 56059 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 00:41:04.259796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:41:12.260956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:41:28.264222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:42:00.270296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:48:04.275981 3.001600 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:48:11.283081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:48:19.285049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:48:35.288059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:49:07.294112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:55:11.300229 3.001814 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:55:18.307320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:55:26.308947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:55:42.312129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:56:00.037948 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 00:56:00.038050 0.012138 udp 10.0.2.104 56060 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 00:56:00.050595 0.000000 udp 10.0.2.104 56061 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 00:56:14.318084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:12:27.420119 3.023367 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:12:34.437122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:12:42.438663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:12:58.441797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:13:30.447946 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:15:00.126803 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 01:15:00.126905 0.010339 udp 10.0.2.104 56062 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 01:15:00.137601 0.000000 udp 10.0.2.104 56063 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 01:19:34.453998 3.001404 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:19:41.461282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:19:49.463010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:20:05.465466 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:20:37.471519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:26:00.125564 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 01:26:00.125722 0.010374 udp 10.0.2.104 56064 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 01:26:00.149969 0.000000 udp 10.0.2.104 56065 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 01:26:41.477839 3.001306 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:26:48.485251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:26:56.486496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:27:12.489883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:27:44.495892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:33:48.501469 3.001912 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:33:55.509093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:34:03.510822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:34:19.513548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:34:51.519729 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:40:55.526820 3.000478 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:41:00.129154 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 01:41:00.129313 0.013059 udp 10.0.2.104 56066 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 01:41:00.142736 0.000000 udp 10.0.2.104 56067 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 01:41:02.533359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:41:10.534390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:41:26.537368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:41:58.543898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:48:02.550779 3.000556 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:48:09.556987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:48:17.558511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:48:33.561569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:49:05.567592 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:55:09.574535 3.000621 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:55:16.580903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:55:24.582656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:55:40.585361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:56:00.133141 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 01:56:00.133330 0.011134 udp 10.0.2.104 56068 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 01:56:00.144829 0.000000 udp 10.0.2.104 56069 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 01:56:12.591463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:12:27.607126 3.088955 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:12:34.666138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:12:42.624908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:12:58.627938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:13:30.634305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:15:00.132805 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 02:15:00.132967 0.010421 udp 10.0.2.104 56070 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 02:15:00.143808 0.000000 udp 10.0.2.104 56071 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 02:19:34.650070 3.001919 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:19:41.657448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:19:49.658746 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:20:05.662136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:21:13.561957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:26:31.120939 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 02:26:31.121051 0.011816 udp 10.0.2.104 56072 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 02:26:31.133262 0.000000 udp 10.0.2.104 56073 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 02:27:12.054907 2.951985 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:27:18.953328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:27:26.829404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:27:42.583859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:28:14.090900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:34:12.439688 2.959460 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:34:19.340821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:34:27.223108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:34:42.983212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:35:14.492604 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:41:12.917428 2.952007 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:41:17.237058 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 02:41:17.237214 0.010079 udp 10.0.2.104 56074 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 02:41:17.247803 0.000000 udp 10.0.2.104 56075 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 02:41:19.816058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:41:27.691327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:41:43.443816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:42:14.980785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:48:13.432645 2.956539 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:48:20.330475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:48:28.204239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:48:43.963775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:49:15.466825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:55:13.965464 2.957131 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:55:20.867949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:55:28.750629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:55:44.510143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:56:03.547489 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 02:56:03.547605 0.010195 udp 10.0.2.104 56076 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 02:56:03.558157 0.000000 udp 10.0.2.104 56077 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 02:56:16.016856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:12:27.812300 3.001855 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:12:34.819680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:12:42.821325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:12:58.824365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:13:30.830198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:15:00.128795 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 03:15:00.128947 0.010403 udp 10.0.2.104 56078 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 03:15:00.139743 0.000000 udp 10.0.2.104 56079 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 03:19:34.836222 3.001531 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:19:41.843439 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:19:49.845430 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:20:05.848025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:20:37.854218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:26:00.128055 0.029211 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 03:26:00.157384 0.013218 udp 10.0.2.104 56080 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 03:26:00.171041 0.000000 udp 10.0.2.104 56081 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 03:26:41.860536 3.001563 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:26:48.867775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:26:56.869009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:27:12.872160 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:27:44.878384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:33:48.884080 3.002092 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:33:55.891528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:34:03.893077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:34:19.895539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:34:51.902289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:40:55.909069 3.000688 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:41:00.131594 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 03:41:00.131768 0.011409 udp 10.0.2.104 56082 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 03:41:00.143568 0.000000 udp 10.0.2.104 56083 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 03:41:02.917976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:41:10.917092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:41:26.920171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:41:58.926893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:48:02.931694 3.001755 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:48:09.939763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:48:17.941150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:48:33.943597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:49:05.950203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:55:09.965548 3.001838 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:55:16.973398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:55:24.975117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:55:40.978144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:56:00.127147 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 03:56:00.127249 0.010690 udp 10.0.2.104 56084 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 03:56:00.138313 0.000000 udp 10.0.2.104 56085 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 03:56:12.984020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:12:29.990790 3.002300 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:12:36.998634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:12:45.000611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:13:01.003208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:13:33.009512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:15:00.124625 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 04:15:00.124737 0.010971 udp 10.0.2.104 56086 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 04:15:00.136064 0.000000 udp 10.0.2.104 56087 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 04:19:37.015125 3.002118 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:19:44.022700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:19:52.024413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:20:08.027269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:20:41.862298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:26:00.123987 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 04:26:00.124077 0.019568 udp 10.0.2.104 56088 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 04:26:00.144000 0.000000 udp 10.0.2.104 56089 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 04:26:44.049622 3.003035 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:26:51.056633 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:26:59.062517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:27:15.063658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:27:47.074915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:33:51.073403 3.001520 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:33:58.080762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:34:06.082257 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:34:22.085602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:34:54.090856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:40:58.098988 2.999979 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:41:00.127926 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 04:41:00.128093 0.010243 udp 10.0.2.104 56090 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 04:41:00.138667 0.000000 udp 10.0.2.104 56091 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 04:41:05.104892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:41:13.106210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:41:29.108587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:42:01.115205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:48:05.120791 3.005110 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:48:12.128611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:48:20.130146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:48:36.132745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:49:08.145007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:55:12.145248 3.001771 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:55:19.152645 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:55:27.154279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:55:43.157317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:56:00.132016 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 04:56:00.132180 0.013419 udp 10.0.2.104 56092 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 04:56:00.145955 0.000000 udp 10.0.2.104 56093 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 04:56:15.162939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:12:31.169677 3.015354 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:12:38.186733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:12:46.188513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:13:02.195977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:13:34.196985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:15:00.130612 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 05:15:00.130802 0.010979 udp 10.0.2.104 56094 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 05:15:00.142065 0.000000 udp 10.0.2.104 56095 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 05:19:38.203472 3.001272 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:19:45.210444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:19:53.214186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:20:09.215053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:20:41.231058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:26:00.129548 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 05:26:00.129700 0.011173 udp 10.0.2.104 56096 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 05:26:00.141156 0.000000 udp 10.0.2.104 56097 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 05:26:45.236920 3.001874 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:26:52.244822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:27:00.246132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:27:16.248772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:27:48.255081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:33:52.260906 3.002156 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:33:59.268627 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:34:07.270061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:34:23.272922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:34:55.278956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:40:59.285118 3.001514 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:41:00.124124 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 05:41:00.124258 0.016468 udp 10.0.2.104 56098 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 05:41:00.141038 0.000000 udp 10.0.2.104 56099 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 05:41:06.292897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:41:14.293940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:41:30.296914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:42:02.303219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:48:06.319027 2.991896 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:48:13.318708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:48:21.318078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:48:37.322601 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:49:09.326866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:55:13.332822 3.001736 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:55:20.340752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:55:28.341727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:55:44.345016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:56:00.130403 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 05:56:00.130488 0.010294 udp 10.0.2.104 56100 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 05:56:00.141099 0.000000 udp 10.0.2.104 56101 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 05:56:16.352991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:12:27.360056 3.001711 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:12:34.366922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:12:42.368438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:12:58.371825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:13:30.377931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:15:00.132429 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 06:15:00.132603 0.011607 udp 10.0.2.104 56102 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 06:15:00.144558 0.000000 udp 10.0.2.104 56103 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 06:19:34.383733 3.001619 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:19:41.391031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:19:49.392812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:20:05.395794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:20:37.402056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:26:00.126041 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 06:26:00.126214 0.012211 udp 10.0.2.104 56104 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 06:26:00.138761 0.000000 udp 10.0.2.104 56105 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 06:26:41.408040 3.001072 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:26:48.416237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:26:56.416553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:27:12.419595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:27:44.431973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:33:48.432938 3.000258 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:33:55.438865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:34:03.440388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:34:19.444237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:34:51.449647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:40:55.455218 3.001722 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:41:00.135869 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 06:41:00.136013 0.011664 udp 10.0.2.104 56106 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 06:41:00.148054 0.000000 udp 10.0.2.104 56107 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 06:41:02.466029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:41:10.464545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:41:26.467586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:41:58.777705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:48:02.489326 3.036591 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:48:09.506958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:48:17.508582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:48:33.511302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:49:05.517501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:55:09.533416 3.149412 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:55:16.657994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:55:24.594280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:55:40.555231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:56:00.124074 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 06:56:00.124265 0.010551 udp 10.0.2.104 56108 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 06:56:00.135172 0.000000 udp 10.0.2.104 56109 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 06:56:12.561315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:12:26.576749 2.999656 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:12:33.581936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:12:41.583477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:12:57.587289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:13:29.592901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:15:00.122959 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 07:15:00.123096 0.010529 udp 10.0.2.104 56110 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 07:15:00.133935 0.000000 udp 10.0.2.104 56111 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 07:19:33.599872 3.000483 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:19:40.606422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:19:48.607276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:20:04.610451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:20:36.616390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:26:00.136348 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 07:26:00.136463 0.010911 udp 10.0.2.104 56112 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 07:26:00.147872 0.000000 udp 10.0.2.104 56113 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 07:26:40.622330 3.001720 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:26:47.630153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:26:55.631543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:27:11.636597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:27:43.640635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:33:47.646721 3.002160 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:33:54.654590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:34:02.655103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:34:18.658501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:34:50.664703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:40:54.670315 3.001923 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:41:00.125917 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 07:41:00.126066 0.011669 udp 10.0.2.104 56114 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 07:41:00.138041 0.000000 udp 10.0.2.104 56115 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 07:41:01.678330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:41:09.679154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:41:25.682332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:41:57.688486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:48:01.696438 2.999860 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:48:08.704277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:48:16.703100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:48:32.708925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:49:04.712612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:55:08.722347 3.003008 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:55:15.725821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:55:23.728772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:55:39.730119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:56:00.134484 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 07:56:00.134607 0.010302 udp 10.0.2.104 56116 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 07:56:00.145220 0.000000 udp 10.0.2.104 56117 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 07:56:11.736828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:12:26.751132 3.146397 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:12:33.873732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:12:41.810671 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:12:57.772607 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:13:29.778643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:15:00.128525 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 08:15:00.128683 0.012218 udp 10.0.2.104 56118 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 08:15:00.141293 0.000000 udp 10.0.2.104 56119 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 08:19:33.792555 2.995784 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:19:40.795217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:19:48.798762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:20:04.797120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:20:36.802610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:26:00.127207 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 08:26:00.127294 0.011128 udp 10.0.2.104 56120 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 08:26:00.138781 0.000000 udp 10.0.2.104 56121 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 08:26:40.809240 3.001073 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:26:47.816145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:26:55.817700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:27:11.820510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:27:43.826494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:33:47.832778 3.001443 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:33:54.839927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:34:02.841546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:34:18.844833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:34:50.850502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:40:54.856426 3.001703 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:41:00.121531 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 08:41:00.121723 0.011712 udp 10.0.2.104 56122 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 08:41:00.133798 0.000000 udp 10.0.2.104 56123 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 08:41:01.864007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:41:09.865597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:41:25.868518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:41:57.875025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:48:01.881465 3.000860 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:48:08.888002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:48:16.889542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:48:32.892549 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:49:04.898448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:55:08.904605 3.001761 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:55:15.911952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:55:23.915362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:55:39.916801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:56:00.125524 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 08:56:00.125636 0.012365 udp 10.0.2.104 56124 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 08:56:00.138393 0.000000 udp 10.0.2.104 56125 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 08:56:11.922727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:12:27.928946 3.001240 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:12:34.936354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:12:42.937254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:12:58.940293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:13:30.946328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:15:00.124765 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 09:15:00.124915 0.013357 udp 10.0.2.104 56126 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 09:15:00.138630 0.000000 udp 10.0.2.104 56127 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 09:19:34.958011 2.995442 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:19:41.959746 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:19:49.961377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:20:05.964614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:20:37.970345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:26:00.123772 0.000169 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 09:26:00.124038 0.011240 udp 10.0.2.104 56128 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 09:26:00.135879 0.000000 udp 10.0.2.104 56129 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 09:26:41.976458 3.001517 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:26:48.984032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:26:56.985185 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:27:12.988383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:27:44.994554 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:33:49.001154 3.000878 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:33:56.008046 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:34:04.009090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:34:20.012170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:34:52.018400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:40:56.024608 3.001571 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:41:00.127235 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 09:41:00.127330 0.014127 udp 10.0.2.104 56130 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 09:41:00.141810 0.000000 udp 10.0.2.104 56131 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 09:41:03.031962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:41:11.032723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:41:27.036128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:41:59.041799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:48:03.049823 3.000406 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:48:10.055853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:48:18.056814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:48:34.062152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:49:06.066311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:55:10.072717 3.001340 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:55:17.080048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:55:25.080979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:55:41.084318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:56:00.121090 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 09:56:00.121250 0.010174 udp 10.0.2.104 56132 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 09:56:00.131775 0.000000 udp 10.0.2.104 56133 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 09:56:13.089815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:12:29.096516 3.000775 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:12:36.103245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:12:44.105025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:13:00.107974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:13:32.113773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:15:00.120668 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 10:15:00.120763 0.011970 udp 10.0.2.104 56134 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 10:15:00.133098 0.000000 udp 10.0.2.104 56135 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 10:19:36.119899 3.002033 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:19:43.128270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:19:51.129116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:20:07.132223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:20:39.138811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:26:00.129661 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 10:26:00.129847 0.010967 udp 10.0.2.104 56136 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 10:26:00.141174 0.000000 udp 10.0.2.104 56137 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 10:26:43.144218 3.001965 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:26:50.151257 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:26:58.153034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:27:14.156216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:27:46.161528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:33:50.167562 3.001705 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:33:57.176248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:34:05.176865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:34:21.180126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:34:53.186574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:40:57.191159 3.002007 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:41:00.123138 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 10:41:00.123299 0.023204 udp 10.0.2.104 56138 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 10:41:00.146894 0.000000 udp 10.0.2.104 56139 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 10:41:04.199551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:41:12.200846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:41:28.203667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:42:00.209505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:48:04.217207 3.000610 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:48:11.233589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:48:19.235184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:48:35.238333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:49:07.243379 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:55:11.260202 3.001267 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:55:18.267190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:55:26.273724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:55:42.272114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:56:00.127765 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 10:56:00.127853 0.011553 udp 10.0.2.104 56140 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 10:56:00.139844 0.000000 udp 10.0.2.104 56141 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 10:56:14.278341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:12:30.285084 3.075757 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:12:37.333759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:12:45.302854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:13:01.305770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:13:33.311900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:15:00.126516 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 11:15:00.126730 0.010139 udp 10.0.2.104 56142 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 11:15:00.137212 0.000000 udp 10.0.2.104 56143 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 11:19:37.318215 3.004871 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:19:44.325335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:19:52.326698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:20:08.329816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:20:40.335796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:26:00.126063 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 11:26:00.126173 0.010232 udp 10.0.2.104 56144 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 11:26:00.136816 0.000000 udp 10.0.2.104 56145 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 11:26:44.344553 2.999171 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:26:51.349385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:26:59.350884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:27:15.353797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:27:47.359979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:33:51.366682 3.001347 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:33:58.373061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:34:06.374487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:34:22.377703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:34:54.383462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:40:58.390107 3.001481 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:41:00.119166 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 11:41:00.119262 0.021455 udp 10.0.2.104 56146 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 11:41:00.141069 0.000000 udp 10.0.2.104 56147 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 11:41:05.397311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:41:13.398694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:41:29.401773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:42:01.407727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:48:05.413703 3.004258 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:48:12.421261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:48:20.422700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:48:36.425445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:49:08.431467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:55:12.438102 3.001296 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:55:19.444979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:55:27.446584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:55:43.449417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:56:00.123693 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 11:56:00.123802 0.009932 udp 10.0.2.104 56148 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 11:56:00.134118 0.000000 udp 10.0.2.104 56149 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 11:56:15.455441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:12:31.461230 3.001948 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:12:38.468947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:12:46.470499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:13:02.473199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:13:34.479818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:15:00.122552 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 12:15:00.122756 0.022673 udp 10.0.2.104 56150 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 12:15:00.145809 0.000000 udp 10.0.2.104 56151 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 12:19:38.485184 3.010768 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:19:45.492849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:19:53.494449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:20:09.502656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:20:41.503331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:26:00.122017 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 12:26:00.122179 0.011455 udp 10.0.2.104 56152 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 12:26:00.133967 0.000000 udp 10.0.2.104 56153 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 12:26:45.509879 3.001169 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:26:52.516949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:27:00.518484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:27:16.521304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:27:48.527782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:33:52.534537 3.000544 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:33:59.541075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:34:07.542123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:34:23.545433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:34:55.551672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:40:59.557448 3.001575 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:41:00.125768 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 12:41:00.125936 0.023554 udp 10.0.2.104 56154 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 12:41:00.149850 0.000000 udp 10.0.2.104 56155 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 12:41:06.564677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:41:14.566230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:41:30.569293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:42:02.578324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:48:06.582064 3.000983 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:48:13.589105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:48:21.590610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:48:37.593496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:49:09.599362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:55:13.605428 3.001522 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:55:20.612865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:55:28.613911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:55:44.617449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:56:00.122660 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 12:56:00.122787 0.010192 udp 10.0.2.104 56156 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 12:56:00.133412 0.000000 udp 10.0.2.104 56157 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 12:56:16.623352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:12:27.632257 3.001367 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:12:34.639232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:12:42.641081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:12:58.644096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:13:30.650135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:15:00.118686 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 13:15:00.118833 0.011286 udp 10.0.2.104 56158 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 13:15:00.130486 0.000000 udp 10.0.2.104 56159 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 13:19:34.655787 3.004309 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:19:41.666190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:19:49.664497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:20:05.669932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:20:37.674069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:26:00.128000 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 13:26:00.128142 0.010600 udp 10.0.2.104 56160 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 13:26:00.139089 0.000000 udp 10.0.2.104 56161 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 13:26:41.679748 3.001860 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:26:48.687334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:26:56.689252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:27:12.694415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:27:44.698117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:33:48.704048 3.001799 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:33:55.711862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:34:03.712942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:34:19.716181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:34:51.722053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:40:55.727797 3.002109 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:41:00.121951 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 13:41:00.122115 0.011614 udp 10.0.2.104 56162 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 13:41:00.134076 0.000000 udp 10.0.2.104 56163 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 13:41:02.735159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:41:10.736902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:41:26.740081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:41:58.745878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:48:02.755025 2.998574 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:48:09.759141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:48:17.760969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:48:33.763443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:49:05.770003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:55:09.776326 3.001467 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:55:16.783265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:55:24.784594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:55:40.787987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:56:00.125730 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 13:56:00.125872 0.010961 udp 10.0.2.104 56164 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 13:56:00.137233 0.000000 udp 10.0.2.104 56165 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 13:56:12.793908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:12:26.806730 3.090472 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:12:33.868632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:12:41.825746 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:12:57.828671 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:13:29.834716 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:15:00.124856 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 14:15:00.125021 0.013580 udp 10.0.2.104 56166 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 14:15:00.139007 0.000000 udp 10.0.2.104 56167 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 14:19:33.840923 3.002029 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:19:40.848196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:19:48.849684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:20:04.861462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:20:36.864629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:26:00.123213 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 14:26:00.123422 0.010896 udp 10.0.2.104 56168 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 14:26:00.148063 0.000000 udp 10.0.2.104 56169 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 14:26:40.864460 3.002034 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:26:47.871981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:26:55.873928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:27:11.876750 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:27:43.882649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:33:47.888467 3.002224 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:33:54.896019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:34:02.897808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:34:18.900650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:34:50.906667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:40:54.911887 3.002764 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:41:00.127398 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 14:41:00.127609 0.012867 udp 10.0.2.104 56170 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 14:41:00.140864 0.000000 udp 10.0.2.104 56171 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 14:41:01.919472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:41:09.921398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:41:25.924574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:41:57.930860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:48:01.936658 3.001079 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:48:08.943770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:48:16.945538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:48:32.947995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:49:04.954677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:55:08.960643 3.001012 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:55:15.970543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:55:23.969576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:55:39.971978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:56:00.121535 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 14:56:00.121692 0.010165 udp 10.0.2.104 56172 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 14:56:00.132145 0.000000 udp 10.0.2.104 56173 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 14:56:11.978797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:12:27.984628 3.003405 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:12:34.992123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:12:42.993780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:12:58.996254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:13:31.001978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:15:00.121355 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 15:15:00.121541 0.011882 udp 10.0.2.104 56174 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 15:15:00.133822 0.000000 udp 10.0.2.104 56175 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 15:19:35.008193 3.001748 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:19:42.015739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:19:50.017416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:20:06.020431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:20:38.027405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:26:00.119888 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 15:26:00.120001 0.012776 udp 10.0.2.104 56176 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 15:26:00.133170 0.000000 udp 10.0.2.104 56177 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 15:26:42.032476 3.001467 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:26:49.039744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:26:57.042168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:27:13.044365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:27:45.050747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:33:49.056544 3.001654 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:33:56.064024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:34:04.065336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:34:20.070216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:34:52.074685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:40:56.081460 3.000480 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:41:00.124367 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 15:41:00.124464 0.011420 udp 10.0.2.104 56178 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 15:41:00.136241 0.000000 udp 10.0.2.104 56179 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 15:41:03.087885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:41:11.089219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:41:27.092272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:41:59.098166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:48:03.104890 3.001000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:48:10.111751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:48:18.113342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:48:34.116448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:49:06.122433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:55:10.128387 3.001397 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:55:17.135900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:55:25.147277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:55:41.150417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:56:00.117479 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 15:56:00.117647 0.011096 udp 10.0.2.104 56180 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 15:56:00.129125 0.000000 udp 10.0.2.104 56181 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 15:56:13.156881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:12:29.162198 3.001795 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:12:36.169926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:12:44.171099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:13:00.173970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:13:32.179829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:15:00.126603 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 16:15:00.126711 0.012576 udp 10.0.2.104 56182 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 16:15:00.139663 0.000000 udp 10.0.2.104 56183 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 16:19:36.186120 3.001820 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:19:43.193237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:19:51.198230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:20:07.202989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:20:39.208702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:26:00.130119 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 16:26:00.130331 0.010436 udp 10.0.2.104 56184 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 16:26:00.141131 0.000000 udp 10.0.2.104 56185 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 16:26:43.210005 3.002203 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:26:50.217424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:26:58.218788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:27:14.222390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:27:46.228318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:33:50.233775 3.001977 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:33:57.241929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:34:05.242681 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:34:21.246128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:34:53.252214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:40:57.258610 3.000571 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:41:00.119707 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 16:41:00.119788 0.012246 udp 10.0.2.104 56186 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 16:41:00.132396 0.000000 udp 10.0.2.104 56187 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 16:41:04.265479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:41:12.266743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:41:28.269896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:42:00.276164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:48:04.282916 3.001298 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:48:11.289269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:48:19.291135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:48:35.293958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:49:07.300176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:55:11.305932 3.001452 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:55:18.313280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:55:26.314953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:55:42.317747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:56:00.123342 0.000305 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 16:56:00.123744 0.010208 udp 10.0.2.104 56188 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 16:56:00.134300 0.000000 udp 10.0.2.104 56189 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 16:56:14.323517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:12:30.330856 3.024883 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:12:37.347685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:12:45.348650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:13:01.352298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:13:33.358095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:15:00.122555 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 17:15:00.122712 0.011294 udp 10.0.2.104 56190 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 17:15:00.134381 0.000000 udp 10.0.2.104 56191 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 17:19:37.364153 3.002454 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:19:44.371182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:19:52.375089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:20:08.375827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:20:40.381827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:26:00.121708 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 17:26:00.121887 0.010694 udp 10.0.2.104 56192 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 17:26:00.132920 0.000000 udp 10.0.2.104 56193 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 17:26:44.387954 3.001566 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:26:51.395338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:26:59.396756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:27:15.400178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:27:47.406150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:33:51.412027 3.001431 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:33:58.419354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:34:06.421205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:34:22.424210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:34:54.430277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:40:58.436402 3.000920 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:41:00.125659 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 17:41:00.125762 0.014149 udp 10.0.2.104 56194 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 17:41:00.140250 0.000000 udp 10.0.2.104 56195 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 17:41:05.443186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:41:13.444822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:41:29.447737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:42:01.453178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:48:05.460958 3.002965 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:48:12.469638 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:48:20.468620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:48:36.471899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:49:08.479691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:55:12.484123 3.001173 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:55:19.491165 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:55:27.492613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:55:43.495748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:56:00.119427 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 17:56:00.119634 0.011083 udp 10.0.2.104 56196 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 17:56:00.131131 0.000000 udp 10.0.2.104 56197 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 17:56:15.502933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:12:31.507566 3.001521 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:12:38.515018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:12:46.516760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:13:02.519561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:13:34.525502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:15:00.118570 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 18:15:00.118768 0.012137 udp 10.0.2.104 56198 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 18:15:00.131299 0.000000 udp 10.0.2.104 56199 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 18:19:38.531530 3.001661 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:19:45.542821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:19:53.540451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:20:09.544215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:20:41.549650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:26:00.117778 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 18:26:00.117929 0.010229 udp 10.0.2.104 56200 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 18:26:00.128529 0.000000 udp 10.0.2.104 56201 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 18:26:45.556276 3.000843 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:26:52.562853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:27:00.564603 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:27:16.567457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:27:48.573348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:33:52.580484 3.000756 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:33:59.587166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:34:07.588984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:34:23.592141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:34:55.597825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:40:59.604014 3.001236 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:41:00.121541 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 18:41:00.121763 0.022417 udp 10.0.2.104 56202 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 18:41:00.144612 0.000000 udp 10.0.2.104 56203 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 18:41:06.610977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:41:14.614967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:41:30.616529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:42:02.621444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:48:06.627873 3.001373 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:48:13.634994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:48:21.636391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:48:37.639322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:49:09.645420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:55:13.657414 2.996716 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:55:20.658849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:55:28.660388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:55:44.663369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:56:00.115561 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 18:56:00.115673 0.010174 udp 10.0.2.104 56204 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 18:56:00.126185 0.000000 udp 10.0.2.104 56205 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 18:56:16.669600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:12:27.679269 3.005446 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:12:34.720508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:12:42.697062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:12:58.700445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:13:30.706078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:15:00.124332 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 19:15:00.124499 0.022316 udp 10.0.2.104 56206 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 19:15:00.147205 0.000000 udp 10.0.2.104 56207 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 19:19:34.712447 3.001469 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:19:41.719547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:19:49.720951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:20:05.724205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:20:37.737232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:26:00.123648 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 19:26:00.123827 0.009558 udp 10.0.2.104 56208 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 19:26:00.133735 0.000000 udp 10.0.2.104 56209 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 19:26:41.736674 3.001390 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:26:48.743301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:26:56.745190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:27:12.748713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:27:44.754027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:33:48.760226 3.001351 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:33:55.767372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:34:03.768905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:34:19.772303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:34:51.778481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:40:55.784007 3.002427 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:41:00.117568 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 19:41:00.117755 0.049677 udp 10.0.2.104 56210 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 19:41:00.167816 0.000000 udp 10.0.2.104 56211 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 19:41:02.791943 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:41:10.792840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:41:26.796009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:41:58.801507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:48:02.812084 2.999802 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:48:09.818589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:48:17.816594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:48:33.819884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:49:05.826114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:55:09.832996 3.000625 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:55:16.839182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:55:24.840486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:55:40.843539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:56:00.121682 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 19:56:00.121856 0.010294 udp 10.0.2.104 56212 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 19:56:00.132502 0.000000 udp 10.0.2.104 56213 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 19:56:12.849799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:12:25.861222 3.011809 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:12:32.878901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:12:40.880397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:12:56.883272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:13:28.889346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:15:00.120870 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 20:15:00.121061 0.021571 udp 10.0.2.104 56214 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 20:15:00.143027 0.000000 udp 10.0.2.104 56215 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 20:19:32.894626 3.002467 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:19:39.902855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:19:47.904524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:20:03.909267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:20:35.914115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:26:00.119897 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 20:26:00.120126 0.013071 udp 10.0.2.104 56216 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 20:26:00.133619 0.000000 udp 10.0.2.104 56217 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 20:26:39.919815 3.001271 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:26:46.927038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:26:54.928778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:27:10.931254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:27:42.937365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:33:46.944198 3.000855 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:33:53.950956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:34:01.951668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:34:17.955383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:34:49.960726 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:40:53.968495 3.000317 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:41:00.123901 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 20:41:00.124066 0.022929 udp 10.0.2.104 56218 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 20:41:00.147425 0.000000 udp 10.0.2.104 56219 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 20:41:00.974765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:41:08.975987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:41:24.979006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:41:56.986624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:48:01.004266 2.989337 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:48:07.998626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:48:16.000213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:48:32.003061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:49:04.009238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:55:08.014511 3.002501 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:55:15.022287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:55:23.023666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:55:39.026786 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:56:00.117397 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 20:56:00.117539 0.010286 udp 10.0.2.104 56220 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 20:56:00.128136 0.000000 udp 10.0.2.104 56221 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 20:56:11.033149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:12:27.040248 3.026710 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:12:34.056481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:12:42.058423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:12:58.061259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:13:30.067420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:15:00.121908 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 21:15:00.121999 0.012092 udp 10.0.2.104 56222 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 21:15:00.134445 0.000000 udp 10.0.2.104 56223 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 21:19:34.073760 3.001157 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:19:41.081449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:19:49.082039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:20:05.084956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:20:37.091312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:26:00.115651 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 21:26:00.115810 0.010828 udp 10.0.2.104 56224 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 21:26:00.127024 0.000000 udp 10.0.2.104 56225 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 21:26:41.098269 3.000590 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:26:48.104501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:26:56.106259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:27:12.109145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:27:44.114898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:33:48.121195 3.001689 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:33:55.128531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:34:03.129774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:34:19.133260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:34:51.138998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:40:55.145175 3.001671 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:41:00.119270 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 21:41:00.119370 0.011535 udp 10.0.2.104 56226 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 21:41:00.131262 0.000000 udp 10.0.2.104 56227 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 21:41:02.152458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:41:10.153315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:41:26.156897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:41:58.162511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:48:02.169533 3.000729 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:48:09.176528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:48:17.178041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:48:33.181017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:49:05.186820 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:55:09.194073 3.000140 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:55:16.200606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:55:24.201819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:55:40.204969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:56:00.123734 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 21:56:00.123918 0.010188 udp 10.0.2.104 56228 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 21:56:00.134442 0.000000 udp 10.0.2.104 56229 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 21:56:12.210717 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:12:28.220102 2.998264 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:12:35.229212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:12:43.226587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:12:59.228738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:13:31.235005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:15:00.122922 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 22:15:00.123107 0.012307 udp 10.0.2.104 56230 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 22:15:00.135900 0.000000 udp 10.0.2.104 56231 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 22:19:35.241050 3.001330 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:19:42.248561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:19:50.249986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:20:06.252488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:20:38.262875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:26:00.121107 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 22:26:00.121203 0.011500 udp 10.0.2.104 56232 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 22:26:00.133046 0.000000 udp 10.0.2.104 56233 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 22:26:42.264540 3.001862 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:26:49.272032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:26:57.273950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:27:13.276846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:27:45.282440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:33:49.289535 3.001078 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:33:56.296194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:34:04.298037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:34:20.301822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:34:52.306863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:40:56.314180 2.999839 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:41:00.115768 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 22:41:00.115903 0.011533 udp 10.0.2.104 56234 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 22:41:00.127859 0.000000 udp 10.0.2.104 56235 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 22:41:03.319875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:41:11.321637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:41:27.324626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:41:59.330803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:48:03.337235 3.001644 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:48:10.343896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:48:18.346007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:48:34.348873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:49:06.354425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:55:10.360932 3.001455 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:55:17.368228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:55:25.369866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:55:41.372654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:56:00.120063 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 22:56:00.120163 0.011410 udp 10.0.2.104 56236 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 22:56:00.131971 0.000000 udp 10.0.2.104 56237 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 22:56:13.378514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:12:29.384885 3.108969 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:12:36.471158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:12:44.403858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:13:00.406542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:13:32.412546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:15:00.118769 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 23:15:00.118867 0.011528 udp 10.0.2.104 56238 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 23:15:00.130778 0.000000 udp 10.0.2.104 56239 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 23:19:36.419115 3.001540 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:19:43.426172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:19:51.427839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:20:07.430643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:20:39.438110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:26:00.117607 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 23:26:00.117778 0.021643 udp 10.0.2.104 56240 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 23:26:00.139851 0.000000 udp 10.0.2.104 56241 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 23:26:43.443139 3.001160 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:26:50.450242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:26:58.451545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:27:14.454574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:27:46.460775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:33:50.466671 3.001429 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:33:57.473920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:34:05.476099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:34:21.478321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:34:53.484742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:40:57.491280 3.000763 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:41:00.121939 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 23:41:00.122136 0.012016 udp 10.0.2.104 56242 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 23:41:00.134543 0.000000 udp 10.0.2.104 56243 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 23:41:04.497834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:41:12.499177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:41:28.502457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:42:00.508264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:48:04.515016 3.005216 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:48:11.525338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:48:19.523326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:48:35.526122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:49:07.532722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:55:11.538650 3.001567 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:55:18.545777 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:55:26.547382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:55:42.550301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:56:00.115553 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 23:56:00.115633 0.013615 udp 10.0.2.104 56244 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/09 23:56:00.129592 0.000000 udp 10.0.2.104 56245 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/09 23:56:14.556096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:12:30.563333 3.011100 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:12:37.569968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:12:45.571930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:13:01.574338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:13:33.580872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:15:00.114791 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 00:15:00.114987 0.011368 udp 10.0.2.104 56246 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 00:15:00.126704 0.000000 udp 10.0.2.104 56247 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 00:19:37.589140 2.999049 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:19:44.593778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:19:52.595017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:20:08.597879 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:20:40.604040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:26:00.113975 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 00:26:00.114070 0.012834 udp 10.0.2.104 56248 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 00:26:00.127246 0.000000 udp 10.0.2.104 56249 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 00:26:44.610782 3.001071 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:26:51.617832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:26:59.619144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:27:15.622523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:27:47.628138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:33:51.633682 3.002606 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:33:58.641420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:34:06.643231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:34:22.646134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:34:54.654573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:40:58.659013 3.000929 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:41:00.117586 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 00:41:00.117762 0.011582 udp 10.0.2.104 56250 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 00:41:00.129661 0.000000 udp 10.0.2.104 56251 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 00:41:05.665967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:41:13.667208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:41:29.670540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:42:01.676246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:48:05.681913 3.001725 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:48:12.689561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:48:20.691854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:48:36.694488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:49:08.700085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:55:12.736189 3.001370 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:55:19.743650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:55:27.744905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:55:43.748010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:56:00.151616 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 00:56:00.151800 0.012692 udp 10.0.2.104 56252 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 00:56:00.164866 0.000000 udp 10.0.2.104 56253 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 00:56:15.754107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:12:25.761236 3.001701 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:12:32.768586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:12:40.770420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:12:56.773176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:13:28.779375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:15:00.150694 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 01:15:00.150858 0.023093 udp 10.0.2.104 56254 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 01:15:00.174343 0.000000 udp 10.0.2.104 56255 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 01:19:32.785303 3.001547 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:19:39.792697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:19:47.798649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:20:03.797207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:20:35.802884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:26:00.149179 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 01:26:00.149339 0.023553 udp 10.0.2.104 56256 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 01:26:00.173283 0.000000 udp 10.0.2.104 56257 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 01:26:39.809201 3.001799 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:26:46.816908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:26:54.818175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:27:10.820780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:27:42.827022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:33:46.833216 3.001698 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:33:53.840882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:34:01.842103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:34:17.845161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:34:49.851176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:40:53.857277 3.001502 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:41:00.143883 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 01:41:00.143972 0.011793 udp 10.0.2.104 56258 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 01:41:00.156099 0.000000 udp 10.0.2.104 56259 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 01:41:00.864666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:41:08.866189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:41:24.869173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:41:56.875109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:48:00.880825 3.006150 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:48:07.888741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:48:15.892188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:48:31.892483 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:49:03.899077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:55:07.905567 3.001125 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:55:14.912541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:55:22.913670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:55:38.916852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:56:00.147712 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 01:56:00.147974 0.023231 udp 10.0.2.104 56260 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 01:56:00.171691 0.000000 udp 10.0.2.104 56261 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 01:56:10.929833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:12:23.935448 3.029695 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:12:30.960029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:12:38.953422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:12:54.956684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:13:26.962699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:15:00.146786 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 02:15:00.146901 0.012351 udp 10.0.2.104 56262 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 02:15:00.159762 0.000000 udp 10.0.2.104 56263 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 02:19:30.969432 3.000973 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:19:37.976342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:19:45.977578 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:20:01.982891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:20:33.986650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:26:00.145889 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 02:26:00.146081 0.011508 udp 10.0.2.104 56264 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 02:26:00.157956 0.000000 udp 10.0.2.104 56265 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 02:26:37.991724 3.002625 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:26:45.000278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:26:53.001587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:27:09.004464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:27:41.010583 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:33:45.016905 3.001594 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:33:52.023841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:34:00.025913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:34:16.028934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:34:48.034752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:40:52.040487 3.001627 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:40:59.048045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:41:00.149938 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 02:41:00.150042 0.012155 udp 10.0.2.104 56266 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 02:41:00.162549 0.000000 udp 10.0.2.104 56267 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 02:41:07.049424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:41:23.052456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:41:55.058902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:47:59.064466 3.001990 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:48:06.072000 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:48:14.072936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:48:30.078082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:49:02.081852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:55:06.088776 3.001484 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:55:13.096034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:55:21.097451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:55:37.100447 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:56:00.143137 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 02:56:00.143233 0.012746 udp 10.0.2.104 56268 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 02:56:00.156296 0.000000 udp 10.0.2.104 56269 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 02:56:09.106332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:12:25.113484 3.000282 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:12:32.123785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:12:40.122220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:12:56.125980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:13:28.133929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:15:00.142836 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 03:15:00.142929 0.013994 udp 10.0.2.104 56270 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 03:15:00.157247 0.000000 udp 10.0.2.104 56271 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 03:19:32.136077 3.002333 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:19:39.143433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:19:47.145394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:20:03.148513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:20:35.153730 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:26:00.141857 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 03:26:00.141977 0.012922 udp 10.0.2.104 56272 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 03:26:00.218630 0.000000 udp 10.0.2.104 56273 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 03:26:39.160677 3.002984 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:26:46.167819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:26:54.169360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:27:10.171902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:27:42.178389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:33:46.184281 3.001957 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:33:53.191450 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:34:01.193339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:34:17.196540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:34:49.202527 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:40:53.208860 3.001117 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:41:00.146027 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 03:41:00.146183 0.024901 udp 10.0.2.104 56274 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 03:41:00.171454 0.000000 udp 10.0.2.104 56275 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 03:41:00.216029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:41:08.217084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:41:24.219837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:41:56.226177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:48:00.232568 3.001382 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:48:07.239970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:48:15.243812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:48:31.246652 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:49:03.250514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:55:07.255343 3.002617 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:55:14.264192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:55:22.265193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:55:38.267981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:56:00.149335 0.000133 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 03:56:00.149575 0.012811 udp 10.0.2.104 56276 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 03:56:00.162748 0.000000 udp 10.0.2.104 56277 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 03:56:10.276911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:12:26.280755 3.001048 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:12:33.287399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:12:41.288838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:12:57.292103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:13:29.298598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:15:00.148775 0.000135 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 04:15:00.149038 0.011914 udp 10.0.2.104 56278 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 04:15:00.161317 0.000000 udp 10.0.2.104 56279 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 04:19:33.304209 3.001765 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:19:40.311428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:19:48.312819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:20:04.318849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:20:36.321940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:26:00.147833 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 04:26:00.147968 0.019825 udp 10.0.2.104 56280 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 04:26:00.168153 0.000000 udp 10.0.2.104 56281 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 04:26:40.329093 3.000947 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:26:47.339821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:26:55.337111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:27:11.339883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:27:43.345954 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:33:47.351401 3.002592 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:33:54.359617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:34:02.360947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:34:18.364243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:34:50.369902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:40:54.375662 3.001916 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:41:00.141710 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 04:41:00.141791 0.011448 udp 10.0.2.104 56282 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 04:41:00.153565 0.000000 udp 10.0.2.104 56283 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 04:41:01.383301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:41:09.384747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:41:25.388017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:41:57.393739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:48:01.400135 3.001128 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:48:08.407429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:48:16.408758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:48:32.412012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:49:04.417348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:55:08.424638 3.000822 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:55:15.431244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:55:23.432698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:55:39.446078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:56:00.145933 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 04:56:00.146106 0.019350 udp 10.0.2.104 56284 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 04:56:00.165818 0.000000 udp 10.0.2.104 56285 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 04:56:11.452117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:12:27.459877 2.999728 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:12:34.464892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:12:42.466498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:12:58.475809 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:13:30.475961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:15:00.144453 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 05:15:00.144560 0.013555 udp 10.0.2.104 56286 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 05:15:00.158573 0.000000 udp 10.0.2.104 56287 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 05:19:34.482860 3.000460 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:19:41.489334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:19:49.490582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:20:05.493916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:20:37.499945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:26:00.143760 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 05:26:00.143947 0.010259 udp 10.0.2.104 56288 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 05:26:00.154593 0.000000 udp 10.0.2.104 56289 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 05:26:41.509388 2.997946 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:26:48.513065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:26:56.514489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:27:12.517579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:27:44.523753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:33:48.529934 3.001452 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:33:55.537255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:34:03.538677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:34:19.541804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:34:51.548269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:40:55.553391 3.001950 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:41:00.147744 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 05:41:00.147927 0.023167 udp 10.0.2.104 56290 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 05:41:00.171645 0.000000 udp 10.0.2.104 56291 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 05:41:02.561138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:41:10.562653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:41:26.565465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:41:58.571820 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:48:02.578142 3.001201 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:48:09.584744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:48:17.586702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:48:33.591953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:49:05.598368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:55:09.602484 3.000863 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:55:16.609133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:55:24.610752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:55:40.613554 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:56:00.141598 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 05:56:00.141811 0.014775 udp 10.0.2.104 56292 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 05:56:00.156968 0.000000 udp 10.0.2.104 56293 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 05:56:12.619405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:12:28.626091 3.000889 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:12:35.632907 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:12:43.634528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:12:59.637778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:13:31.653267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:15:00.140840 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 06:15:00.140993 0.014533 udp 10.0.2.104 56294 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 06:15:00.155879 0.000000 udp 10.0.2.104 56295 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 06:19:35.659403 3.001432 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:19:42.666826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:19:50.668373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:20:06.671357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:20:38.677477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:26:00.140081 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 06:26:00.140258 0.011285 udp 10.0.2.104 56296 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 06:26:00.151921 0.000000 udp 10.0.2.104 56297 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 06:26:42.687835 2.997165 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:26:49.690773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:26:57.692351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:27:13.695865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:27:45.700997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:33:49.708218 3.000880 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:33:56.715061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:34:04.716337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:34:20.719395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:34:52.725597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:40:56.732216 3.007011 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:41:00.149108 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 06:41:00.149215 0.011485 udp 10.0.2.104 56298 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 06:41:00.161145 0.000000 udp 10.0.2.104 56299 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 06:41:03.739096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:41:11.740425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:41:27.743215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:41:59.749346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:48:03.755418 3.001330 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:48:10.762588 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:48:18.764472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:48:34.768905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:49:06.774208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:55:10.781855 2.998960 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:55:17.786442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:55:25.788315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:55:41.790952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:56:00.147800 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 06:56:00.147956 0.011927 udp 10.0.2.104 56300 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 06:56:00.160264 0.000000 udp 10.0.2.104 56301 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 06:56:13.796991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:12:29.803867 3.000882 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:12:36.810597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:12:44.812391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:13:00.821132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:13:32.820808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:15:00.146994 0.000135 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 07:15:00.147230 0.013101 udp 10.0.2.104 56302 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 07:15:00.160670 0.000000 udp 10.0.2.104 56303 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 07:19:36.829613 3.002833 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:19:43.834517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:19:51.836220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:20:07.838893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:20:39.855015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:26:00.145685 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 07:26:00.145859 0.014498 udp 10.0.2.104 56304 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 07:26:00.160716 0.000000 udp 10.0.2.104 56305 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 07:26:43.862024 3.000852 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:26:50.868544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:26:58.873883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:27:14.872913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:27:46.879176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:33:50.885267 3.001856 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:33:57.892330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:34:05.893297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:34:21.897064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:34:53.902983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:40:57.915739 2.995032 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:41:00.142401 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 07:41:00.142493 0.014309 udp 10.0.2.104 56306 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 07:41:00.157170 0.000000 udp 10.0.2.104 56307 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 07:41:04.916495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:41:12.917938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:41:28.920938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:42:00.926780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:48:04.933329 3.001347 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:48:11.939722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:48:19.950356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:48:35.945047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:49:07.950877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:55:11.956103 3.002432 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:55:18.964542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:55:26.965860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:55:42.968628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:56:00.143506 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 07:56:00.143612 0.010917 udp 10.0.2.104 56308 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 07:56:00.154871 0.000000 udp 10.0.2.104 56309 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 07:56:14.974985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:12:26.985965 3.023211 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:12:34.001933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:12:42.035715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:12:58.016844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:13:30.022409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:15:00.142794 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 08:15:00.142946 0.022996 udp 10.0.2.104 56310 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 08:15:00.166314 0.000000 udp 10.0.2.104 56311 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 08:19:34.029533 3.000572 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:19:41.036425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:19:49.037390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:20:05.040964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:20:37.046947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:26:00.141695 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 08:26:00.141793 0.010128 udp 10.0.2.104 56312 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 08:26:00.152221 0.000000 udp 10.0.2.104 56313 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 08:26:41.053464 3.001005 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:26:48.060577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:26:56.062692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:27:12.065033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:27:44.070328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:33:48.077238 3.001196 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:33:55.084323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:34:03.086196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:34:19.089018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:34:51.095146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:40:55.101593 3.000367 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:41:00.145596 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 08:41:00.145741 0.011541 udp 10.0.2.104 56314 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 08:41:00.157639 0.000000 udp 10.0.2.104 56315 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 08:41:02.108285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:41:10.110101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:41:26.112276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:41:58.118895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:48:02.125346 3.001553 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:48:09.132242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:48:17.133991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:48:33.136847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:49:05.142580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:55:09.150697 2.999714 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:55:16.156349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:55:24.157860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:55:40.160574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:56:00.140118 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 08:56:00.140288 0.010164 udp 10.0.2.104 56316 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 08:56:00.150796 0.000000 udp 10.0.2.104 56317 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 08:56:12.167037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:12:26.180932 3.000660 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:12:33.187215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:12:41.193947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:12:57.196078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:13:29.198030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:15:00.140128 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 09:15:00.140304 0.011763 udp 10.0.2.104 56318 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 09:15:00.152474 0.000000 udp 10.0.2.104 56319 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 09:19:33.203985 3.002557 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:19:40.214462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:19:48.212797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:20:04.225816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:20:36.231851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:26:00.137570 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 09:26:00.137795 0.017780 udp 10.0.2.104 56320 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 09:26:00.155937 0.000000 udp 10.0.2.104 56321 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 09:26:40.238689 3.001346 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:26:47.245099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:26:55.247048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:27:11.250150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:27:43.256038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:33:47.262278 3.001592 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:33:54.268889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:34:02.270646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:34:18.274024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:34:50.280035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:40:54.285731 3.001883 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:41:00.142040 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 09:41:00.142149 0.023929 udp 10.0.2.104 56322 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 09:41:00.166487 0.000000 udp 10.0.2.104 56323 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 09:41:01.293252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:41:09.294918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:41:25.297785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:41:57.303705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:48:02.311295 3.001793 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:48:09.318420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:48:17.319695 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:48:33.323174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:49:05.329122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:55:09.336122 3.000665 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:55:16.342758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:55:24.344010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:55:40.347092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:56:00.145831 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 09:56:00.145980 0.010990 udp 10.0.2.104 56324 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 09:56:00.157363 0.000000 udp 10.0.2.104 56325 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 09:56:12.353083 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:12:26.367146 3.001133 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:12:33.373779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:12:41.376140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:12:57.378600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:13:29.383872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:15:00.144685 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 10:15:00.144876 0.014272 udp 10.0.2.104 56326 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 10:15:00.159677 0.000000 udp 10.0.2.104 56327 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 10:19:33.390636 3.000647 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:19:40.397522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:19:48.399115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:20:04.402121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:20:36.408326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:26:00.143249 0.000146 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 10:26:00.143507 0.013541 udp 10.0.2.104 56328 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 10:26:00.157402 0.000000 udp 10.0.2.104 56329 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 10:26:40.414265 3.001674 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:26:47.421413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:26:55.423105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:27:11.426432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:27:43.432587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:33:47.438443 3.001525 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:33:54.445551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:34:02.447127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:34:18.450244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:34:50.456334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:40:54.461716 3.002216 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:41:00.137649 0.000131 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 10:41:00.137859 0.010697 udp 10.0.2.104 56330 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 10:41:00.148961 0.000000 udp 10.0.2.104 56331 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 10:41:01.469496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:41:09.470993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:41:25.474227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:41:57.480191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:48:02.487726 3.001218 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:48:09.495059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:48:17.498793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:48:33.499231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:49:05.505456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:55:09.512489 3.000258 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:55:16.518617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:55:24.520317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:55:40.523387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:56:00.141861 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 10:56:00.142020 0.011834 udp 10.0.2.104 56332 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 10:56:00.154229 0.000000 udp 10.0.2.104 56333 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 10:56:12.529416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:12:27.547819 2.997502 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:12:34.551361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:12:42.553237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:12:58.556506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:13:30.563991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:15:00.140549 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 11:15:00.140707 0.011839 udp 10.0.2.104 56334 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 11:15:00.152898 0.000000 udp 10.0.2.104 56335 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 11:19:34.573413 3.002011 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:19:41.578082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:19:49.576774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:20:05.580201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:20:37.586088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:26:00.139661 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 11:26:00.139828 0.025104 udp 10.0.2.104 56336 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 11:26:00.165283 0.000000 udp 10.0.2.104 56337 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 11:26:41.591683 3.001869 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:26:48.599223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:26:56.600742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:27:12.604067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:27:44.610161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:33:48.616714 3.000640 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:33:55.623274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:34:03.624517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:34:19.627791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:34:51.633600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:40:55.639846 3.001629 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:41:00.144054 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 11:41:00.144218 0.012087 udp 10.0.2.104 56338 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 11:41:00.156668 0.000000 udp 10.0.2.104 56339 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 11:41:02.647178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:41:10.648581 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:41:26.651834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:41:58.657401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:48:02.663435 3.001989 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:48:09.674026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:48:17.672539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:48:33.675731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:49:05.682672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:55:09.688340 3.001056 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:55:16.695021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:55:24.696729 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:55:40.700032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:56:00.137803 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 11:56:00.137989 0.011709 udp 10.0.2.104 56340 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 11:56:00.150082 0.000000 udp 10.0.2.104 56341 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 11:56:12.705721 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:12:27.719784 3.218925 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:12:34.905516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:12:42.835324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:12:58.742204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:13:30.748444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:15:00.136897 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 12:15:00.137007 0.012009 udp 10.0.2.104 56342 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 12:15:00.149416 0.000000 udp 10.0.2.104 56343 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 12:19:34.755257 3.001050 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:19:41.761505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:19:49.763056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:20:05.766034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:20:37.772336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:26:00.146208 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 12:26:00.146361 0.025442 udp 10.0.2.104 56344 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 12:26:00.172216 0.000000 udp 10.0.2.104 56345 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 12:26:41.778756 3.000862 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:26:48.785911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:26:56.787093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:27:12.789928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:27:44.795807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:33:48.801394 3.002668 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:33:55.809642 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:34:03.811307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:34:19.813775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:34:51.820320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:40:55.826722 3.004007 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:41:00.140804 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 12:41:00.140913 0.011787 udp 10.0.2.104 56346 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 12:41:00.153084 0.000000 udp 10.0.2.104 56347 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 12:41:02.833111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:41:10.834919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:41:26.837770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:41:58.844114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:48:03.852109 3.001886 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:48:10.858848 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:48:18.860146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:48:34.863258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:49:06.869434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:55:10.875726 3.001172 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:55:18.184663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:55:26.104926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:55:41.948957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:56:00.143936 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 12:56:00.144041 0.011813 udp 10.0.2.104 56348 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 12:56:00.156234 0.000000 udp 10.0.2.104 56349 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 12:56:13.913234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:12:29.919427 3.001704 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:12:36.926737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:12:44.928125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:13:00.931134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:13:32.937260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:15:00.142747 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 13:15:00.142857 0.013554 udp 10.0.2.104 56350 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 13:15:00.156848 0.000000 udp 10.0.2.104 56351 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 13:19:36.943391 3.001654 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:19:43.950108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:19:51.951757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:20:07.955000 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:20:39.962851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:26:00.141628 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 13:26:00.141778 0.011132 udp 10.0.2.104 56352 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 13:26:00.153259 0.000000 udp 10.0.2.104 56353 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 13:26:43.966131 3.002153 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:26:50.974885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:26:58.976475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:27:14.978958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:27:46.985401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:33:50.992343 3.000439 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:33:57.998678 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:34:05.999738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:34:22.003087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:34:54.009186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:40:58.015075 3.002992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:41:00.137828 0.000135 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 13:41:00.138067 0.011505 udp 10.0.2.104 56354 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 13:41:00.149945 0.000000 udp 10.0.2.104 56355 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 13:41:05.022681 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:41:13.023641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:41:29.026525 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:42:01.033291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:48:06.040856 3.001085 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:48:13.048029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:48:21.049800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:48:37.052213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:49:09.060474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:55:13.064457 3.001897 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:55:20.071822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:55:28.073052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:55:44.079776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:56:00.139521 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 13:56:00.139656 0.011388 udp 10.0.2.104 56356 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 13:56:00.151446 0.000000 udp 10.0.2.104 56357 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 13:56:16.082377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:12:27.091219 3.002930 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:12:34.098739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:12:42.099918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:12:58.103412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:13:30.109243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:15:00.138749 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 14:15:00.138841 0.011400 udp 10.0.2.104 56358 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 14:15:00.150599 0.000000 udp 10.0.2.104 56359 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 14:19:34.115565 3.001016 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:19:41.122607 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:19:49.123591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:20:05.127270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:20:37.133033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:26:00.137556 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 14:26:00.137704 0.013536 udp 10.0.2.104 56360 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 14:26:00.151604 0.000000 udp 10.0.2.104 56361 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 14:26:41.139028 3.001805 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:26:48.146519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:26:56.149719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:27:12.151202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:27:44.157168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:33:48.164098 3.000870 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:33:55.170427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:34:03.172070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:34:19.175429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:34:51.181173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:40:55.186423 3.002348 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:41:00.141505 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 14:41:00.141706 0.022650 udp 10.0.2.104 56362 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 14:41:00.164734 0.000000 udp 10.0.2.104 56363 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 14:41:02.194390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:41:10.196214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:41:26.199140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:41:58.205055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:48:02.211127 3.001739 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:48:09.218542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:48:17.220077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:48:33.222981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:49:05.228919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:55:09.239646 2.996893 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:55:16.242266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:55:24.243985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:55:40.247078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:56:00.135957 0.000118 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 14:56:00.136177 0.010082 udp 10.0.2.104 56364 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 14:56:00.146613 0.000000 udp 10.0.2.104 56365 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 14:56:12.253089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:12:25.264569 3.001768 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:12:32.272044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:12:40.273243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:12:56.277224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:13:28.282789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:15:00.134735 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 15:15:00.134926 0.012189 udp 10.0.2.104 56366 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 15:15:00.147620 0.000000 udp 10.0.2.104 56367 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 15:19:32.289324 3.000862 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:19:39.296143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:19:47.297339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:20:03.300464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:20:35.306762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:26:00.143091 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 15:26:00.143229 0.012123 udp 10.0.2.104 56368 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 15:26:00.155749 0.000000 udp 10.0.2.104 56369 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 15:26:39.314144 3.000114 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:26:46.319480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:26:54.321448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:27:10.324488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:27:42.330474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:33:46.337435 3.000942 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:33:53.343782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:34:01.345647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:34:17.348594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:34:49.354539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:40:53.360518 3.000951 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:41:00.137770 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 15:41:00.137876 0.011408 udp 10.0.2.104 56370 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 15:41:00.149639 0.000000 udp 10.0.2.104 56371 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 15:41:00.368280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:41:08.369518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:41:24.372517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:41:56.378555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:48:00.384612 3.001389 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:48:07.391737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:48:15.393409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:48:31.396315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:49:03.402309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:55:07.408638 3.005772 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:55:14.415900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:55:22.417226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:55:38.420325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:56:00.141650 0.000111 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 15:56:00.141862 0.010636 udp 10.0.2.104 56372 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 15:56:00.152864 0.000000 udp 10.0.2.104 56373 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 15:56:10.426636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:12:25.441066 3.001373 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:12:32.448509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:12:40.449902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:12:56.452878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:13:28.458612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:15:00.140833 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 16:15:00.140944 0.010203 udp 10.0.2.104 56374 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 16:15:00.151529 0.000000 udp 10.0.2.104 56375 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 16:19:32.465580 3.001003 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:19:39.472074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:19:47.474012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:20:03.481178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:20:35.482756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:26:00.139641 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 16:26:00.139785 0.010218 udp 10.0.2.104 56376 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 16:26:00.164669 0.000000 udp 10.0.2.104 56377 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 16:26:39.489039 3.001615 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:26:46.496290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:26:54.498208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:27:10.500951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:27:42.506835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:33:46.512735 3.001575 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:33:53.520091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:34:01.521505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:34:17.524807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:34:49.530750 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:40:53.536611 3.001906 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:41:00.133413 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 16:41:00.133572 0.023675 udp 10.0.2.104 56378 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 16:41:00.157597 0.000000 udp 10.0.2.104 56379 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 16:41:00.544178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:41:08.546016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:41:24.548634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:41:56.554710 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:48:00.560827 3.001378 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:48:07.568562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:48:15.569850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:48:31.575111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:49:03.579190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:55:07.584469 3.001678 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:55:14.592155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:55:22.593853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:55:38.596774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:56:00.137453 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 16:56:00.137545 0.010124 udp 10.0.2.104 56380 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 16:56:00.148033 0.000000 udp 10.0.2.104 56381 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 16:56:10.602895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:12:26.608943 3.001535 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:12:33.616117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:12:41.618007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:12:57.620643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:13:29.628078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:15:00.138646 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 17:15:00.138811 0.011631 udp 10.0.2.104 56382 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 17:15:00.150798 0.000000 udp 10.0.2.104 56383 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 17:19:33.633297 3.001070 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:19:40.640169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:19:48.641410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:20:04.644458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:20:36.662867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:26:00.135831 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 17:26:00.136014 0.012597 udp 10.0.2.104 56384 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 17:26:00.148973 0.000000 udp 10.0.2.104 56385 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 17:26:40.667818 3.000302 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:26:47.674020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:26:55.675220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:27:11.678517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:27:43.684244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:33:47.691021 3.001283 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:33:54.698139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:34:02.699388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:34:18.703064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:34:50.708173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:40:54.714101 3.001981 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:41:00.140094 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 17:41:00.140196 0.021644 udp 10.0.2.104 56386 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 17:41:00.162195 0.000000 udp 10.0.2.104 56387 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 17:41:01.721943 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:41:09.723378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:41:25.726210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:41:57.732470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:48:01.738741 3.001677 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:48:08.745795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:48:16.747008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:48:32.750432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:49:04.756450 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:55:08.762342 3.001716 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:55:15.770193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:55:23.771303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:55:39.784532 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:56:00.133518 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 17:56:00.133686 0.010242 udp 10.0.2.104 56388 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 17:56:00.144247 0.000000 udp 10.0.2.104 56389 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 17:56:11.790098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:12:27.796158 3.001948 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:12:34.804318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:12:42.805692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:12:58.808787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:13:30.813794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:15:00.132675 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 18:15:00.132779 0.012553 udp 10.0.2.104 56390 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 18:15:00.145718 0.000000 udp 10.0.2.104 56391 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 18:19:34.820669 3.000895 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:19:41.827682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:19:49.828933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:20:05.832090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:20:37.840189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:26:00.141524 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 18:26:00.141613 0.010809 udp 10.0.2.104 56392 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 18:26:00.152796 0.000000 udp 10.0.2.104 56393 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 18:26:41.844451 3.001511 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:26:48.851491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:26:56.852932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:27:12.856344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:27:44.862028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:33:48.869098 3.000608 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:33:55.875704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:34:03.877249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:34:19.880045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:34:51.886549 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:40:55.893434 2.999794 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:41:00.135945 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 18:41:00.136050 0.009583 udp 10.0.2.104 56394 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 18:41:00.146058 0.000000 udp 10.0.2.104 56395 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 18:41:02.899691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:41:10.900901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:41:26.903345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:41:58.910458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:48:03.917521 3.001302 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:48:10.927068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:48:18.926562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:48:34.929436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:49:06.935828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:55:10.941703 3.001471 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:55:17.948751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:55:25.950399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:55:41.952972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:56:00.139648 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 18:56:00.139834 0.010630 udp 10.0.2.104 56396 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 18:56:00.150855 0.000000 udp 10.0.2.104 56397 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 18:56:13.961997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:12:29.964934 3.001403 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:12:36.972758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:12:44.974453 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:13:00.977159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:13:32.983088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:15:00.138622 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 19:15:00.138756 0.012272 udp 10.0.2.104 56398 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 19:15:00.151434 0.000000 udp 10.0.2.104 56399 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 19:19:36.989452 3.001437 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:19:43.996449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:19:51.998474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:20:08.000622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:20:40.007393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:26:00.137746 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 19:26:00.137842 0.022486 udp 10.0.2.104 56400 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 19:26:00.160738 0.000000 udp 10.0.2.104 56401 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 19:26:44.016880 2.998041 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:26:51.020684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:26:59.022207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:27:15.026358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:27:47.031173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:33:51.037577 3.001216 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:33:58.044309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:34:06.046826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:34:22.049197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:34:54.055696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:40:58.061053 3.001261 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:41:00.141513 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 19:41:00.141668 0.011947 udp 10.0.2.104 56402 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 19:41:00.153973 0.000000 udp 10.0.2.104 56403 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 19:41:05.068379 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:41:13.070247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:41:29.073198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:42:01.079014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:48:06.089451 2.998820 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:48:13.094015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:48:21.095490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:48:37.098385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:49:09.105199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:55:13.111417 3.007647 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:55:20.118606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:55:28.119651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:55:44.122340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:56:00.135807 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 19:56:00.135900 0.011200 udp 10.0.2.104 56404 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 19:56:00.147603 0.000000 udp 10.0.2.104 56405 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 19:56:16.128419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:12:27.136761 3.002029 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:12:34.144672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:12:42.146771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:12:58.149280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:13:30.155236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:15:00.135014 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 20:15:00.135201 0.012432 udp 10.0.2.104 56406 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 20:15:00.148013 0.000000 udp 10.0.2.104 56407 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 20:19:34.161602 3.001290 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:19:41.168383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:19:49.170092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:20:05.172820 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:20:37.178902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:26:00.133379 0.053320 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 20:26:00.186892 0.024670 udp 10.0.2.104 56408 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 20:26:00.211972 0.000000 udp 10.0.2.104 56409 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 20:26:41.185321 3.001516 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:26:48.192665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:26:56.194072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:27:12.197058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:27:44.203061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:33:48.210231 3.000709 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:33:55.216610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:34:03.218240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:34:19.220997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:34:51.227144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:40:55.234058 3.002181 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:41:00.137795 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 20:41:00.137948 0.018376 udp 10.0.2.104 56410 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 20:41:00.156702 0.000000 udp 10.0.2.104 56411 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 20:41:02.244521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:41:10.241885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:41:26.244972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:41:58.250961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:48:02.256796 3.001928 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:48:09.264490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:48:17.266193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:48:33.268934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:49:05.274978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:55:09.281650 3.001054 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:55:16.288647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:55:24.290201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:55:40.292651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:56:00.131481 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 20:56:00.131680 0.011990 udp 10.0.2.104 56412 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 20:56:00.144027 0.000000 udp 10.0.2.104 56413 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 20:56:12.298961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:12:25.311674 3.000670 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:12:32.317458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:12:40.329798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:12:56.332568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:13:28.338551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:15:00.141006 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 21:15:00.141100 0.011531 udp 10.0.2.104 56414 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 21:15:00.152976 0.000000 udp 10.0.2.104 56415 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 21:19:32.344590 3.001740 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:19:39.352123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:19:47.353838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:20:03.356645 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:20:35.365725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:26:00.139745 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 21:26:00.139855 0.022653 udp 10.0.2.104 56416 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 21:26:00.162838 0.000000 udp 10.0.2.104 56417 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 21:26:39.369603 3.001062 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:26:46.375750 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:26:54.378092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:27:10.380719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:27:42.386322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:33:46.392871 3.001483 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:33:53.402112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:34:01.401506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:34:17.404506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:34:49.410553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:40:53.416844 3.001315 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:41:00.133101 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 21:41:00.133288 0.011054 udp 10.0.2.104 56418 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 21:41:00.144723 0.000000 udp 10.0.2.104 56419 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 21:41:00.424142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:41:08.425357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:41:24.428503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:41:56.434395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:48:00.440867 3.001540 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:48:07.447883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:48:15.449455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:48:31.452501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:49:03.457937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:55:07.465859 3.000408 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:55:14.472112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:55:22.473487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:55:38.476274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:56:00.137639 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 21:56:00.137750 0.010415 udp 10.0.2.104 56420 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 21:56:00.148546 0.000000 udp 10.0.2.104 56421 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 21:56:10.482735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:12:25.502859 3.002160 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:12:32.504444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:12:40.505935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:12:56.508837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:13:28.514742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:15:00.138654 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 22:15:00.138861 0.010227 udp 10.0.2.104 56422 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 22:15:00.149473 0.000000 udp 10.0.2.104 56423 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 22:19:32.521752 3.000964 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:19:39.528439 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:19:47.529917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:20:03.532832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:20:35.538627 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:26:00.138070 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 22:26:00.138169 0.010265 udp 10.0.2.104 56424 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 22:26:00.148820 0.000000 udp 10.0.2.104 56425 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 22:26:39.545029 3.001322 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:26:46.552481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:26:54.553902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:27:10.556882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:27:42.563134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:33:46.568469 3.002011 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:33:53.576649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:34:01.578255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:34:17.580846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:34:49.587680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:40:53.593294 3.001130 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:41:00.139319 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 22:41:00.139401 0.012635 udp 10.0.2.104 56426 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 22:41:00.152365 0.000000 udp 10.0.2.104 56427 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 22:41:00.600705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:41:08.602385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:41:24.604890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:41:56.610893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:48:00.616678 3.001651 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:48:07.624120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:48:15.625577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:48:31.628650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:49:03.634460 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:55:07.640454 3.002144 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:55:14.648181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:55:22.652952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:55:38.652667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:56:00.134008 0.000156 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 22:56:00.134270 0.012122 udp 10.0.2.104 56428 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 22:56:00.146756 0.000000 udp 10.0.2.104 56429 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 22:56:10.658658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:12:25.674251 3.010497 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:12:32.690464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:12:40.692485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:12:56.695339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:13:28.701064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:15:00.132632 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 23:15:00.132712 0.022369 udp 10.0.2.104 56430 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 23:15:00.155446 0.000000 udp 10.0.2.104 56431 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 23:19:32.862493 3.018203 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:19:39.890188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:19:47.833856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:20:03.799019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:20:35.806304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:26:00.202011 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 23:26:00.202125 0.011645 udp 10.0.2.104 56432 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 23:26:00.214121 0.000000 udp 10.0.2.104 56433 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 23:26:39.811978 3.000361 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:26:46.818451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:26:54.820164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:27:10.822712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:27:42.829282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:33:46.835290 3.001435 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:33:53.842368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:34:01.844082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:34:17.847112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:34:49.852979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:40:53.860193 3.000579 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:41:00.205885 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 23:41:00.206047 0.012180 udp 10.0.2.104 56434 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 23:41:00.218556 0.000000 udp 10.0.2.104 56435 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 23:41:00.866816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:41:08.867922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:41:24.871633 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:41:56.877576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:48:01.079688 2.995296 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:48:08.080599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:48:16.082189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:48:32.085131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:49:04.096826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:55:08.097491 3.001648 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:55:15.104748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:55:23.106511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:55:39.109279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:56:00.199174 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 23:56:00.199390 0.012107 udp 10.0.2.104 56436 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/10 23:56:00.211917 0.000000 udp 10.0.2.104 56437 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/10 23:56:11.115351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:12:27.121344 3.002806 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:12:34.128641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:12:42.130273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:12:58.133236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:13:30.138655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:15:00.213803 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 00:15:00.213987 0.015586 udp 10.0.2.104 56438 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 00:15:00.229942 0.000000 udp 10.0.2.104 56439 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 00:19:34.145695 3.001131 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:19:41.152542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:19:49.154727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:20:05.467441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:20:37.473592 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:26:00.207748 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 00:26:00.207909 0.021782 udp 10.0.2.104 56440 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 00:26:00.230056 0.000000 udp 10.0.2.104 56441 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 00:26:41.479765 3.001553 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:26:48.488475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:26:56.488576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:27:12.493725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:27:44.497628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:33:48.503419 3.001607 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:33:55.511146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:34:03.512617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:34:19.515814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:34:51.521945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:40:55.527313 3.002113 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:41:00.201697 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 00:41:00.201881 0.014127 udp 10.0.2.104 56442 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 00:41:00.216376 0.000000 udp 10.0.2.104 56443 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 00:41:02.536204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:41:10.536624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:41:26.539429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:41:58.545368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:48:02.552305 3.001043 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:48:09.558842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:48:17.564078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:48:33.563422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:49:05.570080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:55:09.575766 3.001571 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:55:16.583139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:55:24.584611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:55:40.587381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:56:00.205696 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 00:56:00.205873 0.010283 udp 10.0.2.104 56444 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 00:56:00.216513 0.000000 udp 10.0.2.104 56445 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 00:56:12.593440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:12:28.599390 3.011603 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:12:35.616783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:12:43.618297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:12:59.621353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:13:31.627346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:15:00.204627 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 01:15:00.204731 0.017195 udp 10.0.2.104 56446 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 01:15:00.222282 0.000000 udp 10.0.2.104 56447 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 01:19:35.633677 3.001095 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:19:42.640718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:19:50.642488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:20:06.646344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:20:38.654220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:26:00.203626 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 01:26:00.203810 0.012035 udp 10.0.2.104 56448 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 01:26:00.216232 0.000000 udp 10.0.2.104 56449 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 01:26:42.657686 3.001192 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:26:49.664689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:26:57.666523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:27:13.669814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:27:45.675318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:33:49.682601 3.001006 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:33:56.688780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:34:04.690595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:34:20.693228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:34:52.699382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:40:56.705069 3.002327 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:41:00.207425 0.000264 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 01:41:00.207805 0.021544 udp 10.0.2.104 56450 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 01:41:00.229683 0.000000 udp 10.0.2.104 56451 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 01:41:03.712659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:41:11.714243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:41:27.717027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:41:59.723340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:48:03.730048 3.000645 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:48:10.737405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:48:18.737852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:48:34.741116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:49:06.748323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:55:10.753894 3.000946 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:55:17.760631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:55:25.762190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:55:41.765032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:56:00.202024 0.000166 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 01:56:00.202294 0.011582 udp 10.0.2.104 56452 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 01:56:00.214293 0.000000 udp 10.0.2.104 56453 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 01:56:13.771323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:12:30.779428 3.001023 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:12:37.785888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:12:45.787174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:13:01.790828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:13:33.796400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:15:00.200795 0.000092 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 02:15:00.200966 0.011827 udp 10.0.2.104 56454 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 02:15:00.213191 0.000000 udp 10.0.2.104 56455 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 02:19:37.810691 2.994521 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:19:44.809948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:19:52.811424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:20:08.819006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:20:40.820178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:26:00.199339 0.000155 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 02:26:00.199599 0.011251 udp 10.0.2.104 56456 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 02:26:00.211202 0.000000 udp 10.0.2.104 56457 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 02:26:44.826285 3.001737 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:26:51.834015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:26:59.835630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:27:15.838397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:27:47.844183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:33:51.850491 3.001443 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:33:58.858011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:34:06.859415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:34:22.862217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:34:54.869058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:40:58.874611 3.001452 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:41:00.203474 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 02:41:00.203675 0.011355 udp 10.0.2.104 56458 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 02:41:00.215340 0.000000 udp 10.0.2.104 56459 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 02:41:05.881852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:41:13.883303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:41:29.886190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:42:01.892251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:48:05.900887 2.998964 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:48:12.905899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:48:20.907117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:48:36.909577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:49:08.916409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:55:12.923367 3.000033 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:55:19.929946 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:55:27.931031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:55:43.933886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:56:00.208117 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 02:56:00.208260 0.011375 udp 10.0.2.104 56460 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 02:56:00.219997 0.000000 udp 10.0.2.104 56461 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 02:56:15.940416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:12:27.951734 2.999976 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:12:34.957807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:12:42.959381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:12:58.962529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:13:30.968303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:15:00.206676 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 03:15:00.206874 0.011254 udp 10.0.2.104 56462 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 03:15:00.218503 0.000000 udp 10.0.2.104 56463 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 03:19:34.975235 3.000766 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:19:41.981975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:19:49.983232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:20:05.986393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:20:37.992327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:26:00.207394 0.000225 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 03:26:00.207704 0.021724 udp 10.0.2.104 56464 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 03:26:00.229764 0.000000 udp 10.0.2.104 56465 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 03:26:41.998309 3.038063 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:26:49.015692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:26:57.017086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:27:13.020194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:27:45.026465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:33:49.031427 3.002062 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:33:56.039955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:34:04.040744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:34:20.044243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:34:52.050425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:40:56.056212 3.001796 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:41:00.199503 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 03:41:00.199670 0.012217 udp 10.0.2.104 56466 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 03:41:00.212262 0.000000 udp 10.0.2.104 56467 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 03:41:03.063810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:41:11.065150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:41:27.068228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:41:59.074190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:48:03.080631 3.001323 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:48:10.124657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:48:18.099262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:48:34.101918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:49:06.107620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:55:10.114317 3.001797 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:55:17.125628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:55:25.122984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:55:41.126144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:56:00.203678 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 03:56:00.203788 0.011314 udp 10.0.2.104 56468 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 03:56:00.215454 0.000000 udp 10.0.2.104 56469 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 03:56:13.132287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:12:27.144814 3.001784 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:12:34.152601 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:12:42.154198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:12:58.157294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:13:30.164098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:15:00.202838 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 04:15:00.202987 0.011626 udp 10.0.2.104 56470 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 04:15:00.215080 0.000000 udp 10.0.2.104 56471 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 04:19:34.169426 3.001472 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:19:41.176628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:19:49.178069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:20:05.181353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:20:37.187290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:26:00.201901 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 04:26:00.202076 0.011265 udp 10.0.2.104 56472 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 04:26:00.213691 0.000000 udp 10.0.2.104 56473 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 04:26:41.193933 3.000873 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:26:48.200813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:26:56.202084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:27:12.204966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:27:44.211079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:33:48.217075 3.001741 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:33:55.224499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:34:03.226635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:34:19.229228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:34:51.235243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:40:55.241469 3.001479 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:41:00.205587 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 04:41:00.205686 0.015288 udp 10.0.2.104 56474 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 04:41:00.221348 0.000000 udp 10.0.2.104 56475 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 04:41:02.248765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:41:10.250269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:41:26.253117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:41:58.259127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:48:02.265797 3.001006 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:48:09.272567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:48:17.273539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:48:33.276924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:49:05.283016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:55:09.289609 3.001310 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:55:16.296484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:55:24.298040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:55:40.301015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:56:00.199555 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 04:56:00.239628 0.011318 udp 10.0.2.104 56476 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 04:56:00.251314 0.000000 udp 10.0.2.104 56477 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 04:56:12.307063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:12:27.321845 3.006335 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:12:34.331824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:12:42.335836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:12:58.333399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:13:30.339774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:15:00.198791 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 05:15:00.198937 0.024647 udp 10.0.2.104 56478 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 05:15:00.223954 0.000000 udp 10.0.2.104 56479 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 05:19:34.346547 3.000498 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:19:41.352797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:19:49.354349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:20:05.357613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:20:37.363315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:26:00.197581 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 05:26:00.197672 0.011982 udp 10.0.2.104 56480 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 05:26:00.209982 0.000000 udp 10.0.2.104 56481 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 05:26:41.369416 3.001847 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:26:48.376893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:26:56.378309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:27:12.381248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:27:44.387541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:33:48.393512 3.001590 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:33:55.401047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:34:03.402771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:34:19.405319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:34:51.411608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:40:55.416943 3.002082 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:41:00.202035 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 05:41:00.202178 0.021937 udp 10.0.2.104 56482 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 05:41:00.224481 0.000000 udp 10.0.2.104 56483 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 05:41:02.424878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:41:10.426304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:41:26.429092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:41:58.435386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:48:02.441422 3.001448 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:48:09.449059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:48:17.450319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:48:33.453335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:49:05.459179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:55:09.466042 3.001216 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:55:16.472539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:55:24.474125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:55:40.477377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:56:00.205731 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 05:56:00.205898 0.012204 udp 10.0.2.104 56484 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 05:56:00.218458 0.000000 udp 10.0.2.104 56485 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 05:56:12.483247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:12:27.497667 3.001876 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:12:34.505359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:12:42.506681 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:12:58.512481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:13:30.519197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:15:00.204824 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 06:15:00.236472 0.010747 udp 10.0.2.104 56486 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 06:15:00.247602 0.000000 udp 10.0.2.104 56487 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 06:19:34.521927 3.001507 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:19:41.528927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:19:49.530737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:20:05.533560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:20:37.539982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:26:00.203584 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 06:26:00.203686 0.013646 udp 10.0.2.104 56488 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 06:26:00.217688 0.000000 udp 10.0.2.104 56489 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 06:26:41.545246 3.002788 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:26:48.552868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:26:56.556706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:27:12.557374 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:27:44.563029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:33:48.570563 3.001147 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:33:55.577439 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:34:03.581333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:34:19.581883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:34:51.587998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:40:55.594071 3.001189 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:41:00.197857 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 06:41:00.198029 0.011983 udp 10.0.2.104 56490 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 06:41:00.210371 0.000000 udp 10.0.2.104 56491 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 06:41:02.600980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:41:10.602651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:41:26.605927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:41:58.621528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:48:02.627286 3.001738 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:48:09.634941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:48:17.636495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:48:33.639834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:49:05.645414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:55:09.652281 3.001012 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:55:16.658949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:55:24.660719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:55:40.664014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:56:00.201504 0.000143 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 06:56:00.201748 0.011848 udp 10.0.2.104 56492 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 06:56:00.213953 0.000000 udp 10.0.2.104 56493 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 06:56:12.669755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:12:28.676143 3.001081 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:12:35.682855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:12:43.684479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:12:59.687373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:13:31.693336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:15:00.200794 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 07:15:00.200912 0.012306 udp 10.0.2.104 56494 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 07:15:00.213611 0.000000 udp 10.0.2.104 56495 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 07:19:35.699266 3.001686 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:19:42.706760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:19:50.708294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:20:06.711231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:20:38.717352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:26:00.199519 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 07:26:00.199624 0.010050 udp 10.0.2.104 56496 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 07:26:00.210029 0.000000 udp 10.0.2.104 56497 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 07:26:42.724395 3.004001 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:26:49.730650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:26:57.732298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:27:13.735289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:27:45.741326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:33:49.747821 3.001458 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:33:56.757211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:34:04.756600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:34:20.760454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:34:52.765426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:40:56.771457 3.001627 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:41:00.203564 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 07:41:00.203720 0.011440 udp 10.0.2.104 56498 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 07:41:00.215508 0.000000 udp 10.0.2.104 56499 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 07:41:03.778734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:41:11.780288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:41:27.783410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:41:59.789100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:48:03.796859 2.999977 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:48:10.802492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:48:18.803966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:48:34.807340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:49:06.816015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:55:10.819293 3.001704 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:55:17.826493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:55:25.828090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:55:41.831384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:56:00.197796 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 07:56:00.197963 0.010241 udp 10.0.2.104 56500 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 07:56:00.208559 0.000000 udp 10.0.2.104 56501 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 07:56:13.837024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:12:30.849998 2.996591 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:12:37.852002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:12:45.856706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:13:01.856546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:13:33.862776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:15:00.203010 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 08:15:00.203210 0.022033 udp 10.0.2.104 56502 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 08:15:00.225632 0.000000 udp 10.0.2.104 56503 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 08:19:37.868375 3.002296 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:19:44.876051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:19:52.877310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:20:08.880378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:20:40.886504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:26:00.195884 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 08:26:00.195996 0.012599 udp 10.0.2.104 56504 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 08:26:00.209000 0.000000 udp 10.0.2.104 56505 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 08:26:44.892624 3.001432 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:26:51.899982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:26:59.901242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:27:15.904471 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:27:47.910462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:33:51.916870 3.001809 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:33:58.923272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:34:06.925341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:34:22.928579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:34:54.934488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:40:58.940529 3.001507 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:41:00.201182 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 08:41:00.201277 0.011331 udp 10.0.2.104 56506 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 08:41:00.212944 0.000000 udp 10.0.2.104 56507 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 08:41:05.947911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:41:13.949463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:41:29.951743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:42:01.958483 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:48:05.963471 3.002609 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:48:12.971961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:48:20.973338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:48:36.976270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:49:08.981871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:55:12.989903 3.000143 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:55:20.005810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:55:28.007541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:55:44.010342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:56:00.203426 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 08:56:00.203631 0.011539 udp 10.0.2.104 56508 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 08:56:00.215489 0.000000 udp 10.0.2.104 56509 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 08:56:16.016399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:12:27.034371 3.004577 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:12:34.042019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:12:42.043912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:12:58.048051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:13:30.053108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:15:00.204331 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 09:15:00.204431 0.012566 udp 10.0.2.104 56510 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 09:15:00.217436 0.000000 udp 10.0.2.104 56511 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 09:19:34.058956 3.001974 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:19:41.066388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:19:49.068293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:20:05.070771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:20:37.077030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:26:00.201936 0.029740 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 09:26:00.231788 0.025343 udp 10.0.2.104 56512 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 09:26:00.257518 0.000000 udp 10.0.2.104 56513 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 09:26:41.082896 3.001608 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:26:48.090371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:26:56.091874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:27:12.094932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:27:44.100641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:33:48.106225 3.002596 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:33:55.114371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:34:03.116130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:34:19.119113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:34:51.125689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:40:55.132159 3.000523 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:41:00.195676 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 09:41:00.195768 0.030910 udp 10.0.2.104 56514 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 09:41:00.227019 0.000000 udp 10.0.2.104 56515 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 09:41:02.139176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:41:10.139764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:41:26.142704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:41:58.148705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:48:02.155433 3.001014 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:48:09.162228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:48:17.163262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:48:33.167871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:49:05.172233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:55:09.179097 3.001384 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:55:16.186256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:55:24.189852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:55:40.190839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:56:00.199154 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 09:56:00.199262 0.022576 udp 10.0.2.104 56516 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 09:56:00.222188 0.000000 udp 10.0.2.104 56517 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 09:56:12.196774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:12:26.209799 3.004231 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:12:33.219872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:12:41.219209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:12:57.221634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:13:29.227556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:15:00.198661 0.000210 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 10:15:00.198971 0.010084 udp 10.0.2.104 56518 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 10:15:00.209361 0.000000 udp 10.0.2.104 56519 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 10:19:33.233368 3.002096 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:19:40.241246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:19:48.242945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:20:04.245664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:20:36.251916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:26:00.197575 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 10:26:00.197751 0.016079 udp 10.0.2.104 56520 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 10:26:00.214205 0.000000 udp 10.0.2.104 56521 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 10:26:40.257825 3.001719 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:26:47.265095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:26:55.825377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:27:11.635434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:27:43.285981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:33:47.291875 3.002027 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:33:54.299261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:34:02.300695 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:34:18.304212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:34:50.310024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:40:54.316280 3.000972 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:41:00.201929 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 10:41:00.202073 0.022410 udp 10.0.2.104 56522 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 10:41:00.224871 0.000000 udp 10.0.2.104 56523 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 10:41:01.323017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:41:09.324658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:41:25.327842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:41:57.334034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:48:01.339792 3.001676 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:48:08.347286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:48:16.348613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:48:32.351631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:49:04.358042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:55:08.363380 3.002001 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:55:15.371138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:55:23.372596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:55:39.375949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:56:00.195788 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 10:56:00.195936 0.013681 udp 10.0.2.104 56524 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 10:56:00.209992 0.000000 udp 10.0.2.104 56525 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 10:56:11.381194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:12:26.395753 3.002278 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:12:33.403935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:12:41.405245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:12:57.407769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:13:29.414036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:15:00.194900 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 11:15:00.195045 0.012127 udp 10.0.2.104 56526 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 11:15:00.207665 0.000000 udp 10.0.2.104 56527 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 11:19:33.423001 2.998579 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:19:40.427792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:19:48.428963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:20:04.432255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:20:36.438427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:26:00.193630 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 11:26:00.193771 0.012497 udp 10.0.2.104 56528 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 11:26:00.206638 0.000000 udp 10.0.2.104 56529 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 11:26:40.449420 2.996682 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:26:47.451747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:26:55.453224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:27:11.456523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:27:43.461880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:33:47.468635 3.001293 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:33:54.475898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:34:02.477136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:34:18.480687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:34:50.486225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:40:54.492395 3.001496 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:41:00.197773 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 11:41:00.197876 0.011367 udp 10.0.2.104 56530 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 11:41:00.209625 0.000000 udp 10.0.2.104 56531 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 11:41:01.499561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:41:09.500877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:41:25.504109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:41:57.510237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:48:01.516327 3.002174 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:48:08.523352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:48:16.524907 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:48:32.528094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:49:04.533919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:55:08.541007 3.000712 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:55:15.547452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:55:23.549063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:55:39.551920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:56:00.205621 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 11:56:00.205772 0.010601 udp 10.0.2.104 56532 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 11:56:00.216723 0.000000 udp 10.0.2.104 56533 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 11:56:11.558059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:12:26.573288 3.006444 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:12:33.581772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:12:41.581333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:12:57.584474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:13:29.590310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:15:00.204227 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 12:15:00.204340 0.016114 udp 10.0.2.104 56534 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 12:15:00.220851 0.000000 udp 10.0.2.104 56535 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 12:19:33.597288 3.000776 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:19:40.603919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:19:48.605319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:20:04.608305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:20:36.614337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:26:00.199290 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 12:26:00.199383 0.011652 udp 10.0.2.104 56536 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 12:26:00.211419 0.000000 udp 10.0.2.104 56537 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 12:26:40.620927 3.001181 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:26:47.628050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:26:55.629252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:27:11.632513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:27:43.638696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:33:47.644478 3.001745 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:33:54.651696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:34:02.653868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:34:18.656244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:34:50.663020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:40:54.668178 3.002054 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:41:00.193373 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 12:41:00.193504 0.012141 udp 10.0.2.104 56538 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 12:41:00.205989 0.000000 udp 10.0.2.104 56539 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 12:41:01.675520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:41:09.677316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:41:25.680009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:41:57.686471 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:48:01.693973 2.999880 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:48:08.699825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:48:16.701078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:48:32.704234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:49:04.710127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:55:08.716087 3.001946 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:55:15.723726 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:55:23.725258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:55:39.730371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:56:00.198025 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 12:56:00.198145 0.011516 udp 10.0.2.104 56540 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 12:56:00.210044 0.000000 udp 10.0.2.104 56541 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 12:56:11.734208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:12:27.748865 2.995095 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:12:34.749332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:12:42.748963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:12:58.752170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:13:30.757932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:15:00.196755 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 13:15:00.196907 0.011387 udp 10.0.2.104 56542 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 13:15:00.208687 0.000000 udp 10.0.2.104 56543 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 13:19:34.764784 3.001208 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:19:41.771344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:19:49.773019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:20:05.775914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:20:37.781894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:26:00.195975 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 13:26:00.196122 0.011213 udp 10.0.2.104 56544 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 13:26:00.207883 0.000000 udp 10.0.2.104 56545 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 13:26:41.788858 3.001150 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:26:48.795261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:26:56.797024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:27:12.799642 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:27:44.806745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:33:48.811976 3.001595 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:33:55.819322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:34:03.820745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:34:19.824076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:34:51.830135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:40:55.835146 3.002283 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:41:00.199766 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 13:41:00.199966 0.014733 udp 10.0.2.104 56546 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 13:41:00.215040 0.000000 udp 10.0.2.104 56547 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 13:41:02.843459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:41:10.844767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:41:26.847930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:41:58.853615 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:48:02.859416 3.002525 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:48:09.867913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:48:17.869139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:48:33.871254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:49:05.877547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:55:09.883787 3.001358 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:55:16.891266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:55:24.892988 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:55:40.895877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:56:00.193467 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 13:56:00.193664 0.012018 udp 10.0.2.104 56548 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 13:56:00.206048 0.000000 udp 10.0.2.104 56549 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 13:56:12.901215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:12:29.918804 3.002007 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:12:36.926738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:12:44.928067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:13:00.931279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:13:32.942093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:15:00.192711 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 14:15:00.192898 0.010619 udp 10.0.2.104 56550 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 14:15:00.203856 0.000000 udp 10.0.2.104 56551 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 14:19:36.943030 3.003134 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:19:43.950670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:19:51.953473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:20:07.955249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:20:39.960504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:26:00.191880 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 14:26:00.191975 0.011420 udp 10.0.2.104 56552 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 14:26:00.203803 0.000000 udp 10.0.2.104 56553 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 14:26:43.966214 3.002625 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:26:50.973976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:26:58.976086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:27:14.979258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:27:46.985143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:33:50.991214 3.001514 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:33:57.998624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:34:05.999981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:34:22.002663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:34:54.009115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:40:58.014825 3.002066 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:41:00.195634 0.000035 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 14:41:00.195707 0.011235 udp 10.0.2.104 56554 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 14:41:00.207368 0.000000 udp 10.0.2.104 56555 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 14:41:05.021849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:41:13.023659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:41:29.027168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:42:01.032994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:48:05.039843 3.000827 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:48:12.046513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:48:20.047941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:48:36.050949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:49:08.057292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:55:12.062997 3.001376 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:55:19.070263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:55:27.071806 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:55:43.074886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:56:00.199264 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 14:56:00.199431 0.013686 udp 10.0.2.104 56556 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 14:56:00.213466 0.000000 udp 10.0.2.104 56557 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 14:56:15.081158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:12:31.088395 3.000005 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:12:38.094197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:12:46.096001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:13:02.098899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:13:34.104796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:15:00.198541 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 15:15:00.198766 0.024437 udp 10.0.2.104 56558 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 15:15:00.223588 0.000000 udp 10.0.2.104 56559 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 15:19:38.111731 3.057633 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:19:45.149559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:19:53.129917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:20:09.132335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:20:41.138799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:26:00.197591 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 15:26:00.197746 0.021215 udp 10.0.2.104 56560 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 15:26:00.219299 0.000000 udp 10.0.2.104 56561 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 15:26:45.146738 2.999732 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:26:52.155350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:27:00.153275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:27:16.156893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:27:48.162666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:33:52.169023 3.001478 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:33:59.176391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:34:07.177828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:34:23.180947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:34:55.187021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:40:59.193900 3.000775 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:41:00.191548 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 15:41:00.191768 0.013707 udp 10.0.2.104 56562 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 15:41:00.205815 0.000000 udp 10.0.2.104 56563 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 15:41:06.200224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:41:14.201405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:41:30.204795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:42:02.210746 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:48:06.217037 3.001402 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:48:13.223906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:48:21.225991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:48:37.228774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:49:09.238078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:55:13.240740 3.001556 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:55:20.248257 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:55:28.249815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:55:44.252529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:56:00.196010 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 15:56:00.196159 0.010069 udp 10.0.2.104 56564 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 15:56:00.206526 0.000000 udp 10.0.2.104 56565 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 15:56:16.258644 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:12:27.268056 3.001090 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:12:34.274894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:12:42.276209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:12:58.279248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:13:30.285282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:15:00.194808 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 16:15:00.194980 0.023137 udp 10.0.2.104 56566 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 16:15:00.218549 0.000000 udp 10.0.2.104 56567 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 16:19:34.291897 3.001422 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:19:41.298728 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:19:49.300515 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:20:05.303311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:20:37.309197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:26:00.193683 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 16:26:00.193779 0.022215 udp 10.0.2.104 56568 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 16:26:00.216415 0.000000 udp 10.0.2.104 56569 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 16:26:41.316039 3.000910 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:26:48.322846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:26:56.324506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:27:12.327233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:27:44.333476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:33:48.339971 3.001224 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:33:55.346803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:34:03.348299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:34:19.351279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:34:51.357506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:40:55.363805 3.000914 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:41:00.197391 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 16:41:00.197551 0.014831 udp 10.0.2.104 56570 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 16:41:00.212754 0.000000 udp 10.0.2.104 56571 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 16:41:02.371026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:41:10.372183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:41:26.375035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:41:58.386784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:48:02.387043 3.001770 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:48:09.394640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:48:17.396067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:48:33.399145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:49:05.405264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:55:09.412204 3.000546 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:55:16.418559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:55:24.420125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:55:40.423177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:56:00.191050 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 16:56:00.191142 0.011456 udp 10.0.2.104 56572 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 16:56:00.202991 0.000000 udp 10.0.2.104 56573 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 16:56:12.429082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:12:26.442400 3.001359 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:12:33.449734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:12:41.455763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:12:57.456019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:13:29.460206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:15:00.192277 0.000176 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 17:15:00.192564 0.023396 udp 10.0.2.104 56574 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 17:15:00.216383 0.000000 udp 10.0.2.104 56575 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 17:19:33.466296 3.001496 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:19:40.473381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:19:48.474972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:20:04.478277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:20:36.484356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:26:00.199722 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 17:26:00.199901 0.023764 udp 10.0.2.104 56576 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 17:26:00.224008 0.000000 udp 10.0.2.104 56577 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 17:26:40.489874 3.002045 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:26:47.497261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:26:55.498998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:27:11.502005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:27:43.508348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:33:47.515666 3.000446 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:33:54.521801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:34:02.523118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:34:18.526360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:34:50.532217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:40:54.538574 3.001006 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:41:00.193905 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 17:41:00.194098 0.010239 udp 10.0.2.104 56578 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 17:41:00.204689 0.000000 udp 10.0.2.104 56579 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 17:41:01.545859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:41:09.546933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:41:25.549850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:41:57.555913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:48:01.562450 3.001323 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:48:08.569510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:48:16.571171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:48:32.574420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:49:04.580376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:55:08.586062 3.001552 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:55:15.593480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:55:23.594833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:55:39.597881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:56:00.197685 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 17:56:00.197878 0.014328 udp 10.0.2.104 56580 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 17:56:00.212601 0.000000 udp 10.0.2.104 56581 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 17:56:11.604152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:12:26.619597 3.008180 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:12:33.633141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:12:41.635855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:12:57.630294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:13:29.636373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:15:00.197953 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 18:15:00.198182 0.010175 udp 10.0.2.104 56582 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 18:15:00.208763 0.000000 udp 10.0.2.104 56583 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 18:19:33.642835 3.001361 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:19:40.649819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:19:48.651329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:20:04.654462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:20:36.660396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:26:00.195972 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 18:26:00.196153 0.011574 udp 10.0.2.104 56584 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 18:26:00.208085 0.000000 udp 10.0.2.104 56585 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 18:26:40.667095 3.001178 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:26:47.674119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:26:55.675136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:27:11.678306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:27:43.684296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:33:47.690632 3.001511 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:33:54.697843 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:34:02.699276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:34:18.702677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:34:50.708306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:40:54.714546 3.001824 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:41:00.191885 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 18:41:00.191976 0.022620 udp 10.0.2.104 56586 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 18:41:00.215001 0.000000 udp 10.0.2.104 56587 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 18:41:01.721545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:41:09.723228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:41:25.726302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:41:57.732269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:48:01.738212 3.001907 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:48:08.745870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:48:16.750156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:48:32.750358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:49:04.756183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:55:08.762917 3.001163 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:55:15.769489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:55:23.771182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:55:39.774168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:56:00.193260 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 18:56:00.193372 0.010356 udp 10.0.2.104 56588 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 18:56:00.204091 0.000000 udp 10.0.2.104 56589 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 18:56:11.780404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:12:27.786335 3.001668 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:12:34.793602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:12:42.795045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:12:58.797623 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:13:30.803480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:15:00.192767 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 19:15:00.192864 0.022846 udp 10.0.2.104 56590 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 19:15:00.216157 0.000000 udp 10.0.2.104 56591 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 19:19:34.810547 3.035597 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:19:41.827951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:19:49.829126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:20:05.831922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:20:37.838136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:26:00.191491 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 19:26:00.191604 0.011650 udp 10.0.2.104 56592 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 19:26:00.203616 0.000000 udp 10.0.2.104 56593 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 19:26:41.844121 3.001854 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:26:48.851344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:26:56.852973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:27:12.856209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:27:44.872154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:33:48.878155 3.001591 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:33:55.886190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:34:03.887295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:34:19.889845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:34:51.896881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:40:55.902547 3.001122 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:41:00.195848 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 19:41:00.196039 0.011780 udp 10.0.2.104 56594 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 19:41:00.208211 0.000000 udp 10.0.2.104 56595 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 19:41:02.909381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:41:10.910903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:41:26.914765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:41:58.919418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:48:02.925378 3.001894 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:48:09.933477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:48:17.934814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:48:33.937966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:49:05.943881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:55:09.949792 3.002180 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:55:16.957319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:55:24.959860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:55:40.972132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:56:00.189518 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 19:56:00.189610 0.023146 udp 10.0.2.104 56596 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 19:56:00.213046 0.000000 udp 10.0.2.104 56597 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 19:56:12.978073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:12:29.985422 3.001452 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:12:36.993154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:12:44.994190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:13:00.997297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:13:33.002856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:15:00.188679 0.000184 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 20:15:00.188969 0.024904 udp 10.0.2.104 56598 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 20:15:00.214282 0.000000 udp 10.0.2.104 56599 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 20:19:37.009673 3.001294 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:19:44.016696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:19:52.018260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:20:08.020799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:20:40.027030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:26:00.197433 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 20:26:00.197530 0.021084 udp 10.0.2.104 56600 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 20:26:00.218994 0.000000 udp 10.0.2.104 56601 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 20:26:44.033017 3.001817 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:26:51.040569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:26:59.041892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:27:15.045426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:27:47.051068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:33:51.056948 3.001887 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:33:58.064598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:34:06.066149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:34:22.069215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:34:54.081855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:40:58.080611 3.002322 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:41:00.191746 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 20:41:00.191887 0.026602 udp 10.0.2.104 56602 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 20:41:00.218908 0.000000 udp 10.0.2.104 56603 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 20:41:05.088358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:41:13.090023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:41:29.093109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:42:01.098957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:48:05.104870 3.001882 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:48:12.112268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:48:20.113929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:48:36.117140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:49:08.122926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:55:12.129932 3.000984 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:55:19.142096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:55:27.138267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:55:43.140923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:56:00.195759 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 20:56:00.195853 0.012026 udp 10.0.2.104 56604 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 20:56:00.208300 0.000000 udp 10.0.2.104 56605 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 20:56:15.146642 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:12:31.153287 3.001263 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:12:38.160393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:12:46.162105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:13:02.164761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:13:34.170869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:15:00.194239 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 21:15:00.194404 0.011758 udp 10.0.2.104 56606 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 21:15:00.206510 0.000000 udp 10.0.2.104 56607 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 21:19:38.176693 3.001730 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:19:45.184445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:19:53.185901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:20:09.188620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:20:41.195114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:26:00.193108 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 21:26:00.193208 0.021917 udp 10.0.2.104 56608 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 21:26:00.215535 0.000000 udp 10.0.2.104 56609 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 21:26:45.200847 3.001506 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:26:52.208268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:27:00.210349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:27:16.212262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:27:48.218934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:33:52.225698 3.000838 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:33:59.232465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:34:07.233626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:34:23.236891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:34:55.242875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:40:59.249024 3.001479 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:41:00.197562 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 21:41:00.197645 0.011276 udp 10.0.2.104 56610 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 21:41:00.209272 0.000000 udp 10.0.2.104 56611 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 21:41:06.256175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:41:14.257768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:41:30.265181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:42:02.266790 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:48:06.278572 2.995870 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:48:13.280306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:48:21.281596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:48:37.284622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:49:09.290708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:55:13.296627 3.001866 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:55:20.304251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:55:28.305929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:55:44.309070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:56:00.191226 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 21:56:00.191375 0.011229 udp 10.0.2.104 56612 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 21:56:00.202922 0.000000 udp 10.0.2.104 56613 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 21:56:16.314789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:12:27.324093 3.000924 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:12:34.330852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:12:42.332463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:12:58.336685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:13:30.349830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:15:00.190846 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 22:15:00.190952 0.011390 udp 10.0.2.104 56614 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 22:15:00.202690 0.000000 udp 10.0.2.104 56615 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 22:19:34.348097 3.000857 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:19:41.354869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:19:49.356417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:20:05.359523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:20:37.365451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:26:00.189656 0.093692 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 22:26:00.283501 0.011935 udp 10.0.2.104 56616 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 22:26:00.295842 0.000000 udp 10.0.2.104 56617 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 22:26:41.372110 3.000895 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:26:48.379076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:26:56.380434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:27:12.383336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:27:44.389227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:33:48.395936 3.001141 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:33:55.403284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:34:03.404323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:34:19.407776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:34:51.413321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:40:55.419302 3.003397 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:41:00.193673 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 22:41:00.193859 0.011442 udp 10.0.2.104 56618 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 22:41:00.205697 0.000000 udp 10.0.2.104 56619 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 22:41:02.426888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:41:10.428118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:41:26.431255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:41:58.437296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:48:02.443391 3.001426 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:48:09.450482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:48:17.452258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:48:33.455268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:49:05.461312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:55:09.467703 3.001210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:55:16.474788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:55:24.476235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:55:40.479039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:56:00.187620 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 22:56:00.187717 0.010804 udp 10.0.2.104 56620 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 22:56:00.198858 0.000000 udp 10.0.2.104 56621 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 22:56:12.485343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:12:26.499308 3.000598 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:12:33.505554 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:12:41.507383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:12:57.511914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:13:29.516299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:15:00.201944 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 23:15:00.202119 0.013671 udp 10.0.2.104 56622 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 23:15:00.216179 0.000000 udp 10.0.2.104 56623 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 23:19:33.522629 3.001426 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:19:40.529843 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:19:48.530970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:20:04.534157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:20:36.540377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:26:00.195884 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 23:26:00.196027 0.021217 udp 10.0.2.104 56624 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 23:26:00.217629 0.000000 udp 10.0.2.104 56625 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 23:26:40.546579 3.001311 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:26:47.553553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:26:55.554975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:27:11.558120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:27:43.564368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:33:47.570168 3.002087 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:33:54.578020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:34:02.579283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:34:18.582433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:34:50.588612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:40:54.594145 3.001689 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:41:00.189938 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 23:41:00.190106 0.011966 udp 10.0.2.104 56626 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 23:41:00.202448 0.000000 udp 10.0.2.104 56627 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 23:41:01.601622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:41:09.603325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:41:25.606053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:41:57.612538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:48:01.618014 3.001994 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:48:08.625555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:48:16.627208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:48:32.630218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:49:04.636467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:55:08.641763 3.084662 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:55:15.700021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:55:23.661619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:55:39.664024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:56:00.193572 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 23:56:00.193666 0.011323 udp 10.0.2.104 56628 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/11 23:56:00.205330 0.000000 udp 10.0.2.104 56629 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/11 23:56:11.670377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:12:26.685009 3.001450 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:12:33.692034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:12:41.693490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:12:57.696486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:13:29.702613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:15:00.192653 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 00:15:00.192860 0.012880 udp 10.0.2.104 56630 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 00:15:00.206073 0.000000 udp 10.0.2.104 56631 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 00:19:33.709160 3.000993 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:19:40.715904 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:19:48.717218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:20:04.720594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:20:36.726599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:26:00.211409 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 00:26:00.211565 0.011178 udp 10.0.2.104 56632 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 00:26:00.223089 0.000000 udp 10.0.2.104 56633 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 00:26:40.753513 3.000555 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:26:47.760512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:26:55.761281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:27:11.765901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:27:43.770467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:33:47.776684 3.001987 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:33:54.785972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:34:02.785928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:34:18.788670 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:34:50.794464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:40:54.800545 3.001365 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:41:00.215895 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 00:41:00.216071 0.012764 udp 10.0.2.104 56634 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 00:41:00.229201 0.000000 udp 10.0.2.104 56635 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 00:41:01.807873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:41:09.809280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:41:25.811950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:41:57.818320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:48:01.823858 3.002250 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:48:08.831881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:48:16.835239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:48:32.836960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:49:04.842318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:55:08.851024 2.998992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:55:15.856103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:55:23.857238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:55:39.860198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:56:00.357348 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 00:56:00.357452 0.013533 udp 10.0.2.104 56636 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 00:56:00.371348 0.000000 udp 10.0.2.104 56637 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 00:56:11.921320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:12:27.892484 3.001314 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:12:34.899949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:12:42.901212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:12:58.904099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:13:30.909632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:15:00.208788 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 01:15:00.208888 0.010258 udp 10.0.2.104 56638 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 01:15:00.219621 0.000000 udp 10.0.2.104 56639 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 01:19:34.915776 3.002297 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:19:41.923641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:19:49.925230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:20:05.928694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:20:37.933891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:26:00.210722 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 01:26:00.210833 0.012288 udp 10.0.2.104 56640 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 01:26:00.223489 0.000000 udp 10.0.2.104 56641 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 01:26:41.941112 3.000255 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:26:48.947841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:26:56.949090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:27:12.951761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:27:44.968201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:33:48.976134 2.999732 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:33:55.981069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:34:03.983629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:34:19.986275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:34:51.992238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:40:55.998487 3.001341 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:41:00.211505 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 01:41:00.211619 0.025582 udp 10.0.2.104 56642 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 01:41:00.237578 0.000000 udp 10.0.2.104 56643 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 01:41:03.005436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:41:11.007369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:41:27.010147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:41:59.016302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:48:03.022469 3.001358 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:48:10.029884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:48:18.031207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:48:34.033399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:49:06.039955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:55:10.047614 3.010468 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:55:17.063388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:55:25.065003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:55:41.068475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:56:00.205713 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 01:56:00.205819 0.022326 udp 10.0.2.104 56644 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 01:56:00.228519 0.000000 udp 10.0.2.104 56645 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 01:56:13.074039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:12:29.080533 3.001169 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:12:36.087701 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:12:44.088853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:13:00.091788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:13:32.098665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:15:00.214767 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 02:15:00.214958 0.011384 udp 10.0.2.104 56646 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 02:15:00.226700 0.000000 udp 10.0.2.104 56647 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 02:19:36.104940 3.000753 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:19:43.110975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:19:51.112860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:20:07.115800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:20:39.121960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:26:00.213692 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 02:26:00.213876 0.011339 udp 10.0.2.104 56648 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 02:26:00.225580 0.000000 udp 10.0.2.104 56649 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 02:26:43.128017 3.001753 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:26:50.139985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:26:58.136872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:27:14.139784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:27:46.146191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:33:50.152045 3.001986 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:33:57.159318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:34:05.160608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:34:21.163484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:34:53.170116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:40:57.176367 3.001239 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:41:00.207863 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 02:41:00.208023 0.011320 udp 10.0.2.104 56650 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 02:41:00.219891 0.000000 udp 10.0.2.104 56651 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 02:41:04.183467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:41:12.184500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:41:28.187927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:42:00.194206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:48:04.200347 3.000978 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:48:11.207373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:48:19.208697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:48:35.211763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:49:07.217758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:55:11.224148 3.001331 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:55:18.231060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:55:26.232629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:55:42.235664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:56:00.211568 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 02:56:00.211717 0.010923 udp 10.0.2.104 56652 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 02:56:00.223007 0.000000 udp 10.0.2.104 56653 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 02:56:14.241512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:12:30.247752 3.001766 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:12:37.255298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:12:45.263862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:13:01.261761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:13:33.265944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:15:00.210819 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 03:15:00.210914 0.011826 udp 10.0.2.104 56654 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 03:15:00.223138 0.000000 udp 10.0.2.104 56655 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 03:19:37.272111 3.000958 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:19:44.279230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:19:52.280483 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:20:08.284039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:20:40.289314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:26:00.209832 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 03:26:00.210016 0.011603 udp 10.0.2.104 56656 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 03:26:00.222011 0.000000 udp 10.0.2.104 56657 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 03:26:44.296008 3.001174 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:26:51.303115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:26:59.304358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:27:15.307946 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:27:47.313641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:33:51.319946 3.001435 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:33:58.327295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:34:06.328499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:34:22.332921 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:34:54.337923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:40:58.343835 3.001458 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:41:00.213994 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 03:41:00.214160 0.012915 udp 10.0.2.104 56658 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 03:41:00.227422 0.000000 udp 10.0.2.104 56659 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 03:41:05.350854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:41:13.352626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:41:29.355722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:42:01.361574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:48:05.369037 3.000067 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:48:12.374834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:48:20.376371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:48:36.379188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:49:08.385955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:55:12.392074 3.001237 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:55:19.398693 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:55:27.400362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:55:43.403804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:56:00.207967 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 03:56:00.208147 0.023146 udp 10.0.2.104 56660 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 03:56:00.231806 0.000000 udp 10.0.2.104 56661 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 03:56:15.409654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:12:26.418943 3.000924 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:12:33.425418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:12:41.430216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:12:57.434084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:13:29.436014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:15:00.212003 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 04:15:00.212113 0.011470 udp 10.0.2.104 56662 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 04:15:00.223988 0.000000 udp 10.0.2.104 56663 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 04:19:33.442160 3.001870 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:19:40.449889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:19:48.451130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:20:04.454207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:20:36.714179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:26:00.205923 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 04:26:00.206107 0.012880 udp 10.0.2.104 56664 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 04:26:00.219331 0.000000 udp 10.0.2.104 56665 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 04:26:40.477576 3.000376 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:26:47.483353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:26:55.484936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:27:11.488060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:27:43.494225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:33:47.500901 3.001065 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:33:54.507322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:34:02.509012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:34:18.512173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:34:50.518007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:40:54.523795 3.001867 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:41:00.209710 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 04:41:00.209877 0.022260 udp 10.0.2.104 56666 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 04:41:00.232513 0.000000 udp 10.0.2.104 56667 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 04:41:01.531378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:41:09.533024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:41:25.536147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:41:57.542184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:48:01.548317 3.001406 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:48:08.555468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:48:16.556821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:48:32.560209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:49:04.566044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:55:08.572135 3.001310 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:55:15.579356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:55:23.580788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:55:39.583940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:56:00.213557 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 04:56:00.213703 0.010891 udp 10.0.2.104 56668 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 04:56:00.224934 0.000000 udp 10.0.2.104 56669 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 04:56:11.590126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:12:25.603316 3.001175 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:12:32.610557 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:12:40.611883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:12:56.614837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:13:28.621027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:15:00.212795 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 05:15:00.212893 0.010957 udp 10.0.2.104 56670 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 05:15:00.224263 0.000000 udp 10.0.2.104 56671 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 05:19:32.627219 3.001371 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:19:39.634470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:19:47.636136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:20:03.638954 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:20:35.644924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:26:00.211797 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 05:26:00.211956 0.021670 udp 10.0.2.104 56672 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 05:26:00.234055 0.000000 udp 10.0.2.104 56673 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 05:26:39.651136 3.061646 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:26:46.691591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:26:54.669989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:27:10.673015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:27:42.679275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:33:46.685046 3.001405 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:33:53.692443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:34:01.694110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:34:17.696747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:34:49.703253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:40:53.708768 3.001637 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:41:00.205451 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 05:41:00.205640 0.011260 udp 10.0.2.104 56674 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 05:41:00.217181 0.000000 udp 10.0.2.104 56675 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 05:41:00.716228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:41:08.717852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:41:24.720591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:41:56.726791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:48:00.733822 3.000964 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:48:07.740140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:48:15.741913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:48:31.744946 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:49:03.750914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:55:07.757609 3.000897 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:55:14.764209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:55:22.765824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:55:38.768463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:56:00.209936 0.000154 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 05:56:00.210199 0.010272 udp 10.0.2.104 56676 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 05:56:00.220866 0.000000 udp 10.0.2.104 56677 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 05:56:10.774903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:12:25.790269 3.000678 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:12:32.797135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:12:40.798110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:12:56.801196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:13:28.807154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:15:00.208716 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 06:15:00.208927 0.018107 udp 10.0.2.104 56678 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 06:15:00.227426 0.000000 udp 10.0.2.104 56679 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 06:19:32.812640 3.002514 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:19:39.820507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:19:47.821913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:20:03.824983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:20:35.830997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:26:00.207883 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 06:26:00.208008 0.013061 udp 10.0.2.104 56680 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 06:26:00.221431 0.000000 udp 10.0.2.104 56681 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 06:26:39.837338 3.001469 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:26:46.844639 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:26:54.846164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:27:10.849193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:27:42.855197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:33:46.861530 3.001014 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:33:53.868292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:34:01.870461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:34:17.873426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:34:49.879748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:40:53.885636 3.001035 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:41:00.211905 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 06:41:00.212101 0.011183 udp 10.0.2.104 56682 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 06:41:00.223700 0.000000 udp 10.0.2.104 56683 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 06:41:00.892654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:41:08.893380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:41:24.897357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:41:56.903303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:48:00.908885 3.001605 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:48:07.916424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:48:15.918054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:48:31.921225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:49:03.927023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:55:07.933310 3.001278 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:55:14.940391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:55:22.941890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:55:38.944889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:56:00.205618 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 06:56:00.205728 0.012726 udp 10.0.2.104 56684 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 06:56:00.218851 0.000000 udp 10.0.2.104 56685 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 06:56:10.951072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:12:26.956339 3.002266 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:12:33.964049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:12:41.966198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:12:57.968884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:13:29.975039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:15:00.204344 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 07:15:00.204539 0.011437 udp 10.0.2.104 56686 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 07:15:00.216312 0.000000 udp 10.0.2.104 56687 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 07:19:33.981323 3.000672 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:19:40.987889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:19:48.989877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:20:04.992745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:20:36.999123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:26:00.203392 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 07:26:00.203610 0.013982 udp 10.0.2.104 56688 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 07:26:00.217951 0.000000 udp 10.0.2.104 56689 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 07:26:41.004674 3.001862 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:26:48.011874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:26:56.013593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:27:12.017093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:27:44.022973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:33:48.029339 3.001267 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:33:55.036269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:34:03.038231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:34:19.040688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:34:51.046830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:40:55.053088 3.000978 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:41:00.207795 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 07:41:00.207925 0.021452 udp 10.0.2.104 56690 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 07:41:00.229718 0.000000 udp 10.0.2.104 56691 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 07:41:02.060060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:41:10.061962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:41:26.064379 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:41:58.071854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:48:02.075944 3.002321 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:48:09.084409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:48:17.085574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:48:33.088660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:49:05.094764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:55:09.100950 3.001091 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:55:16.108121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:55:24.109888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:55:40.112884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:56:00.211711 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 07:56:00.211818 0.010275 udp 10.0.2.104 56692 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 07:56:00.222476 0.000000 udp 10.0.2.104 56693 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 07:56:12.118595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:12:28.124693 3.001474 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:12:35.131467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:12:43.133795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:12:59.136530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:13:31.142691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:15:00.210826 0.000143 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 08:15:00.211077 0.031790 udp 10.0.2.104 56694 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 08:15:00.243281 0.000000 udp 10.0.2.104 56695 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 08:19:35.149018 3.001194 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:19:42.156159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:19:50.157365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:20:06.160573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:20:38.166575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:26:00.209722 0.000184 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 08:26:00.210029 0.011587 udp 10.0.2.104 56696 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 08:26:00.222013 0.000000 udp 10.0.2.104 56697 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 08:26:42.173472 3.000764 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:26:49.180070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:26:57.181333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:27:13.184369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:27:45.200645 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:33:49.206323 3.001865 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:33:56.214071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:34:04.215444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:34:20.218500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:34:52.224840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:40:56.230327 3.001591 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:41:00.203676 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 08:41:00.203931 0.015995 udp 10.0.2.104 56698 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 08:41:00.220287 0.000000 udp 10.0.2.104 56699 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 08:41:03.238171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:41:11.239193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:41:27.242385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:41:59.248609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:48:03.254793 3.001271 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:48:10.267859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:48:18.263231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:48:34.266485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:49:06.272340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:55:10.278923 3.001117 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:55:17.285814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:55:25.287658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:55:41.290454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:56:00.207930 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 08:56:00.208112 0.012832 udp 10.0.2.104 56700 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 08:56:00.221366 0.000000 udp 10.0.2.104 56701 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 08:56:13.296479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:12:29.302718 3.001230 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:12:36.309996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:12:44.312004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:13:00.318282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:13:32.320337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:15:00.208278 0.000140 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 09:15:00.208516 0.042724 udp 10.0.2.104 56702 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 09:15:00.251642 0.000000 udp 10.0.2.104 56703 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 09:19:36.325490 3.002429 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:19:43.333883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:19:51.335061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:20:07.338568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:20:39.344306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:26:00.205679 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 09:26:00.205819 0.024018 udp 10.0.2.104 56704 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 09:26:00.276348 0.000000 udp 10.0.2.104 56705 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 09:26:43.350893 3.000484 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:26:50.357762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:26:58.362407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:27:14.362240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:27:46.368591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:33:50.374593 3.003628 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:33:57.381840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:34:05.383017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:34:21.386315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:34:53.392500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:40:57.398685 3.001332 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:41:00.209471 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 09:41:00.209614 0.013387 udp 10.0.2.104 56706 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 09:41:00.223346 0.000000 udp 10.0.2.104 56707 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 09:41:04.405484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:41:12.407111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:41:28.410317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:42:00.416118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:48:04.421790 3.001758 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:48:11.429554 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:48:19.430989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:48:35.434004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:49:07.440029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:55:11.445710 3.002009 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:55:18.454260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:55:26.455006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:55:42.458078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:56:00.203920 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 09:56:00.204096 0.010432 udp 10.0.2.104 56708 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 09:56:00.214917 0.000000 udp 10.0.2.104 56709 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 09:56:14.464310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:12:30.469527 3.002235 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:12:37.477319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:12:45.478785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:13:01.487925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:13:33.494238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:15:00.202786 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 10:15:00.202942 0.016297 udp 10.0.2.104 56710 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 10:15:00.219740 0.000000 udp 10.0.2.104 56711 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 10:19:37.494035 3.001561 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:19:44.501590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:19:52.502933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:20:08.506014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:20:40.512015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:26:00.201456 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 10:26:00.201555 0.012213 udp 10.0.2.104 56712 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 10:26:00.214141 0.000000 udp 10.0.2.104 56713 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 10:26:44.517976 3.001851 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:26:51.525284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:26:59.526694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:27:15.529876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:27:47.535961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:33:51.541785 3.001940 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:33:58.549181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:34:06.550890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:34:22.554049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:34:54.559777 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:40:58.566760 3.000768 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:41:00.205683 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 10:41:00.205779 0.011450 udp 10.0.2.104 56714 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 10:41:00.217590 0.000000 udp 10.0.2.104 56715 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 10:41:05.573287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:41:13.574799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:41:29.578075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:42:01.583933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:48:05.589495 3.002291 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:48:12.597019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:48:20.598989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:48:36.601897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:49:08.608070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:55:12.613889 3.001372 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:55:19.621082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:55:27.622799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:55:43.625538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:56:00.209672 0.000123 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 10:56:00.209895 0.012007 udp 10.0.2.104 56716 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 10:56:00.222302 0.000000 udp 10.0.2.104 56717 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 10:56:15.631821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:12:27.643042 3.000927 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:12:34.649473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:12:42.651082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:12:58.654017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:13:30.663024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:15:00.208859 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 11:15:00.208962 0.012444 udp 10.0.2.104 56718 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 11:15:00.221745 0.000000 udp 10.0.2.104 56719 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 11:19:34.666424 3.000921 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:19:41.673690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:19:49.675235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:20:05.677827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:20:37.683997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:26:00.207859 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 11:26:00.207961 0.027634 udp 10.0.2.104 56720 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 11:26:00.235957 0.000000 udp 10.0.2.104 56721 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 11:26:41.690074 3.001713 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:26:48.697451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:26:56.698744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:27:12.701766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:27:44.707957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:33:48.714754 3.000644 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:33:55.721345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:34:03.722650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:34:19.725682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:34:51.731946 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:40:55.738084 3.001448 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:41:00.201570 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 11:41:00.201769 0.012286 udp 10.0.2.104 56722 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 11:41:00.214423 0.000000 udp 10.0.2.104 56723 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 11:41:02.745071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:41:10.746783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:41:26.750097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:41:58.756084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:48:02.762093 3.001511 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:48:09.769288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:48:17.770556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:48:33.773834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:49:05.780062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:55:09.787022 3.000337 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:55:16.793215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:55:24.794747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:55:40.797987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:56:00.205897 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 11:56:00.206025 0.011501 udp 10.0.2.104 56724 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 11:56:00.217946 0.000000 udp 10.0.2.104 56725 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 11:56:12.803500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:12:26.816291 3.001827 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:12:33.827065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:12:41.825630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:12:57.841935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:13:29.844755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:15:00.204676 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 12:15:00.204787 0.012161 udp 10.0.2.104 56726 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 12:15:00.217270 0.000000 udp 10.0.2.104 56727 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 12:19:33.850899 3.001183 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:19:40.858431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:19:48.859753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:20:04.862505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:20:36.869082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:26:00.203387 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 12:26:00.203576 0.012576 udp 10.0.2.104 56728 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 12:26:00.216492 0.000000 udp 10.0.2.104 56729 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 12:26:40.874773 3.002222 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:26:47.881999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:26:55.883137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:27:11.886665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:27:43.892406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:33:47.898153 3.001970 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:33:54.906073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:34:02.907636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:34:18.910597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:34:50.916629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:40:54.923548 3.000571 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:41:00.207439 0.000247 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 12:41:00.207770 0.011391 udp 10.0.2.104 56730 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 12:41:00.219691 0.000000 udp 10.0.2.104 56731 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 12:41:01.929961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:41:09.930855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:41:25.934479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:41:57.940667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:48:01.946229 3.002195 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:48:08.953351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:48:16.955372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:48:32.958501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:49:04.964421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:55:08.971706 3.000516 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:55:15.977561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:55:23.980238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:55:39.981905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:56:00.201752 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 12:56:00.201849 0.011227 udp 10.0.2.104 56732 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 12:56:00.213484 0.000000 udp 10.0.2.104 56733 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 12:56:11.988410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:12:27.993873 3.002103 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:12:35.002011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:12:43.003218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:12:59.006345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:13:31.012587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:15:00.200850 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 13:15:00.200941 0.019106 udp 10.0.2.104 56734 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 13:15:00.220431 0.000000 udp 10.0.2.104 56735 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 13:19:35.018821 3.001027 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:19:42.025567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:19:50.027498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:20:06.030421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:20:38.036474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:26:00.199196 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 13:26:00.199296 0.010186 udp 10.0.2.104 56736 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 13:26:00.209818 0.000000 udp 10.0.2.104 56737 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 13:26:42.042372 3.005358 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:26:49.050047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:26:57.051369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:27:13.053860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:27:45.059981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:33:49.066114 3.001953 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:33:56.073906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:34:04.075416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:34:20.078625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:34:52.084318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:40:56.091255 3.000543 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:41:00.203512 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 13:41:00.203670 0.011412 udp 10.0.2.104 56738 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 13:41:00.215458 0.000000 udp 10.0.2.104 56739 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 13:41:03.098077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:41:11.099147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:41:27.102418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:41:59.108294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:48:03.114781 3.001136 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:48:10.122110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:48:18.122982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:48:34.126145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:49:06.132167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:55:10.138195 3.001840 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:55:17.145686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:55:25.147100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:55:41.150260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:56:00.207903 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 13:56:00.208060 0.010653 udp 10.0.2.104 56740 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 13:56:00.219107 0.000000 udp 10.0.2.104 56741 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 13:56:13.156281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:12:29.161301 3.002488 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:12:36.169776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:12:44.171091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:13:00.174062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:13:32.180291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:15:00.206679 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 14:15:00.206835 0.011407 udp 10.0.2.104 56742 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 14:15:00.218614 0.000000 udp 10.0.2.104 56743 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 14:19:36.186455 3.001806 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:19:43.193066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:19:51.194983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:20:07.198146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:20:39.203821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:26:00.208145 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 14:26:00.208316 0.011362 udp 10.0.2.104 56744 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 14:26:00.220095 0.000000 udp 10.0.2.104 56745 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 14:26:43.210168 3.001102 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:26:50.217828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:26:58.218784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:27:14.222080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:27:46.228219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:33:50.234999 3.002891 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:33:57.241111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:34:05.243007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:34:21.245948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:34:53.251582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:40:57.258056 3.001804 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:41:00.199769 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 14:41:00.199851 0.011518 udp 10.0.2.104 56746 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 14:41:00.211775 0.000000 udp 10.0.2.104 56747 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 14:41:04.265408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:41:12.266874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:41:28.269980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:42:00.275865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:48:04.281572 3.002001 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:48:11.289172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:48:19.290823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:48:35.293866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:49:07.487106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:55:11.316751 3.048072 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:55:18.341950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:55:26.334502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:55:42.337512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:56:00.203407 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 14:56:00.203560 0.014598 udp 10.0.2.104 56748 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 14:56:00.218506 0.000000 udp 10.0.2.104 56749 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 14:56:14.348034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:12:30.349437 3.002234 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:12:37.357232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:12:45.358766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:13:01.361926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:13:33.367425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:15:00.202847 0.000179 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 15:15:00.203132 0.014467 udp 10.0.2.104 56750 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 15:15:00.217963 0.000000 udp 10.0.2.104 56751 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 15:19:37.373453 3.001980 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:19:44.381082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:19:52.382718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:20:08.385791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:20:40.391299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:26:00.202028 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 15:26:00.202181 0.014235 udp 10.0.2.104 56752 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 15:26:00.216765 0.000000 udp 10.0.2.104 56753 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 15:26:44.398957 3.000518 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:26:51.405006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:26:59.406621 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:27:15.409579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:27:47.416034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:33:51.421869 3.001333 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:33:58.429373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:34:06.430696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:34:22.433960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:34:54.439650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:41:00.205526 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 15:41:00.205669 0.011385 udp 10.0.2.104 56754 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 15:41:00.217456 0.000000 udp 10.0.2.104 56755 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 15:41:03.453708 3.000728 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:41:10.460184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:41:18.461619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:41:34.464822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:42:06.470702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:48:10.477606 3.000753 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:48:17.484153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:48:25.486146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:48:41.488706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:49:13.504829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:55:17.511019 3.001573 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:55:24.518196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:55:32.520045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:55:48.522680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:56:00.199969 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 15:56:00.200070 0.011587 udp 10.0.2.104 56756 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 15:56:00.212044 0.000000 udp 10.0.2.104 56757 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 15:56:20.528831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:12:33.540174 3.011913 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:12:40.557744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:12:48.559248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:13:04.562349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:13:36.568442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:15:00.198659 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 16:15:00.198754 0.010582 udp 10.0.2.104 56758 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 16:15:00.209686 0.000000 udp 10.0.2.104 56759 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 16:19:40.574754 3.001095 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:19:47.581924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:19:55.583341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:20:11.586306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:20:43.592148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:26:00.197729 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 16:26:00.197933 0.011410 udp 10.0.2.104 56760 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 16:26:00.209716 0.000000 udp 10.0.2.104 56761 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 16:26:47.598715 3.001273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:26:54.605844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:27:02.607094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:27:18.610501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:27:50.616408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:33:54.624136 2.999966 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:34:01.629842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:34:09.631141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:34:25.634543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:34:57.640209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:41:00.201688 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 16:41:00.201797 0.011344 udp 10.0.2.104 56762 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 16:41:00.213544 0.000000 udp 10.0.2.104 56763 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 16:41:06.653997 3.000899 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:41:13.660819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:41:21.662511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:41:37.666112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:42:09.671732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:48:13.677141 3.002117 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:48:20.684754 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:48:28.686388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:48:44.689314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:49:16.695744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:55:20.702061 3.001123 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:55:27.708735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:55:35.710363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:55:51.713204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:56:00.205702 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 16:56:00.205837 0.011888 udp 10.0.2.104 56764 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 16:56:00.218095 0.000000 udp 10.0.2.104 56765 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 16:56:23.719505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:12:30.731898 3.011971 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:12:37.750234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:12:45.751431 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:13:01.754116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:13:33.760196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:15:00.207917 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 17:15:00.208013 0.011588 udp 10.0.2.104 56766 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 17:15:00.219975 0.000000 udp 10.0.2.104 56767 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 17:19:37.767383 3.018002 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:19:44.784154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:19:52.785126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:20:08.788293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:20:40.794313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:26:00.203170 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 17:26:00.203313 0.010161 udp 10.0.2.104 56768 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 17:26:00.213806 0.000000 udp 10.0.2.104 56769 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 17:26:44.799941 3.002735 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:26:51.807705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:26:59.809097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:27:15.812221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:27:47.818299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:33:51.824525 3.001322 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:33:58.831480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:34:06.834541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:34:22.836120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:34:54.842095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:41:00.197455 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 17:41:00.197558 0.011422 udp 10.0.2.104 56770 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 17:41:00.209335 0.000000 udp 10.0.2.104 56771 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 17:41:03.855322 3.001847 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:41:10.862853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:41:18.864601 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:41:34.867882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:42:06.873777 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:48:10.880072 3.000567 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:48:17.886635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:48:25.888372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:48:41.891302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:49:13.897263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:55:17.903300 3.001844 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:55:24.910889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:55:32.911655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:55:48.915178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:56:00.201679 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 17:56:00.201776 0.022276 udp 10.0.2.104 56772 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 17:56:00.224427 0.000000 udp 10.0.2.104 56773 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 17:56:20.921297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:12:29.937746 3.024969 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:12:36.956800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:12:44.956426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:13:00.959144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:13:32.965133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:15:00.200762 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 18:15:00.200900 0.022458 udp 10.0.2.104 56774 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 18:15:00.223807 0.000000 udp 10.0.2.104 56775 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 18:19:36.971925 3.000912 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:19:43.978178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:19:51.980194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:20:07.982636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:20:39.989159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:26:00.199453 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 18:26:00.199675 0.011354 udp 10.0.2.104 56776 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 18:26:00.211387 0.000000 udp 10.0.2.104 56777 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 18:26:43.994334 3.002427 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:26:51.071360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:26:59.013657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:27:15.017018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:27:47.023391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:33:51.030231 3.000387 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:33:58.036621 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:34:06.038374 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:34:22.041289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:34:54.047092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:41:00.203374 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 18:41:00.203485 0.011690 udp 10.0.2.104 56778 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 18:41:00.215573 0.000000 udp 10.0.2.104 56779 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 18:41:02.061338 2.998983 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:41:09.066370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:41:17.067724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:41:33.070617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:42:05.077005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:48:09.083387 3.001155 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:48:16.090433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:48:24.091282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:48:40.094243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:49:12.104119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:55:16.106421 3.002067 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:55:23.114561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:55:31.116002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:55:47.118627 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:56:00.197740 0.000174 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 18:56:00.198017 0.011504 udp 10.0.2.104 56780 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 18:56:00.209929 0.000000 udp 10.0.2.104 56781 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 18:56:19.124791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:12:31.135324 3.001056 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:12:38.142164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:12:46.143805 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:13:02.146753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:13:34.152660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:15:00.196610 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 19:15:00.196800 0.010336 udp 10.0.2.104 56782 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 19:15:00.290484 0.000000 udp 10.0.2.104 56783 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 19:19:38.159887 3.000436 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:19:45.166208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:19:53.167643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:20:09.170602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:20:41.176745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:26:00.205673 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 19:26:00.205836 0.022015 udp 10.0.2.104 56784 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 19:26:00.228212 0.000000 udp 10.0.2.104 56785 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 19:26:45.183381 3.001092 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:26:52.190380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:27:00.191816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:27:16.194365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:27:48.200789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:33:52.206884 3.001763 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:33:59.214157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:34:07.216058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:34:23.218800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:34:55.225057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:41:00.199645 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 19:41:00.199749 0.022740 udp 10.0.2.104 56786 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 19:41:00.222876 0.000000 udp 10.0.2.104 56787 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 19:41:04.238972 3.000907 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:41:11.245827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:41:19.247005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:41:35.250266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:42:07.255944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:48:11.262163 3.001335 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:48:18.269331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:48:26.270896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:48:42.274115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:49:14.279753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:55:18.286556 3.001082 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:55:25.293250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:55:33.294877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:55:49.298055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:56:00.203943 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 19:56:00.204136 0.011816 udp 10.0.2.104 56788 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 19:56:00.216356 0.000000 udp 10.0.2.104 56789 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 19:56:21.304099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:12:32.313100 3.000723 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:12:39.320285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:12:47.321029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:13:03.324543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:13:35.330515 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:15:00.202735 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 20:15:00.202837 0.021412 udp 10.0.2.104 56790 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 20:15:00.224673 0.000000 udp 10.0.2.104 56791 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 20:19:39.397023 3.001473 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:19:46.404373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:19:54.405939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:20:10.408631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:20:42.414718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:26:00.251919 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 20:26:00.252105 0.010372 udp 10.0.2.104 56792 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 20:26:00.262819 0.000000 udp 10.0.2.104 56793 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 20:26:46.421648 3.038486 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:26:53.438336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:27:01.440058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:27:17.442543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:27:49.448520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:33:53.478529 2.997661 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:34:00.482007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:34:08.483841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:34:24.486722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:34:56.492452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:41:00.245722 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 20:41:00.245819 0.011360 udp 10.0.2.104 56794 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 20:41:00.257580 0.000000 udp 10.0.2.104 56795 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 20:41:05.505810 3.001728 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:41:12.513032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:41:20.514570 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:41:36.517546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:42:08.523772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:48:12.530560 3.000844 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:48:19.537277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:48:27.538546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:48:43.542223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:49:15.547857 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:55:19.553998 3.001571 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:55:26.561121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:55:34.562810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:55:50.565894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:56:00.249205 0.000136 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 20:56:00.249423 0.010336 udp 10.0.2.104 56796 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 20:56:00.260110 0.000000 udp 10.0.2.104 56797 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 20:56:22.571868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:12:33.580861 3.001132 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:12:40.588477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:12:48.589298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:13:04.592778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:13:36.598381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:15:00.248940 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 21:15:00.249036 0.011645 udp 10.0.2.104 56798 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 21:15:00.274106 0.000000 udp 10.0.2.104 56799 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 21:19:40.605580 3.000535 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:19:47.612048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:19:55.613303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:20:11.616164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:20:43.622326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:26:00.256349 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 21:26:00.256456 0.011785 udp 10.0.2.104 56800 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 21:26:00.268616 0.000000 udp 10.0.2.104 56801 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 21:26:47.628872 3.001076 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:26:54.635906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:27:02.637304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:27:18.640833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:27:50.646271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:33:54.652381 3.001394 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:34:01.659996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:34:09.661389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:34:25.664857 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:34:57.670634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:41:00.252227 0.000182 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 21:41:00.252518 0.015133 udp 10.0.2.104 56802 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 21:41:00.268053 0.000000 udp 10.0.2.104 56803 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 21:41:07.684935 3.001807 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:41:14.692329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:41:22.694051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:41:38.696662 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:42:10.702812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:48:15.710583 3.001674 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:48:22.718157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:48:30.720136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:48:46.722664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:49:18.728353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:55:22.734341 3.001359 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:55:29.745614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:55:37.743269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:55:53.746477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:56:00.246059 0.000179 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 21:56:00.246341 0.012497 udp 10.0.2.104 56804 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 21:56:00.259226 0.000000 udp 10.0.2.104 56805 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 21:56:25.752559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:12:35.759914 3.001411 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:12:42.766966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:12:50.768290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:13:06.771700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:13:38.778261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:15:00.244786 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 22:15:00.244900 0.009954 udp 10.0.2.104 56806 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 22:15:00.255228 0.000000 udp 10.0.2.104 56807 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 22:19:42.783898 3.001355 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:19:49.790921 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:19:57.792266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:20:13.795462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:20:45.801291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:26:00.253759 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 22:26:00.253864 0.021990 udp 10.0.2.104 56808 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 22:26:00.318702 0.000000 udp 10.0.2.104 56809 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 22:26:49.807875 3.001175 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:26:56.814920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:27:04.816551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:27:20.819381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:27:52.825385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:33:56.831438 3.001482 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:34:03.839031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:34:11.840353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:34:27.843685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:34:59.849353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:41:00.247384 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 22:41:00.247482 0.010224 udp 10.0.2.104 56810 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 22:41:00.258064 0.000000 udp 10.0.2.104 56811 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 22:41:09.864578 3.001173 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:41:16.871271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:41:24.872694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:41:40.876134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:42:12.882073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:48:16.888298 3.001447 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:48:23.895412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:48:31.896287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:48:47.900229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:49:19.906119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:55:23.912235 3.001809 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:55:30.919769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:55:38.922268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:55:54.923980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:56:00.251732 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 22:56:00.251827 0.013388 udp 10.0.2.104 56812 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 22:56:00.265603 0.000000 udp 10.0.2.104 56813 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 22:56:26.929326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:12:32.941398 3.011492 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:12:39.959347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:12:47.960564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:13:03.963337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:13:35.969512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:15:00.250561 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 23:15:00.250757 0.010204 udp 10.0.2.104 56814 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 23:15:00.261310 0.000000 udp 10.0.2.104 56815 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 23:19:39.985024 3.001925 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:19:46.992835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:19:54.994344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:20:10.997514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:20:43.002983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:26:00.249971 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 23:26:00.250134 0.010054 udp 10.0.2.104 56816 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 23:26:00.260522 0.000000 udp 10.0.2.104 56817 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 23:26:47.009001 3.001470 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:26:54.016822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:27:02.028412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:27:18.031212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:27:50.037514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:33:54.044830 3.000374 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:34:01.050827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:34:09.062630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:34:25.065395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:34:57.072015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:41:00.243347 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 23:41:00.243601 0.011039 udp 10.0.2.104 56818 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 23:41:00.255012 0.000000 udp 10.0.2.104 56819 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 23:41:08.087542 3.001610 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:41:15.094847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:41:23.096264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:41:39.099599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:42:11.105377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:48:17.454655 3.001980 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:48:24.462393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:48:32.463861 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:48:48.466947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:49:20.473006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:55:24.478315 3.002273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:55:31.486203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:55:39.488074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:55:55.490793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:56:00.588065 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 23:56:00.588263 0.011381 udp 10.0.2.104 56820 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/12 23:56:00.600015 0.000000 udp 10.0.2.104 56821 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/12 23:56:27.496587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:12:34.509807 3.011994 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:12:41.527393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:12:49.528612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:13:05.531700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:13:37.538241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:15:00.587372 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 00:15:00.587559 0.012025 udp 10.0.2.104 56822 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 00:15:00.599957 0.000000 udp 10.0.2.104 56823 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 00:19:41.544210 3.001214 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:19:48.551131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:19:56.552500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:20:12.555777 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:20:44.562187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:26:00.586242 0.024553 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 00:26:00.610956 0.011685 udp 10.0.2.104 56824 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 00:26:00.623023 0.000000 udp 10.0.2.104 56825 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 00:26:48.567782 3.001720 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:26:55.575117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:27:03.576658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:27:19.579452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:27:51.585782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:33:55.591481 3.001679 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:34:02.598994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:34:10.600659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:34:26.604077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:34:58.609908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:41:00.590487 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 00:41:00.590600 0.011961 udp 10.0.2.104 56826 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 00:41:00.602988 0.000000 udp 10.0.2.104 56827 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 00:41:02.616404 3.001256 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:41:09.622917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:41:17.624402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:41:33.627820 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:42:05.633700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:48:09.640282 3.001119 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:48:16.646932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:48:24.648605 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:48:40.651849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:49:12.657904 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:55:16.663396 3.072411 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:55:23.711005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:55:31.682563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:55:47.685333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:56:00.584507 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 00:56:00.584696 0.012473 udp 10.0.2.104 56828 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 00:56:00.597609 0.000000 udp 10.0.2.104 56829 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 00:56:19.693341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:12:30.700249 3.001839 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:12:37.707726 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:12:45.709296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:13:01.722429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:13:33.728428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:15:00.583425 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 01:15:00.583595 0.020052 udp 10.0.2.104 56830 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 01:15:00.603999 0.000000 udp 10.0.2.104 56831 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 01:19:37.734663 3.001298 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:19:44.741696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:19:52.743154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:20:08.746164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:20:40.752509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:26:00.592621 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 01:26:00.592794 0.012297 udp 10.0.2.104 56832 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 01:26:00.605462 0.000000 udp 10.0.2.104 56833 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 01:26:44.760639 3.000048 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:26:51.765771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:26:59.767142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:27:15.770305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:27:47.776275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:33:51.782706 3.001246 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:33:58.789880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:34:06.790915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:34:22.794286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:34:54.800376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:40:58.805735 3.002386 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:41:00.585985 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 01:41:00.586077 0.011252 udp 10.0.2.104 56834 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 01:41:00.597621 0.000000 udp 10.0.2.104 56835 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 01:41:05.813117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:41:13.815025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:41:29.818164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:42:01.823841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:48:05.830507 3.001040 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:48:12.837280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:48:20.838858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:48:36.842418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:49:08.848582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:55:12.854311 3.002035 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:55:19.861521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:55:27.863049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:55:43.866863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:56:00.590296 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 01:56:00.590422 0.010204 udp 10.0.2.104 56836 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 01:56:00.601001 0.000000 udp 10.0.2.104 56837 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 01:56:15.871819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:12:29.885776 3.011034 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:12:36.901887 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:12:44.904208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:13:00.907145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:13:32.913049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:15:00.589171 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 02:15:00.589363 0.011485 udp 10.0.2.104 56838 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 02:15:00.601224 0.000000 udp 10.0.2.104 56839 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 02:19:36.920003 3.000721 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:19:43.926570 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:19:51.928244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:20:07.931127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:20:39.947084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:26:00.588483 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 02:26:00.588691 0.021627 udp 10.0.2.104 56840 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 02:26:00.610672 0.000000 udp 10.0.2.104 56841 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 02:26:43.953803 3.000721 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:26:50.963963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:26:58.961444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:27:14.964977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:27:46.971189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:33:50.976144 3.004685 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:33:57.984522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:34:05.992916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:34:21.988935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:34:53.995099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:40:58.002342 2.999797 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:41:00.592389 0.000091 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 02:41:00.592560 0.011336 udp 10.0.2.104 56842 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 02:41:00.604297 0.000000 udp 10.0.2.104 56843 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 02:41:05.008415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:41:13.014312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:41:29.013833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:42:01.018958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:48:05.025330 3.000910 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:48:12.032608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:48:20.033690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:48:36.036867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:49:08.043167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:55:12.049019 3.003356 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:55:19.056665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:55:27.058922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:55:43.060956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:56:00.586040 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 02:56:00.586121 0.016489 udp 10.0.2.104 56844 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 02:56:00.602964 0.000000 udp 10.0.2.104 56845 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 02:56:15.066770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:12:31.114618 2.999607 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:12:38.145138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:12:46.132040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:13:02.134767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:13:34.140711 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:15:00.586326 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:15:00.586479 0.012134 udp 10.0.2.104 56846 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 03:15:00.598970 0.000000 udp 10.0.2.104 56847 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 03:19:38.145894 3.009059 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:19:45.154026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:19:53.155707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:20:09.158745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:20:41.164869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:26:00.584154 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:26:00.584299 0.000000 udp 10.0.2.104 56848 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 03:26:45.171932 3.000442 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:26:52.178403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:27:00.179688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:27:00.590634 0.010195 udp 10.0.2.104 56849 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 03:27:00.601193 0.000000 udp 10.0.2.104 56850 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 03:27:05.537612 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:27:16.182760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:27:48.188613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:33:52.194862 3.001856 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:33:59.204212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:34:07.203684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:34:23.206589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:34:55.213081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:40:59.218467 3.002059 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:41:06.226149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:41:14.227594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:41:30.230540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:42:00.584634 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:42:00.584743 0.024706 udp 10.0.2.104 56851 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 03:42:00.609822 0.000000 udp 10.0.2.104 56852 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 03:42:02.236834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:48:06.243045 3.001325 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:48:13.250739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:48:21.252326 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:48:37.255339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:49:09.260661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:55:13.267668 3.000692 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:55:20.273810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:55:28.275771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:55:44.278602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:56:16.284763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:57:00.588148 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:57:00.588349 0.011862 udp 10.0.2.104 56853 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 03:57:00.600555 0.000000 udp 10.0.2.104 56854 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 04:12:32.291763 3.000557 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:12:39.298341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:12:47.299579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:13:03.302845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:13:35.308622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:16:00.587690 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 04:16:00.587879 0.010498 udp 10.0.2.104 56855 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 04:16:00.598739 0.000000 udp 10.0.2.104 56856 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 04:19:39.313899 3.002420 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:19:46.331391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:19:54.333404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:20:10.336692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:20:42.342775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:26:46.351957 2.998259 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:26:53.358052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:27:00.586740 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 04:27:00.586855 0.010904 udp 10.0.2.104 56857 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 04:27:00.598166 0.000000 udp 10.0.2.104 56858 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 04:27:01.357288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:27:17.360521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:27:49.366761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:33:53.372472 3.002224 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:34:00.379727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:34:08.381702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:34:24.384521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:34:56.390392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:41:00.396183 3.001996 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:41:07.403445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:41:15.405209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:41:31.408257 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:42:00.590614 0.000133 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 04:42:00.590855 0.027607 udp 10.0.2.104 56859 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 04:42:00.618853 0.000000 udp 10.0.2.104 56860 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 04:42:03.414651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:48:07.421634 3.000483 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:48:14.428166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:48:22.429319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:48:38.432495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:49:10.438253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:55:14.444629 3.001409 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:55:21.451907 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:55:29.453116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:55:45.456482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:56:17.462463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:57:00.584705 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 04:57:00.584890 0.012272 udp 10.0.2.104 56861 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 04:57:00.597570 0.000000 udp 10.0.2.104 56862 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 05:12:33.468185 3.030428 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:12:40.485831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:12:48.487135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:13:04.490133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:13:36.496436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:16:00.583498 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 05:16:00.583694 0.011026 udp 10.0.2.104 56863 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 05:16:00.595114 0.000000 udp 10.0.2.104 56864 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 05:19:40.502390 3.001715 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:19:47.509238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:19:55.511212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:20:11.514259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:20:43.520241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:26:47.526435 3.001746 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:26:54.533875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:27:00.582593 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 05:27:00.582701 0.020312 udp 10.0.2.104 56865 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 05:27:00.640904 0.000000 udp 10.0.2.104 56866 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 05:27:02.534975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:27:18.538184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:27:50.544328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:33:54.550143 3.002205 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:34:01.557924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:34:09.559059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:34:25.562321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:34:57.568324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:41:01.574980 3.001197 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:41:08.581418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:41:16.583194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:41:32.586077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:42:00.586544 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 05:42:00.586625 0.012862 udp 10.0.2.104 56867 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 05:42:00.599963 0.000000 udp 10.0.2.104 56868 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 05:42:04.592157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:48:08.598904 3.004585 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:48:15.605648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:48:23.607084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:48:39.610030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:49:11.616153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:55:15.621774 3.001377 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:55:22.629410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:55:30.630760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:55:46.636083 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:56:18.640036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:57:00.590374 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 05:57:00.590475 0.011379 udp 10.0.2.104 56869 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 05:57:00.602226 0.000000 udp 10.0.2.104 56870 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 06:12:29.649226 3.001287 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:12:36.656155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:12:44.657816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:13:00.660688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:13:32.666657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:16:00.589364 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:16:00.589504 0.010079 udp 10.0.2.104 56871 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 06:16:00.599945 0.000000 udp 10.0.2.104 56872 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 06:19:36.672919 3.015258 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:19:43.690253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:19:51.691975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:20:07.694706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:20:39.700890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:26:43.707725 3.000602 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:26:50.714202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:26:58.715868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:27:14.718767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:27:46.724618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:28:00.584852 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:28:00.585010 0.000000 udp 10.0.2.104 56873 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 06:29:00.580917 0.767054 udp 10.0.2.104 56874 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 06:29:01.347971 0.000000 icmp 147.32.83.216 0x0103 -> 10.0.2.104 0x0808 URH 192 1 102 flow=Background 1970/01/13 06:29:05.537927 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:30:00.587156 0.011874 udp 10.0.2.104 56875 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 06:30:00.599398 0.000000 udp 10.0.2.104 56876 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 06:30:05.534382 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:33:50.731017 3.001450 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/13 06:33:57.738015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:34:05.739634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:34:21.742795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:34:53.748866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:40:57.755292 3.001237 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:41:04.762018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:41:12.763242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:41:28.766616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:42:00.772789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:45:00.581342 0.000183 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:45:00.581635 0.012934 udp 10.0.2.104 56877 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 06:45:00.594941 0.000000 udp 10.0.2.104 56878 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 06:48:04.778732 3.001667 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:48:11.803006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:48:19.797560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:48:35.800465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:49:07.806328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:55:11.812732 3.001134 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:55:18.819800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:55:26.821268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:55:42.824699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:56:14.830213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:08:00.585242 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 07:08:00.585405 0.010383 udp 10.0.2.104 56879 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 07:08:00.596146 0.000000 udp 10.0.2.104 56880 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 07:12:27.842145 3.001641 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:12:34.849916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:12:42.851071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:12:58.853902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:13:30.860109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:18:00.588137 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 07:18:00.588242 0.012130 udp 10.0.2.104 56881 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 07:18:00.600744 0.000000 udp 10.0.2.104 56882 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 07:19:34.865677 3.002177 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:19:41.873650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:19:49.875070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:20:05.878095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:20:37.884125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:26:41.889651 3.103909 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:26:48.973880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:26:56.909610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:27:12.911391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:27:44.918406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:31:00.589401 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 07:31:00.589558 0.010301 udp 10.0.2.104 56883 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 07:31:00.600218 0.000000 udp 10.0.2.104 56884 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 07:33:48.925076 3.000758 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:33:55.931397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:34:03.932401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:34:19.936271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:34:51.942006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:40:55.948048 3.001856 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:41:02.955666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:41:10.957054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:41:26.959981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:41:58.966132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:46:00.583997 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 07:46:00.584185 0.011563 udp 10.0.2.104 56885 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 07:46:00.596149 0.000000 udp 10.0.2.104 56886 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 07:48:02.972244 3.000756 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:48:09.979511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:48:17.980842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:48:33.987380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:49:05.990075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:55:09.995642 3.002540 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:55:17.003480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:55:25.005134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:55:41.008069 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:56:13.013487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:08:00.584261 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 08:08:00.584446 0.024653 udp 10.0.2.104 56887 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 08:08:00.609492 0.000000 udp 10.0.2.104 56888 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 08:12:29.021020 3.000532 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:12:36.027201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:12:44.028533 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:13:00.031190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:13:32.048491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:18:00.584071 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 08:18:00.584184 0.010299 udp 10.0.2.104 56889 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 08:18:00.594870 0.000000 udp 10.0.2.104 56890 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 08:19:36.054308 3.001656 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:19:43.061074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:19:51.062507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:20:07.066036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:20:39.071997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:26:43.079106 2.999700 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:26:50.085405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:26:58.086614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:27:14.089541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:27:46.095883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:31:00.585455 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 08:31:00.585598 0.017366 udp 10.0.2.104 56891 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 08:31:00.603378 0.000000 udp 10.0.2.104 56892 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 08:33:50.101724 3.001442 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:33:57.109120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:34:05.110882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:34:21.113937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:34:53.120211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:40:57.126139 3.002129 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:41:04.133337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:41:12.134585 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:41:28.137531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:42:00.143790 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:46:00.579667 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 08:46:00.579856 0.014344 udp 10.0.2.104 56893 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 08:46:00.594548 0.000000 udp 10.0.2.104 56894 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 08:48:04.149967 3.001217 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:48:11.156955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:48:19.158536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:48:35.161470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:49:07.167630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:55:11.173776 3.001380 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:55:18.180965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:55:26.203073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:55:42.195667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:56:14.201683 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:08:00.587368 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 09:08:00.587521 0.023309 udp 10.0.2.104 56895 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 09:08:00.611194 0.000000 udp 10.0.2.104 56896 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 09:12:30.207932 3.001456 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:12:37.215106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:12:45.216689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:13:01.219349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:13:33.225560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:18:00.580272 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 09:18:00.580467 0.010162 udp 10.0.2.104 56897 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 09:18:00.591019 0.000000 udp 10.0.2.104 56898 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 09:19:37.231861 3.001402 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:19:44.238898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:19:52.240485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:20:08.243483 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:20:40.249844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:26:44.265798 3.001523 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:26:51.274449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:26:59.274280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:27:15.277483 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:27:47.283774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:30:00.585398 0.000133 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 09:30:00.585623 0.011844 udp 10.0.2.104 56899 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 09:30:00.597842 0.000000 udp 10.0.2.104 56900 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 09:33:51.289497 3.001835 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:33:58.296944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:34:06.298870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:34:22.301349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:34:54.307668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:40:58.314045 3.001075 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:41:05.320816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:41:13.322277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:41:29.325389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:42:01.331895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:45:00.579311 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 09:45:00.579603 0.023307 udp 10.0.2.104 56901 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 09:45:00.603256 0.000000 udp 10.0.2.104 56902 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 09:48:05.337352 3.001732 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:48:12.344978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:48:20.346435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:48:36.349274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:49:08.355622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:55:12.360970 3.001784 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:55:19.368771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:55:27.372129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:55:43.373516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:56:15.379060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:08:00.583393 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 10:08:00.583491 0.012492 udp 10.0.2.104 56903 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 10:08:00.596368 0.000000 udp 10.0.2.104 56904 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 10:12:31.385720 3.001226 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:12:38.392808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:12:46.394203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:13:02.407019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:13:34.413281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:18:00.586135 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 10:18:00.586304 0.010352 udp 10.0.2.104 56905 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 10:18:00.597008 0.000000 udp 10.0.2.104 56906 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 10:19:38.419566 3.001259 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:19:45.426655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:19:53.428115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:20:09.431363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:20:41.437073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:26:45.443578 3.001169 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:26:52.450619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:27:00.452317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:27:16.454728 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:27:48.461130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:30:00.584688 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 10:30:00.584886 0.012535 udp 10.0.2.104 56907 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 10:30:00.597785 0.000000 udp 10.0.2.104 56908 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 10:33:52.467018 3.001713 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:33:59.474652 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:34:07.476274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:34:23.478890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:34:55.485194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:40:59.491037 3.001879 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:41:06.498436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:41:14.500008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:41:30.503013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:42:02.509020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:45:00.585053 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 10:45:00.585233 0.011390 udp 10.0.2.104 56909 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 10:45:00.596997 0.000000 udp 10.0.2.104 56910 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 10:48:06.515118 3.001566 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:48:13.522413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:48:21.526105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:48:37.526840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:49:09.533531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:55:13.538944 3.099588 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:55:20.608934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:55:28.558367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:55:44.561156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:56:16.567090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:08:00.579336 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 11:08:00.579643 0.023346 udp 10.0.2.104 56911 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 11:08:00.603389 0.000000 udp 10.0.2.104 56912 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 11:12:32.573087 3.001468 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:12:39.580277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:12:47.581560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:13:03.584897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:13:35.590977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:18:00.582215 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 11:18:00.582360 0.010392 udp 10.0.2.104 56913 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 11:18:00.593118 0.000000 udp 10.0.2.104 56914 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 11:19:39.597390 3.001276 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:19:46.604547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:19:54.606080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:20:10.618672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:20:42.625175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:26:46.630944 3.001628 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:26:53.638437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:27:01.640080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:27:17.642933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:27:49.648929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:30:00.587394 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 11:30:00.587559 0.025260 udp 10.0.2.104 56915 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 11:30:00.613193 0.000000 udp 10.0.2.104 56916 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 11:33:53.654385 3.002387 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:34:00.662468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:34:08.663731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:34:24.667044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:34:56.672826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:41:00.680059 3.000259 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:41:07.686394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:41:15.687873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:41:31.690683 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:42:03.696974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:45:00.581220 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 11:45:00.581327 0.012173 udp 10.0.2.104 56917 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 11:45:00.593861 0.000000 udp 10.0.2.104 56918 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 11:48:07.702437 3.001822 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:48:14.710351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:48:22.712010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:48:38.715222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:49:10.720823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:55:14.727301 3.001116 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:55:21.734398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:55:29.735981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:55:45.738817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:56:17.744446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:08:00.585741 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 12:08:00.585913 0.022176 udp 10.0.2.104 56919 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 12:08:00.608488 0.000000 udp 10.0.2.104 56920 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 12:12:28.754443 3.000737 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:12:35.770981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:12:43.772345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:12:59.775461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:13:31.781742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:18:00.578178 0.000128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 12:18:00.578396 0.010525 udp 10.0.2.104 56921 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 12:18:00.589314 0.000000 udp 10.0.2.104 56922 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 12:19:35.787794 3.001457 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:19:42.795020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:19:50.796167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:20:06.799232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:20:38.805469 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:26:42.811051 3.001874 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:26:49.818736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:26:57.820485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:27:13.822908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:27:45.829225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:31:00.579622 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 12:31:00.579707 0.012808 udp 10.0.2.104 56923 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 12:31:00.592898 0.000000 udp 10.0.2.104 56924 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 12:33:49.834722 3.002348 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:33:56.842535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:34:04.844214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:34:20.847195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:34:52.853366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:40:56.859782 3.001086 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:41:03.866737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:41:11.868138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:41:27.871227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:41:59.877187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:46:00.583484 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 12:46:00.583686 0.010322 udp 10.0.2.104 56925 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 12:46:00.594395 0.000000 udp 10.0.2.104 56926 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 12:48:03.883587 3.001779 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:48:10.890624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:48:18.892305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:48:34.895099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:49:06.903229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:55:10.908707 3.087057 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:55:17.966134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:55:25.928512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:55:41.928980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:56:13.935289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:08:00.581255 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 13:08:00.581398 0.015841 udp 10.0.2.104 56927 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 13:08:00.597650 0.000000 udp 10.0.2.104 56928 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 13:12:26.946606 3.001262 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:12:33.954092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:12:41.955810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:12:57.958956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:13:29.964741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:18:00.584032 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 13:18:00.584215 0.011454 udp 10.0.2.104 56929 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 13:18:00.596043 0.000000 udp 10.0.2.104 56930 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 13:19:33.971790 3.000058 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:19:40.978301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:19:49.012466 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:20:04.992818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:20:36.999092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:26:41.004039 3.002513 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:26:48.012339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:26:56.013522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:27:12.016896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:27:44.022677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:31:00.585580 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 13:31:00.585682 0.013766 udp 10.0.2.104 56931 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 13:31:00.599856 0.000000 udp 10.0.2.104 56932 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 13:33:48.029560 3.000800 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:33:55.036346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:34:03.038723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:34:19.040510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:34:51.047035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:40:55.052032 3.001840 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:41:02.059486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:41:10.061938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:41:26.064325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:41:58.070198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:46:00.579311 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 13:46:00.579646 0.010150 udp 10.0.2.104 56933 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 13:46:00.590164 0.000000 udp 10.0.2.104 56934 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 13:48:02.076375 3.002214 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:48:09.084393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:48:17.085368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:48:33.088353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:49:05.094359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:55:09.101197 3.001215 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:55:16.108079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:55:24.109317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:55:40.112281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:56:12.118517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:08:00.577396 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 14:08:00.577508 0.014665 udp 10.0.2.104 56935 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 14:08:00.592524 0.000000 udp 10.0.2.104 56936 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 14:12:27.133101 3.011418 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:12:34.150537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:12:42.151997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:12:58.154812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:13:30.161020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:18:00.580190 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 14:18:00.580343 0.010783 udp 10.0.2.104 56937 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 14:18:00.591440 0.000000 udp 10.0.2.104 56938 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 14:19:34.166670 3.002042 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:19:41.174703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:19:49.176140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:20:05.179043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:20:37.185202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:26:41.191912 3.000985 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:26:48.204761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:26:56.201276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:27:12.202893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:27:44.209082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:31:00.581439 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 14:31:00.581581 0.011372 udp 10.0.2.104 56939 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 14:31:00.593280 0.000000 udp 10.0.2.104 56940 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 14:33:48.215253 3.001459 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:33:55.222936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:34:03.224202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:34:19.227793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:34:51.232782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:40:55.239235 3.001180 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:41:02.246828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:41:10.248538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:41:26.251308 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:41:58.256855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:46:00.586032 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 14:46:00.586228 0.010305 udp 10.0.2.104 56941 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 14:46:00.596952 0.000000 udp 10.0.2.104 56942 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 14:48:02.273600 3.000784 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:48:09.280592 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:48:17.281933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:48:33.285035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:49:05.290984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:55:09.297849 3.000940 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:55:16.304297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:55:24.306021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:55:40.309030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:56:12.316479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:08:00.583129 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 15:08:00.583227 0.014245 udp 10.0.2.104 56943 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 15:08:00.597850 0.000000 udp 10.0.2.104 56944 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 15:12:27.329336 3.001568 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:12:34.336798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:12:42.338305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:12:58.341163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:13:30.347213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:18:00.576161 0.000154 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 15:18:00.576419 0.011529 udp 10.0.2.104 56945 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 15:18:00.588302 0.000000 udp 10.0.2.104 56946 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 15:19:34.354307 3.010695 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:19:41.370905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:19:49.372299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:20:05.375199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:20:37.381237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:26:41.388033 3.000962 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:26:48.394798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:26:56.396329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:27:12.399378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:27:44.406167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:31:00.577319 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 15:31:00.577408 0.011553 udp 10.0.2.104 56947 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 15:31:00.589300 0.000000 udp 10.0.2.104 56948 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 15:33:48.411672 3.001386 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:33:55.418808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:34:03.420216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:34:19.423297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:34:51.429464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:40:55.436341 3.000620 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:41:02.442661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:41:10.444400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:41:26.447381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:41:58.453438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:46:00.581703 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 15:46:00.581814 0.010085 udp 10.0.2.104 56949 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 15:46:00.592339 0.000000 udp 10.0.2.104 56950 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 15:48:02.459499 3.002561 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:48:09.466406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:48:17.468299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:48:33.471074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:49:05.477336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:55:09.483268 3.011401 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:55:16.500536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:55:24.502268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:55:40.505156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:56:12.511412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:08:00.579678 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 16:08:00.579788 0.011217 udp 10.0.2.104 56951 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 16:08:00.636295 0.000000 udp 10.0.2.104 56952 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 16:12:28.517709 3.000859 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:12:35.524457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:12:43.526187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:12:59.529035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:13:31.535132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:18:00.583598 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 16:18:00.583712 0.010679 udp 10.0.2.104 56953 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 16:18:00.594811 0.000000 udp 10.0.2.104 56954 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 16:19:35.541106 3.001926 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:19:42.548295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:19:50.550248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:20:06.562945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:20:38.569154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:26:42.575910 3.001860 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:26:49.584520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:26:57.587814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:27:13.589523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:27:45.593197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:31:00.583503 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 16:31:00.583628 0.011831 udp 10.0.2.104 56955 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 16:31:00.595857 0.000000 udp 10.0.2.104 56956 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 16:33:49.599412 3.001208 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:33:56.606705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:34:04.608108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:34:20.610869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:34:52.616863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:40:56.623088 3.001482 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:41:03.630291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:41:11.631914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:41:27.635008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:41:59.640933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:46:00.577271 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 16:46:00.577468 0.010200 udp 10.0.2.104 56957 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 16:46:00.588014 0.000000 udp 10.0.2.104 56958 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 16:48:03.648034 3.000559 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:48:10.654328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:48:18.656256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:48:34.658970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:49:06.665085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:55:10.670670 3.040681 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:55:17.692550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:55:25.690432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:55:41.692748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:56:13.698971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:08:00.575484 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 17:08:00.575634 0.011659 udp 10.0.2.104 56959 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 17:08:00.587704 0.000000 udp 10.0.2.104 56960 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 17:12:29.704999 3.001450 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:12:36.712410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:12:44.713941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:13:00.716841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:13:32.722733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:18:00.578102 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 17:18:00.578200 0.010102 udp 10.0.2.104 56961 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 17:18:00.588716 0.000000 udp 10.0.2.104 56962 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 17:19:36.728996 3.001545 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:19:43.736640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:19:51.737507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:20:07.740820 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:20:39.746553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:26:43.752884 3.002212 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:26:50.760129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:26:58.761513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:27:14.764596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:27:46.770794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:31:00.579606 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 17:31:00.579774 0.012737 udp 10.0.2.104 56963 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 17:31:00.592904 0.000000 udp 10.0.2.104 56964 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 17:33:50.777107 3.001264 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:33:57.784146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:34:05.785761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:34:21.788784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:34:53.794871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:40:57.800180 3.001593 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:41:04.807940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:41:12.809615 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:41:28.812502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:42:00.818412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:46:00.583293 0.000140 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 17:46:00.583530 0.010239 udp 10.0.2.104 56965 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 17:46:00.594140 0.000000 udp 10.0.2.104 56966 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 17:48:04.824629 3.001618 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:48:11.832117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:48:19.833542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:48:35.836527 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:49:07.842454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:55:11.848730 3.001433 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:55:18.876256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:55:26.867563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:55:42.870539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:56:14.876745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:08:00.581150 0.104993 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 18:08:00.686233 0.011392 udp 10.0.2.104 56967 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 18:08:00.697955 0.000000 udp 10.0.2.104 56968 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 18:12:25.886013 3.000970 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:12:32.892490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:12:40.894099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:12:56.897217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:13:28.903116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:18:00.574162 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 18:18:00.574317 0.010161 udp 10.0.2.104 56969 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 18:18:00.584853 0.000000 udp 10.0.2.104 56970 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 18:19:32.910651 3.000111 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:19:39.916634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:19:47.918240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:20:03.921085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:20:35.926995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:26:39.933263 3.001756 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:26:46.940042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:26:54.942209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:27:10.945486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:27:42.952200 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:31:00.575698 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 18:31:00.575858 0.011773 udp 10.0.2.104 56971 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 18:31:00.587977 0.000000 udp 10.0.2.104 56972 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 18:33:46.957361 3.001611 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:33:53.964557 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:34:01.965685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:34:17.968557 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:34:49.975391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:40:53.981495 3.002091 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:41:00.988785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:41:08.990142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:41:24.993052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:41:56.999114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:46:00.579939 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 18:46:00.580049 0.010900 udp 10.0.2.104 56973 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 18:46:00.591325 0.000000 udp 10.0.2.104 56974 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 18:48:01.007872 2.999041 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:48:08.013107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:48:16.013561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:48:32.017121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:49:04.024127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:55:08.031778 3.074069 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:55:15.078734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:55:23.049795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:55:39.051007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:56:11.057103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:08:00.577462 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 19:08:00.577616 0.011685 udp 10.0.2.104 56975 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 19:08:00.589685 0.000000 udp 10.0.2.104 56976 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 19:12:25.070234 3.001748 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:12:32.077232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:12:40.079028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:12:56.082168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:13:28.087683 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:18:00.580034 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 19:18:00.580146 0.010494 udp 10.0.2.104 56977 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 19:18:00.591031 0.000000 udp 10.0.2.104 56978 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 19:19:32.096466 2.999445 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:19:39.101673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:19:47.102560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:20:03.105856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:20:35.112042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:26:39.119819 3.000185 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:26:46.126101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:26:54.126981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:27:10.129423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:27:42.146470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:31:00.581602 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 19:31:00.584233 0.022414 udp 10.0.2.104 56979 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 19:31:00.607022 0.000000 udp 10.0.2.104 56980 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 19:33:46.141922 3.002830 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:33:53.148936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:34:01.151110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:34:17.154216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:34:49.160400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:40:53.166252 3.001409 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:41:00.173202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:41:08.174927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:41:24.178042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:41:56.183590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:46:00.575738 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 19:46:00.575889 0.010173 udp 10.0.2.104 56981 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 19:46:00.586420 0.000000 udp 10.0.2.104 56982 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 19:48:00.189700 3.002085 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:48:07.197417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:48:15.198848 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:48:31.201800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:49:03.208158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:55:07.213658 3.014053 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:55:14.231107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:55:22.238747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:55:38.235941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:56:10.252089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:08:00.573270 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 20:08:00.573417 0.011483 udp 10.0.2.104 56983 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 20:08:00.585248 0.000000 udp 10.0.2.104 56984 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 20:12:25.267250 3.001024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:12:32.273421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:12:40.275650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:12:56.278308 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:13:28.284270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:18:00.580411 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 20:18:00.580593 0.009903 udp 10.0.2.104 56985 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 20:18:00.590896 0.000000 udp 10.0.2.104 56986 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 20:19:32.290710 3.000794 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:19:39.298205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:19:47.299106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:20:03.302386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:20:35.308435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:26:39.316668 3.002457 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:26:46.375648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:26:54.333382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:27:10.336482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:27:42.342385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:31:00.577551 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 20:31:00.577679 0.011552 udp 10.0.2.104 56987 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 20:31:00.589562 0.000000 udp 10.0.2.104 56988 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 20:33:46.349321 3.000551 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:33:53.356111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:34:01.357335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:34:17.360563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:34:49.367007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:40:53.373178 3.000695 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:41:00.379713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:41:08.381219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:41:24.384331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:41:56.390261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:46:00.581440 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 20:46:00.581576 0.010119 udp 10.0.2.104 56989 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 20:46:00.592039 0.000000 udp 10.0.2.104 56990 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 20:48:00.396211 3.001824 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:48:07.403835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:48:15.405404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:48:31.408484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:49:03.414595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:55:07.420393 3.060754 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:55:14.452184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:55:22.438974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:55:38.442200 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:56:10.448110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:08:00.582138 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 21:08:00.582250 0.022492 udp 10.0.2.104 56991 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 21:08:00.605119 0.000000 udp 10.0.2.104 56992 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 21:12:26.454265 3.002012 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:12:33.464356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:12:41.463214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:12:57.468072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:13:29.471950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:18:00.582210 0.013531 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 21:18:00.595863 0.010622 udp 10.0.2.104 56993 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 21:18:00.606922 0.000000 udp 10.0.2.104 56994 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 21:19:33.489823 3.000230 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:19:40.495867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:19:48.497021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:20:04.500189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:20:36.506126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:26:40.511842 3.001974 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:26:47.519478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:26:55.520979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:27:11.524243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:27:43.534366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:31:00.573424 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 21:31:00.573602 0.013439 udp 10.0.2.104 56995 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 21:31:00.587490 0.000000 udp 10.0.2.104 56996 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 21:33:47.536858 3.001181 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:33:54.543289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:34:02.545057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:34:18.548101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:34:50.554473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:40:54.559711 3.001793 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:41:01.567652 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:41:09.568982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:41:25.571973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:41:57.577959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:46:00.577457 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 21:46:00.577651 0.011475 udp 10.0.2.104 56997 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 21:46:00.589505 0.000000 udp 10.0.2.104 56998 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 21:48:01.583810 3.001997 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:48:08.591481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:48:16.593057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:48:32.595843 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:49:04.602214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:55:08.610606 3.023442 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:55:15.625414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:55:23.626978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:55:39.630015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:56:11.636154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:08:00.575468 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 22:08:00.575583 0.025101 udp 10.0.2.104 56999 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 22:08:00.601094 0.000000 udp 10.0.2.104 57000 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 22:12:27.642176 3.001120 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:12:34.649150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:12:42.650873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:12:58.654178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:13:30.659885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:18:00.577994 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 22:18:00.578138 0.011375 udp 10.0.2.104 57001 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 22:18:00.589892 0.000000 udp 10.0.2.104 57002 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 22:19:34.666961 3.000415 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:19:41.673131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:19:49.674545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:20:05.678103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:20:37.683784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:26:41.690641 3.010842 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:26:48.707361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:26:56.708741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:27:12.714232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:27:44.718124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:30:00.573107 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 22:30:00.573203 0.011543 udp 10.0.2.104 57003 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 22:30:00.585084 0.000000 udp 10.0.2.104 57004 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 22:33:48.724356 3.001576 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:33:55.731278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:34:03.732592 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:34:19.735934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:34:51.741932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:40:55.747677 3.001547 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:41:02.755071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:41:10.756651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:41:26.759664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:41:58.765775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:45:00.577146 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 22:45:00.577253 0.022005 udp 10.0.2.104 57005 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 22:45:00.599664 0.000000 udp 10.0.2.104 57006 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 22:48:04.775031 3.001208 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:48:11.781945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:48:19.783468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:48:35.786589 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:49:07.792477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:55:11.799648 3.000515 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:55:18.808597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:55:26.807243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:55:42.810279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:56:14.816297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:08:00.571431 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 23:08:00.571602 0.011369 udp 10.0.2.104 57007 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 23:08:00.583348 0.000000 udp 10.0.2.104 57008 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 23:12:29.830845 3.001469 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:12:36.838330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:12:44.839903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:13:00.852823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:13:32.859043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:18:00.575515 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 23:18:00.575703 0.010873 udp 10.0.2.104 57009 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 23:18:00.586935 0.000000 udp 10.0.2.104 57010 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 23:19:36.864504 3.002124 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:19:43.872222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:19:51.873451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:20:07.876866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:20:39.882918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:26:43.897645 2.993008 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:26:50.897253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:26:58.901050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:27:14.900884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:27:46.906783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:30:00.579191 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 23:30:00.579297 0.011254 udp 10.0.2.104 57011 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 23:30:00.590900 0.000000 udp 10.0.2.104 57012 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 23:33:50.912501 3.002127 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:33:57.919781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:34:05.921885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:34:21.924939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:34:53.930907 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:40:57.946663 3.001845 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:41:04.953664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:41:12.956199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:41:28.958980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:42:00.964948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:45:00.583316 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 23:45:00.583426 0.027652 udp 10.0.2.104 57013 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/13 23:45:00.611445 0.000000 udp 10.0.2.104 57014 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/13 23:48:06.973380 3.001983 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:48:13.980514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:48:21.982603 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:48:37.985484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:49:09.991674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:55:13.998291 3.351741 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:55:21.314686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:55:29.241403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:55:45.097665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:56:17.025970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:08:00.587502 0.000162 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 00:08:00.587775 0.011042 udp 10.0.2.104 57015 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 00:08:00.599219 0.000000 udp 10.0.2.104 57016 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 00:12:32.040497 3.001551 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:12:39.047328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:12:47.048864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:13:03.052437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:13:35.058438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:18:00.590157 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 00:18:00.590266 0.010442 udp 10.0.2.104 57017 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 00:18:00.601084 0.000000 udp 10.0.2.104 57018 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 00:19:39.065323 3.000485 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:19:46.071763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:19:54.073005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:20:10.078510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:20:42.091595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:26:46.097950 3.001235 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:26:53.105475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:27:01.107096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:27:17.110088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:27:49.119943 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:30:00.585172 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 00:30:00.585270 0.011610 udp 10.0.2.104 57019 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 00:30:00.597254 0.000000 udp 10.0.2.104 57020 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 00:33:53.121536 3.001605 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:34:00.129985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:34:08.130776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:34:24.134095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:34:56.140253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:41:00.146826 3.000417 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:41:07.153298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:41:15.155124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:41:31.158074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:42:03.164163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:45:00.589287 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 00:45:00.589444 0.010148 udp 10.0.2.104 57021 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 00:45:00.600035 0.000000 udp 10.0.2.104 57022 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 00:48:08.171935 3.000608 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:48:15.178652 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:48:23.180382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:48:39.183327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:49:11.189612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:55:15.195978 3.006428 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:55:22.202443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:55:30.204339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:55:46.208643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:56:18.213575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:08:00.583292 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 01:08:00.583436 0.010834 udp 10.0.2.104 57023 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 01:08:00.594720 0.000000 udp 10.0.2.104 57024 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 01:12:28.221719 3.000381 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:12:35.258533 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:12:43.239668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:12:59.242419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:13:31.249044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:18:00.585957 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 01:18:00.586060 0.013896 udp 10.0.2.104 57025 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 01:18:00.600332 0.000000 udp 10.0.2.104 57026 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 01:19:35.256141 3.001009 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:19:42.262158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:19:50.263524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:20:06.268493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:20:38.272791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:26:42.279711 3.000594 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:26:49.286298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:26:57.288434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:27:13.292184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:27:45.296700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:31:00.587445 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 01:31:00.587559 0.013446 udp 10.0.2.104 57027 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 01:31:00.601350 0.000000 udp 10.0.2.104 57028 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 01:33:49.303436 3.000763 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:33:56.309895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:34:04.311196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:34:20.314311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:34:52.320503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:40:56.326648 3.001723 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:41:03.334033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:41:11.335411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:41:27.338466 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:41:59.344620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:46:00.581600 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 01:46:00.581748 0.014754 udp 10.0.2.104 57029 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 01:46:00.596848 0.000000 udp 10.0.2.104 57030 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 01:48:03.351225 3.000992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:48:10.357909 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:48:18.359401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:48:34.362541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:49:06.368464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:55:10.374354 3.055894 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:55:17.408713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:55:25.393270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:55:41.396344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:56:13.402385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:08:00.589904 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 02:08:00.590105 0.011765 udp 10.0.2.104 57031 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 02:08:00.602286 0.000000 udp 10.0.2.104 57032 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 02:12:26.414761 3.001287 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:12:33.421410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:12:41.423225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:12:57.425975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:13:29.432281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:18:00.582209 0.032123 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 02:18:00.614535 0.011197 udp 10.0.2.104 57033 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 02:18:00.626146 0.000000 udp 10.0.2.104 57034 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 02:19:33.441291 2.998535 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:19:40.445501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:19:48.446943 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:20:04.450139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:20:36.456211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:26:40.462493 3.001359 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:26:47.469251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:26:55.471008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:27:11.473757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:27:43.480410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:31:00.583251 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 02:31:00.583444 0.011461 udp 10.0.2.104 57035 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 02:31:00.595220 0.000000 udp 10.0.2.104 57036 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 02:33:47.486002 3.001374 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:33:54.493368 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:34:02.495087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:34:18.497535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:34:50.504454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:40:54.511084 3.001049 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:41:01.517470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:41:09.518858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:41:25.522547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:41:57.528199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:46:00.587491 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 02:46:00.587592 0.012956 udp 10.0.2.104 57037 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 02:46:00.600917 0.000000 udp 10.0.2.104 57038 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 02:48:01.534870 3.001186 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:48:08.541125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:48:16.542798 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:48:32.545969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:49:04.553984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:55:08.558771 3.061771 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:55:15.597293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:55:23.576682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:55:39.579907 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:56:11.587994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:08:00.585017 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 03:08:00.585122 0.017011 udp 10.0.2.104 57039 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 03:08:00.602509 0.000000 udp 10.0.2.104 57040 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 03:12:26.600749 3.011278 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:12:33.617861 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:12:41.619301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:12:57.622444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:13:29.628435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:18:00.588510 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 03:18:00.588713 0.010225 udp 10.0.2.104 57041 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 03:18:00.599286 0.000000 udp 10.0.2.104 57042 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 03:19:33.634579 3.001493 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:19:40.643767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:19:48.646945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:20:04.648219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:20:36.652202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:26:40.658147 3.001837 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:26:47.665602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:26:55.667288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:27:11.670382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:27:43.676202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:31:00.579380 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 03:31:00.579623 0.014075 udp 10.0.2.104 57043 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 03:31:00.594094 0.000000 udp 10.0.2.104 57044 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 03:33:47.683164 3.001193 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:33:54.689735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:34:02.691294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:34:18.694347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:34:50.700503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:40:54.706429 3.001544 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:41:01.714234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:41:09.715044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:41:25.718107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:41:57.724127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:46:00.583410 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 03:46:00.583577 0.011688 udp 10.0.2.104 57045 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 03:46:00.595674 0.000000 udp 10.0.2.104 57046 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 03:48:01.729577 3.002593 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:48:08.737362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:48:16.739063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:48:32.742348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:49:04.748014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:55:08.754584 3.122577 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:55:15.856085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:55:23.794072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:55:39.786153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:56:11.792626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:08:00.581317 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 04:08:00.581427 0.011376 udp 10.0.2.104 57047 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 04:08:00.593217 0.000000 udp 10.0.2.104 57048 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 04:12:26.805858 3.002239 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:12:33.814187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:12:41.815755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:12:57.818624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:13:29.824464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:18:00.584138 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 04:18:00.584225 0.012363 udp 10.0.2.104 57049 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 04:18:00.597007 0.000000 udp 10.0.2.104 57050 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 04:19:33.831260 3.000900 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:19:40.837909 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:19:48.839515 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:20:04.845741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:20:36.848511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:26:40.854892 3.001233 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:26:47.861878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:26:55.863184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:27:11.866558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:27:43.872470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:30:00.579127 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 04:30:00.579225 0.011486 udp 10.0.2.104 57051 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 04:30:00.591124 0.000000 udp 10.0.2.104 57052 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 04:33:47.879476 3.000927 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:33:54.886096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:34:02.887243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:34:18.890478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:34:50.896432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:40:54.902842 3.001336 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:41:01.909247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:41:09.911366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:41:25.914458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:41:57.920382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:45:00.583389 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 04:45:00.583566 0.019513 udp 10.0.2.104 57053 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 04:45:00.603676 0.000000 udp 10.0.2.104 57054 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 04:48:02.928631 3.001153 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:48:09.935231 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:48:17.936578 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:48:33.939878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:49:05.946023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:55:09.951395 3.047566 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:55:16.980095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:55:24.970734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:55:40.973428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:56:12.982192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:08:00.587603 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 05:08:00.587722 0.015586 udp 10.0.2.104 57055 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 05:08:00.618799 0.000000 udp 10.0.2.104 57056 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 05:12:28.986705 3.010688 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:12:36.003156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:12:44.004927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:13:00.007658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:13:32.013573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:18:00.581087 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 05:18:00.581282 0.021831 udp 10.0.2.104 57057 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 05:18:00.603724 0.000000 udp 10.0.2.104 57058 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 05:19:36.020202 3.001080 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:19:43.027501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:19:51.028161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:20:07.031450 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:20:39.037792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:26:43.042872 3.002840 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:26:50.051498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:26:58.056016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:27:14.055710 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:27:46.061548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:30:00.585335 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 05:30:00.585433 0.011416 udp 10.0.2.104 57059 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 05:30:00.597257 0.000000 udp 10.0.2.104 57060 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 05:33:50.068185 3.001182 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:33:57.075044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:34:05.076593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:34:21.079535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:34:53.085816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:40:57.091654 3.001177 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:41:04.099064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:41:12.100520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:41:28.103106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:42:00.109568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:45:00.579205 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 05:45:00.579299 0.013352 udp 10.0.2.104 57061 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 05:45:00.593032 0.000000 udp 10.0.2.104 57062 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 05:48:05.117406 3.001329 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:48:12.139993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:48:20.136116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:48:36.139037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:49:08.144969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:55:12.154634 3.063361 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:55:19.201754 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:55:27.169919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:55:43.173108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:56:15.179051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:08:00.583250 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 06:08:00.583405 0.012751 udp 10.0.2.104 57063 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 06:08:00.596476 0.000000 udp 10.0.2.104 57064 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 06:12:31.185710 3.001110 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:12:38.192490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:12:46.194043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:13:02.196669 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:13:34.202931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:18:00.586347 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 06:18:00.586502 0.010272 udp 10.0.2.104 57065 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 06:18:00.597235 0.000000 udp 10.0.2.104 57066 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 06:19:38.209276 3.001161 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:19:45.216300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:19:53.217948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:20:09.220764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:20:41.226931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:26:45.233042 3.001476 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:26:52.240407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:27:00.245150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:27:16.245536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:27:48.251440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:30:00.581080 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 06:30:00.581187 0.010404 udp 10.0.2.104 57067 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 06:30:00.591957 0.000000 udp 10.0.2.104 57068 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 06:33:52.258884 2.999667 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:33:59.265337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:34:07.265854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:34:23.268757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:34:55.274807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:40:59.280551 3.001701 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:41:06.288143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:41:14.289910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:41:30.292893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:42:02.298569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:45:00.584966 0.000104 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 06:45:00.585164 0.014490 udp 10.0.2.104 57069 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 06:45:00.600014 0.000000 udp 10.0.2.104 57070 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 06:48:07.305589 3.002056 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:48:14.313401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:48:22.315082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:48:38.318217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:49:10.324375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:55:14.330240 3.067129 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:55:21.368484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:55:29.348917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:55:45.351946 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:56:17.368267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:08:00.579390 0.000218 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 07:08:00.669643 0.010160 udp 10.0.2.104 57071 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 07:08:00.680230 0.000000 udp 10.0.2.104 57072 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 07:12:27.376013 3.000939 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:12:34.383083 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:12:42.384508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:12:58.387268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:13:30.393608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:18:00.584111 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 07:18:00.584290 0.022463 udp 10.0.2.104 57073 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 07:18:00.607143 0.000000 udp 10.0.2.104 57074 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 07:19:34.399676 3.001491 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:19:41.406720 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:19:49.408253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:20:05.411565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:20:37.417300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:26:41.423534 3.001342 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:26:48.430922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:26:56.432445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:27:12.435656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:27:44.441606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:31:00.583649 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 07:31:00.583732 0.023995 udp 10.0.2.104 57075 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 07:31:00.608169 0.000000 udp 10.0.2.104 57076 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 07:33:48.447890 3.000980 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:33:55.454858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:34:03.456906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:34:19.459353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:34:51.465307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:40:55.471645 3.001372 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:41:02.478591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:41:10.480367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:41:26.483059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:41:58.489459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:46:00.577251 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 07:46:00.577458 0.010283 udp 10.0.2.104 57077 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 07:46:00.588101 0.000000 udp 10.0.2.104 57078 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 07:48:02.495781 3.001014 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:48:09.502916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:48:17.504448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:48:33.507190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:49:05.513073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:55:09.519733 3.001077 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:55:16.526721 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:55:24.529193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:55:40.531024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:56:12.537313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:08:00.585493 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 08:08:00.585594 0.011960 udp 10.0.2.104 57079 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 08:08:00.597936 0.000000 udp 10.0.2.104 57080 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 08:12:26.550690 3.001119 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:12:33.557596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:12:41.559036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:12:57.562256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:13:29.568308 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:18:00.577868 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 08:18:00.578059 0.011121 udp 10.0.2.104 57081 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 08:18:00.589563 0.000000 udp 10.0.2.104 57082 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 08:19:33.574163 3.001969 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:19:40.581856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:19:48.583179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:20:04.586067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:20:36.592456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:26:40.599034 3.000990 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:26:47.605841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:26:55.607032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:27:11.610922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:27:43.616179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:31:00.579600 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 08:31:00.579679 0.011734 udp 10.0.2.104 57083 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 08:31:00.591948 0.000000 udp 10.0.2.104 57084 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 08:33:47.621889 3.002120 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:33:54.630003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:34:02.630969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:34:18.634608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:34:50.640323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:40:54.647020 3.000891 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:41:01.653501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:41:09.654828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:41:25.658097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:41:57.664203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:46:00.583460 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 08:46:00.583651 0.010364 udp 10.0.2.104 57085 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 08:46:00.594337 0.000000 udp 10.0.2.104 57086 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 08:48:01.670365 3.001503 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:48:08.677613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:48:18.885296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:48:34.700768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:49:06.311626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:55:08.704702 3.226711 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:55:15.900654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:55:23.829373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:55:39.725993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:56:11.732066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:08:00.581442 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 09:08:00.581544 0.022507 udp 10.0.2.104 57087 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 09:08:00.604412 0.000000 udp 10.0.2.104 57088 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 09:12:26.747071 3.001062 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:12:33.754093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:12:41.755375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:12:57.758614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:13:29.764760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:18:00.584241 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 09:18:00.584442 0.010230 udp 10.0.2.104 57089 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 09:18:00.595065 0.000000 udp 10.0.2.104 57090 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 09:19:33.770851 3.001220 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:19:40.778959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:19:48.779572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:20:04.786756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:20:36.788521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:26:40.801459 2.996171 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:26:47.845215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:26:55.814730 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:27:11.816247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:27:43.822047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:31:00.585287 0.000100 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 09:31:00.585463 0.011426 udp 10.0.2.104 57091 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 09:31:00.597246 0.000000 udp 10.0.2.104 57092 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 09:33:47.828580 3.001264 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:33:54.835886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:34:02.837356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:34:18.840329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:34:50.846358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:40:54.853032 3.001017 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:41:01.859919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:41:09.861269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:41:25.864390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:41:57.870417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:46:00.579273 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 09:46:00.579438 0.010593 udp 10.0.2.104 57093 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 09:46:00.590358 0.000000 udp 10.0.2.104 57094 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 09:48:01.876876 3.001022 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:48:08.883885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:48:16.885357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:48:32.887657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:49:04.894211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:55:08.900420 3.011480 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:55:15.917495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:55:23.919303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:55:39.922280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:56:11.928673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:08:00.577109 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 10:08:00.577301 0.012226 udp 10.0.2.104 57095 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 10:08:00.589908 0.000000 udp 10.0.2.104 57096 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 10:12:27.934657 3.001422 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:12:34.941444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:12:42.943233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:12:58.946142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:13:30.952152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:18:00.580359 0.039994 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 10:18:00.620460 0.010949 udp 10.0.2.104 57097 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 10:18:00.631826 0.000000 udp 10.0.2.104 57098 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 10:19:34.968360 3.000859 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:19:41.975841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:19:49.977802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:20:05.986285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:20:37.986442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:26:41.992524 3.003617 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:26:49.000343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:26:57.000965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:27:13.003866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:27:45.010255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:30:00.575245 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 10:30:00.575425 0.013609 udp 10.0.2.104 57099 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 10:30:00.589404 0.000000 udp 10.0.2.104 57100 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 10:33:49.015255 3.002985 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:33:56.023068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:34:04.024885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:34:20.028151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:34:52.033800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:40:56.040984 3.000961 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:41:03.047457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:41:11.049227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:41:27.052288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:41:59.058145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:45:00.579292 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 10:45:00.579385 0.014979 udp 10.0.2.104 57101 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 10:45:00.594815 0.000000 udp 10.0.2.104 57102 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 10:48:04.065131 3.002028 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:48:11.072282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:48:19.074182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:48:35.077514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:49:07.082952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:55:11.089185 3.062650 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:55:18.124206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:55:26.108387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:55:42.111237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:56:14.117509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:08:00.583228 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 11:08:00.583320 0.012618 udp 10.0.2.104 57103 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 11:08:00.596339 0.000000 udp 10.0.2.104 57104 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 11:12:30.124478 3.000694 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:12:37.130723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:12:45.132124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:13:01.135413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:13:33.141278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:18:00.579655 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 11:18:00.579857 0.018122 udp 10.0.2.104 57105 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 11:18:00.598332 0.000000 udp 10.0.2.104 57106 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 11:19:37.148027 3.000928 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:19:44.154731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:19:52.156440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:20:08.159133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:20:40.165163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:26:44.172233 3.184869 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:26:51.326399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:26:59.250060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:27:15.193212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:27:47.199595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:30:00.581191 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 11:30:00.581336 0.016277 udp 10.0.2.104 57107 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 11:30:00.597957 0.000000 udp 10.0.2.104 57108 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 11:33:51.205540 3.001240 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:33:58.212169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:34:06.214062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:34:22.217163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:34:54.222853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:40:58.229024 3.001758 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:41:05.236789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:41:13.237819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:41:29.241518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:42:01.247857 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:45:00.578206 0.000138 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 11:45:00.578453 0.015272 udp 10.0.2.104 57109 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 11:45:00.594076 0.000000 udp 10.0.2.104 57110 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 11:48:05.253493 3.021523 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:48:12.280517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:48:20.282162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:48:36.285559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:49:08.291245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:55:12.297136 3.020178 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:55:19.314713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:55:27.316094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:55:43.319023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:56:15.325234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:08:00.582745 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 12:08:00.582918 0.023925 udp 10.0.2.104 57111 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 12:08:00.607248 0.000000 udp 10.0.2.104 57112 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 12:12:31.330935 3.001600 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:12:38.338346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:12:46.340135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:13:02.411672 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:13:34.359005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:18:00.582262 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 12:18:00.582373 0.010324 udp 10.0.2.104 57113 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 12:18:00.593119 0.000000 udp 10.0.2.104 57114 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 12:19:38.364650 3.002162 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:19:45.372425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:19:53.373977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:20:09.377118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:20:41.383092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:26:45.390670 3.080503 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:26:52.441370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:27:00.407371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:27:16.410877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:27:48.416988 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:30:00.577007 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 12:30:00.577120 0.010147 udp 10.0.2.104 57115 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 12:30:00.587862 0.000000 udp 10.0.2.104 57116 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 12:33:52.422644 3.001968 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:33:59.430279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:34:07.432022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:34:23.434910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:34:55.440842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:40:59.447021 3.001673 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:41:06.454116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:41:14.455813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:41:30.458829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:42:02.464762 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:45:00.581156 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 12:45:00.581259 0.011369 udp 10.0.2.104 57117 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 12:45:00.593003 0.000000 udp 10.0.2.104 57118 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 12:48:06.474282 2.998286 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:48:13.478384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:48:21.480089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:48:37.483399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:49:09.488877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:55:13.495509 3.121236 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:55:20.589463 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:55:28.523148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:55:44.516717 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:56:16.523072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:08:00.575472 0.056533 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 13:08:00.632175 0.010319 udp 10.0.2.104 57119 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 13:08:00.642845 0.000000 udp 10.0.2.104 57120 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 13:12:32.656804 3.013955 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:12:39.644803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:12:47.584898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:13:03.560661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:13:35.576933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:18:00.578120 0.184634 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 13:18:00.762865 0.010309 udp 10.0.2.104 57121 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 13:18:00.773542 0.000000 udp 10.0.2.104 57122 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 13:19:39.593019 3.134309 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:19:46.703363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:19:54.637788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:20:14.434732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:20:50.899248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:26:49.920697 3.128776 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:26:56.994929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:27:04.892403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:27:20.681722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:27:52.239226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:30:01.319723 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 13:30:01.319826 0.010217 udp 10.0.2.104 57123 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 13:30:01.330398 0.000000 udp 10.0.2.104 57124 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 13:33:53.690570 3.002024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:34:00.698232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:34:08.699404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:34:24.702882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:34:56.718822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:41:00.724996 3.001378 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:41:07.740795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:41:15.733976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:41:31.774850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:42:03.742705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:45:00.643445 0.200566 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 13:45:00.844190 0.013220 udp 10.0.2.104 57125 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 13:45:00.857767 0.000000 udp 10.0.2.104 57126 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 13:48:07.748713 3.001787 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:48:14.756070 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:48:22.757895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:48:38.760893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:49:10.846384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:55:14.772765 3.002257 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:55:21.780242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:55:29.785508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:55:45.784769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:56:17.790614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:08:00.582104 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 14:08:00.582282 0.011823 udp 10.0.2.104 57127 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 14:08:00.594559 0.000000 udp 10.0.2.104 57128 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 14:12:27.797815 3.001557 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:12:34.805487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:12:42.807062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:12:58.809799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:13:30.815959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:18:00.574223 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 14:18:00.574335 0.010897 udp 10.0.2.104 57129 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 14:18:00.585649 0.000000 udp 10.0.2.104 57130 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 14:19:34.821423 3.001702 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:19:41.829262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:19:49.830800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:20:05.833500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:20:37.839868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:26:41.845970 3.001784 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:26:48.852869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:26:56.859154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:27:12.857362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:27:44.863791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:31:00.576916 0.000112 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 14:31:00.577115 0.012112 udp 10.0.2.104 57131 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 14:31:00.589611 0.000000 udp 10.0.2.104 57132 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 14:33:48.869992 3.063151 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:33:55.909892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:34:03.888840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:34:19.892091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:34:51.897903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:40:55.903429 3.024282 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:41:02.931280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:41:10.932640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:41:26.935807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:41:58.941965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:46:00.579765 0.271128 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 14:46:00.851064 0.010029 udp 10.0.2.104 57133 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 14:46:00.861437 0.000000 udp 10.0.2.104 57134 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 14:48:02.947984 3.001610 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:48:09.955112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:48:17.956934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:48:33.959932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:49:05.966012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:55:09.982376 3.010989 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:55:16.999221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:55:25.000659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:55:41.003770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:56:13.009998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:08:00.577367 0.081006 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 15:08:00.658542 0.021888 udp 10.0.2.104 57135 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 15:08:00.680859 0.000000 udp 10.0.2.104 57136 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 15:12:27.025601 3.008329 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:12:34.040522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:12:42.042238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:12:58.047259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:13:30.053977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:18:00.579867 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 15:18:00.579974 0.010462 udp 10.0.2.104 57137 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 15:18:00.590814 0.000000 udp 10.0.2.104 57138 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 15:19:34.056331 3.002124 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:19:41.064282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:19:49.065967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:20:05.068650 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:20:37.074918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:26:41.081093 3.000832 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:26:48.088481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:26:56.089782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:27:12.092348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:27:44.098864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:31:00.581432 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 15:31:00.581621 0.010295 udp 10.0.2.104 57139 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 15:31:00.592331 0.000000 udp 10.0.2.104 57140 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 15:33:48.105684 3.000881 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:33:55.112416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:34:03.113099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:34:19.116534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:34:51.122506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:40:55.129435 3.002914 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:41:02.136376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:41:10.137767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:41:26.182773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:41:58.156614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:46:00.579138 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 15:46:00.579301 0.006422 udp 10.0.2.104 57141 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 15:46:00.586124 0.000000 udp 10.0.2.104 57142 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 15:48:02.163183 3.000729 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:48:09.170037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:48:17.172065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:48:33.174891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:49:05.180627 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:55:09.186389 3.001918 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:55:16.193942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:55:24.195802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:55:40.198491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:56:12.204582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:08:00.573468 0.000170 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 16:08:00.573739 0.011647 udp 10.0.2.104 57143 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 16:08:00.585776 0.000000 udp 10.0.2.104 57144 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 16:12:27.219605 3.018402 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:12:34.236449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:12:42.238259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:12:58.241356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:13:30.247694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:18:00.576341 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 16:18:00.576463 0.010099 udp 10.0.2.104 57145 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 16:18:00.586920 0.000000 udp 10.0.2.104 57146 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 16:19:34.253642 3.001210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:19:41.260833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:19:49.262233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:20:05.264922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:20:37.271040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:26:41.279986 2.998791 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:26:48.284372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:26:56.286137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:27:12.288910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:27:44.295039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:30:00.581063 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 16:30:00.581206 0.013288 udp 10.0.2.104 57147 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 16:30:00.611759 0.000000 udp 10.0.2.104 57148 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 16:33:48.306462 3.036614 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:33:55.324600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:34:03.319987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:34:19.323255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:34:51.329195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:40:55.336183 3.000566 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:41:02.342449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:41:10.346035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:41:26.347216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:41:58.353037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:45:00.575142 0.104168 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 16:45:00.679448 0.011041 udp 10.0.2.104 57149 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 16:45:00.690858 0.000000 udp 10.0.2.104 57150 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 16:48:02.359902 3.000857 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:48:09.366435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:48:17.368080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:48:33.372073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:49:05.377062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:55:09.383163 3.001456 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:55:16.390514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:55:24.391758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:55:40.394973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:56:12.400959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:08:00.579191 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 17:08:00.579380 0.021498 udp 10.0.2.104 57151 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 17:08:00.601261 0.000000 udp 10.0.2.104 57152 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 17:12:28.408055 3.000621 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:12:35.414438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:12:43.416323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:12:59.418720 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:13:31.432955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:18:00.571925 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 17:18:00.572029 0.011402 udp 10.0.2.104 57153 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 17:18:00.583784 0.000000 udp 10.0.2.104 57154 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 17:19:35.431771 3.064335 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:19:42.479852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:19:50.449826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:20:06.452579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:20:38.458665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:26:42.465651 3.000916 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:26:49.472401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:26:57.473876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:27:13.476630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:27:45.482758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:30:00.577197 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 17:30:00.577336 0.011427 udp 10.0.2.104 57155 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 17:30:00.589168 0.000000 udp 10.0.2.104 57156 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 17:33:49.489660 3.016038 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:33:56.506264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:34:04.507875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:34:20.510891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:34:52.516946 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:40:56.523679 3.185614 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:41:03.728572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:41:11.652985 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:41:27.557834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:41:59.560813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:45:00.570752 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 17:45:00.570960 0.013947 udp 10.0.2.104 57157 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 17:45:00.585321 0.000000 udp 10.0.2.104 57158 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 17:48:03.567683 3.000668 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:48:10.574154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:48:18.575773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:48:34.578567 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:49:06.584908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:55:10.590606 3.002034 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:55:17.601481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:55:25.599381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:55:41.604554 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:56:13.608828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:08:00.575210 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 18:08:00.575390 0.053511 udp 10.0.2.104 57159 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 18:08:00.629270 0.000000 udp 10.0.2.104 57160 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 18:12:29.613835 3.074384 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:12:36.661736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:12:44.634131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:13:00.636716 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:13:32.642581 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:18:00.577924 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 18:18:00.578025 0.010276 udp 10.0.2.104 57161 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 18:18:00.588669 0.000000 udp 10.0.2.104 57162 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 18:19:36.649727 3.004266 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:19:43.656106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:19:51.657461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:20:07.660489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:20:39.667002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:26:43.673884 3.000707 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:26:50.680008 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:26:58.681318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:27:14.684523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:27:46.690369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:30:00.572929 0.086900 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 18:30:00.659941 0.014826 udp 10.0.2.104 57163 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 18:30:00.675132 0.000000 udp 10.0.2.104 57164 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 18:33:50.697462 3.040279 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:33:57.715638 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:34:05.715705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:34:21.718492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:34:53.726917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:40:57.730567 3.002240 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:41:04.737903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:41:12.742382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:41:28.745428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:42:00.748544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:45:00.577859 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 18:45:00.578028 0.010254 udp 10.0.2.104 57165 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 18:45:00.588702 0.000000 udp 10.0.2.104 57166 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 18:48:04.757905 3.008239 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:48:11.771925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:48:19.887982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:48:35.786635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:49:07.792555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:55:11.798842 3.001383 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:55:18.806338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:55:26.810462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:55:42.810452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:56:14.816432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:08:00.571493 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 19:08:00.571670 0.010332 udp 10.0.2.104 57167 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 19:08:00.582370 0.000000 udp 10.0.2.104 57168 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 19:12:31.823510 3.001872 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:12:38.833446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:12:46.834553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:13:02.836976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:13:34.841585 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:18:00.574099 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 19:18:00.574203 0.010141 udp 10.0.2.104 57169 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 19:18:00.584737 0.000000 udp 10.0.2.104 57170 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 19:19:38.848882 3.079921 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:19:45.898873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:19:53.866659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:20:09.870279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:20:41.875892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:26:45.882445 3.000769 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:26:52.889470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:27:00.890733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:27:16.893869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:27:48.903963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:30:00.579075 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 19:30:00.579213 0.021394 udp 10.0.2.104 57171 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 19:30:00.600933 0.000000 udp 10.0.2.104 57172 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 19:33:52.906810 3.000420 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:33:59.913186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:34:07.914820 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:34:23.917506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:34:55.923634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:40:59.929246 3.001992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:41:06.937003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:41:14.938546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:41:30.941612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:42:02.947293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:45:00.573000 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 19:45:00.573148 0.011769 udp 10.0.2.104 57173 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 19:45:00.585282 0.000000 udp 10.0.2.104 57174 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 19:48:06.953418 3.001957 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:48:13.961158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:48:21.962641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:48:37.965396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:49:09.971569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:55:13.977769 3.001446 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:55:20.985366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:55:28.987873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:55:44.988921 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:56:16.995599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:08:00.577324 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 20:08:00.577532 0.014911 udp 10.0.2.104 57175 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 20:08:00.592847 0.000000 udp 10.0.2.104 57176 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 20:12:28.003855 3.012254 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:12:35.021624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:12:43.023257 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:12:59.026375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:13:31.031809 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:18:00.570124 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 20:18:00.570230 0.010657 udp 10.0.2.104 57177 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 20:18:00.581250 0.000000 udp 10.0.2.104 57178 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 20:19:35.037860 3.002772 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:19:42.046169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:19:50.046622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:20:06.050172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:20:38.056135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:26:42.063905 2.999403 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:26:49.069724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:26:57.071155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:27:13.084387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:27:45.090262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:31:00.571574 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 20:31:00.571687 0.011196 udp 10.0.2.104 57179 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 20:31:00.583234 0.000000 udp 10.0.2.104 57180 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 20:33:49.096885 3.000694 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:33:56.103355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:34:04.105067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:34:20.108081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:34:52.114210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:40:56.119667 3.152684 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:41:03.244376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:41:11.176922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:41:27.142264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:41:59.148356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:46:00.581851 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 20:46:00.581951 0.010481 udp 10.0.2.104 57181 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 20:46:00.592835 0.000000 udp 10.0.2.104 57182 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 20:48:03.153929 3.011801 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:48:10.171059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:48:18.172995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:48:34.176376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:49:06.182273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:55:10.188944 3.000993 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:55:17.195758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:55:25.196924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:55:41.199677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:56:13.206052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:08:00.573632 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 21:08:00.573829 0.011325 udp 10.0.2.104 57183 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 21:08:00.585540 0.000000 udp 10.0.2.104 57184 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 21:12:27.219080 3.001783 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:12:34.226697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:12:42.227587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:12:58.231030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:13:30.237767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:18:00.576046 0.092615 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 21:18:00.668776 0.013189 udp 10.0.2.104 57185 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 21:18:00.695474 0.000000 udp 10.0.2.104 57186 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 21:19:34.243764 3.051875 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:19:41.276992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:19:49.262238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:20:05.265221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:20:37.271006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:26:41.276894 3.001871 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:26:48.284576 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:26:56.286183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:27:12.289033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:27:44.295083 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:31:00.577303 0.000105 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 21:31:00.577493 0.011961 udp 10.0.2.104 57187 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 21:31:00.589843 0.000000 udp 10.0.2.104 57188 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 21:33:48.301608 3.001171 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:33:55.308277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:34:03.310004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:34:19.313211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:34:51.320035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:40:55.325350 3.001339 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:41:02.332127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:41:10.344004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:41:26.347216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:41:58.352674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:46:00.571614 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 21:46:00.571732 0.010401 udp 10.0.2.104 57189 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 21:46:00.582540 0.000000 udp 10.0.2.104 57190 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 21:48:02.359566 3.001122 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:48:09.366460 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:48:17.367664 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:48:33.370937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:49:05.379967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:55:09.383313 3.001214 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:55:16.390322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:55:24.391744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:55:40.394813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:56:12.410915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:08:00.569484 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 22:08:00.569630 0.011226 udp 10.0.2.104 57191 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 22:08:00.581243 0.000000 udp 10.0.2.104 57192 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 22:12:27.426113 3.000889 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:12:34.433039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:12:42.434550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:12:58.437525 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:13:30.443275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:18:00.571797 0.031178 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 22:18:00.603174 0.010118 udp 10.0.2.104 57193 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 22:18:00.613633 0.000000 udp 10.0.2.104 57194 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 22:19:34.449467 3.001434 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:19:41.456991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:19:49.458497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:20:05.461414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:20:37.469097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:26:41.473640 3.001684 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:26:48.490741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:26:56.492408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:27:12.502223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:27:44.501342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:30:00.576996 0.000038 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 22:30:00.577061 0.014574 udp 10.0.2.104 57195 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 22:30:00.591635 0.000000 udp 10.0.2.104 57196 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 22:33:48.507997 3.001108 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:33:55.514877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:34:03.516072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:34:19.519474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:34:51.525272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:40:55.532917 3.005837 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:41:02.550128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:41:10.550232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:41:26.553181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:41:58.559241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:45:00.571196 0.000118 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 22:45:00.571401 0.010320 udp 10.0.2.104 57197 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 22:45:00.618754 0.000000 udp 10.0.2.104 57198 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 22:48:02.565657 3.029589 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:48:09.584751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:48:17.584751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:48:33.587263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:49:05.593299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:55:09.599166 3.001683 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:55:16.606865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:55:24.608152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:55:40.611114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:56:12.617295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:08:00.575172 0.000109 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 23:08:00.575373 0.011669 udp 10.0.2.104 57199 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 23:08:00.587421 0.000000 udp 10.0.2.104 57200 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 23:12:27.631300 3.039096 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:12:34.651615 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:12:42.650584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:12:58.653539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:13:30.660040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:18:00.567449 0.167816 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 23:18:00.735381 0.011483 udp 10.0.2.104 57201 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 23:18:00.747244 0.000000 udp 10.0.2.104 57202 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 23:19:34.675672 3.283715 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:19:41.925955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:19:49.847940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:20:05.699721 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:20:37.703833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:26:41.710220 3.010974 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:26:48.727241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:26:56.728641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:27:12.731924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:27:44.737962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:30:00.573049 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 23:30:00.573247 0.014198 udp 10.0.2.104 57203 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 23:30:00.587835 0.000000 udp 10.0.2.104 57204 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 23:33:48.743516 3.002118 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:33:55.751085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:34:03.762655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:34:19.765049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:34:51.774769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:40:55.778179 3.001129 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:41:02.857690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:41:10.815048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:41:26.809476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:41:58.815686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:45:00.577080 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 23:45:00.577196 0.010109 udp 10.0.2.104 57205 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/14 23:45:00.587694 0.000000 udp 10.0.2.104 57206 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/14 23:48:02.821358 3.001902 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:48:09.830552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:48:17.830323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:48:33.833602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:49:05.839366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:55:09.845778 3.001522 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:55:16.852928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:55:24.854710 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:55:40.857715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:56:12.863413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:08:00.571368 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 00:08:00.571567 0.010821 udp 10.0.2.104 57207 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 00:08:00.582800 0.000000 udp 10.0.2.104 57208 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 00:12:32.660793 2.960011 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:12:39.583568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:12:47.485086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:13:03.280372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:13:34.897179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:18:01.395245 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 00:18:01.395632 0.010127 udp 10.0.2.104 57209 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 00:18:01.406081 0.000000 udp 10.0.2.104 57210 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 00:19:37.855763 3.002227 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:19:44.864067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:19:52.868535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:20:08.869970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:20:40.874259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:26:44.881907 2.999400 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:26:51.887844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:26:59.889012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:27:15.892207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:27:47.898023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:30:01.438285 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 00:30:01.438374 0.011210 udp 10.0.2.104 57211 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 00:30:01.449971 0.000000 udp 10.0.2.104 57212 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 00:33:51.905077 3.000799 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:33:58.911768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:34:06.913062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:34:22.916311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:34:54.922280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:41:01.932288 3.001892 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:41:08.939852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:41:16.941319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:41:32.945353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:42:04.950525 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:45:01.394543 0.000117 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 00:45:01.394754 0.022076 udp 10.0.2.104 57213 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 00:45:01.417226 0.000000 udp 10.0.2.104 57214 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 00:48:08.956389 3.069113 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:48:16.001622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:48:23.987996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:48:39.989425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:49:11.993971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:55:16.000796 3.075957 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:55:23.050902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:55:31.019396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:55:47.022542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:56:19.028549 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:08:01.388366 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 01:08:01.388471 0.010867 udp 10.0.2.104 57215 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 01:08:01.399691 0.000000 udp 10.0.2.104 57216 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 01:12:34.042506 3.001544 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:12:41.050439 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:12:49.052023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:13:05.066547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:13:37.070836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:18:01.391118 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 01:18:01.391276 0.010225 udp 10.0.2.104 57217 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 01:18:01.401850 0.000000 udp 10.0.2.104 57218 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 01:19:41.076846 3.001759 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:19:48.084391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:19:56.086183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:20:12.088804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:20:44.095012 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:26:48.100820 3.001780 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:26:55.108475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:27:03.110074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:27:19.112497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:27:51.118730 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:31:01.392925 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 01:31:01.393121 0.023089 udp 10.0.2.104 57219 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 01:31:01.416618 0.000000 udp 10.0.2.104 57220 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 01:33:55.126000 3.000818 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:34:02.132399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:34:10.134172 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:34:26.136885 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:34:58.143029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:41:02.149290 3.001236 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:41:09.156238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:41:17.157155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:41:33.160850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:42:05.166837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:46:01.396725 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 01:46:01.396838 0.010101 udp 10.0.2.104 57221 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 01:46:01.407302 0.000000 udp 10.0.2.104 57222 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 01:48:09.173770 3.000466 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:48:16.180178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:48:24.182041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:48:40.184487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:49:12.190733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:55:16.207826 3.000782 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:55:23.299079 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:55:31.234216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:55:47.228715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:56:19.236479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:08:01.394605 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 02:08:01.394717 0.010325 udp 10.0.2.104 57223 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 02:08:01.405451 0.000000 udp 10.0.2.104 57224 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 02:12:29.241974 3.001316 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:12:36.249042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:12:44.250826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:13:00.253364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:13:32.260155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:18:01.397155 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 02:18:01.397261 0.010165 udp 10.0.2.104 57225 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 02:18:01.407975 0.000000 udp 10.0.2.104 57226 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 02:19:36.265648 3.002144 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:19:43.273341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:19:51.275142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:20:07.277887 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:20:39.283835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:26:43.300432 3.021451 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:26:50.317811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:26:58.319066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:27:14.322134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:27:46.327847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:31:01.388625 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 02:31:01.388731 0.011373 udp 10.0.2.104 57227 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 02:31:01.400481 0.000000 udp 10.0.2.104 57228 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 02:33:50.337777 3.000761 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:33:57.349221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:34:05.346015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:34:21.346122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:34:53.351540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:40:57.361181 2.998462 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:41:04.371687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:41:12.371521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:41:28.369869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:42:00.377416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:46:01.392651 0.182984 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 02:46:01.575791 0.013654 udp 10.0.2.104 57229 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 02:46:01.589819 0.000000 udp 10.0.2.104 57230 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 02:48:04.381631 3.166096 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:48:11.522117 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:48:19.445705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:48:35.407250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:49:07.409919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:55:11.416039 3.001294 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:55:18.423182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:55:26.425056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:55:42.433019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:56:14.433364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:08:01.390656 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 03:08:01.390770 0.010346 udp 10.0.2.104 57231 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 03:08:01.401502 0.000000 udp 10.0.2.104 57232 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 03:12:27.445555 3.001560 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:12:34.453125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:12:42.454517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:12:58.457487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:13:30.465366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:18:01.393239 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 03:18:01.393356 0.021566 udp 10.0.2.104 57233 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 03:18:01.415296 0.000000 udp 10.0.2.104 57234 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 03:19:34.469909 3.001063 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:19:41.477170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:19:49.478449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:20:05.481309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:20:37.488033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:26:41.493850 3.001414 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:26:48.500770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:26:56.502538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:27:12.505382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:27:44.511223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:31:01.394732 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 03:31:01.394930 0.011520 udp 10.0.2.104 57235 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 03:31:01.406810 0.000000 udp 10.0.2.104 57236 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 03:33:48.517144 3.046088 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:33:55.539984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:34:03.536410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:34:19.539618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:34:51.545464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:40:55.552652 3.000431 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:41:02.558835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:41:10.560444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:41:26.563625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:41:58.585757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:46:01.388662 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 03:46:01.388820 0.011897 udp 10.0.2.104 57237 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 03:46:01.401104 0.000000 udp 10.0.2.104 57238 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 03:48:03.586877 3.001324 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:48:10.594152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:48:18.595559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:48:34.598659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:49:06.604692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:55:10.610882 3.011544 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:55:17.628137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:55:25.629781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:55:41.632686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:56:13.638830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:08:01.396520 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 04:08:01.396627 0.022435 udp 10.0.2.104 57239 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 04:08:01.419640 0.000000 udp 10.0.2.104 57240 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 04:12:27.652003 3.001368 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:12:34.659221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:12:42.660911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:12:58.663676 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:13:30.670110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:18:01.389094 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 04:18:01.389254 0.011457 udp 10.0.2.104 57241 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 04:18:01.401087 0.000000 udp 10.0.2.104 57242 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 04:19:34.675293 3.002020 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:19:41.683333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:19:49.684934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:20:05.687349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:20:37.693786 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:26:41.699151 3.002425 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:26:48.707299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:26:56.708952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:27:12.712599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:27:44.717632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:31:01.390683 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 04:31:01.390787 0.012572 udp 10.0.2.104 57243 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 04:31:01.403760 0.000000 udp 10.0.2.104 57244 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 04:33:48.724439 3.000974 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:33:55.730969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:34:03.732496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:34:19.735525 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:34:51.751436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:40:55.759421 2.999805 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:41:02.765128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:41:10.766570 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:41:26.769529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:41:58.775855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:46:01.394604 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 04:46:01.394768 0.010332 udp 10.0.2.104 57245 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 04:46:01.405437 0.000000 udp 10.0.2.104 57246 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 04:48:03.782666 3.002215 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:48:10.790289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:48:18.792019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:48:34.795154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:49:06.800753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:55:10.806406 3.002343 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:55:17.814468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:55:25.816028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:55:41.819009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:56:13.824956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:08:01.392218 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 05:08:01.392372 0.011567 udp 10.0.2.104 57247 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 05:08:01.404255 0.000000 udp 10.0.2.104 57248 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 05:12:28.840236 3.004238 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:12:35.846945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:12:43.848207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:12:59.851296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:13:31.858068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:18:01.395264 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 05:18:01.395374 0.013816 udp 10.0.2.104 57249 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 05:18:01.409546 0.000000 udp 10.0.2.104 57250 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 05:19:35.863731 3.001442 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:19:42.870955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:19:50.876487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:20:06.875364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:20:38.881263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:26:42.888598 3.001473 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:26:49.894886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:26:57.896508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:27:13.899265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:27:45.905498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:31:01.386563 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 05:31:01.386710 0.012562 udp 10.0.2.104 57251 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 05:31:01.399650 0.000000 udp 10.0.2.104 57252 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 05:33:49.911705 3.002310 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:33:56.918812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:34:04.920096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:34:20.923157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:34:52.929261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:40:56.934637 3.002273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:41:03.942629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:41:11.944223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:41:27.947354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:41:59.955066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:46:01.390447 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 05:46:01.390595 0.013058 udp 10.0.2.104 57253 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 05:46:01.403961 0.000000 udp 10.0.2.104 57254 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 05:48:04.960883 3.001294 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:48:11.968289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:48:19.969748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:48:35.973999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:49:07.988871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:55:11.994770 3.004089 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:55:19.001831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:55:27.003702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:55:43.006990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:56:15.012724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:08:01.388295 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 06:08:01.388449 0.022752 udp 10.0.2.104 57255 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 06:08:01.411522 0.000000 udp 10.0.2.104 57256 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 06:12:31.019420 3.001095 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:12:38.026590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:12:46.027424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:13:02.030563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:13:34.036522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:18:01.391148 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 06:18:01.391257 0.011379 udp 10.0.2.104 57257 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 06:18:01.403061 0.000000 udp 10.0.2.104 57258 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 06:19:38.047574 2.996258 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:19:45.049539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:19:53.051331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:20:09.054675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:20:41.060497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:26:45.068822 2.999479 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:26:52.074011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:27:00.085181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:27:16.090637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:27:48.212357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:30:01.386166 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 06:30:01.386308 0.023009 udp 10.0.2.104 57259 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 06:30:01.409757 0.000000 udp 10.0.2.104 57260 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 06:33:52.113683 3.000834 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:33:59.117902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:34:07.119684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:34:23.122461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:34:55.128515 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:40:59.137811 2.998623 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:41:06.143385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:41:14.143414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:41:30.150573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:42:02.152437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:45:01.390933 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 06:45:01.391038 0.012033 udp 10.0.2.104 57261 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 06:45:01.403430 0.000000 udp 10.0.2.104 57262 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 06:48:06.170380 2.999960 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:48:13.176254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:48:21.177233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:48:37.181039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:49:11.371293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:55:13.202827 3.011320 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:55:20.219536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:55:28.221114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:55:44.225852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:56:16.231560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:08:01.394542 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 07:08:01.394663 0.010400 udp 10.0.2.104 57263 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 07:08:01.405419 0.000000 udp 10.0.2.104 57264 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 07:12:32.237374 3.016612 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:12:39.254014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:12:47.255349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:13:03.258085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:13:35.264817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:18:01.386954 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 07:18:01.387056 0.010935 udp 10.0.2.104 57265 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 07:18:01.398433 0.000000 udp 10.0.2.104 57266 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 07:19:39.270864 3.003158 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:19:46.277811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:19:54.279124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:20:10.282436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:20:42.292768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:26:46.295711 3.000197 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:26:53.301139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:27:01.303011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:27:17.306244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:27:49.312016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:30:01.392490 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 07:30:01.392597 0.011319 udp 10.0.2.104 57267 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 07:30:01.404348 0.000000 udp 10.0.2.104 57268 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 07:33:53.318395 3.001239 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:34:00.325738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:34:08.327067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:34:24.330203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:34:56.335995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:41:00.346472 2.998874 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:41:07.349892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:41:15.351224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:41:31.354254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:42:03.360520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:45:01.386170 0.000156 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 07:45:01.386439 0.010283 udp 10.0.2.104 57269 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 07:45:01.397093 0.000000 udp 10.0.2.104 57270 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 07:48:07.366725 3.000590 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:48:14.373082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:48:22.374750 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:48:38.378635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:49:10.383787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:55:14.391947 3.000654 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:55:21.397255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:55:29.398889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:55:45.401628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:56:17.418097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:08:01.390247 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 08:08:01.390345 0.011530 udp 10.0.2.104 57271 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 08:08:01.402347 0.000000 udp 10.0.2.104 57272 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 08:12:33.424640 3.001094 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:12:40.431325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:12:48.432976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:13:04.436048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:13:36.442243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:18:01.394128 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 08:18:01.394224 0.011172 udp 10.0.2.104 57273 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 08:18:01.405791 0.000000 udp 10.0.2.104 57274 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 08:19:40.448730 3.000868 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:19:47.455302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:19:55.456791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:20:11.460202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:20:43.465940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:26:47.472398 3.000794 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:26:54.479127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:27:02.481030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:27:18.484084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:27:50.490175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:30:01.388276 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 08:30:01.388466 0.017890 udp 10.0.2.104 57275 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 08:30:01.406715 0.000000 udp 10.0.2.104 57276 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 08:33:54.496844 3.001673 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:34:01.503432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:34:09.504774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:34:25.507952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:34:57.514106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:41:01.520295 3.001182 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:41:08.527268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:41:16.529497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:41:32.531718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:42:04.537517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:45:01.394189 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 08:45:01.394294 0.012257 udp 10.0.2.104 57277 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 08:45:01.406951 0.000000 udp 10.0.2.104 57278 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 08:48:08.543873 3.002031 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:48:15.551235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:48:23.552637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:48:39.556009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:49:11.561982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:55:15.579143 3.000133 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:55:22.585340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:55:30.587010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:55:46.589965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:56:18.595990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:08:01.386456 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 09:08:01.386581 0.012667 udp 10.0.2.104 57279 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 09:08:01.399697 0.000000 udp 10.0.2.104 57280 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 09:12:29.606155 3.003051 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:12:36.612271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:12:44.613411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:13:00.616392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:13:32.622667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:18:01.389045 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 09:18:01.389180 0.011583 udp 10.0.2.104 57281 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 09:18:01.401134 0.000000 udp 10.0.2.104 57282 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 09:19:36.628839 3.002947 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:19:43.636127 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:19:51.637266 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:20:07.640445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:20:39.646442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:26:43.653814 3.000265 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:26:50.659958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:26:58.661513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:27:14.664673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:27:46.670507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:31:01.390412 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 09:31:01.390523 0.011796 udp 10.0.2.104 57283 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 09:31:01.402685 0.000000 udp 10.0.2.104 57284 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 09:33:50.698886 2.999029 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:33:57.703874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:34:05.705200 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:34:21.708680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:34:53.714269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:40:57.721959 3.000198 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:41:04.728210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:41:12.750293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:41:28.743850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:42:00.758622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:46:01.405109 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 09:46:01.405215 0.010232 udp 10.0.2.104 57285 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 09:46:01.415798 0.000000 udp 10.0.2.104 57286 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 09:48:04.764374 3.001985 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:48:11.772067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:48:19.773356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:48:35.776577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:49:07.782477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:55:11.788752 3.001227 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:55:18.795890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:55:26.797032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:55:42.800192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:56:14.806628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:08:01.412395 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 10:08:01.412505 0.013861 udp 10.0.2.104 57287 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 10:08:01.426783 0.000000 udp 10.0.2.104 57288 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 10:12:27.827903 3.001961 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:12:34.835320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:12:42.836968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:12:58.840019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:13:30.845810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:18:01.404960 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 10:18:01.405064 0.010997 udp 10.0.2.104 57289 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 10:18:01.416429 0.000000 udp 10.0.2.104 57290 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 10:19:34.852767 3.000926 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:19:41.859171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:19:49.860871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:20:05.863822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:20:37.869931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:26:41.877141 3.000705 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:26:48.989058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:26:56.931247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:27:12.897900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:27:44.903363 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:31:01.406651 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 10:31:01.406768 0.021855 udp 10.0.2.104 57291 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 10:31:01.428975 0.000000 udp 10.0.2.104 57292 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 10:33:48.911032 3.000324 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:33:55.917776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:34:04.160290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:34:20.015354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:34:51.937994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:40:55.943745 3.001998 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:41:02.954646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:41:10.952817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:41:26.956120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:41:58.961494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:46:01.412312 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 10:46:01.412410 0.014204 udp 10.0.2.104 57293 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 10:46:01.426991 0.000000 udp 10.0.2.104 57294 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 10:48:02.970647 2.998906 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:48:09.975306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:48:17.976739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:48:33.980125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:49:05.985808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:55:09.992166 3.001827 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:55:17.002304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:55:25.000588 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:55:41.003238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:56:13.010101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:08:01.409672 0.009029 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 11:08:01.418771 0.014047 udp 10.0.2.104 57295 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 11:08:01.433292 0.000000 udp 10.0.2.104 57296 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 11:12:29.015985 3.038109 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:12:36.043294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:12:44.044611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:13:00.047353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:13:32.053420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:18:01.411290 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 11:18:01.411404 0.010236 udp 10.0.2.104 57297 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 11:18:01.422075 0.000000 udp 10.0.2.104 57298 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 11:19:36.060421 3.001056 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:19:43.067102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:19:51.068687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:20:07.072391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:20:39.078052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:26:43.084332 3.001098 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:26:50.091253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:26:58.092121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:27:14.096116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:27:46.101922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:31:01.402430 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 11:31:01.402629 0.012775 udp 10.0.2.104 57299 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 11:31:01.415782 0.000000 udp 10.0.2.104 57300 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 11:33:50.107379 3.001614 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:33:57.114897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:34:05.116647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:34:21.119445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:34:53.125858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:40:57.132907 2.999735 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:41:04.139038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:41:12.140865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:41:28.143624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:42:00.150062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:46:01.406535 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 11:46:01.406659 0.010278 udp 10.0.2.104 57301 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 11:46:01.417379 0.000000 udp 10.0.2.104 57302 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 11:48:04.155900 3.020740 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:48:11.173027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:48:19.174249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:48:35.177744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:49:07.183562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:55:11.189733 3.001366 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:55:18.197852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:55:26.198469 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:55:42.201043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:56:14.217542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:08:01.404294 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 12:08:01.404401 0.024881 udp 10.0.2.104 57303 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 12:08:01.429692 0.000000 udp 10.0.2.104 57304 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 12:12:30.225601 2.999609 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:12:37.230803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:12:45.232370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:13:01.235444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:13:33.241315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:18:01.407020 0.000186 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 12:18:01.407310 0.010323 udp 10.0.2.104 57305 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 12:18:01.418056 0.000000 udp 10.0.2.104 57306 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 12:19:37.247776 3.001253 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:19:44.258545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:19:52.256351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:20:08.259332 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:20:40.265675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:26:44.271114 3.002301 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:26:51.278876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:26:59.280219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:27:15.283249 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:27:47.289863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:30:01.402512 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 12:30:01.402616 0.011938 udp 10.0.2.104 57307 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 12:30:01.414979 0.000000 udp 10.0.2.104 57308 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 12:33:51.296017 3.000848 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:33:58.302593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:34:06.303982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:34:22.308124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:34:54.313631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:40:58.319451 3.001641 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:41:05.327889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:41:13.328192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:41:29.331320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:42:01.337358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:45:01.406492 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 12:45:01.406689 0.010241 udp 10.0.2.104 57309 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 12:45:01.417334 0.000000 udp 10.0.2.104 57310 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 12:48:05.344257 3.000857 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:48:12.350760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:48:20.352458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:48:36.355148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:49:08.360908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:55:12.368154 3.000859 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:55:19.374448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:55:27.376401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:55:43.379091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:56:15.385086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:08:01.410317 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 13:08:01.410423 0.023064 udp 10.0.2.104 57311 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 13:08:01.433884 0.000000 udp 10.0.2.104 57312 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 13:12:31.391807 3.002687 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:12:38.398735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:12:46.399982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:13:02.403147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:13:34.409159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:18:01.403263 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 13:18:01.403374 0.010228 udp 10.0.2.104 57313 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 13:18:01.413993 0.000000 udp 10.0.2.104 57314 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 13:19:38.415173 3.001711 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:19:45.422614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:19:53.424045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:20:09.427190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:20:41.432997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:26:45.440943 3.001830 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:26:52.446696 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:27:00.447799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:27:16.451109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:27:48.457167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:30:01.408451 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 13:30:01.408562 0.012506 udp 10.0.2.104 57315 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 13:30:01.421513 0.000000 udp 10.0.2.104 57316 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 13:33:52.462638 3.003336 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:33:59.470521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:34:07.472628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:34:23.474879 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:34:55.959829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:40:59.497904 3.000622 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:41:06.504504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:41:14.506030 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:41:30.508845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:42:02.514961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:45:01.402441 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 13:45:01.402557 0.012006 udp 10.0.2.104 57317 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 13:45:01.574303 0.000000 udp 10.0.2.104 57318 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 13:48:06.521481 3.002476 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:48:13.528407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:48:21.529876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:48:37.537093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:49:09.538869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:55:13.545821 3.000745 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:55:20.552407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:55:28.553944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:55:44.557084 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:56:16.562845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:08:01.409345 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 14:08:01.409466 0.011826 udp 10.0.2.104 57319 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 14:08:01.421700 0.000000 udp 10.0.2.104 57320 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 14:12:32.570484 3.000057 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:12:39.595223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:12:47.588103 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:13:03.590689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:13:35.597064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:18:01.409073 0.000148 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 14:18:01.409317 0.010329 udp 10.0.2.104 57321 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 14:18:01.420035 0.000000 udp 10.0.2.104 57322 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 14:19:39.603740 3.000681 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:19:46.610267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:19:54.611936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:20:10.614882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:20:42.620691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:26:46.627268 3.001187 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:26:53.634232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:27:01.635874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:27:17.638636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:27:49.644805 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:30:01.404199 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 14:30:01.404370 0.021315 udp 10.0.2.104 57323 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 14:30:01.426051 0.000000 udp 10.0.2.104 57324 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 14:33:53.651076 3.001543 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:34:00.657981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:34:08.659895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:34:24.662736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:34:56.668710 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:41:00.675939 3.000647 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:41:07.684006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:41:15.683561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:41:31.686862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:42:03.692871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:45:01.407833 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 14:45:01.407944 0.011857 udp 10.0.2.104 57325 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 14:45:01.420175 0.000000 udp 10.0.2.104 57326 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 14:48:07.701601 2.999517 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:48:14.706047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:48:22.707395 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:48:38.710737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:49:10.717380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:55:14.722458 3.706591 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:55:22.393381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:55:30.299849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:55:46.125575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:56:17.752123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:08:01.402979 0.000256 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 15:08:01.403349 0.011686 udp 10.0.2.104 57327 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 15:08:01.415421 0.000000 udp 10.0.2.104 57328 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 15:12:28.759525 3.001618 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:12:35.766572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:12:43.768176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:12:59.771260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:13:31.777436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:18:01.404912 0.000163 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 15:18:01.405181 0.010603 udp 10.0.2.104 57329 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 15:18:01.416143 0.000000 udp 10.0.2.104 57330 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 15:19:35.783760 3.001105 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:19:42.790801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:19:50.792413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:20:06.795130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:20:38.801349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:26:42.808297 3.027576 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:26:49.825298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:26:57.826042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:27:13.829114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:27:45.836198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:31:01.406563 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 15:31:01.406706 0.023348 udp 10.0.2.104 57331 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 15:31:01.430405 0.000000 udp 10.0.2.104 57332 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 15:33:49.841862 3.000619 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:33:56.848528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:34:04.849986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:34:20.853109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:34:52.859474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:40:56.864806 3.139257 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:41:03.974461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:41:11.905502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:41:27.897151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:41:59.903316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:46:01.400252 0.129667 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 15:46:01.530042 0.010187 udp 10.0.2.104 57333 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 15:46:01.540611 0.000000 udp 10.0.2.104 57334 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 15:48:03.910069 3.000543 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:48:10.916700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:48:19.019853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:48:34.931179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:49:06.937379 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:55:10.943593 3.001265 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:55:17.950184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:55:25.952051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:55:41.955128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:56:13.961262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:08:01.408635 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 16:08:01.408824 0.011903 udp 10.0.2.104 57335 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 16:08:01.421078 0.000000 udp 10.0.2.104 57336 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 16:12:27.974798 3.001120 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:12:34.981107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:12:42.983205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:12:58.985560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:13:30.992058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:18:01.400911 0.000166 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 16:18:01.401176 0.010253 udp 10.0.2.104 57337 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 16:18:01.411841 0.000000 udp 10.0.2.104 57338 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 16:19:34.998556 3.001579 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:19:42.005022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:19:50.007221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:20:06.010042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:20:38.015767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:26:42.022823 3.001110 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:26:49.030151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:26:57.031095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:27:13.033446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:27:45.040255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:31:01.402698 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 16:31:01.402845 0.012201 udp 10.0.2.104 57339 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 16:31:01.415452 0.000000 udp 10.0.2.104 57340 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 16:33:49.048229 2.999078 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:33:56.053542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:34:04.055052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:34:20.058358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:34:52.064371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:40:56.070344 3.022957 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:41:03.097417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:41:11.098494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:41:27.102156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:41:59.108003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:46:01.406405 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 16:46:01.406506 0.010484 udp 10.0.2.104 57341 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 16:46:01.417310 0.000000 udp 10.0.2.104 57342 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 16:48:03.115184 3.000570 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:48:10.121753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:48:18.122478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:48:34.125951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:49:06.132225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:55:10.137571 3.003621 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:55:17.145271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:55:25.147476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:55:41.150098 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:56:13.155964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:08:01.404310 0.000173 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 17:08:01.404606 0.012643 udp 10.0.2.104 57343 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 17:08:01.417687 0.000000 udp 10.0.2.104 57344 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 17:12:28.170058 3.002155 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:12:35.177802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:12:43.179640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:12:59.182139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:13:31.188577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:18:01.407139 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 17:18:01.407250 0.010721 udp 10.0.2.104 57345 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 17:18:01.418338 0.000000 udp 10.0.2.104 57346 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 17:19:35.194854 3.001301 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:19:42.201831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:19:50.202755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:20:06.206407 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:20:38.212605 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:26:42.219221 3.000932 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:26:49.225812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:26:57.227194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:27:13.230369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:27:45.236616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:31:01.408516 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 17:31:01.408618 0.011409 udp 10.0.2.104 57347 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 17:31:01.420382 0.000000 udp 10.0.2.104 57348 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 17:33:49.243768 2.999888 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:33:56.249646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:34:04.251316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:34:20.254736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:34:52.260371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:40:56.267303 3.122886 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:41:03.359893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:41:11.388141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:41:27.298343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:41:59.304075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:46:01.402662 0.000180 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 17:46:01.402961 0.010132 udp 10.0.2.104 57349 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 17:46:01.413511 0.000000 udp 10.0.2.104 57350 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 17:48:03.311278 3.000504 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:48:10.317440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:48:18.319443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:48:34.322282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:49:06.328113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:55:10.335014 3.000981 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:55:17.341783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:55:25.342939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:55:41.346283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:56:13.352517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:08:01.400278 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 18:08:01.400426 0.011537 udp 10.0.2.104 57351 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 18:08:01.412317 0.000000 udp 10.0.2.104 57352 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 18:12:29.358924 3.001032 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:12:36.365510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:12:44.366999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:13:00.370175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:13:32.376039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:18:01.403135 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 18:18:01.403237 0.010358 udp 10.0.2.104 57353 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 18:18:01.414022 0.000000 udp 10.0.2.104 57354 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 18:19:36.382187 3.001824 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:19:43.389306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:19:51.391017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:20:07.394243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:20:39.400170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:26:43.405807 3.002235 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:26:50.413895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:26:58.415191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:27:14.418217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:27:46.424176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:30:01.408304 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 18:30:01.408516 0.011795 udp 10.0.2.104 57355 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 18:30:01.420689 0.000000 udp 10.0.2.104 57356 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 18:33:50.429938 3.002018 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:33:57.437350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:34:05.438973 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:34:21.441858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:34:53.449043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:40:57.454601 3.001264 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:41:04.461805 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:41:12.462800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:41:28.465932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:42:00.475865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:45:01.402362 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 18:45:01.402460 0.023139 udp 10.0.2.104 57357 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 18:45:01.425952 0.000000 udp 10.0.2.104 57358 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 18:48:04.479665 3.000210 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:48:11.485333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:48:19.486904 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:48:35.490036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:49:07.499063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:55:11.503164 3.000331 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:55:18.509601 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:55:26.510954 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:55:42.513883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:56:14.522110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:08:01.406501 0.000189 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 19:08:01.406793 0.012812 udp 10.0.2.104 57359 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 19:08:01.420040 0.000000 udp 10.0.2.104 57360 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 19:12:30.526446 3.000979 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:12:37.533316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:12:45.534606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:13:01.537925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:13:33.543963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:18:01.398977 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 19:18:01.399098 0.010244 udp 10.0.2.104 57361 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 19:18:01.409764 0.000000 udp 10.0.2.104 57362 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 19:19:37.550395 3.000941 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:19:44.557050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:19:52.559025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:20:08.561894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:20:40.567296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:26:44.574715 3.000709 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:26:51.581390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:26:59.582535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:27:15.585955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:27:47.591503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:30:01.404256 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 19:30:01.404407 0.017619 udp 10.0.2.104 57363 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 19:30:01.422449 0.000000 udp 10.0.2.104 57364 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 19:33:51.598128 3.001587 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:33:58.605264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:34:06.606548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:34:22.609808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:34:54.615836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:40:58.622587 3.001679 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:41:05.629063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:41:13.630812 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:41:29.647041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:42:01.650260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:45:01.398362 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 19:45:01.398603 0.012406 udp 10.0.2.104 57365 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 19:45:01.411386 0.000000 udp 10.0.2.104 57366 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 19:48:05.655867 3.001368 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:48:12.663193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:48:20.664699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:48:36.667957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:49:08.673456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:55:12.680746 3.000631 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:55:19.687923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:55:27.688377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:55:43.691593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:56:15.697425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:08:01.402362 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 20:08:01.402471 0.011708 udp 10.0.2.104 57367 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 20:08:01.414562 0.000000 udp 10.0.2.104 57368 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 20:12:32.704675 3.002006 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:12:39.712316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:12:47.714002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:13:03.717038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:13:35.722667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:18:01.404895 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 20:18:01.404985 0.010045 udp 10.0.2.104 57369 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 20:18:01.415402 0.000000 udp 10.0.2.104 57370 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 20:19:39.730192 3.000322 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:19:46.736109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:19:54.737954 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:20:10.741022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:20:42.746965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:26:46.752771 3.001783 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:26:53.760354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:27:01.761986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:27:17.764866 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:27:49.770705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:30:01.400154 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 20:30:01.400330 0.021715 udp 10.0.2.104 57371 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 20:30:01.422410 0.000000 udp 10.0.2.104 57372 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 20:33:53.777381 3.011028 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:34:00.794433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:34:08.795791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:34:24.798804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:34:56.804887 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:41:00.811905 3.000691 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:41:07.818149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:41:15.819751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:41:31.832477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:42:03.838666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:45:01.404191 0.000131 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 20:45:01.404421 0.012115 udp 10.0.2.104 57373 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 20:45:01.416895 0.000000 udp 10.0.2.104 57374 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 20:48:07.846102 3.000644 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:48:14.852076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:48:22.853356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:48:38.856702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:49:10.862898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:55:14.871185 2.999395 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:55:21.876477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:55:29.877841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:55:45.881442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:56:17.896838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:08:01.398554 0.000114 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 21:08:01.398757 0.021739 udp 10.0.2.104 57375 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 21:08:01.420858 0.000000 udp 10.0.2.104 57376 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 21:12:28.905526 3.001528 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:12:35.912684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:12:43.914209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:12:59.917561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:13:31.924110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:18:01.401317 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 21:18:01.401430 0.010561 udp 10.0.2.104 57377 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 21:18:01.412372 0.000000 udp 10.0.2.104 57378 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 21:19:35.930122 3.001700 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:19:42.936910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:19:50.938552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:20:06.941213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:20:38.947624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:26:42.954533 3.000887 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:26:49.960970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:26:57.961757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:27:13.965506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:27:45.971354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:31:01.402291 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 21:31:01.402479 0.011992 udp 10.0.2.104 57379 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 21:31:01.414835 0.000000 udp 10.0.2.104 57380 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 21:33:49.976988 3.002022 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:33:56.985703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:34:04.986344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:34:20.989497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:34:52.995714 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:40:57.001225 3.001976 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:41:04.008779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:41:12.010485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:41:28.013279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:42:00.019007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:46:01.406511 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 21:46:01.406677 0.010174 udp 10.0.2.104 57381 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 21:46:01.417255 0.000000 udp 10.0.2.104 57382 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 21:48:04.026284 3.000643 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:48:11.032587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:48:19.034324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:48:35.037138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:49:07.043394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:55:11.049708 3.001180 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:55:18.056906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:55:26.058383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:55:42.061250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:56:14.077436 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:08:01.404389 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 22:08:01.404588 0.011869 udp 10.0.2.104 57383 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 22:08:01.416862 0.000000 udp 10.0.2.104 57384 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 22:12:28.091570 3.016316 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:12:35.107803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:12:43.109092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:12:59.112049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:13:31.118631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:18:01.398124 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 22:18:01.398243 0.011032 udp 10.0.2.104 57385 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 22:18:01.409690 0.000000 udp 10.0.2.104 57386 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 22:19:35.123636 3.002726 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:19:42.131246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:19:50.133258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:20:06.136313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:20:38.142101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:26:42.150039 3.000014 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:26:49.155939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:26:57.157175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:27:13.160290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:27:45.166473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:31:01.398423 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 22:31:01.398522 0.022868 udp 10.0.2.104 57387 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 22:31:01.421732 0.000000 udp 10.0.2.104 57388 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 22:33:49.173086 3.000225 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:33:56.180077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:34:04.181021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:34:20.184572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:34:52.190219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:40:56.196202 3.001890 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:41:03.203795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:41:11.204958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:41:27.209054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:41:59.214422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:46:01.402463 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 22:46:01.402568 0.010135 udp 10.0.2.104 57389 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 22:46:01.413100 0.000000 udp 10.0.2.104 57390 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 22:48:03.221800 3.000295 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:48:10.227781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:48:18.228914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:48:34.232029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:49:06.238150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:55:10.244484 3.001713 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:55:17.250982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:55:25.252910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:55:41.255986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:56:13.262369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:08:01.400586 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 23:08:01.400751 0.012338 udp 10.0.2.104 57391 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 23:08:01.413473 0.000000 udp 10.0.2.104 57392 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 23:12:28.278795 2.999958 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:12:35.283617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:12:43.286063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:12:59.288772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:13:31.294618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:18:01.925788 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 23:18:01.925879 0.010177 udp 10.0.2.104 57393 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 23:18:01.936399 0.000000 udp 10.0.2.104 57394 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 23:19:35.351753 3.002592 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:19:42.358077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:19:50.359461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:20:06.362558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:20:38.368616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:26:42.374736 3.001629 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:26:49.381761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:26:57.383587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:27:13.386392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:27:45.392504 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:31:01.454579 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 23:31:01.454723 0.010593 udp 10.0.2.104 57395 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 23:31:01.465679 0.000000 udp 10.0.2.104 57396 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 23:33:49.399996 3.000095 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:33:56.405920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:34:04.407737 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:34:20.410545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:34:52.416562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:40:56.422563 3.001848 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:41:03.432315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:41:11.431166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:41:27.434722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:41:59.440453 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:46:01.450944 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 23:46:01.451066 0.010325 udp 10.0.2.104 57397 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/15 23:46:01.461822 0.000000 udp 10.0.2.104 57398 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/15 23:48:03.446643 3.001677 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:48:10.454229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:48:18.455775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:48:34.458295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:49:06.464484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:55:10.471816 3.002515 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:55:17.478082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:55:25.479220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:55:41.482610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:56:13.490667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:08:01.446612 0.186569 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 00:08:01.633384 0.012708 udp 10.0.2.104 57399 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 00:08:01.646459 0.000000 udp 10.0.2.104 57400 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 00:12:28.503963 3.001278 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:12:35.510451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:12:43.511849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:12:59.514797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:13:31.520881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:18:01.450227 0.000151 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 00:18:01.450475 0.012189 udp 10.0.2.104 57401 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 00:18:01.463066 0.000000 udp 10.0.2.104 57402 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 00:19:35.527139 3.001507 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:19:42.534490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:19:50.536827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:20:06.538903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:20:38.545058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:26:42.550915 3.001733 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:26:49.558299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:26:57.560330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:27:13.562807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:27:45.568931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:31:01.450794 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 00:31:01.450903 0.010277 udp 10.0.2.104 57403 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 00:31:01.461540 0.000000 udp 10.0.2.104 57404 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 00:33:49.575832 3.002748 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:33:56.582317 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:34:04.584116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:34:20.587019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:34:52.593020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:40:56.603726 2.998572 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:41:03.607429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:41:11.607705 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:41:27.610922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:41:59.616898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:46:01.454635 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 00:46:01.454743 0.010199 udp 10.0.2.104 57405 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 00:46:01.465327 0.000000 udp 10.0.2.104 57406 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 00:48:03.624273 3.000496 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:48:10.630348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:48:18.632034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:48:34.634820 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:49:06.640689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:55:10.648768 2.999841 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:55:18.530579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:55:26.449268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:55:42.284351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:56:13.925677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:08:01.880414 0.068795 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 01:08:01.949456 0.012616 udp 10.0.2.104 57407 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 01:08:01.962499 0.000000 udp 10.0.2.104 57408 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 01:12:29.991085 3.001643 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:12:36.998040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:12:45.000568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:13:01.003072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:13:33.009010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:18:01.755425 0.000271 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 01:18:01.772488 0.010336 udp 10.0.2.104 57409 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 01:18:01.783195 0.000000 udp 10.0.2.104 57410 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 01:19:37.210321 2.996940 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:19:44.212522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:19:52.214015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:20:08.217074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:20:40.223521 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:26:44.271014 2.999902 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:26:51.276837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:26:59.278200 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:27:15.281828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:27:47.287185 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:30:01.760725 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 01:30:01.760814 0.012499 udp 10.0.2.104 57411 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 01:30:01.773670 0.000000 udp 10.0.2.104 57412 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 01:33:51.312806 3.002260 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:33:58.320811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:34:06.322219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:34:22.325177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:34:54.331234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:41:03.344842 3.165188 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:41:10.478788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:41:18.413876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:41:34.366415 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:42:06.372659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:45:01.764645 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 01:45:01.764746 0.023129 udp 10.0.2.104 57413 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 01:45:01.788269 0.000000 udp 10.0.2.104 57414 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 01:48:10.378715 3.001525 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:48:17.395872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:48:25.397310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:48:41.400357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:49:13.406439 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:55:17.413547 3.000699 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:55:24.420018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:55:32.422006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:55:48.434461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:56:20.441884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:08:01.758781 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 02:08:01.758887 0.012992 udp 10.0.2.104 57415 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 02:08:01.772280 0.000000 udp 10.0.2.104 57416 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 02:12:34.453413 3.001463 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:12:41.460723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:12:49.462624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:13:05.465291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:13:37.471262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:18:01.761531 0.000157 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 02:18:01.761791 0.011126 udp 10.0.2.104 57417 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 02:18:01.773280 0.000000 udp 10.0.2.104 57418 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 02:19:41.478107 3.000736 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:19:48.485031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:19:56.486399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:20:12.492133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:20:44.495304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:26:48.502086 3.000942 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:26:55.508764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:27:03.510183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:27:19.513215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:27:51.519290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:30:01.757146 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 02:30:01.757265 0.012167 udp 10.0.2.104 57419 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 02:30:01.769869 0.000000 udp 10.0.2.104 57420 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 02:33:55.525666 3.001262 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:34:02.532862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:34:10.534401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:34:26.537295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:34:58.543253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:41:07.557347 3.000968 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:41:14.564101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:41:22.565582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:41:38.568813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:42:10.574319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:45:01.761375 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 02:45:01.761491 0.011824 udp 10.0.2.104 57421 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 02:45:01.854271 0.000000 udp 10.0.2.104 57422 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 02:48:14.580867 3.001929 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:48:21.587916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:48:29.590292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:48:45.592425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:49:17.601150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:55:21.603796 3.002391 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:55:28.611396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:55:36.613358 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:55:52.616682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:56:24.622587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:08:01.754965 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 03:08:01.755084 0.011476 udp 10.0.2.104 57423 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 03:08:01.766939 0.000000 udp 10.0.2.104 57424 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 03:12:36.632563 3.003584 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:12:43.639565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:12:51.641561 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:13:07.644797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:13:39.651027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:18:01.757423 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 03:18:01.757524 0.010999 udp 10.0.2.104 57425 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 03:18:01.768941 0.000000 udp 10.0.2.104 57426 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 03:19:43.657509 3.000856 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:19:50.663444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:19:58.665247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:20:14.668623 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:20:46.674563 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:26:50.681368 3.000431 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:26:57.688140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:27:05.691014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:27:21.692651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:27:53.698403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:30:01.762647 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 03:30:01.762761 0.012652 udp 10.0.2.104 57427 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 03:30:01.775861 0.000000 udp 10.0.2.104 57428 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 03:33:57.707009 2.999172 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:34:04.712190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:34:12.713553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:34:28.716434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:35:00.722657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:41:09.736684 3.028094 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:41:16.752918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:41:24.754387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:41:40.757548 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:42:12.764413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:45:01.762121 0.000167 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 03:45:01.762393 0.010820 udp 10.0.2.104 57429 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 03:45:01.773628 0.000000 udp 10.0.2.104 57430 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 03:48:16.770724 3.000903 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:48:23.777154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:48:31.780347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:48:47.781261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:49:19.787579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:55:23.794324 3.000947 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:55:30.817502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:55:38.812562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:55:54.816470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:56:26.825987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:08:01.762003 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 04:08:01.762141 0.012995 udp 10.0.2.104 57431 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 04:08:01.775626 0.000000 udp 10.0.2.104 57432 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 04:12:34.838037 2.999416 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:12:41.843474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:12:49.846355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:13:05.847923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:13:37.853878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:18:01.763465 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 04:18:01.763583 0.010247 udp 10.0.2.104 57433 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 04:18:01.774224 0.000000 udp 10.0.2.104 57434 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 04:19:41.860513 3.004199 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:19:48.867222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:19:56.868858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:20:12.871788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:20:44.877901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:26:48.886902 3.124839 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:26:55.986530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:27:03.920398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:27:19.907788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:27:51.912171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:31:01.755251 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 04:31:01.755366 0.010354 udp 10.0.2.104 57435 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 04:31:01.766166 0.000000 udp 10.0.2.104 57436 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 04:33:55.918242 3.001536 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:34:02.925316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:34:10.926823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:34:26.929990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:34:58.936089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:41:09.956167 2.997561 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:41:16.959341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:41:24.960827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:41:40.963597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:42:12.970058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:46:01.758881 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 04:46:01.758987 0.010382 udp 10.0.2.104 57437 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 04:46:01.769728 0.000000 udp 10.0.2.104 57438 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 04:48:17.978789 2.999775 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:48:24.988766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:48:32.986335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:48:48.989121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:49:21.015376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:55:25.021658 3.002286 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:55:32.028891 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:55:40.030248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:55:56.035815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:56:28.039155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:08:01.756826 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 05:08:01.756925 0.023103 udp 10.0.2.104 57439 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 05:08:01.780434 0.000000 udp 10.0.2.104 57440 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 05:12:36.055179 3.002363 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:12:43.061071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:12:51.062782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:13:07.065586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:13:39.073310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:18:01.759701 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 05:18:01.759795 0.011564 udp 10.0.2.104 57441 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 05:18:01.771746 0.000000 udp 10.0.2.104 57442 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 05:19:43.077962 3.001893 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:19:50.085938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:19:58.086555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:20:14.091619 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:20:46.095849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:26:50.102142 3.001135 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:26:57.109239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:27:05.114826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:27:21.113674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:27:53.119910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:31:01.760939 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 05:31:01.761041 0.012262 udp 10.0.2.104 57443 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 05:31:01.773701 0.000000 udp 10.0.2.104 57444 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 05:33:57.125550 3.001732 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:34:04.133061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:34:12.135600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:34:28.137581 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:35:00.143845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:41:10.162383 2.997634 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:41:17.166931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:41:25.169023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:41:41.170236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:42:13.183010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:46:01.758368 0.000191 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 05:46:01.758671 0.018372 udp 10.0.2.104 57445 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 05:46:01.777424 0.000000 udp 10.0.2.104 57446 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 05:48:18.188879 2.997124 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:48:25.191335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:48:33.192655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:48:49.196631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:49:21.201529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:55:25.208092 3.000853 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:55:32.216003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:55:40.219918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:55:56.219930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:56:28.227223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:08:01.756160 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 06:08:01.756272 0.056689 udp 10.0.2.104 57447 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 06:08:01.813364 0.000000 udp 10.0.2.104 57448 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 06:12:36.240542 3.001582 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:12:43.247591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:12:51.248969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:13:07.252145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:13:39.257738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:18:01.755607 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 06:18:01.755717 0.010054 udp 10.0.2.104 57449 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 06:18:01.766144 0.000000 udp 10.0.2.104 57450 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 06:19:43.264588 3.003290 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:19:50.271593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:19:58.272754 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:20:14.276113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:20:46.281540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:26:50.288266 3.001707 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:26:57.295272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:27:05.296909 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:27:21.300427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:27:53.306389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:31:01.756979 0.000139 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 06:31:01.757219 0.010707 udp 10.0.2.104 57451 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 06:31:01.768265 0.000000 udp 10.0.2.104 57452 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 06:33:57.312497 3.001453 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:34:04.319647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:34:12.320807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:34:28.324274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:35:00.330253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:41:10.344992 3.002273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:41:17.352074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:41:25.353209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:41:41.356571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:42:13.362518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:46:01.760900 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 06:46:01.761006 0.010357 udp 10.0.2.104 57453 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 06:46:01.771724 0.000000 udp 10.0.2.104 57454 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 06:48:18.370271 3.001534 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:48:25.377799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:48:33.379411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:48:49.381948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:49:21.390092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:55:25.395851 3.000013 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:55:32.401255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:55:40.402713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:55:56.405850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:56:28.422577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:08:01.758910 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 07:08:01.759014 0.013552 udp 10.0.2.104 57455 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 07:08:01.772961 0.000000 udp 10.0.2.104 57456 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 07:12:37.438160 3.001263 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:12:44.445063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:12:52.447929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:13:08.449795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:13:40.456187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:18:01.761359 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 07:18:01.761559 0.010924 udp 10.0.2.104 57457 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 07:18:01.772867 0.000000 udp 10.0.2.104 57458 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 07:19:44.462337 3.016422 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:19:51.479286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:19:59.480547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:20:15.483676 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:20:47.490182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:26:51.496222 3.001749 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:26:58.503294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:27:06.504507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:27:22.507811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:27:54.513347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:30:01.756934 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 07:30:01.757035 0.014129 udp 10.0.2.104 57459 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 07:30:01.771603 0.000000 udp 10.0.2.104 57460 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 07:33:58.520676 3.003495 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:34:05.527074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:34:13.528657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:34:29.531552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:35:01.537723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:41:12.554256 3.001826 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:41:19.562095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:41:27.562529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:41:43.565986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:42:15.571606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:45:01.762225 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 07:45:01.762355 0.025111 udp 10.0.2.104 57461 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 07:45:01.787893 0.000000 udp 10.0.2.104 57462 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 07:48:21.582840 3.002417 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:48:28.590028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:48:36.592056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:48:52.604848 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:49:24.609682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:55:28.615582 3.002253 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:55:35.621942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:55:43.624603 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:55:59.627075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:56:31.632712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:08:01.754921 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 08:08:01.755021 0.011529 udp 10.0.2.104 57463 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 08:08:01.766906 0.000000 udp 10.0.2.104 57464 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 08:12:39.649671 2.998900 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:12:46.654558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:12:54.656110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:13:10.661330 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:13:42.664848 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:18:01.759094 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 08:18:01.759204 0.010731 udp 10.0.2.104 57465 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 08:18:01.770342 0.000000 udp 10.0.2.104 57466 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 08:19:46.672888 3.000814 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:19:53.678278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:20:01.679854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:20:17.682920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:20:49.690322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:26:53.695263 3.001521 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:27:00.702309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:27:08.704827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:27:24.706687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:27:56.712926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:30:01.757465 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 08:30:01.757583 0.013228 udp 10.0.2.104 57467 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 08:30:01.771166 0.000000 udp 10.0.2.104 57468 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 08:34:00.719702 3.000802 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:34:07.726201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:34:15.727480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:34:31.730889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:35:03.736689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:41:14.754154 3.000334 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:41:21.760551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:41:29.762094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:41:45.770783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:42:17.776667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:45:01.757067 0.000168 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 08:45:01.757345 0.011451 udp 10.0.2.104 57469 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 08:45:01.769189 0.000000 udp 10.0.2.104 57470 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 08:48:23.781380 2.999637 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:48:30.787078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:48:38.792833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:48:54.791480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:49:26.797465 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:55:30.803727 3.001498 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:55:37.810910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:55:45.812412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:56:01.815836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:56:33.821545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:08:01.762848 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 09:08:01.762956 0.022319 udp 10.0.2.104 57471 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 09:08:01.785704 0.000000 udp 10.0.2.104 57472 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 09:12:40.842731 2.995738 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:12:47.842447 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:12:55.844028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:13:11.847235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:13:43.852748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:18:01.754082 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 09:18:01.754194 0.011516 udp 10.0.2.104 57473 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 09:18:01.766120 0.000000 udp 10.0.2.104 57474 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 09:19:47.860329 2.999823 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:19:54.866115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:20:02.867171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:20:18.870550 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:20:51.042150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:26:54.903439 3.001024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:27:01.909543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:27:09.911600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:27:25.914608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:27:57.920460 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:30:01.758816 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 09:30:01.758924 0.011360 udp 10.0.2.104 57475 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 09:30:01.770679 0.000000 udp 10.0.2.104 57476 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 09:34:01.926471 3.001796 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:34:08.934115 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:34:16.935438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:34:32.938423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:35:04.944724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:41:14.960311 3.003785 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:41:21.967252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:41:29.967709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:41:45.971149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:42:17.980082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:45:01.753130 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 09:45:01.753243 0.011716 udp 10.0.2.104 57477 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 09:45:01.765346 0.000000 udp 10.0.2.104 57478 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 09:48:22.984780 3.001895 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:48:29.992212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:48:37.993512 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:48:53.996746 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:49:26.002342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:55:30.008691 3.001636 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:55:37.016391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:55:45.017446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:56:01.020598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:56:33.031023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:08:01.758286 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 10:08:01.758389 0.023715 udp 10.0.2.104 57479 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 10:08:01.782543 0.000000 udp 10.0.2.104 57480 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 10:12:37.036643 3.003470 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:12:44.044150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:12:52.044100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:13:08.047093 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:13:40.054059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:18:01.760202 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 10:18:01.760298 0.011272 udp 10.0.2.104 57481 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 10:18:01.771982 0.000000 udp 10.0.2.104 57482 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 10:19:44.060203 3.000208 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:19:51.066780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:19:59.068163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:20:15.070821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:20:47.077010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:26:51.083614 3.000812 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:26:58.090626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:27:06.091870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:27:22.095023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:27:54.101082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:31:01.751144 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 10:31:01.751241 0.027358 udp 10.0.2.104 57483 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 10:31:01.779007 0.000000 udp 10.0.2.104 57484 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 10:33:58.107718 3.001000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:34:05.114541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:34:13.116136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:34:29.118984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:35:01.125017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:41:12.143375 2.999669 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:41:19.149372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:41:27.150096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:41:43.153128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:42:15.168530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:46:01.754964 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 10:46:01.755078 0.015869 udp 10.0.2.104 57485 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 10:46:01.771349 0.000000 udp 10.0.2.104 57486 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 10:48:21.178293 3.001570 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:48:28.185241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:48:37.209456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:48:53.025494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:49:24.636552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:55:28.212179 3.001773 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:55:35.219675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:55:43.220473 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:55:59.224361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:56:31.229733 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:08:01.753040 0.000240 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 11:08:01.753382 0.027669 udp 10.0.2.104 57487 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 11:08:01.781480 0.000000 udp 10.0.2.104 57488 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 11:12:37.241717 3.041438 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:12:44.262816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:12:52.260283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:13:08.262924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:13:40.279495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:18:01.755605 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 11:18:01.755710 0.009996 udp 10.0.2.104 57489 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 11:18:01.766146 0.000000 udp 10.0.2.104 57490 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 11:19:44.286287 3.000782 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:19:51.292445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:19:59.294474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:20:15.297259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:20:47.303503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:26:51.310124 3.000884 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:26:58.316826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:27:06.319136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:27:22.321282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:27:54.327274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:31:01.756935 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 11:31:01.757052 0.011515 udp 10.0.2.104 57491 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 11:31:01.768921 0.000000 udp 10.0.2.104 57492 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 11:33:58.332834 3.001616 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:34:05.340832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:34:13.342351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:34:29.345433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:35:01.351180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:41:11.368286 3.109411 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:41:18.457988 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:41:26.395035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:41:42.388186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:42:14.394039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:46:01.750894 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 11:46:01.750991 0.010301 udp 10.0.2.104 57493 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 11:46:01.761648 0.000000 udp 10.0.2.104 57494 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 11:48:20.403641 3.001121 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:48:27.454419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:48:35.422537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:48:51.425186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:49:23.432244 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:55:27.437469 3.001038 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:55:34.444208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:55:42.446608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:55:58.449351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:56:30.464765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:08:01.758862 0.000178 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 12:08:01.759144 0.023198 udp 10.0.2.104 57495 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 12:08:01.782763 0.000000 udp 10.0.2.104 57496 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 12:12:37.479215 3.000110 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:12:44.485302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:12:52.486517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:13:08.489804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:13:40.498065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:18:01.751599 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 12:18:01.751714 0.014049 udp 10.0.2.104 57497 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 12:18:01.766185 0.000000 udp 10.0.2.104 57498 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 12:19:44.502237 3.001167 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:19:51.509167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:19:59.510773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:20:15.513800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:20:47.519919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:26:51.526224 3.001234 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:26:58.533439 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:27:06.534867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:27:22.537394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:27:54.543334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:31:01.752857 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 12:31:01.753011 0.012378 udp 10.0.2.104 57499 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 12:31:01.765707 0.000000 udp 10.0.2.104 57500 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 12:33:58.549502 3.002239 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:34:05.557349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:34:13.558736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:34:29.561958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:35:01.567514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:41:11.583410 3.000618 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:41:18.592803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:41:26.592400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:41:42.594023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:42:14.610417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:46:01.848851 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 12:46:01.848964 0.010243 udp 10.0.2.104 57501 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 12:46:01.859618 0.000000 udp 10.0.2.104 57502 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 12:48:20.621342 2.999482 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:48:27.626537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:48:35.627524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:48:51.630976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:49:23.636838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:55:27.643390 3.001140 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:55:34.650516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:55:42.652055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:55:58.655053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:56:30.661042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:08:01.755144 0.020625 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 13:08:01.775917 0.012356 udp 10.0.2.104 57503 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 13:08:01.788631 0.000000 udp 10.0.2.104 57504 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 13:12:37.674776 3.097339 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:12:44.750378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:12:52.693279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:13:08.696038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:13:40.702276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:18:01.757564 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 13:18:01.757665 0.010113 udp 10.0.2.104 57505 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 13:18:01.768174 0.000000 udp 10.0.2.104 57506 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 13:19:44.708621 3.001060 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:19:51.715524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:19:59.717158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:20:15.720066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:20:47.726440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:26:51.733849 2.999921 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:26:58.739578 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:27:06.741341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:27:22.744197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:27:54.750378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:30:01.752801 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 13:30:01.752890 0.012055 udp 10.0.2.104 57507 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 13:30:01.765289 0.000000 udp 10.0.2.104 57508 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 13:33:58.756524 3.001277 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:34:05.763717 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:34:13.765123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:34:29.768075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:35:01.774101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:41:12.790744 3.001224 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:41:19.797498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:41:27.798865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:41:43.801938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:42:15.807593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:45:01.756659 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 13:45:01.756814 0.010893 udp 10.0.2.104 57509 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 13:45:01.768075 0.000000 udp 10.0.2.104 57510 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 13:48:21.817295 3.001348 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:48:28.824125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:48:36.825808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:48:52.828727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:49:24.834805 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:55:28.840786 3.001848 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:55:35.848427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:55:43.849723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:55:59.852566 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:56:31.858868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:08:01.751040 0.000172 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 14:08:01.751330 0.012409 udp 10.0.2.104 57511 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 14:08:01.764125 0.000000 udp 10.0.2.104 57512 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 14:12:38.872447 3.000872 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:12:45.879346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:12:53.881217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:13:09.884651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:13:41.889356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:18:01.753383 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 14:18:01.753540 0.009698 udp 10.0.2.104 57513 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 14:18:01.763638 0.000000 udp 10.0.2.104 57514 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 14:19:45.896030 3.001751 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:19:52.903015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:20:00.906022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:20:16.909013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:20:48.913778 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:26:52.920022 3.001044 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:26:59.926533 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:27:07.938719 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:27:23.941342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:27:55.947652 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:30:01.748589 0.000169 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 14:30:01.748878 0.010836 udp 10.0.2.104 57515 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 14:30:01.760142 0.000000 udp 10.0.2.104 57516 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 14:33:59.953821 3.001411 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:34:06.961061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:34:14.962430 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:34:30.965922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:35:02.971476 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:41:12.986629 3.005314 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:41:19.996169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:41:27.995853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:41:43.999533 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:42:16.004380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:45:01.752647 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 14:45:01.752757 0.020925 udp 10.0.2.104 57517 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 14:45:01.774101 0.000000 udp 10.0.2.104 57518 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 14:48:21.015318 3.002645 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:48:28.019554 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:48:36.020802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:48:52.023704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:49:24.029635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:55:28.035233 3.002746 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:55:35.043155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:55:43.079630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:55:59.110628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:56:31.073948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:08:01.756801 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 15:08:01.756896 0.011305 udp 10.0.2.104 57519 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 15:08:01.768485 0.000000 udp 10.0.2.104 57520 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 15:12:40.096820 2.994166 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:12:47.097036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:12:55.098286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:13:11.101860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:13:43.108630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:18:01.749592 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 15:18:01.749710 0.010199 udp 10.0.2.104 57521 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 15:18:01.760286 0.000000 udp 10.0.2.104 57522 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 15:19:47.113110 3.002036 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:19:54.120911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:20:02.121967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:20:18.125625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:20:50.131562 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:26:54.137264 3.001409 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:27:01.145095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:27:09.146408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:27:25.149529 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:27:57.156875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:30:01.754667 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 15:30:01.754755 0.020923 udp 10.0.2.104 57523 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 15:30:01.775962 0.000000 udp 10.0.2.104 57524 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 15:34:01.162245 3.000865 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:34:08.168703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:34:16.170273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:34:32.173346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:35:04.179625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:41:14.194948 3.000831 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:41:21.201187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:41:29.203087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:41:45.206218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:42:17.212643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:45:01.748812 0.000198 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 15:45:01.749123 0.012279 udp 10.0.2.104 57525 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 15:45:01.761799 0.000000 udp 10.0.2.104 57526 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 15:48:22.220227 3.001079 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:48:29.226848 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:48:37.228546 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:48:53.230788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:49:25.237405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:55:29.243781 3.001285 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:55:36.252226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:55:44.252202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:56:00.256174 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:56:32.261608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:08:01.752906 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 16:08:01.753013 0.011432 udp 10.0.2.104 57527 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 16:08:01.764953 0.000000 udp 10.0.2.104 57528 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 16:12:36.270299 3.001691 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:12:43.277622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:12:51.278847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:13:07.282119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:13:39.287987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:18:01.755930 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 16:18:01.756045 0.010203 udp 10.0.2.104 57529 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 16:18:01.766651 0.000000 udp 10.0.2.104 57530 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 16:19:43.293629 3.002417 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:19:50.301411 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:19:58.302964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:20:14.306013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:20:46.312949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:26:50.319187 3.000624 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:26:57.325360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:27:05.327185 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:27:21.329640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:27:53.336028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:31:01.757215 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 16:31:01.757322 0.010897 udp 10.0.2.104 57531 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 16:31:01.768607 0.000000 udp 10.0.2.104 57532 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 16:33:57.341745 3.001466 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:34:04.349306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:34:12.350826 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:34:28.353462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:35:00.360019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:41:04.365449 3.001980 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:41:11.372948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:41:19.374944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:41:35.378940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:42:07.384516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:46:01.751158 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 16:46:01.751268 0.010041 udp 10.0.2.104 57533 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 16:46:01.761771 0.000000 udp 10.0.2.104 57534 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 16:48:11.391912 2.999829 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:48:18.397357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:48:26.398584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:48:42.401792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:49:14.407801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:55:18.414253 3.001776 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:55:25.421714 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:55:33.423388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:55:49.425969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:56:21.431992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:08:01.748914 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 17:08:01.749025 0.011791 udp 10.0.2.104 57535 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 17:08:01.761229 0.000000 udp 10.0.2.104 57536 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 17:12:31.440130 3.000933 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:12:38.446526 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:12:46.448245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:13:02.451313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:13:34.457278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:18:01.751753 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 17:18:01.751874 0.010266 udp 10.0.2.104 57537 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 17:18:01.762515 0.000000 udp 10.0.2.104 57538 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 17:19:38.465415 2.999630 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:19:45.470714 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:19:53.472464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:20:09.475128 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:20:41.481481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:26:45.487888 3.015934 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:26:52.504432 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:27:00.506121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:27:16.509209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:27:48.514980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:31:01.752901 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 17:31:01.753004 0.016695 udp 10.0.2.104 57539 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 17:31:01.770047 0.000000 udp 10.0.2.104 57540 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 17:33:52.522090 3.000509 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:33:59.528517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:34:07.529998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:34:23.533033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:34:55.538849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:40:59.545406 3.001231 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:41:06.552560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:41:14.554270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:41:30.557787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:42:02.563022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:46:01.747034 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 17:46:01.747249 0.010741 udp 10.0.2.104 57541 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 17:46:01.758344 0.000000 udp 10.0.2.104 57542 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 17:48:06.569201 3.001518 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:48:13.576348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:48:21.579253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:48:37.581173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:49:09.586850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:55:13.593162 3.001333 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:55:20.600256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:55:28.601935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:55:44.605005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:56:16.611029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:08:01.755123 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 18:08:01.755230 0.012403 udp 10.0.2.104 57543 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 18:08:01.768023 0.000000 udp 10.0.2.104 57544 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 18:12:29.623006 3.001208 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:12:36.630020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:12:44.632095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:13:00.634763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:13:32.640374 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:18:01.747377 0.000148 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 18:18:01.747631 0.021559 udp 10.0.2.104 57545 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 18:18:01.769532 0.000000 udp 10.0.2.104 57546 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 18:19:36.651091 2.997067 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:19:43.653919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:19:51.655343 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:20:07.658352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:20:39.664534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:26:43.671381 3.000767 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:26:50.678020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:26:58.679167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:27:14.682286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:27:46.688464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:31:01.748813 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 18:31:01.748917 0.011452 udp 10.0.2.104 57547 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 18:31:01.760747 0.000000 udp 10.0.2.104 57548 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 18:33:50.695443 3.000698 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:33:57.702057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:34:05.703390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:34:21.706406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:34:53.712398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:40:57.726556 2.993414 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:41:04.727808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:41:12.727906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:41:28.732023 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:42:00.740910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:46:01.752878 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 18:46:01.752986 0.010270 udp 10.0.2.104 57549 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 18:46:01.763638 0.000000 udp 10.0.2.104 57550 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 18:48:04.751099 2.998949 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:48:11.749748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:48:19.756824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:48:35.754437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:49:07.760682 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:55:11.768999 4.406404 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:55:20.143101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:55:28.051112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:55:43.903229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:56:15.572851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:08:01.751906 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 19:08:01.752035 0.011681 udp 10.0.2.104 57551 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 19:08:01.764048 0.000000 udp 10.0.2.104 57552 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 19:12:30.800494 3.001073 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:12:37.807629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:12:45.809355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:13:01.812154 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:13:33.817616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:18:01.753312 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 19:18:01.753434 0.023075 udp 10.0.2.104 57553 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 19:18:01.776855 0.000000 udp 10.0.2.104 57554 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 19:19:37.824184 3.001799 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:19:44.831349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:19:52.832970 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:20:08.836241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:20:40.842975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:26:44.848680 3.000986 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:26:51.855953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:27:00.437616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:27:16.246572 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:27:47.876076 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:31:01.754833 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 19:31:01.755016 0.011312 udp 10.0.2.104 57555 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 19:31:01.766719 0.000000 udp 10.0.2.104 57556 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 19:33:51.882911 3.002339 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:33:58.889486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:34:06.890976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:34:22.893499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:34:54.900344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:40:58.906367 3.001356 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:41:05.913273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:41:13.914991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:41:29.917429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:42:01.924224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:46:01.752778 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 19:46:01.752887 0.009815 udp 10.0.2.104 57557 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 19:46:01.763060 0.000000 udp 10.0.2.104 57558 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 19:48:05.930515 3.004675 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:48:12.937328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:48:20.938736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:48:36.941578 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:49:08.948082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:55:12.954492 3.001259 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:55:19.961387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:55:27.962864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:55:43.965519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:56:15.972075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:08:01.746901 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 20:08:01.747075 0.057342 udp 10.0.2.104 57559 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 20:08:01.804892 0.000000 udp 10.0.2.104 57560 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 20:12:31.977393 3.003887 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:12:38.985204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:12:46.986868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:13:02.989977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:13:35.172511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:18:01.749635 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 20:18:01.749779 0.010199 udp 10.0.2.104 57561 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 20:18:01.760315 0.000000 udp 10.0.2.104 57562 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 20:19:39.012022 3.001427 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:19:46.019430 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:19:54.020810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:20:10.023736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:20:42.030031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:26:46.036117 3.001471 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:26:53.043087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:27:01.044814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:27:17.047846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:27:49.054843 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:30:01.754732 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 20:30:01.754837 0.011549 udp 10.0.2.104 57563 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 20:30:01.766767 0.000000 udp 10.0.2.104 57564 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 20:33:53.061209 3.150413 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:34:00.183887 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:34:08.118484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:34:24.081624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:34:56.087181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:41:00.094532 3.001352 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:41:07.101038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:41:15.102599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:41:31.105708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:42:03.111753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:45:01.748695 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 20:45:01.748787 0.012142 udp 10.0.2.104 57565 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 20:45:01.761300 0.000000 udp 10.0.2.104 57566 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 20:48:07.117540 3.002195 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:48:14.126324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:48:22.127186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:48:38.129399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:49:11.175980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:55:14.153285 3.020079 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:55:21.169238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:55:29.170660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:55:45.743113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:56:17.377660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:08:01.752924 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 21:08:01.753030 0.012007 udp 10.0.2.104 57567 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 21:08:01.765419 0.000000 udp 10.0.2.104 57568 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 21:12:33.195345 3.001957 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:12:40.203237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:12:48.204592 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:13:04.207481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:13:36.213816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:18:01.745241 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 21:18:01.745329 0.010302 udp 10.0.2.104 57569 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 21:18:01.755975 0.000000 udp 10.0.2.104 57570 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 21:19:40.220309 3.000988 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:19:47.226918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:19:55.228482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:20:11.231150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:20:43.237595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:26:47.242826 3.002235 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:26:54.250847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:27:02.252475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:27:18.255803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:27:50.261475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:30:01.750805 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 21:30:01.750911 0.011135 udp 10.0.2.104 57571 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 21:30:01.762429 0.000000 udp 10.0.2.104 57572 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 21:33:54.268098 3.000966 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:34:01.274807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:34:09.276393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:34:25.279283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:34:57.285544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:41:01.294467 2.998839 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:41:08.298951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:41:16.300922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:41:32.303462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:42:04.308939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:45:01.744634 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 21:45:01.744773 0.012061 udp 10.0.2.104 57573 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 21:45:01.757176 0.000000 udp 10.0.2.104 57574 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 21:48:08.315969 3.001262 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:48:15.322685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:48:23.323925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:48:39.327408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:49:11.333052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:55:15.339821 3.001212 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:55:22.346854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:55:30.348297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:55:46.351511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:56:18.358868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:08:01.748803 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 22:08:01.748905 0.011728 udp 10.0.2.104 57575 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 22:08:01.761225 0.000000 udp 10.0.2.104 57576 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 22:12:34.363186 3.001805 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:12:41.370637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:12:49.372122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:13:05.375294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:13:37.381285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:18:01.751418 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 22:18:01.751543 0.010110 udp 10.0.2.104 57577 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 22:18:01.761984 0.000000 udp 10.0.2.104 57578 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 22:19:41.387902 3.001083 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:19:48.394622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:19:56.396179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:20:12.399259 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:20:44.406344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:26:48.411790 3.002745 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:26:55.419270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:27:03.420861 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:27:19.423282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:27:51.439483 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:30:01.746616 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 22:30:01.746787 0.025650 udp 10.0.2.104 57579 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 22:30:01.772817 0.000000 udp 10.0.2.104 57580 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 22:33:55.445485 3.001430 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:34:02.452474 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:34:10.453766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:34:26.456873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:34:58.463336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:41:02.470009 3.000946 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:41:09.476506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:41:17.478295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:41:33.481156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:42:05.487251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:45:01.750686 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 22:45:01.750809 0.012207 udp 10.0.2.104 57581 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 22:45:01.763410 0.000000 udp 10.0.2.104 57582 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 22:48:09.493756 3.002150 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:48:16.500479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:48:24.502129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:48:40.505033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:49:12.511710 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:55:16.517791 3.000845 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:55:23.524703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:55:31.526232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:55:47.529033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:56:19.535237 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:08:01.744889 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 23:08:01.744994 0.017410 udp 10.0.2.104 57583 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 23:08:01.762766 0.000000 udp 10.0.2.104 57584 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 23:12:30.549191 2.996032 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:12:37.551228 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:12:45.552689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:13:01.555831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:13:33.562333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:18:01.747521 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 23:18:01.747784 0.010615 udp 10.0.2.104 57585 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 23:18:01.758785 0.000000 udp 10.0.2.104 57586 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 23:19:37.568026 3.001534 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:19:44.575100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:19:52.576629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:20:08.579924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:20:40.586036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:26:44.592663 3.000796 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:26:51.599346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:26:59.940065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:27:15.783211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:27:47.663312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:31:01.756416 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 23:31:01.756563 0.011536 udp 10.0.2.104 57587 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 23:31:01.768522 0.000000 udp 10.0.2.104 57588 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 23:33:51.635829 3.001525 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:33:58.643481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:34:06.644725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:34:22.647308 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:34:54.653900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:40:58.659600 3.001866 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:41:05.667109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:41:13.668732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:41:29.671830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:42:01.677498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:46:01.753051 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 23:46:01.753211 0.010246 udp 10.0.2.104 57589 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/16 23:46:01.763862 0.000000 udp 10.0.2.104 57590 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/16 23:48:05.684775 3.000538 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:48:13.822437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:48:21.720712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:48:37.515742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:49:09.145250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:55:12.717506 3.001641 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:55:19.724964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:55:27.727721 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:55:43.729927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:56:15.735191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:08:01.750777 0.000125 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 00:08:01.750998 0.010216 udp 10.0.2.104 57591 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 00:08:01.761584 0.000000 udp 10.0.2.104 57592 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 00:12:29.749931 3.016401 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:12:36.766223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:12:44.767496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:13:00.770684 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:13:32.776849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:18:01.744285 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 00:18:01.744441 0.010111 udp 10.0.2.104 57593 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 00:18:01.754929 0.000000 udp 10.0.2.104 57594 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 00:19:36.782800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:19:51.880332 1.970415 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/17 00:19:57.803591 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:20:06.016532 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:20:24.613416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:20:56.191361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:26:55.391043 2.964009 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:27:02.296496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:27:10.186116 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:27:25.961571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:27:57.532895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:31:10.167873 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 00:31:10.167992 0.017132 udp 10.0.2.104 57595 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 00:31:10.185535 0.000000 udp 10.0.2.104 57596 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 00:33:56.934132 2.955577 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:34:03.841915 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:34:11.729784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:34:27.500367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:34:59.049294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:40:58.004464 3.001888 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:41:05.011853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:41:13.014032 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:41:29.016912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:42:01.022139 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:46:01.859263 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 00:46:01.859361 0.012724 udp 10.0.2.104 57597 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 00:46:01.872481 0.000000 udp 10.0.2.104 57598 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 00:48:05.029781 3.000504 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:48:12.058349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:48:20.047751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:48:36.050744 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:49:08.056880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:55:12.063942 3.000454 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:55:19.070306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:55:27.071845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:55:43.074951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:56:15.080681 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:08:01.856856 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 01:08:01.856947 0.014840 udp 10.0.2.104 57599 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 01:08:01.872136 0.000000 udp 10.0.2.104 57600 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 01:12:30.094427 3.002391 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:12:37.101999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:12:45.103978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:13:01.107338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:13:33.113443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:18:01.859975 0.000155 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 01:18:01.860233 0.010278 udp 10.0.2.104 57601 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 01:18:01.870861 0.000000 udp 10.0.2.104 57602 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 01:19:37.119081 3.001688 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:19:44.126692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:19:52.127813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:20:08.130886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:20:40.136906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:26:44.144129 3.000751 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:26:51.150660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:26:59.152196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:27:15.155328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:27:47.160479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:31:01.861148 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 01:31:01.861363 0.014297 udp 10.0.2.104 57603 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 01:31:01.876029 0.000000 udp 10.0.2.104 57604 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 01:33:51.167201 3.001557 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:33:58.174665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:34:06.175994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:34:22.178978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:34:54.185073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:40:58.191114 3.001305 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:41:05.199958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:41:13.202166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:41:29.203021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:42:01.209118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:46:01.855022 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 01:46:01.855194 0.011206 udp 10.0.2.104 57605 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 01:46:01.866726 0.000000 udp 10.0.2.104 57606 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 01:48:05.214823 3.001880 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:48:12.222305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:48:20.223725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:48:36.227989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:49:08.232518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:55:12.238839 3.001721 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:55:19.246387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:55:27.247941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:55:43.250437 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:56:15.256864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:08:01.853032 0.000168 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 02:08:01.853296 0.010156 udp 10.0.2.104 57607 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 02:08:01.863944 0.000000 udp 10.0.2.104 57608 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 02:12:31.262933 3.061825 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:12:38.300671 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:12:46.281793 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:13:02.284901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:13:34.290528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:18:01.855803 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 02:18:01.855963 0.021674 udp 10.0.2.104 57609 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 02:18:01.878003 0.000000 udp 10.0.2.104 57610 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 02:19:38.296692 3.001943 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:19:45.304360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:19:53.305783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:20:09.310010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:20:41.314647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:26:45.323906 2.998852 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:26:52.328667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:27:00.329860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:27:16.332902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:27:48.338724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:30:01.860738 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 02:30:01.860833 0.024407 udp 10.0.2.104 57611 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 02:30:01.885589 0.000000 udp 10.0.2.104 57612 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 02:33:52.343793 3.002784 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:33:59.352255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:34:07.353830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:34:23.356564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:34:55.362573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:40:59.369118 3.003320 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:41:06.376108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:41:14.409736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:41:30.390531 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:42:02.396923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:45:01.854922 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 02:45:01.855025 0.022530 udp 10.0.2.104 57613 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 02:45:01.877922 0.000000 udp 10.0.2.104 57614 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 02:48:06.403520 3.001300 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:48:13.410086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:48:21.411738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:48:37.414844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:49:09.420849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:55:13.426627 3.001839 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:55:20.434105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:55:28.435609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:55:44.438593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:56:16.444636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:08:01.858963 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 03:08:01.859230 0.012022 udp 10.0.2.104 57615 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 03:08:01.871641 0.000000 udp 10.0.2.104 57616 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 03:12:32.450435 3.001922 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:12:39.457936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:12:47.459217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:13:03.462420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:13:35.468513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:18:01.851608 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 03:18:01.851707 0.010245 udp 10.0.2.104 57617 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 03:18:01.862300 0.000000 udp 10.0.2.104 57618 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 03:19:39.475776 3.000364 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:19:46.482065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:19:54.483643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:20:10.486622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:20:42.492748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:26:46.498694 3.001154 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:26:53.505953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:27:01.507446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:27:17.510385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:27:49.685067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:30:01.856775 0.000143 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 03:30:01.857029 0.010252 udp 10.0.2.104 57619 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 03:30:01.867635 0.000000 udp 10.0.2.104 57620 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 03:33:53.533257 3.001071 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:34:00.539922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:34:08.541492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:34:24.546373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:34:56.550580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:41:00.556878 3.001196 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:41:07.563596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:41:15.565235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:41:31.568346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:42:03.574386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:45:01.860753 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 03:45:01.860949 0.021256 udp 10.0.2.104 57621 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 03:45:01.882533 0.000000 udp 10.0.2.104 57622 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 03:48:07.580657 3.003494 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:48:14.587831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:48:22.589574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:48:38.592270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:49:10.598357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:55:14.604656 3.001372 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:55:21.611976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:55:29.613353 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:55:45.620089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:56:17.622176 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:08:01.854859 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 04:08:01.854959 0.010895 udp 10.0.2.104 57623 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 04:08:01.866249 0.000000 udp 10.0.2.104 57624 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 04:12:33.628533 3.001421 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:12:40.635874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:12:48.637421 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:13:04.640864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:13:36.646794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:18:01.857789 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 04:18:01.857938 0.013091 udp 10.0.2.104 57625 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 04:18:01.871400 0.000000 udp 10.0.2.104 57626 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 04:19:40.652341 3.001669 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:19:47.659804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:19:55.661221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:20:11.664191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:20:43.670105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:26:47.675913 3.001937 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:26:54.683485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:27:02.695302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:27:18.698455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:27:50.704305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:30:01.852697 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 04:30:01.852873 0.010199 udp 10.0.2.104 57627 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 04:30:01.863439 0.000000 udp 10.0.2.104 57628 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 04:33:54.710552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:34:02.061449 1.974146 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/17 04:34:07.984577 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:34:16.060786 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:34:31.833927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:35:03.387382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:41:02.376125 2.958958 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:41:09.287779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:41:17.178901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:41:32.960964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:42:04.771617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:45:01.857267 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 04:45:01.857374 0.012047 udp 10.0.2.104 57629 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 04:45:01.869772 0.000000 udp 10.0.2.104 57630 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 04:48:08.778233 3.001659 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:48:15.785873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:48:23.786961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:48:39.789811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:49:11.796007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:55:15.812328 3.001091 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:55:22.820708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:55:30.821111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:55:46.824120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:56:18.829997 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:08:01.851134 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 05:08:01.851241 0.023480 udp 10.0.2.104 57631 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 05:08:01.875090 0.000000 udp 10.0.2.104 57632 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 05:12:29.839109 3.001322 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:12:36.846323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:12:44.847297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:13:00.850661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:13:32.856683 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:18:01.853792 0.000106 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 05:18:01.853991 0.011375 udp 10.0.2.104 57633 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 05:18:01.865752 0.000000 udp 10.0.2.104 57634 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 05:19:36.862775 3.001198 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:19:43.869944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:19:51.871873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:20:07.874622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:20:39.880796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:26:43.885893 3.002518 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:26:50.894175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:26:58.895747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:27:14.898742 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:27:46.904729 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:31:01.854898 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 05:31:01.854990 0.011532 udp 10.0.2.104 57635 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 05:31:01.866858 0.000000 udp 10.0.2.104 57636 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 05:33:50.911640 3.000801 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:33:57.918224 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:34:05.919922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:34:21.922019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:34:53.928640 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:40:57.934548 3.001910 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:41:04.942118 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:41:12.943337 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:41:28.946856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:42:00.952699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:46:01.858960 0.000155 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 05:46:01.859236 0.010474 udp 10.0.2.104 57637 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 05:46:01.870079 0.000000 udp 10.0.2.104 57638 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 05:48:04.958586 3.001376 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:48:11.966229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:48:19.967342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:48:35.970500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:49:07.976435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:55:11.983653 3.000013 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:55:18.990060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:55:26.991667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:55:42.994428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:56:14.999952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:08:01.856940 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 06:08:01.857041 0.017034 udp 10.0.2.104 57639 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 06:08:01.874432 0.000000 udp 10.0.2.104 57640 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 06:12:29.013213 3.004187 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:12:36.021011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:12:44.022687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:13:00.025795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:13:32.031804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:18:01.849717 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 06:18:01.849810 0.012481 udp 10.0.2.104 57641 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 06:18:01.862645 0.000000 udp 10.0.2.104 57642 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 06:19:36.045352 2.993767 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:19:43.044989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:19:51.050050 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:20:07.049569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:20:39.055803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:26:43.061735 3.003979 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:26:50.071856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:26:58.070544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:27:14.075872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:27:46.079643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:31:01.851119 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 06:31:01.851255 0.014254 udp 10.0.2.104 57643 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 06:31:01.865829 0.000000 udp 10.0.2.104 57644 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 06:33:50.085405 3.001724 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:33:57.092859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:34:05.094040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:34:21.097811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:34:53.103299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:40:57.112756 2.999207 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:41:04.116981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:41:12.118428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:41:28.121233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:42:00.127367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:46:01.855081 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 06:46:01.855242 0.010228 udp 10.0.2.104 57645 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 06:46:01.865778 0.000000 udp 10.0.2.104 57646 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 06:48:04.133308 3.002558 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:48:11.140867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:48:19.142329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:48:35.145535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:49:07.151425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:55:11.159067 2.999522 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:55:18.164724 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:55:26.166311 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:55:42.169284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:56:14.175639 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:08:01.852681 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 07:08:01.852869 0.012749 udp 10.0.2.104 57647 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 07:08:01.865981 0.000000 udp 10.0.2.104 57648 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 07:12:29.197937 2.993833 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:12:36.197241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:12:44.206414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:13:00.202194 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:13:32.208018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:18:01.856047 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 07:18:01.856137 0.010303 udp 10.0.2.104 57649 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 07:18:01.866780 0.000000 udp 10.0.2.104 57650 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 07:19:36.214159 3.001608 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:19:43.221511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:19:51.222646 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:20:07.226108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:20:39.231738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:26:43.238560 3.001441 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:26:50.245094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:26:58.246602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:27:14.249941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:27:46.258412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:31:01.857209 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 07:31:01.857443 0.011259 udp 10.0.2.104 57651 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 07:31:01.869072 0.000000 udp 10.0.2.104 57652 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 07:33:50.261851 3.011740 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:33:57.279268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:34:05.280661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:34:21.283759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:34:53.289862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:40:57.296259 3.000938 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:41:04.303270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:41:12.305056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:41:28.307892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:42:00.313831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:46:01.850956 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 07:46:01.851035 0.010267 udp 10.0.2.104 57653 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 07:46:01.861602 0.000000 udp 10.0.2.104 57654 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 07:48:04.320033 3.001708 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:48:11.328393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:48:19.328433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:48:35.331313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:49:07.337606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:55:11.344071 3.001470 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:55:18.351058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:55:26.352828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:55:42.356196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:56:14.362035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:08:01.848900 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 08:08:01.849049 0.010873 udp 10.0.2.104 57655 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 08:08:01.860246 0.000000 udp 10.0.2.104 57656 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 08:12:30.369788 2.999194 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:12:37.376059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:12:45.378967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:13:01.379349 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:13:33.385964 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:18:01.851420 0.000173 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 08:18:01.851693 0.014252 udp 10.0.2.104 57657 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 08:18:01.866235 0.000000 udp 10.0.2.104 57658 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 08:19:37.394088 2.998975 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:19:44.398663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:19:52.400496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:20:08.403649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:20:40.409325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:26:44.415048 3.002704 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:26:51.426178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:26:59.424409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:27:15.427409 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:27:47.433557 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:30:01.863399 0.000204 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 08:30:01.863691 0.011107 udp 10.0.2.104 57659 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 08:30:01.875165 0.000000 udp 10.0.2.104 57660 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 08:33:51.439339 3.001863 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:33:58.446945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:34:06.448690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:34:22.451565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:34:54.457841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:40:58.464518 3.000662 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:41:05.470797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:41:13.472429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:41:29.475857 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:42:01.481467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:45:01.850501 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 08:45:01.850611 0.018380 udp 10.0.2.104 57661 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 08:45:01.869302 0.000000 udp 10.0.2.104 57662 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 08:48:05.487787 3.001272 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:48:12.494963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:48:20.496189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:48:36.499251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:49:08.505406 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:55:12.511359 3.001805 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:55:19.519376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:55:27.520903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:55:43.523725 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:56:15.529413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:08:01.855026 0.000098 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:08:01.855230 0.000000 udp 10.0.2.104 57663 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:09:01.851422 0.254132 udp 10.0.2.104 57664 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 09:09:02.105916 0.000000 udp 10.0.2.104 57665 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:09:06.802929 0.040847 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:12:31.535534 3.001185 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/17 09:12:38.542911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:12:46.544381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:13:02.547171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:13:34.553346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:19:01.854015 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:19:01.854148 0.000000 udp 10.0.2.104 57666 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:19:38.559214 3.001794 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:19:45.566770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:19:53.568134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:20:01.850136 0.000000 udp 10.0.2.104 57667 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:20:06.807099 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:20:09.571367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:20:41.577210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:21:01.856373 0.000000 udp 10.0.2.104 57668 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:21:06.803417 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:22:01.852883 0.254600 udp 10.0.2.104 57669 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 09:22:02.107899 0.000000 udp 10.0.2.104 57670 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:22:06.818205 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:26:45.589335 2.996904 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/17 09:26:52.592166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:27:00.593475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:27:16.605082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:27:48.611286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:33:52.623780 2.997664 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:33:59.625977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:34:07.628105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:34:23.629278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:34:55.719821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:37:01.858817 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:37:01.858917 0.000000 udp 10.0.2.104 57671 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:38:01.852786 0.246152 udp 10.0.2.104 57672 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 09:38:02.099290 0.000000 udp 10.0.2.104 57673 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:38:06.799926 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:40:59.651186 3.001590 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/17 09:41:06.658532 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:41:14.660200 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:41:30.663203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:42:02.672700 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:48:06.675737 3.001053 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:48:13.682811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:48:21.684153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:48:37.687289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:49:09.696161 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:53:01.857090 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:53:01.857183 0.010359 udp 10.0.2.104 57674 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 09:53:01.867854 0.000000 udp 10.0.2.104 57675 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 09:55:13.699124 3.003635 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:55:20.707364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:55:28.708464 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:55:44.710932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:56:16.718377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:12:32.723276 3.001295 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:12:39.730674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:12:47.732045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:13:01.852244 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 10:13:01.852395 0.012355 udp 10.0.2.104 57676 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 10:13:01.865062 0.000000 udp 10.0.2.104 57677 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 10:13:03.734809 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:13:35.740934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:19:39.747227 3.012084 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:19:46.764190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:19:54.766167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:20:10.768799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:20:42.774790 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:23:01.854786 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 10:23:01.854955 0.011333 udp 10.0.2.104 57678 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 10:23:01.866573 0.000000 udp 10.0.2.104 57679 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 10:26:46.781220 3.001513 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:26:53.788629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:27:01.790282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:27:17.794430 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:27:49.798537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:33:53.804940 3.001538 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:34:00.812016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:34:08.813403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:34:24.819100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:34:56.822919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:38:01.848895 0.000112 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 10:38:01.849135 0.011660 udp 10.0.2.104 57680 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 10:38:01.861081 0.000000 udp 10.0.2.104 57681 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 10:41:00.828771 3.001703 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:41:07.838107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:41:15.837855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:41:31.842387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:42:03.846940 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:48:07.853420 3.001156 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:48:14.860501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:48:22.861802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:48:38.864667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:49:10.870955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:53:01.852671 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 10:53:01.852830 0.010937 udp 10.0.2.104 57682 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 10:53:01.864090 0.000000 udp 10.0.2.104 57683 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 10:55:14.876781 3.005647 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:55:21.883860 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:55:29.890306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:55:45.888815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:56:17.895171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:12:34.903078 3.000604 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:12:41.909327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:12:49.914017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:13:01.848234 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 11:13:01.848412 0.012312 udp 10.0.2.104 57684 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 11:13:01.861045 0.000000 udp 10.0.2.104 57685 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 11:13:05.914043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:13:37.920405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:19:41.925512 3.002490 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:19:48.935948 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:19:56.938555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:20:12.939841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:20:44.944217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:23:01.852897 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 11:23:01.852992 0.011526 udp 10.0.2.104 57686 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 11:23:01.864841 0.000000 udp 10.0.2.104 57687 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 11:26:48.952368 2.999555 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:26:55.957287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:27:03.958445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:27:19.961574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:27:51.968497 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:33:55.974191 3.001449 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:34:02.981427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:34:10.983063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:34:26.986105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:34:58.992281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:38:01.854955 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 11:38:01.855120 0.011358 udp 10.0.2.104 57688 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 11:38:01.866826 0.000000 udp 10.0.2.104 57689 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 11:41:02.997433 3.002415 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:41:10.006051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:41:18.007035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:41:34.010209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:42:06.015975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:48:10.021788 3.001976 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:48:17.029206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:48:25.030935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:48:41.034025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:49:13.040143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:53:01.848702 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 11:53:01.848846 0.011524 udp 10.0.2.104 57690 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 11:53:01.860714 0.000000 udp 10.0.2.104 57691 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 11:55:17.047497 3.005551 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:55:24.052813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:55:32.059004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:55:48.057301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:56:20.064003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:12:32.074328 3.001691 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:12:39.081507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:12:47.082956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:13:01.854327 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 12:13:01.854471 0.011461 udp 10.0.2.104 57692 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 12:13:01.866245 0.000000 udp 10.0.2.104 57693 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 12:13:03.085878 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:13:35.092064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:19:39.097725 3.001598 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:19:46.105417 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:19:54.106977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:20:10.110071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:20:42.116451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:23:01.848174 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 12:23:01.848336 0.011501 udp 10.0.2.104 57694 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 12:23:01.860178 0.000000 udp 10.0.2.104 57695 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 12:26:46.121989 3.001133 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:26:53.129329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:27:01.131013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:27:17.133598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:27:49.140811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:33:53.147251 3.000356 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:34:00.153390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:34:08.157234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:34:24.157979 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:34:56.164022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:38:01.850916 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 12:38:01.851095 0.015565 udp 10.0.2.104 57696 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 12:38:01.867006 0.000000 udp 10.0.2.104 57697 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 12:41:00.170094 3.001642 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:41:07.177329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:41:15.178745 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:41:31.182167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:42:03.188216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:48:07.194050 3.001414 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:48:14.201345 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:48:22.202983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:48:38.206107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:49:10.211868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:53:01.855116 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 12:53:01.855264 0.010295 udp 10.0.2.104 57698 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 12:53:01.865882 0.000000 udp 10.0.2.104 57699 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 12:55:14.217543 3.001789 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:55:21.249773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:55:29.237701 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:55:45.239876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:56:17.248265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:12:31.258285 3.002214 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:12:38.266242 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:12:46.267989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:13:01.850366 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 13:13:01.850576 0.021284 udp 10.0.2.104 57700 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 13:13:01.872215 0.000000 udp 10.0.2.104 57701 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 13:13:02.271005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:13:34.277085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:19:38.282913 3.010024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:19:45.290410 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:19:53.291456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:20:09.294629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:20:41.300704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:23:01.852767 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 13:23:01.852871 0.022509 udp 10.0.2.104 57702 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 13:23:01.875826 0.000000 udp 10.0.2.104 57703 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 13:26:45.306898 3.001654 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:26:52.314876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:27:00.316761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:27:16.319000 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:27:48.324759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:33:52.330768 3.004497 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:33:59.338273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:34:07.339840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:34:23.342584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:34:55.348761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:38:01.847071 0.000040 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 13:38:01.847168 0.029131 udp 10.0.2.104 57704 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 13:38:01.876639 0.000000 udp 10.0.2.104 57705 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 13:40:59.354599 3.001923 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:41:06.362190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:41:14.363734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:41:30.366571 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:42:02.372655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:48:06.378680 3.001869 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:48:13.385886 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:48:21.387397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:48:37.390541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:49:09.396797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:53:01.850641 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 13:53:01.850740 0.010131 udp 10.0.2.104 57706 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 13:53:01.861175 0.000000 udp 10.0.2.104 57707 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 13:55:13.403139 3.001179 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:55:20.410075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:55:28.412037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:55:44.421855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:56:16.420807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:12:31.437620 3.000278 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:12:38.442312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:12:46.444290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:13:01.846328 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 14:13:01.846437 0.011468 udp 10.0.2.104 57708 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 14:13:01.858271 0.000000 udp 10.0.2.104 57709 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 14:13:02.452260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:13:34.452868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:19:38.459202 3.001520 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:19:45.466695 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:19:53.468275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:20:09.471150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:20:41.476871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:23:01.848942 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 14:23:01.849031 0.011424 udp 10.0.2.104 57710 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 14:23:01.860739 0.000000 udp 10.0.2.104 57711 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 14:26:45.482832 3.001800 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:26:52.490952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:27:00.492055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:27:16.494982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:27:48.500806 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:33:52.517560 3.001411 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:33:59.524999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:34:07.526215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:34:23.538926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:34:55.546001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:38:01.852882 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 14:38:01.853006 0.012276 udp 10.0.2.104 57712 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 14:38:01.865617 0.000000 udp 10.0.2.104 57713 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 14:40:59.552017 3.000677 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:41:06.558482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:41:14.559974 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:41:30.562910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:42:02.568911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:48:06.574972 3.001538 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:48:13.582526 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:48:21.584101 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:48:37.586796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:49:09.592924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:53:01.846889 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 14:53:01.847007 0.010184 udp 10.0.2.104 57714 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 14:53:01.857492 0.000000 udp 10.0.2.104 57715 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 14:55:13.600070 3.000488 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:55:20.606515 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:55:28.607925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:55:44.610956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:56:16.616709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:12:31.631289 3.002069 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:12:38.638944 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:12:46.641091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:13:01.852101 0.000129 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 15:13:01.852338 0.011922 udp 10.0.2.104 57716 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 15:13:01.864602 0.000000 udp 10.0.2.104 57717 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 15:13:02.643419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:13:34.649360 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:19:38.655913 3.001229 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:19:45.662937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:19:53.668823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:20:09.667204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:20:41.673967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:23:01.845279 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 15:23:01.845366 0.023453 udp 10.0.2.104 57718 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 15:23:01.869167 0.000000 udp 10.0.2.104 57719 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 15:26:45.679233 3.020654 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:26:52.696856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:27:00.697874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:27:16.701339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:27:48.709145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:33:52.713602 3.001397 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:33:59.720755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:34:07.722067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:34:23.725403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:34:55.731142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:38:01.848827 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 15:38:01.848912 0.011444 udp 10.0.2.104 57720 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 15:38:01.860680 0.000000 udp 10.0.2.104 57721 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 15:40:59.737141 3.001696 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:41:06.744937 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:41:14.746520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:41:30.749408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:42:02.755373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:48:06.761385 3.001855 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:48:13.768648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:48:21.770183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:48:37.773280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:49:09.779305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:53:01.852882 0.000125 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 15:53:01.853102 0.010098 udp 10.0.2.104 57722 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 15:53:01.863700 0.000000 udp 10.0.2.104 57723 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 15:55:13.787518 2.999350 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:55:20.792573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:55:28.794274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:55:44.797120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:56:16.804698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:12:32.809432 3.000898 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:12:39.816505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:12:47.817350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:13:01.848116 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 16:13:01.947833 0.026970 udp 10.0.2.104 57724 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 16:13:01.975179 0.000000 udp 10.0.2.104 57725 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 16:13:03.820930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:13:35.827238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:19:39.833181 3.001705 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:19:46.840346 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:19:54.841900 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:20:10.845124 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:20:42.850811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:23:01.850838 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 16:23:01.851017 0.011438 udp 10.0.2.104 57726 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 16:23:01.862803 0.000000 udp 10.0.2.104 57727 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 16:26:46.857545 3.000992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:26:53.864324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:27:01.865931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:27:17.869818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:27:49.875230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:33:53.881357 3.006524 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:34:00.892445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:34:08.897643 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:34:24.893027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:34:56.898775 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:38:01.844739 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 16:38:01.844941 0.026241 udp 10.0.2.104 57728 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 16:38:01.871584 0.000000 udp 10.0.2.104 57729 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 16:41:00.905506 3.001198 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:41:07.912543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:41:15.913328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:41:31.916641 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:42:03.922419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:48:07.929635 3.000628 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:48:14.936651 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:48:22.937989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:48:38.940707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:49:10.946759 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:53:01.848821 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 16:53:01.849003 0.010653 udp 10.0.2.104 57730 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 16:53:01.859969 0.000000 udp 10.0.2.104 57731 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 16:55:14.953024 3.002153 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:55:21.960327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:55:29.962291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:55:45.964748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:56:17.970835 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:12:34.978448 3.001643 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:12:41.985824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:12:49.989758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:13:01.847265 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 17:13:01.847367 0.011305 udp 10.0.2.104 57732 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 17:13:01.859005 0.000000 udp 10.0.2.104 57733 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 17:13:05.990323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:13:37.998014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:19:42.002478 3.001486 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:19:49.009822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:19:57.010781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:20:13.013691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:20:45.020086 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:23:01.847188 0.000058 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 17:23:01.847287 0.011740 udp 10.0.2.104 57734 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 17:23:01.859365 0.000000 udp 10.0.2.104 57735 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 17:26:49.026193 3.001697 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:26:56.033510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:27:04.038007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:27:20.038184 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:27:52.044170 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:33:56.049621 3.001672 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:34:03.057329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:34:11.058454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:34:27.062371 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:34:59.068129 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:38:01.850642 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 17:38:01.850783 0.021811 udp 10.0.2.104 57736 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 17:38:01.872941 0.000000 udp 10.0.2.104 57737 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 17:41:03.073382 3.002415 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:41:10.081269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:41:18.083033 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:41:34.086375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:42:06.092503 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:48:10.098588 3.000875 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:48:17.105509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:48:25.107072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:48:41.109486 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:49:13.116223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:53:01.844793 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 17:53:01.844895 0.010309 udp 10.0.2.104 57738 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 17:53:01.855548 0.000000 udp 10.0.2.104 57739 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 17:55:17.122769 3.000428 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:55:24.135788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:55:32.136403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:55:48.137596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:56:20.140150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:12:31.150051 3.000413 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:12:38.258862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:12:46.259938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:13:01.850293 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 18:13:01.850490 0.011651 udp 10.0.2.104 57740 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 18:13:01.862515 0.000000 udp 10.0.2.104 57741 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 18:13:02.180792 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:13:34.187693 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:19:38.193972 3.000917 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:19:45.200159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:19:53.205723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:20:09.213321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:20:41.210723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:23:01.852898 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 18:23:01.852985 0.011426 udp 10.0.2.104 57742 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 18:23:01.864732 0.000000 udp 10.0.2.104 57743 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 18:26:45.215910 3.002873 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:26:52.224051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:27:00.226171 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:27:16.228755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:27:48.234867 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:33:52.241582 3.000549 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:33:59.248366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:34:07.249908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:34:23.252694 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:34:55.258466 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:38:01.847114 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 18:38:01.847217 0.012015 udp 10.0.2.104 57744 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 18:38:01.859590 0.000000 udp 10.0.2.104 57745 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 18:40:59.267306 2.999009 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:41:06.271924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:41:14.273404 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:41:30.276610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:42:02.282541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:48:06.288833 3.001632 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:48:13.296004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:48:21.297292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:48:37.300367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:49:09.306460 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:53:01.850864 0.019670 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 18:53:01.870744 0.011055 udp 10.0.2.104 57746 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 18:53:01.882171 0.000000 udp 10.0.2.104 57747 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 18:55:13.313480 3.001601 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:55:20.320475 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:55:28.326527 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:55:44.325422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:56:16.330534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:12:30.343249 3.001937 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:12:37.351010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:12:45.352519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:13:01.355630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:13:01.846130 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 19:13:01.846315 0.022076 udp 10.0.2.104 57748 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 19:13:01.868752 0.000000 udp 10.0.2.104 57749 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 19:13:33.361553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:19:37.367332 3.001831 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:19:44.374839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:19:52.378800 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:20:08.386520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:20:40.390099 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:23:01.848891 0.000039 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 19:23:01.848982 0.011896 udp 10.0.2.104 57750 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 19:23:01.861194 0.000000 udp 10.0.2.104 57751 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 19:26:44.391395 3.001719 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:26:51.398968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:26:59.400387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:27:15.403386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:27:47.410535 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:33:51.415625 3.001486 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:33:58.423151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:34:06.424419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:34:22.427446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:34:54.433419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:38:01.842615 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 19:38:01.842776 0.021834 udp 10.0.2.104 57752 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 19:38:01.864894 0.000000 udp 10.0.2.104 57753 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 19:40:58.439987 3.000937 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:41:05.446665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:41:13.448234 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:41:29.451165 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:42:01.457393 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:48:05.463120 3.001956 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:48:12.471089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:48:20.472192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:48:36.475271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:49:08.481331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:53:01.847054 0.024150 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 19:53:01.871314 0.010507 udp 10.0.2.104 57754 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 19:53:01.882181 0.000000 udp 10.0.2.104 57755 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 19:55:12.492543 2.996547 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:55:19.494629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:55:27.496888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:55:43.500367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:56:15.515904 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:12:30.530492 3.178811 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:12:37.677267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:12:45.603659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:13:01.551788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:13:01.842277 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 20:13:01.842419 0.011589 udp 10.0.2.104 57756 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 20:13:01.854336 0.000000 udp 10.0.2.104 57757 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 20:13:33.558698 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:19:37.563330 3.002780 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:19:44.571120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:19:52.575272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:20:08.577803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:20:40.582094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:23:01.845372 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 20:23:01.845585 0.012764 udp 10.0.2.104 57758 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 20:23:01.858711 0.000000 udp 10.0.2.104 57759 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 20:26:44.588029 3.001761 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:26:51.595344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:26:59.596716 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:27:15.599703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:27:47.606147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:33:51.612714 3.000684 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:33:58.631869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:34:06.631281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:34:22.634198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:34:54.639754 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:38:01.848840 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 20:38:01.848987 0.011915 udp 10.0.2.104 57760 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 20:38:01.861236 0.000000 udp 10.0.2.104 57761 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 20:40:58.645697 3.001716 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:41:05.653379 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:41:13.654789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:41:29.658120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:42:01.664034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:48:05.669627 3.001600 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:48:12.677052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:48:20.678842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:48:36.682654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:49:08.687905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:53:01.842406 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 20:53:01.842557 0.011260 udp 10.0.2.104 57762 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 20:53:01.854147 0.000000 udp 10.0.2.104 57763 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 20:55:12.694505 3.000793 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:55:19.701123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:55:27.704520 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:55:43.705936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:56:15.711633 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:12:30.730463 2.997309 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:12:37.734141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:12:45.734895 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:13:01.738074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:13:01.848201 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 21:13:01.848366 0.013793 udp 10.0.2.104 57764 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 21:13:01.862512 0.000000 udp 10.0.2.104 57765 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 21:13:33.743978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:19:37.750231 3.001648 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:19:44.760774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:19:52.767801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:20:08.762253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:20:40.768797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:23:01.850898 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 21:23:01.851035 0.011387 udp 10.0.2.104 57766 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 21:23:01.862752 0.000000 udp 10.0.2.104 57767 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 21:26:44.774231 3.001803 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:26:51.781267 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:26:59.783155 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:27:15.786179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:27:47.791828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:33:51.798837 3.000879 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:33:58.805382 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:34:06.807130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:34:22.809823 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:34:54.817929 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:38:01.845143 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 21:38:01.845330 0.012371 udp 10.0.2.104 57768 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 21:38:01.858053 0.000000 udp 10.0.2.104 57769 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 21:40:58.821532 3.002291 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:41:05.829294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:41:13.830731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:41:29.834027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:42:01.839930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:48:05.846049 3.001563 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:48:12.853383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:48:20.854873 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:48:36.859875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:49:08.863879 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:53:01.848822 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 21:53:01.848969 0.010415 udp 10.0.2.104 57770 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 21:53:01.859723 0.000000 udp 10.0.2.104 57771 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 21:55:12.873938 2.997421 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:55:19.877862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:55:27.883063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:55:43.881912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:56:15.887930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:12:31.904125 3.021613 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:12:38.931281 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:12:46.935003 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:13:01.844338 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 22:13:01.844436 0.021873 udp 10.0.2.104 57772 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 22:13:01.866665 0.000000 udp 10.0.2.104 57773 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 22:13:02.937872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:13:34.941994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:19:38.948812 3.000619 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:19:45.956245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:19:53.956808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:20:09.959284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:20:41.965875 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:23:01.846906 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 22:23:01.846987 0.012575 udp 10.0.2.104 57774 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 22:23:01.859894 0.000000 udp 10.0.2.104 57775 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 22:26:45.971747 3.000992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:26:52.979182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:27:00.980295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:27:16.985100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:27:48.989419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:33:52.994682 3.002594 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:34:00.003280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:34:08.003957 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:34:24.007789 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:34:56.014020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:38:01.840895 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 22:38:01.841094 0.011511 udp 10.0.2.104 57776 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 22:38:01.852975 0.000000 udp 10.0.2.104 57777 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 22:41:00.020239 3.001081 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:41:07.027112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:41:15.028586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:41:31.030961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:42:03.037965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:48:07.043205 3.002223 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:48:14.052055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:48:22.062350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:48:38.065715 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:49:10.071930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:53:01.845158 0.044494 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 22:53:01.889831 0.010939 udp 10.0.2.104 57778 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 22:53:01.901127 0.000000 udp 10.0.2.104 57779 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 22:55:14.082465 3.169032 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:55:21.217452 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:55:29.147288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:55:45.099148 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:56:17.105894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:12:34.116112 2.998494 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:12:41.120498 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:12:49.122009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:13:01.850221 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 23:13:01.850379 0.012125 udp 10.0.2.104 57780 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 23:13:01.862808 0.000000 udp 10.0.2.104 57781 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 23:13:05.124889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:13:37.131040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:19:41.135912 3.032385 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:19:48.154260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:19:56.155797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:20:12.159655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:20:44.168469 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:23:01.843169 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 23:23:01.843380 0.022324 udp 10.0.2.104 57782 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 23:23:01.866074 0.000000 udp 10.0.2.104 57783 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 23:26:48.172123 3.000371 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:26:55.178348 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:27:03.190195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:27:19.193109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:27:51.198753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:33:55.205083 3.001548 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:34:02.212236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:34:10.213901 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:34:26.216956 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:34:58.228133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:38:01.846717 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 23:38:01.846794 0.014714 udp 10.0.2.104 57784 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 23:38:01.861854 0.000000 udp 10.0.2.104 57785 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 23:41:02.230168 3.000609 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:41:09.236439 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:41:17.237965 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:41:33.240803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:42:05.246910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:48:09.252833 3.013571 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:48:16.270268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:48:24.271714 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:48:40.274876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:49:12.281001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:53:01.840892 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 23:53:01.841043 0.011302 udp 10.0.2.104 57786 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/17 23:53:01.852641 0.000000 udp 10.0.2.104 57787 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/17 23:55:16.338799 2.999726 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:55:23.344359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:55:31.345971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:55:47.348603 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:56:19.365390 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:12:29.374647 2.999388 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:12:36.379636 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:12:44.391168 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:13:00.394187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:13:01.896365 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 00:13:01.896524 0.015564 udp 10.0.2.104 57788 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 00:13:01.912445 0.000000 udp 10.0.2.104 57789 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 00:13:32.400142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:19:36.406173 3.001737 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:19:43.413448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:19:51.414942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:20:07.418275 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:20:39.426020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:23:01.902348 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 00:23:01.902496 0.011700 udp 10.0.2.104 57790 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 00:23:01.914518 0.000000 udp 10.0.2.104 57791 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 00:26:43.430185 3.027574 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:26:50.447626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:26:58.449286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:27:14.452227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:27:46.458704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:33:50.464808 3.001322 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:33:57.474151 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:34:05.475282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:34:21.476282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:34:53.482781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:38:01.893006 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 00:38:01.893118 0.013675 udp 10.0.2.104 57792 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 00:38:01.907186 0.000000 udp 10.0.2.104 57793 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 00:40:57.488682 3.001238 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:41:04.495530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:41:12.497058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:41:28.499864 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:42:00.505992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:48:04.512049 3.001522 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:48:11.519384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:48:19.520999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:48:35.524123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:49:07.529909 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:53:01.897239 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 00:53:01.897381 0.011030 udp 10.0.2.104 57794 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 00:53:01.908721 0.000000 udp 10.0.2.104 57795 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 00:55:11.543972 2.993867 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:55:18.543177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:55:26.544747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:55:42.553113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:56:14.554279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:12:27.566133 3.001065 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:12:34.572797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:12:42.574365 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:12:58.577458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:13:01.892088 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 01:13:01.892225 0.012097 udp 10.0.2.104 57796 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 01:13:01.904613 0.000000 udp 10.0.2.104 57797 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 01:13:30.584145 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:19:34.590240 3.000903 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:19:41.611805 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:19:49.598815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:20:05.614094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:20:37.607540 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:23:01.895124 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 01:23:01.895261 0.017962 udp 10.0.2.104 57798 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 01:23:01.913591 0.000000 udp 10.0.2.104 57799 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 01:26:41.615520 3.003201 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:26:48.621472 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:26:56.622418 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:27:12.626661 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:27:44.631387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:33:48.637093 3.002137 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:33:55.644763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:34:03.646354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:34:19.649336 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:34:51.655514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:38:01.899030 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 01:38:01.899175 0.014164 udp 10.0.2.104 57800 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 01:38:01.913708 0.000000 udp 10.0.2.104 57801 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 01:40:55.662771 3.000314 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:41:02.668740 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:41:10.670296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:41:26.673836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:41:58.679269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:48:02.685170 3.001738 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:48:09.692802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:48:17.694466 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:48:33.697211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:49:05.703265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:53:01.893007 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 01:53:01.893169 0.012502 udp 10.0.2.104 57802 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 01:53:01.905981 0.000000 udp 10.0.2.104 57803 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 01:55:09.710894 3.000075 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:55:16.718158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:55:24.755041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:55:40.732776 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:56:12.737344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:12:27.751446 3.002458 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:12:34.759159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:12:42.761291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:12:58.766467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:13:01.898377 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 02:13:01.898538 0.012018 udp 10.0.2.104 57804 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 02:13:01.910914 0.000000 udp 10.0.2.104 57805 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 02:13:30.770225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:19:34.776110 3.001973 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:19:41.783516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:19:49.784791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:20:05.788146 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:20:37.793868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:23:01.891035 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 02:23:01.891232 0.013490 udp 10.0.2.104 57806 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 02:23:01.905044 0.000000 udp 10.0.2.104 57807 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 02:26:41.799982 3.006354 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:26:48.806949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:26:56.808269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:27:12.811164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:27:44.818077 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:33:48.829426 3.000715 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:33:55.830903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:34:03.832552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:34:19.835773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:34:51.841880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:38:01.895102 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 02:38:01.895199 0.014188 udp 10.0.2.104 57808 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 02:38:01.909732 0.000000 udp 10.0.2.104 57809 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 02:40:55.848437 3.000875 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:41:02.854951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:41:10.858573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:41:26.860038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:41:58.865438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:48:02.871642 3.001794 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:48:09.878935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:48:17.880883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:48:33.883359 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:49:05.889457 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:53:01.888973 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 02:53:01.889129 0.009972 udp 10.0.2.104 57810 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 02:53:01.899389 0.000000 udp 10.0.2.104 57811 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 02:55:09.895160 3.003540 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:55:16.902998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:55:24.904484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:55:40.907263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:56:12.913468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:12:27.927994 3.001594 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:12:34.935271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:12:42.937204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:12:58.939971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:13:01.894130 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 03:13:01.894284 0.012704 udp 10.0.2.104 57812 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 03:13:01.907320 0.000000 udp 10.0.2.104 57813 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 03:13:30.945917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:19:34.952310 3.001117 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:19:41.959422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:19:49.960817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:20:05.963951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:20:37.969928 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:23:01.896892 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 03:23:01.897032 0.012358 udp 10.0.2.104 57814 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 03:23:01.909730 0.000000 udp 10.0.2.104 57815 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 03:26:41.975758 3.002684 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:26:48.985998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:26:56.984787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:27:12.987938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:27:44.993422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:33:49.000148 3.001238 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:33:56.007198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:34:04.008939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:34:20.012057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:34:52.020564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:38:01.890764 0.000052 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 03:38:01.890856 0.013233 udp 10.0.2.104 57816 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 03:38:01.904409 0.000000 udp 10.0.2.104 57817 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 03:40:56.034046 3.001899 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:41:03.041327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:41:11.042319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:41:27.046000 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:41:59.052293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:48:03.057919 3.001462 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:48:10.065253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:48:18.066838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:48:34.070214 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:49:06.076105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:53:01.897527 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 03:53:01.897616 0.010149 udp 10.0.2.104 57818 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 03:53:01.908103 0.000000 udp 10.0.2.104 57819 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 03:55:10.081951 3.001705 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:55:17.088763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:55:25.090983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:55:41.093859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:56:13.100064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:12:30.108997 2.999684 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:12:37.114164 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:12:45.116991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:13:01.118657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:13:01.890674 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 04:13:01.890765 0.016522 udp 10.0.2.104 57820 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 04:13:01.907650 0.000000 udp 10.0.2.104 57821 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 04:13:33.125257 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:19:37.131176 3.001422 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:19:44.138574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:19:52.140625 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:20:08.143221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:20:40.150227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:23:01.892968 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 04:23:01.893066 0.023284 udp 10.0.2.104 57822 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 04:23:01.916760 0.000000 udp 10.0.2.104 57823 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 04:26:44.155035 3.001703 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:26:51.162751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:26:59.163914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:27:15.166831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:27:47.173203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:33:51.178692 3.005952 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:33:58.186405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:34:06.188206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:34:22.191243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:34:54.196896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:38:01.897011 0.000111 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 04:38:01.897256 0.011517 udp 10.0.2.104 57824 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 04:38:01.909096 0.000000 udp 10.0.2.104 57825 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 04:40:58.203673 3.001061 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:41:05.210842 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:41:13.211914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:41:29.214594 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:42:01.221010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:48:05.226504 3.002146 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:48:12.234394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:48:20.235880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:48:36.238938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:49:08.245049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:53:01.890883 0.203778 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 04:53:02.094809 0.010271 udp 10.0.2.104 57826 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 04:53:02.105455 0.000000 udp 10.0.2.104 57827 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 04:55:12.250858 3.001756 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:55:19.258424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:55:27.259976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:55:43.267373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:56:15.269015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:12:31.274522 3.001907 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:12:38.282273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:12:46.284038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:13:01.896131 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 05:13:01.896317 0.090220 udp 10.0.2.104 57828 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 05:13:01.986918 0.000000 udp 10.0.2.104 57829 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 05:13:02.353863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:13:34.292804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:19:38.298762 3.001737 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:19:45.306060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:19:53.308122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:20:09.310809 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:20:41.316665 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:23:01.889123 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 05:23:01.889297 0.011645 udp 10.0.2.104 57830 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 05:23:01.901323 0.000000 udp 10.0.2.104 57831 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 05:26:45.322826 3.003065 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:26:52.330471 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:27:00.331787 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:27:16.335178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:27:48.340837 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:33:52.346621 3.003879 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:33:59.354034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:34:07.356306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:34:23.359068 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:34:55.364610 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:38:01.892746 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 05:38:01.892874 0.014950 udp 10.0.2.104 57832 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 05:38:01.908126 0.000000 udp 10.0.2.104 57833 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 05:40:59.370657 3.001737 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:41:06.377963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:41:14.379840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:41:30.382883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:42:02.388631 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:48:06.394642 3.001720 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:48:13.402213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:48:21.403663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:48:37.406802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:49:09.412773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:53:01.886866 0.083232 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 05:53:01.970172 0.010157 udp 10.0.2.104 57834 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 05:53:01.980687 0.000000 udp 10.0.2.104 57835 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 05:55:13.419944 3.000402 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:55:20.426488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:55:28.428173 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:55:44.430673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:56:16.436639 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:12:32.445904 2.998302 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:12:39.496373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:12:47.461260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:13:01.892111 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 06:13:01.892240 0.015114 udp 10.0.2.104 57836 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 06:13:01.907692 0.000000 udp 10.0.2.104 57837 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 06:13:03.464485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:13:35.470630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:19:39.476812 3.001854 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:19:46.486834 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:19:54.486545 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:20:10.493736 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:20:42.494714 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:23:01.895037 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 06:23:01.895233 0.011360 udp 10.0.2.104 57838 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 06:23:01.906893 0.000000 udp 10.0.2.104 57839 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 06:26:46.500639 3.001725 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:26:53.508500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:27:01.509362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:27:17.512668 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:27:49.518699 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:33:53.525483 3.001029 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:34:00.537135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:34:08.533328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:34:24.536278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:34:56.542606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:38:01.889159 0.000057 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 06:38:01.889271 0.023327 udp 10.0.2.104 57840 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 06:38:01.913009 0.000000 udp 10.0.2.104 57841 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 06:41:00.548442 3.002131 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:41:07.556513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:41:15.557869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:41:31.560494 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:42:03.566912 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:48:07.573062 3.001404 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:48:14.580002 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:48:22.581254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:48:38.584357 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:49:10.590181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:53:01.892684 0.061626 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 06:53:01.954460 0.010225 udp 10.0.2.104 57842 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 06:53:01.965035 0.000000 udp 10.0.2.104 57843 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 06:55:14.598235 2.999575 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:55:21.603905 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:55:29.605119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:55:45.609254 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:56:17.614396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:12:28.624002 3.025726 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:12:35.640618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:12:43.642175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:12:59.644894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:13:01.888340 0.000079 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 07:13:01.888506 0.012246 udp 10.0.2.104 57844 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 07:13:01.901100 0.000000 udp 10.0.2.104 57845 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 07:13:31.655441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:19:35.657271 3.001732 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:19:42.664673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:19:50.665939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:20:06.668727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:20:38.675046 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:23:01.890811 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 07:23:01.890906 0.011668 udp 10.0.2.104 57846 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 07:23:01.902881 0.000000 udp 10.0.2.104 57847 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 07:26:42.681437 3.001376 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:26:49.688617 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:26:57.689763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:27:13.692977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:27:45.698874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:33:49.704396 3.002354 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:33:56.712313 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:34:04.713980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:34:20.717220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:34:52.723262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:38:01.894935 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 07:38:01.895072 0.021707 udp 10.0.2.104 57848 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 07:38:01.917154 0.000000 udp 10.0.2.104 57849 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 07:40:56.729568 3.001541 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:41:03.736502 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:41:11.738205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:41:27.740676 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:41:59.746913 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:48:04.754479 3.011433 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:48:11.772159 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:48:19.773397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:48:35.776205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:49:07.782622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:53:01.889191 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 07:53:01.889299 0.010666 udp 10.0.2.104 57850 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 07:53:01.931166 0.000000 udp 10.0.2.104 57851 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 07:55:11.788558 3.008202 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:55:18.797188 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:55:26.805799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:55:42.800299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:56:14.808935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:12:27.817473 3.001899 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:12:34.825110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:12:42.826616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:12:58.829797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:13:01.894464 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 08:13:01.894564 0.012307 udp 10.0.2.104 57852 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 08:13:01.907187 0.000000 udp 10.0.2.104 57853 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 08:13:30.836105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:19:34.842279 3.001258 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:19:41.849180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:19:49.855890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:20:05.855832 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:20:37.859822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:23:01.886927 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 08:23:01.887101 0.011992 udp 10.0.2.104 57854 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 08:23:01.899411 0.000000 udp 10.0.2.104 57855 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 08:26:41.865339 3.001942 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:26:48.873219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:26:56.874874 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:27:12.877821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:27:44.883751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:33:48.889626 3.002024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:33:55.897189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:34:03.898790 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:34:19.902122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:34:51.907952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:38:01.890777 0.000078 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 08:38:01.890924 0.014349 udp 10.0.2.104 57856 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 08:38:01.905590 0.000000 udp 10.0.2.104 57857 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 08:40:55.914744 3.000473 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:41:02.921071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:41:10.922707 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:41:26.925991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:41:58.931768 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:48:04.940656 3.000977 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:48:11.947993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:48:19.949402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:48:35.952702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:49:07.958469 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:53:01.899133 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 08:53:01.899296 0.011745 udp 10.0.2.104 57858 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 08:53:01.911376 0.000000 udp 10.0.2.104 57859 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 08:55:11.967904 2.998273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:55:18.973414 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:55:26.973516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:55:42.983282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:56:14.983723 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:12:29.996748 3.001962 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:12:37.078427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:12:45.018396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:13:01.018854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:13:01.890479 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 09:13:01.890581 0.012085 udp 10.0.2.104 57860 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 09:13:01.903029 0.000000 udp 10.0.2.104 57861 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 09:13:33.025183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:19:37.031484 3.001086 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:19:44.038542 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:19:52.040178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:20:08.043022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:20:40.048614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:23:01.893032 0.000115 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 09:23:01.893278 0.013007 udp 10.0.2.104 57862 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 09:23:01.906619 0.000000 udp 10.0.2.104 57863 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 09:26:44.053953 3.002868 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:26:51.062137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:26:59.063211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:27:15.066718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:27:47.072788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:33:51.078802 3.001729 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:33:58.087082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:34:06.088327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:34:22.090865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:34:54.097260 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:38:01.886905 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 09:38:01.887048 0.011799 udp 10.0.2.104 57864 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 09:38:01.899172 0.000000 udp 10.0.2.104 57865 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 09:40:58.103376 3.001250 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:41:05.110478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:41:13.111761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:41:29.114821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:42:01.120856 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:48:06.128083 3.001772 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:48:13.135675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:48:21.137559 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:48:37.140001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:49:09.146243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:53:01.890554 0.071467 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 09:53:01.962110 0.010257 udp 10.0.2.104 57866 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 09:53:01.972738 0.000000 udp 10.0.2.104 57867 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 09:55:13.156810 2.997169 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:55:20.165851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:55:28.161443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:55:44.168165 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:56:16.170158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:12:31.184193 3.003722 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:12:38.192123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:12:46.193156 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:13:01.885678 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 10:13:01.885812 0.052670 udp 10.0.2.104 57868 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 10:13:01.938869 0.000000 udp 10.0.2.104 57869 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 10:13:02.196708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:13:34.202574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:19:38.209643 3.000686 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:19:45.216025 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:19:53.233319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:20:09.230713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:20:41.236598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:23:01.888864 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 10:23:01.888949 0.024212 udp 10.0.2.104 57870 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 10:23:01.913520 0.000000 udp 10.0.2.104 57871 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 10:26:45.242264 3.002169 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:26:52.250489 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:27:00.251264 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:27:16.254753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:27:48.260674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:33:52.266444 3.002320 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:33:59.274022 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:34:07.275846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:34:23.278621 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:34:55.284663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:38:01.892815 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 10:38:01.892951 0.015127 udp 10.0.2.104 57872 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 10:38:01.908467 0.000000 udp 10.0.2.104 57873 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 10:40:59.291865 3.000579 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:41:06.298377 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:41:14.299299 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:41:30.303220 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:42:02.308883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:48:06.313782 3.002511 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:48:13.321980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:48:21.323481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:48:37.326624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:49:09.332635 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:53:01.888359 0.000095 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 10:53:01.888543 0.010125 udp 10.0.2.104 57874 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 10:53:01.899020 0.000000 udp 10.0.2.104 57875 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 10:55:13.339559 3.000514 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:55:20.346481 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:55:28.347612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:55:44.350519 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:56:16.356851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:12:32.362752 3.075915 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:12:39.414352 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:12:47.384484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:13:01.892156 0.000097 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 11:13:01.892341 0.013173 udp 10.0.2.104 57876 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 11:13:01.905884 0.000000 udp 10.0.2.104 57877 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 11:13:03.384972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:13:35.390392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:19:39.395910 3.002578 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:19:46.407767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:19:54.405354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:20:10.408213 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:20:42.414283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:23:01.884984 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 11:23:01.885124 0.011521 udp 10.0.2.104 57878 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 11:23:01.896968 0.000000 udp 10.0.2.104 57879 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 11:26:46.420506 3.001538 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:26:53.428166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:27:01.429255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:27:17.431656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:27:49.438449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:33:53.444632 3.001217 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:34:00.452039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:34:08.453133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:34:24.456449 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:34:56.462428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:38:01.888811 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 11:38:01.888915 0.011317 udp 10.0.2.104 57880 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 11:38:01.900549 0.000000 udp 10.0.2.104 57881 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 11:41:00.468329 3.001923 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:41:07.475831 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:41:15.478147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:41:31.480422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:42:03.486212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:48:07.492588 3.001128 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:48:14.499868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:48:22.500953 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:48:38.504160 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:49:10.510440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:53:01.892925 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 11:53:01.893154 0.010507 udp 10.0.2.104 57882 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 11:53:01.904025 0.000000 udp 10.0.2.104 57883 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 11:55:14.516637 3.001376 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:55:21.523986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:55:29.525441 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:55:45.531726 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:56:17.534094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:12:33.541033 3.000755 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:12:40.550232 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:12:48.552413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:13:01.890830 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 12:13:01.890928 0.022365 udp 10.0.2.104 57884 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 12:13:01.913671 0.000000 udp 10.0.2.104 57885 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 12:13:04.552748 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:13:36.561017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:19:40.565482 3.000447 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:19:47.571758 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:19:55.575999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:20:11.578564 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:20:43.582016 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:23:01.890835 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 12:23:01.890936 0.012278 udp 10.0.2.104 57886 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 12:23:01.903546 0.000000 udp 10.0.2.104 57887 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 12:26:47.589363 3.000391 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:26:54.595586 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:27:02.597051 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:27:18.599994 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:27:50.605962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:33:54.611848 3.001694 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:34:01.619297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:34:09.620969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:34:25.625175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:34:57.630219 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:38:01.885075 0.000090 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 12:38:01.885242 0.011604 udp 10.0.2.104 57888 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 12:38:01.897183 0.000000 udp 10.0.2.104 57889 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 12:41:01.636164 3.001659 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:41:08.643334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:41:16.644771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:41:32.648197 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:42:04.654216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:48:08.660009 3.001592 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:48:15.667632 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:48:23.669074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:48:39.672074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:49:11.678111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:53:01.889197 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 12:53:01.889330 0.010684 udp 10.0.2.104 57890 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 12:53:01.900358 0.000000 udp 10.0.2.104 57891 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 12:55:15.687054 2.998432 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:55:22.691456 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:55:30.692854 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:55:46.701917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:56:18.711818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:12:29.720726 3.001630 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:12:36.727692 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:12:44.729660 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:13:00.732568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:13:01.884150 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 13:13:01.884343 0.021571 udp 10.0.2.104 57892 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 13:13:01.906256 0.000000 udp 10.0.2.104 57893 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 13:13:32.740400 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:19:36.744584 3.002033 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:19:43.751930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:19:51.753611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:20:07.756461 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:20:39.762647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:23:01.887295 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 13:23:01.887400 0.011401 udp 10.0.2.104 57894 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 13:23:01.899179 0.000000 udp 10.0.2.104 57895 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 13:26:43.768765 3.001485 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:26:50.787728 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:26:58.787597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:27:14.790739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:27:46.796620 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:33:50.808575 2.995648 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:33:57.809850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:34:05.811340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:34:21.814459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:34:53.820760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:38:01.890842 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 13:38:01.890943 0.012719 udp 10.0.2.104 57896 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 13:38:01.904023 0.000000 udp 10.0.2.104 57897 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 13:40:57.825860 3.002395 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:41:04.837293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:41:12.835399 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:41:28.842763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:42:00.844375 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:48:04.851037 3.001226 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:48:11.858138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:48:19.859123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:48:35.862287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:49:07.868408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:53:01.884960 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 13:53:01.885140 0.010162 udp 10.0.2.104 57898 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 13:53:01.895616 0.000000 udp 10.0.2.104 57899 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 13:55:11.873943 3.002096 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:55:18.891981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:55:26.883185 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:55:42.886757 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:56:14.893780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:12:28.904958 3.002134 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:12:35.912772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:12:43.914355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:12:59.917344 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:13:01.890351 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 14:13:01.890490 0.026183 udp 10.0.2.104 57900 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 14:13:01.917002 0.000000 udp 10.0.2.104 57901 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 14:13:31.923256 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:19:35.939390 3.058996 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:19:42.978218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:19:50.957766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:20:06.960952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:20:38.967678 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:23:01.883051 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 14:23:01.883214 0.011634 udp 10.0.2.104 57902 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 14:23:01.895181 0.000000 udp 10.0.2.104 57903 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 14:26:42.976571 3.000022 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:26:49.980712 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:26:57.982536 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:27:13.985338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:27:45.991292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:33:50.001561 3.001240 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:33:57.004893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:34:05.008770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:34:21.009405 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:34:53.018422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:38:01.890176 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 14:38:01.890297 0.011507 udp 10.0.2.104 57904 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 14:38:01.902175 0.000000 udp 10.0.2.104 57905 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 14:40:57.021347 3.001048 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:41:04.028628 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:41:12.030041 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:41:28.032597 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:42:00.039208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:48:04.045357 3.001379 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:48:11.052082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:48:19.053988 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:48:35.057248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:49:07.063111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:53:01.890923 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 14:53:01.891026 0.010713 udp 10.0.2.104 57906 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 14:53:01.902008 0.000000 udp 10.0.2.104 57907 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 14:55:11.068713 3.002024 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:55:18.076741 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:55:26.077971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:55:42.081105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:56:14.087133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:12:29.103159 3.000230 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:12:36.108662 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:12:44.110328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:13:00.113305 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:13:01.886392 0.000083 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 15:13:01.886563 0.021437 udp 10.0.2.104 57908 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 15:13:01.908348 0.000000 udp 10.0.2.104 57909 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 15:13:32.125055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:19:36.125898 3.001504 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:19:43.132995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:19:51.134510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:20:07.137818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:20:39.143329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:23:01.889130 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 15:23:01.889228 0.014793 udp 10.0.2.104 57910 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 15:23:01.904350 0.000000 udp 10.0.2.104 57911 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 15:26:43.150961 3.000177 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:26:50.157378 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:26:58.158781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:27:14.161838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:27:46.167850 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:33:50.173251 3.002030 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:33:57.181444 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:34:05.182387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:34:21.185609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:34:53.191387 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:38:01.882619 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 15:38:01.882764 0.011498 udp 10.0.2.104 57912 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 15:38:01.895015 0.000000 udp 10.0.2.104 57913 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 15:40:57.197065 3.001929 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:41:04.236680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:41:12.216435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:41:28.219642 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:42:00.225686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:48:04.232145 3.001043 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:48:11.238926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:48:19.240522 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:48:35.243095 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:49:07.249315 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:53:01.888665 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 15:53:01.888899 0.009966 udp 10.0.2.104 57914 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 15:53:01.899166 0.000000 udp 10.0.2.104 57915 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 15:55:11.256561 3.000638 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:55:18.263142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:55:26.264434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:55:42.267223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:56:14.273629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:12:30.281194 3.000136 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:12:37.286819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:12:45.288158 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:13:01.291396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:13:01.882151 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 16:13:01.882286 0.011701 udp 10.0.2.104 57916 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 16:13:01.894259 0.000000 udp 10.0.2.104 57917 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 16:13:33.297215 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:19:37.303085 3.001588 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:19:44.310819 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:19:52.312426 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:20:08.315285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:20:40.321166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:23:01.885195 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 16:23:01.885380 0.011676 udp 10.0.2.104 57918 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 16:23:01.897375 0.000000 udp 10.0.2.104 57919 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 16:26:44.328267 3.000552 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:26:51.334797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:26:59.336350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:27:15.339292 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:27:47.345921 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:33:51.351222 3.002306 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:33:58.360221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:34:06.360485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:34:22.372969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:34:54.379162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:38:01.889054 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 16:38:01.889256 0.011569 udp 10.0.2.104 57920 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 16:38:01.901148 0.000000 udp 10.0.2.104 57921 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 16:40:58.386424 3.000403 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:41:05.392541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:41:13.581593 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:41:29.434890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:42:01.413274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:48:05.418721 3.002180 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:48:12.426743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:48:20.428102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:48:36.433993 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:49:08.437369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:53:01.882716 0.000122 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 16:53:01.882934 0.010894 udp 10.0.2.104 57922 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 16:53:01.894105 0.000000 udp 10.0.2.104 57923 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 16:55:12.443142 3.001664 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:55:19.450618 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:55:27.452626 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:55:43.455297 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:56:15.461600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:12:31.466715 3.102001 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:12:38.536919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:12:46.487825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:13:01.888412 0.000102 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 17:13:01.888609 0.012111 udp 10.0.2.104 57924 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 17:13:01.901067 0.000000 udp 10.0.2.104 57925 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 17:13:02.489185 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:13:34.495064 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:19:38.500731 3.001949 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:19:45.508998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:19:53.510361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:20:09.513132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:20:41.519054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:23:01.880899 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 17:23:01.881043 0.011669 udp 10.0.2.104 57926 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 17:23:01.893033 0.000000 udp 10.0.2.104 57927 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 17:26:45.524885 3.044183 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:26:52.548296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:27:00.544201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:27:16.546931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:27:48.559781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:33:52.559653 3.000906 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:33:59.569243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:34:07.567799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:34:23.570767 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:34:55.577138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:38:01.884848 0.000170 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 17:38:01.885129 0.011310 udp 10.0.2.104 57928 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 17:38:01.896804 0.000000 udp 10.0.2.104 57929 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 17:40:59.583976 3.000743 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:41:06.590554 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:41:14.592019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:41:30.595072 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:42:02.601021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:48:06.607718 3.000917 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:48:13.614551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:48:21.615998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:48:37.625552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:49:09.624844 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:53:01.889130 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 17:53:01.889314 0.010032 udp 10.0.2.104 57930 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 17:53:01.899886 0.000000 udp 10.0.2.104 57931 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 17:55:13.630665 3.001829 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:55:20.638250 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:55:28.640020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:55:44.643047 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:56:16.648939 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:12:32.654879 3.001651 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:12:39.666560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:12:47.666137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:13:01.885699 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 18:13:01.885811 0.083647 udp 10.0.2.104 57932 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 18:13:01.969812 0.000000 udp 10.0.2.104 57933 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 18:13:03.722136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:13:35.672691 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:19:39.680611 2.999751 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:19:46.686216 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:19:54.687902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:20:10.690911 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:20:42.698007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:23:01.887008 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 18:23:01.887176 0.011617 udp 10.0.2.104 57934 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 18:23:01.899160 0.000000 udp 10.0.2.104 57935 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 18:26:46.702827 3.001692 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:26:53.713279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:27:01.712763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:27:17.714972 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:27:49.724541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:33:53.726931 3.001631 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:34:00.761055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:34:08.745827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:34:24.748899 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:34:56.754579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:38:01.880709 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 18:38:01.880809 0.011373 udp 10.0.2.104 57936 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 18:38:01.892482 0.000000 udp 10.0.2.104 57937 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 18:41:00.762154 3.000382 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:41:07.771931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:41:15.769902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:41:31.774726 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:42:03.778645 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:48:08.785616 3.002377 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:48:15.793782 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:48:23.794888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:48:39.800255 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:49:11.803781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:53:01.885009 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 18:53:01.885097 0.011025 udp 10.0.2.104 57938 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 18:53:01.896472 0.000000 udp 10.0.2.104 57939 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 18:55:15.810257 3.003296 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:55:22.817459 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:55:30.819106 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:55:46.821938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:56:18.828508 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:12:28.834504 3.012465 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:12:35.852376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:12:43.853888 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:12:59.857123 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:13:01.880250 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 19:13:01.880436 0.021728 udp 10.0.2.104 57940 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 19:13:01.902519 0.000000 udp 10.0.2.104 57941 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 19:13:31.863807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:19:35.869094 3.001661 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:19:42.876676 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:19:50.878419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:20:06.881110 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:20:38.887230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:23:01.889208 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 19:23:01.889326 0.013753 udp 10.0.2.104 57942 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 19:23:01.903425 0.000000 udp 10.0.2.104 57943 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 19:26:42.893534 3.011719 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:26:49.910302 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:26:57.912276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:27:13.915104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:27:45.920587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:33:49.931988 3.090005 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:33:56.992613 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:34:04.946119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:34:20.949236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:34:52.957495 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:38:01.886843 0.000076 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 19:38:01.887001 0.021926 udp 10.0.2.104 57944 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 19:38:01.909319 0.000000 udp 10.0.2.104 57945 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 19:40:56.964712 2.998177 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:41:03.968325 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:41:11.970141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:41:27.972514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:41:59.980235 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:48:03.984447 3.002544 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:48:10.992558 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:48:18.993727 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:48:34.998092 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:49:07.003006 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:53:01.881017 0.000116 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 19:53:01.881230 0.013076 udp 10.0.2.104 57946 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 19:53:01.894565 0.000000 udp 10.0.2.104 57947 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 19:55:11.009091 3.001482 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:55:18.016704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:55:26.018153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:55:42.021157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:56:14.027026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:12:28.040553 3.005304 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:12:35.047573 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:12:43.048894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:12:59.061722 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:13:01.892725 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 20:13:01.892903 0.018731 udp 10.0.2.104 57948 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 20:13:01.911634 0.000000 udp 10.0.2.104 57949 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 20:13:31.072568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:19:35.074560 3.001390 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:19:42.081890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:19:50.082884 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:20:06.086073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:20:38.092199 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:23:01.879001 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 20:23:01.879144 0.021480 udp 10.0.2.104 57950 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 20:23:01.901001 0.000000 udp 10.0.2.104 57951 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 20:26:42.097973 3.037236 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:26:49.115513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:26:57.117251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:27:13.125988 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:27:45.125963 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:33:49.132137 3.012985 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:33:56.149799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:34:04.151005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:34:20.153401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:34:52.160391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:38:01.882508 0.000178 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 20:38:01.882792 0.012302 udp 10.0.2.104 57952 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 20:38:01.895387 0.000000 udp 10.0.2.104 57953 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 20:40:56.166423 3.001369 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:41:03.173458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:41:11.175245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:41:27.177380 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:41:59.183827 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:48:03.190943 3.000633 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:48:10.197479 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:48:18.199001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:48:34.202062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:49:06.208112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:53:01.887028 0.000107 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 20:53:01.887224 0.010828 udp 10.0.2.104 57954 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 20:53:01.898415 0.000000 udp 10.0.2.104 57955 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 20:55:10.214431 3.001557 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:55:17.221795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:55:25.222680 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:55:41.226138 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:56:13.232192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:12:28.247587 3.000516 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:12:35.253796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:12:43.259153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:12:59.258538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:13:01.882301 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 21:13:01.882449 0.022602 udp 10.0.2.104 57956 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 21:13:01.905399 0.000000 udp 10.0.2.104 57957 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 21:13:31.264585 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:19:35.271307 3.001224 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:19:42.278054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:19:50.279152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:20:06.282298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:20:38.288301 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:23:01.885267 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 21:23:01.885414 0.011300 udp 10.0.2.104 57958 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 21:23:01.897067 0.000000 udp 10.0.2.104 57959 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 21:26:42.297234 2.998880 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:26:49.301828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:26:57.303323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:27:13.306304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:27:45.492805 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:33:49.334490 2.998669 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:33:56.335998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:34:04.337291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:34:20.341014 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:34:52.347320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:38:01.878856 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 21:38:01.878945 0.022552 udp 10.0.2.104 57960 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 21:38:01.901831 0.000000 udp 10.0.2.104 57961 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 21:40:56.352336 3.002063 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:41:03.359630 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:41:11.361178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:41:27.365052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:41:59.370321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:48:03.376516 3.001491 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:48:10.384126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:48:18.385057 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:48:34.390049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:49:06.394306 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:53:01.883897 0.000049 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 21:53:01.883994 0.010209 udp 10.0.2.104 57962 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 21:53:01.894566 0.000000 udp 10.0.2.104 57963 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 21:55:10.400363 3.001904 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:55:17.408046 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:55:25.409288 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:55:41.412532 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:56:13.418423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:12:29.423649 3.014273 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:12:36.459783 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:12:44.453467 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:13:00.457283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:13:01.878249 0.000041 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 22:13:01.878341 0.022488 udp 10.0.2.104 57964 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 22:13:01.901195 0.000000 udp 10.0.2.104 57965 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 22:13:32.461841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:19:36.468645 3.001364 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:19:43.475580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:19:51.476845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:20:07.480062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:20:39.486429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:23:01.881047 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 22:23:01.881217 0.011303 udp 10.0.2.104 57966 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 22:23:01.892851 0.000000 udp 10.0.2.104 57967 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 22:26:43.492335 3.005262 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:26:50.499922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:26:58.500922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:27:14.504108 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:27:46.510361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:33:50.515937 3.081580 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:33:57.569261 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:34:05.535107 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:34:21.538274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:34:53.544152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:38:01.884854 0.000046 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 22:38:01.884953 0.021577 udp 10.0.2.104 57968 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 22:38:01.906859 0.000000 udp 10.0.2.104 57969 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 22:40:57.551007 3.000595 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:41:04.557283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:41:12.562955 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:41:28.562036 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:42:00.568043 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:48:04.574723 3.001048 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:48:11.581263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:48:19.583239 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:48:35.586111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:49:07.592839 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:53:01.878910 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 22:53:01.879065 0.010281 udp 10.0.2.104 57970 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 22:53:01.889675 0.000000 udp 10.0.2.104 57971 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 22:55:11.598244 3.001372 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:55:18.606226 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:55:26.606934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:55:42.610102 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:56:14.616321 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:12:30.622491 3.025535 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:12:37.639350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:12:45.640598 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:13:01.643499 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:13:01.884249 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 23:13:01.884332 0.021716 udp 10.0.2.104 57972 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 23:13:01.906519 0.000000 udp 10.0.2.104 57973 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 23:13:33.650280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:19:37.705896 3.002028 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:19:44.713389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:19:52.725121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:20:08.727971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:20:40.733923 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:23:01.936742 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 23:23:01.936891 0.011623 udp 10.0.2.104 57974 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 23:23:01.948806 0.000000 udp 10.0.2.104 57975 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 23:26:44.740976 3.000633 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:26:51.747413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:26:59.748690 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:27:15.752001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:27:47.758282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:33:51.764605 3.003595 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:33:58.771752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:34:06.772910 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:34:22.776007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:34:54.782217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:38:01.930819 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 23:38:01.930978 0.022032 udp 10.0.2.104 57976 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 23:38:01.953365 0.000000 udp 10.0.2.104 57977 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 23:40:58.788024 3.001730 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:41:05.795088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:41:13.796658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:41:29.799807 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:42:01.805500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:48:05.812598 3.000851 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:48:12.819394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:48:20.820740 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:48:36.823482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:49:08.829655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:53:01.935304 0.000082 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 23:53:01.935616 0.010173 udp 10.0.2.104 57978 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/18 23:53:01.946075 0.000000 udp 10.0.2.104 57979 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/18 23:55:12.836237 3.001180 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:55:19.843721 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:55:27.844537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:55:43.847906 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:56:15.853780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:12:32.861675 3.086376 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:12:39.920500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:12:47.880053 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:13:01.930228 0.000085 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 00:13:01.930393 0.012584 udp 10.0.2.104 57980 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 00:13:01.943290 0.000000 udp 10.0.2.104 57981 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 00:13:03.883088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:13:35.889020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:19:39.895680 3.001615 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:19:46.906091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:19:54.906686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:20:10.907054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:20:42.913166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:23:01.932343 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 00:23:01.932481 0.011927 udp 10.0.2.104 57982 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 00:23:01.944755 0.000000 udp 10.0.2.104 57983 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 00:26:46.919076 3.001625 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:26:53.926316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:27:01.927482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:27:17.930879 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:27:49.937147 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:33:53.942549 3.021660 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:34:00.960205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:34:08.962131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:34:24.966319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:34:56.970825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:38:01.927178 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 00:38:01.927281 0.022245 udp 10.0.2.104 57984 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 00:38:01.949911 0.000000 udp 10.0.2.104 57985 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 00:41:00.976813 3.001836 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:41:07.984544 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:41:15.986005 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:41:31.989166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:42:03.995324 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:48:08.001252 3.001325 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:48:15.008354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:48:23.010329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:48:39.465089 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:49:11.077716 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:53:01.931171 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 00:53:01.931271 0.010300 udp 10.0.2.104 57986 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 00:53:01.941911 0.000000 udp 10.0.2.104 57987 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 00:55:15.035723 3.000962 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:55:22.042042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:55:30.044114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:55:46.046952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:56:18.052549 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:12:34.058718 3.001438 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:12:41.067914 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:12:49.067893 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:13:01.926347 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 01:13:01.926494 0.011877 udp 10.0.2.104 57988 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 01:13:01.938676 0.000000 udp 10.0.2.104 57989 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 01:13:05.071042 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:13:37.076996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:19:41.082890 3.001460 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:19:48.090381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:19:56.091853 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:20:12.094662 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:20:44.100861 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:23:01.928909 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 01:23:01.929012 0.011357 udp 10.0.2.104 57990 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 01:23:01.940696 0.000000 udp 10.0.2.104 57991 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 01:26:48.107748 3.000836 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:26:55.114111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:27:03.115747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:27:19.118753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:27:51.124629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:33:55.129821 3.002661 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:34:02.138427 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:34:10.139869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:34:26.142193 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:34:58.148460 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:38:01.932825 0.000129 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 01:38:01.933080 0.012138 udp 10.0.2.104 57992 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 01:38:01.945573 0.000000 udp 10.0.2.104 57993 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 01:41:02.154799 3.001671 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:41:09.162659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:41:17.166862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:41:33.169968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:42:05.172769 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:48:09.178922 3.001076 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:48:16.186090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:48:24.187847 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:48:40.190658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:49:12.196523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:53:01.927050 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 01:53:01.927199 0.010822 udp 10.0.2.104 57994 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 01:53:01.938361 0.000000 udp 10.0.2.104 57995 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 01:55:16.202684 3.001584 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:55:23.210211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:55:31.212040 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:55:47.214501 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:56:19.220818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:12:30.229905 3.011319 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:12:37.246852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:12:45.248331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:13:01.251347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:13:01.932441 0.000099 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 02:13:01.932643 0.011220 udp 10.0.2.104 57996 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 02:13:01.944252 0.000000 udp 10.0.2.104 57997 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 02:13:33.257560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:19:37.264531 3.000295 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:19:44.270732 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:19:52.273987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:20:08.275516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:20:40.281470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:23:01.934906 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 02:23:01.935099 0.012717 udp 10.0.2.104 57998 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 02:23:01.948120 0.000000 udp 10.0.2.104 57999 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 02:26:44.287798 3.001274 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:26:51.323328 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:26:59.306342 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:27:15.309221 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:27:47.316141 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:33:51.320936 3.002090 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:33:58.328553 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:34:06.332347 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:34:22.333195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:34:54.339252 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:38:01.932840 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 02:38:01.932985 0.012009 udp 10.0.2.104 58000 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 02:38:01.945399 0.000000 udp 10.0.2.104 58001 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 02:40:58.345170 3.001649 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:41:05.352688 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:41:13.354310 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:41:29.357229 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:42:01.363028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:48:05.369344 3.001329 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:48:12.378687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:48:20.378162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:48:36.382925 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:49:08.387217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:53:01.932889 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 02:53:01.933063 0.010145 udp 10.0.2.104 58002 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 02:53:01.943511 0.000000 udp 10.0.2.104 58003 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 02:55:12.393238 3.002089 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:55:19.400961 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:55:27.402468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:55:43.405539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:56:15.411132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:12:29.424570 3.001439 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:12:36.431517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:12:44.432977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:13:00.436178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:13:01.928353 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 03:13:01.928518 0.014522 udp 10.0.2.104 58004 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 03:13:01.943377 0.000000 udp 10.0.2.104 58005 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 03:13:32.442207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:19:36.448734 3.053695 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:19:43.481274 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:19:51.472269 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:20:07.470011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:20:39.483811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:23:01.931033 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 03:23:01.931189 0.017357 udp 10.0.2.104 58006 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 03:23:01.948902 0.000000 udp 10.0.2.104 58007 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 03:26:43.482187 3.002026 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:26:50.492786 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:26:58.491097 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:27:14.494175 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:27:46.500533 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:33:50.507224 3.001010 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:33:57.513518 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:34:05.514761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:34:21.518015 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:34:53.524060 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:38:01.925133 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 03:38:01.925284 0.022118 udp 10.0.2.104 58008 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 03:38:01.947926 0.000000 udp 10.0.2.104 58009 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 03:40:57.529560 3.003423 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:41:04.537285 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:41:12.539100 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:41:28.541936 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:42:00.548048 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:48:04.557775 2.998167 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:48:11.561423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:48:19.562949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:48:35.565996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:49:07.571998 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:53:01.928893 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 03:53:01.929035 0.010857 udp 10.0.2.104 58010 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 03:53:01.940221 0.000000 udp 10.0.2.104 58011 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 03:55:11.577659 3.001962 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:55:18.585578 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:55:26.586922 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:55:42.590112 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:56:14.598433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:12:29.610051 3.002330 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:12:36.620538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:12:44.619413 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:13:00.624125 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:13:01.934465 0.000089 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 04:13:01.934652 0.013146 udp 10.0.2.104 58012 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 04:13:01.948131 0.000000 udp 10.0.2.104 58013 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 04:13:32.628408 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:19:36.635173 3.002724 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:19:43.682090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:19:51.657547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:20:07.657258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:20:39.662420 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:23:01.926950 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 04:23:01.927027 0.011243 udp 10.0.2.104 58014 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 04:23:01.938541 0.000000 udp 10.0.2.104 58015 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 04:26:43.668755 3.001470 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:26:50.676066 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:26:58.677286 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:27:14.680287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:27:46.692709 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:33:50.695002 2.998930 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:33:57.699808 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:34:05.701028 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:34:21.704105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:34:53.710388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:38:01.930793 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 04:38:01.930873 0.021608 udp 10.0.2.104 58016 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 04:38:01.952810 0.000000 udp 10.0.2.104 58017 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 04:40:57.716620 3.001626 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:41:04.723981 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:41:12.725152 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:41:28.734880 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:42:00.734096 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:48:04.740181 3.002212 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:48:11.747889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:48:19.749204 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:48:35.752785 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:49:07.758492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:53:01.925188 0.000048 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 04:53:01.925298 0.010125 udp 10.0.2.104 58018 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 04:53:01.935897 0.000000 udp 10.0.2.104 58019 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 04:55:11.765072 3.001076 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:55:18.772201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:55:26.774280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:55:42.776205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:56:14.782565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:12:30.788214 3.001838 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:12:37.795927 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:12:45.797130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:13:01.799760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:13:01.929880 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 05:13:01.929973 0.011868 udp 10.0.2.104 58020 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 05:13:01.942183 0.000000 udp 10.0.2.104 58021 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 05:13:33.806435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:19:37.811262 3.118595 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:19:44.907263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:19:52.850412 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:20:08.853958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:20:40.859987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:23:01.933000 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 05:23:01.933146 0.013715 udp 10.0.2.104 58022 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 05:23:01.947150 0.000000 udp 10.0.2.104 58023 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 05:26:44.866372 3.001636 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:26:51.873169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:26:59.875202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:27:15.879811 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:27:47.884222 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:33:51.889746 3.002290 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:33:58.897312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:34:06.900863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:34:22.901516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:34:54.918143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:38:01.928490 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 05:38:01.928614 0.012590 udp 10.0.2.104 58024 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 05:38:01.941560 0.000000 udp 10.0.2.104 58025 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 05:40:58.924282 3.001467 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:41:05.936090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:41:13.932990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:41:29.935932 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:42:01.941340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:48:05.947319 3.002608 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:48:12.955341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:48:20.957157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:48:36.960120 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:49:08.966137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:53:01.930346 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 05:53:01.930477 0.010982 udp 10.0.2.104 58026 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 05:53:01.941744 0.000000 udp 10.0.2.104 58027 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 05:55:12.971952 3.001714 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:55:19.979869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:55:27.980802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:55:43.983738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:56:15.989896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:12:31.996114 3.001474 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:12:39.005150 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:12:47.004828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:13:01.926352 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:13:01.926512 0.022569 udp 10.0.2.104 58028 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 06:13:01.949432 0.000000 udp 10.0.2.104 58029 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 06:13:03.007111 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:13:35.013263 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:19:39.020442 3.001064 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:19:46.027291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:19:54.028718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:20:10.031983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:20:42.037865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:23:01.929024 0.000087 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:23:01.929198 0.022740 udp 10.0.2.104 58030 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 06:23:01.952302 0.000000 udp 10.0.2.104 58031 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 06:26:46.042889 3.002672 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:26:53.051265 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:27:01.054149 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:27:17.055945 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:27:49.061883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:33:53.067953 3.002948 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:34:00.080073 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:34:08.085658 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:34:24.081556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:34:56.085565 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:38:01.933037 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:38:01.933280 0.000000 udp 10.0.2.104 58032 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 06:39:01.929241 0.011284 udp 10.0.2.104 58033 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 06:39:01.940913 0.000000 udp 10.0.2.104 58034 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 06:39:06.876177 0.000132 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:41:00.092052 3.001089 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/19 06:41:07.099960 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:41:15.100685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:41:31.104018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:42:03.109962 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:48:07.120794 2.996628 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:48:14.123183 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:48:22.124045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:48:38.127952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:49:10.133201 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:54:01.922715 0.000045 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:54:01.922862 0.011935 udp 10.0.2.104 58035 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 06:54:01.935108 0.000000 udp 10.0.2.104 58036 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 06:55:14.141017 3.000399 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:55:21.147290 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:55:29.148575 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:55:45.150984 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:56:17.157667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:12:33.164242 3.000955 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:12:40.170796 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:12:48.172425 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:13:04.175319 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:13:36.181394 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:14:01.927949 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 07:14:01.928162 0.011351 udp 10.0.2.104 58037 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 07:14:01.939855 0.000000 udp 10.0.2.104 58038 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 07:19:40.187418 3.001681 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:19:47.194799 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:19:55.196388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:20:11.198966 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:20:43.205623 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:25:01.927418 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 07:25:01.927621 0.011357 udp 10.0.2.104 58039 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 07:25:01.939336 0.000000 udp 10.0.2.104 58040 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 07:26:47.211325 3.001786 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:26:54.219181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:27:02.220581 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:27:18.223291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:27:50.229251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:33:54.236866 3.013222 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:34:01.253054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:34:09.254386 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:34:25.257897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:34:57.264897 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:40:01.931650 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 07:40:01.931761 0.011972 udp 10.0.2.104 58041 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 07:40:01.944053 0.000000 udp 10.0.2.104 58042 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 07:41:01.269832 3.001174 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:41:08.277270 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:41:16.418647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:41:32.292458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:42:04.297180 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:48:08.304051 3.001203 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:48:15.310614 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:48:23.312649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:48:39.315396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:49:11.321341 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:55:01.924925 0.000068 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 07:55:01.925110 0.010851 udp 10.0.2.104 58043 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 07:55:01.936278 0.000000 udp 10.0.2.104 58044 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 07:55:15.327955 3.000986 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:55:22.334890 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:55:30.336309 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:55:46.339225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:56:18.345527 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:12:29.354772 3.000949 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:12:36.361755 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:12:44.362841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:13:00.366271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:13:32.372094 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:14:01.924828 0.000060 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 08:14:01.924967 0.023835 udp 10.0.2.104 58045 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 08:14:01.949158 0.000000 udp 10.0.2.104 58046 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 08:19:36.378051 3.001418 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:19:43.389186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:19:51.386917 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:20:07.389918 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:20:39.396523 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:25:01.923332 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 08:25:01.923615 0.011356 udp 10.0.2.104 58047 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 08:25:01.935307 0.000000 udp 10.0.2.104 58048 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 08:26:43.404613 3.000487 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:26:50.409177 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:26:58.410942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:27:14.414034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:27:46.420369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:33:50.425731 3.008125 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:33:57.433362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:34:05.435186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:34:21.438052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:34:53.444294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:40:01.927142 0.000124 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 08:40:01.927380 0.011642 udp 10.0.2.104 58049 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 08:40:01.939352 0.000000 udp 10.0.2.104 58050 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 08:40:57.449697 3.001838 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:41:04.457329 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:41:12.459813 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:41:28.462192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:42:00.467771 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:48:04.473502 3.002570 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:48:11.481510 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:48:19.483083 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:48:35.486189 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:49:07.492059 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:55:01.930872 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 08:55:01.931003 0.011776 udp 10.0.2.104 58051 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 08:55:01.943085 0.000000 udp 10.0.2.104 58052 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 08:55:11.498092 3.001659 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:55:18.505530 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:55:26.506990 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:55:42.509995 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:56:14.518304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:12:28.529972 3.000561 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:12:35.536751 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:12:43.538433 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:12:59.540845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:13:31.546760 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:14:01.930555 0.000043 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 09:14:01.930648 0.015167 udp 10.0.2.104 58053 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 09:14:01.946168 0.000000 udp 10.0.2.104 58054 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 09:19:35.552731 3.001990 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:19:42.560322 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:19:50.564595 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:20:06.564743 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:20:38.572629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:25:01.929848 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 09:25:01.930083 0.015449 udp 10.0.2.104 58055 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 09:25:01.945856 0.000000 udp 10.0.2.104 58056 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 09:26:42.578047 3.002288 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:26:49.584624 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:26:57.585825 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:27:13.588859 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:27:45.595142 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:33:49.603155 3.001381 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:33:56.608488 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:34:04.609870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:34:20.612810 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:34:52.618516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:40:01.923338 0.000120 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 09:40:01.923707 0.010153 udp 10.0.2.104 58057 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 09:40:01.934181 0.000000 udp 10.0.2.104 58058 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 09:40:56.625046 3.001280 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:41:03.635323 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:41:11.634013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:41:27.636428 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:41:59.642653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:48:03.649757 3.000868 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:48:10.656212 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:48:18.657370 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:48:34.660921 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:49:06.666603 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:55:01.927458 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 09:55:01.927653 0.010270 udp 10.0.2.104 58059 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 09:55:01.938244 0.000000 udp 10.0.2.104 58060 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 09:55:10.674166 3.000178 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:55:17.683833 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:55:25.686440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:55:41.684569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:56:13.690968 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:12:28.705265 3.001367 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:12:35.716369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:12:43.713980 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:12:59.721695 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:13:31.723206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:14:01.926168 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 10:14:01.926307 0.014075 udp 10.0.2.104 58061 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 10:14:01.940765 0.000000 udp 10.0.2.104 58062 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 10:19:35.730856 3.005479 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:19:42.736763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:19:50.738599 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:20:06.740903 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:20:38.747246 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:25:01.925493 0.000110 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 10:25:01.925709 0.016884 udp 10.0.2.104 58063 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 10:25:01.942933 0.000000 udp 10.0.2.104 58064 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 10:26:42.758105 2.996650 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:26:49.760277 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:26:57.764182 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:27:13.766190 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:27:45.771207 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:33:49.777791 3.005583 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:33:56.788054 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:34:04.786720 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:34:20.788871 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:34:52.794999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:40:01.929183 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 10:40:01.929350 0.011915 udp 10.0.2.104 58065 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 10:40:01.941570 0.000000 udp 10.0.2.104 58066 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 10:40:56.801739 3.000340 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:41:03.808340 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:41:11.810133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:41:27.812794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:41:59.818845 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:48:03.825767 3.000823 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:48:10.832130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:48:18.833677 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:48:34.837001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:49:06.842865 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:55:01.922867 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 10:55:01.923028 0.010890 udp 10.0.2.104 58067 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 10:55:01.934247 0.000000 udp 10.0.2.104 58068 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 10:55:10.849230 3.001267 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:55:17.856458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:55:25.857816 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:55:41.860919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:56:13.866926 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:12:29.872840 3.003040 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:12:36.880165 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:12:44.882797 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:13:00.884616 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:13:32.890739 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:14:01.922543 0.000131 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 11:14:01.922774 0.012213 udp 10.0.2.104 58069 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 11:14:01.935322 0.000000 udp 10.0.2.104 58070 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 11:19:36.896899 3.001401 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:19:43.904276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:19:51.905602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:20:07.908756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:20:39.914933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:25:01.921638 0.000096 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 11:25:01.921808 0.012271 udp 10.0.2.104 58071 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 11:25:01.934432 0.000000 udp 10.0.2.104 58072 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 11:26:43.925660 2.996752 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:26:50.932862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:26:58.930977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:27:14.932882 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:27:46.948703 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:33:50.957283 2.999968 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:33:57.962268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:34:05.966801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:34:21.967794 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:34:53.972013 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:40:01.926139 0.000070 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 11:40:01.926298 0.011226 udp 10.0.2.104 58073 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 11:40:01.937868 0.000000 udp 10.0.2.104 58074 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 11:40:57.979893 3.000399 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:41:04.986191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:41:12.987795 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:41:28.990187 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:42:00.996717 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:48:05.002425 3.001408 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:48:12.010090 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:48:20.011178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:48:36.014318 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:49:08.020560 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:55:01.929420 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 11:55:01.929560 0.010407 udp 10.0.2.104 58075 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 11:55:01.940304 0.000000 udp 10.0.2.104 58076 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 11:55:12.027104 3.001059 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:55:19.034143 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:55:27.035868 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:55:43.038338 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:56:15.044779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:12:31.060588 3.001014 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:12:38.067881 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:12:46.069511 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:13:02.071774 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:13:34.078423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:14:01.928464 0.000062 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 12:14:01.928615 0.014326 udp 10.0.2.104 58077 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 12:14:01.943265 0.000000 udp 10.0.2.104 58078 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 12:19:38.085640 3.220631 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:19:45.273557 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:19:53.194689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:20:09.106202 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:20:41.112582 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:25:01.927483 0.000044 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 12:25:01.927582 0.021503 udp 10.0.2.104 58079 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 12:25:01.949422 0.000000 udp 10.0.2.104 58080 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 12:26:45.119344 3.003542 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:26:52.126654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:27:00.131991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:27:16.132468 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:27:48.146528 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:33:52.152063 3.005923 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:33:59.166388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:34:07.171245 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:34:23.174166 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:34:55.180373 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:40:01.921338 0.000113 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 12:40:01.921542 0.011739 udp 10.0.2.104 58081 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 12:40:01.933615 0.000000 udp 10.0.2.104 58082 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 12:40:59.187267 3.002141 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:41:06.193241 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:41:14.199752 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:41:30.198271 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:42:02.204167 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:48:06.209951 3.001506 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:48:13.217971 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:48:21.219442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:48:37.222334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:49:09.228209 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:55:01.925331 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 12:55:01.925463 0.012609 udp 10.0.2.104 58083 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 12:55:01.938404 0.000000 udp 10.0.2.104 58084 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 12:55:13.234333 3.002189 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:55:20.241389 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:55:28.242946 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:55:44.246312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:56:16.252293 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:12:32.259398 3.000896 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:12:39.265930 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:12:47.267065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:13:03.269959 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:13:35.276838 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:14:01.924506 0.000119 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 13:14:01.924720 0.014775 udp 10.0.2.104 58085 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 13:14:01.939797 0.000000 udp 10.0.2.104 58086 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 13:19:39.282015 3.001906 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:19:46.289500 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:19:54.294335 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:20:10.296695 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:20:42.299729 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:25:01.923759 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 13:25:01.923904 0.011373 udp 10.0.2.104 58087 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 13:25:01.935750 0.000000 udp 10.0.2.104 58088 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 13:26:46.305955 3.001647 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:26:53.313304 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:27:01.315020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:27:17.318761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:27:49.324485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:33:53.330467 3.001327 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:34:00.337824 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:34:08.338978 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:34:24.341876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:34:56.347849 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:40:01.927717 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 13:40:01.927873 0.010237 udp 10.0.2.104 58089 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 13:40:01.938423 0.000000 udp 10.0.2.104 58090 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 13:41:00.353544 3.002683 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:41:07.361027 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:41:15.363058 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:41:31.366056 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:42:03.372109 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:48:07.378155 3.001774 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:48:14.385654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:48:22.399351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:48:38.390071 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:49:10.398391 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:55:01.921960 0.000080 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 13:55:01.922119 0.012501 udp 10.0.2.104 58091 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 13:55:01.934982 0.000000 udp 10.0.2.104 58092 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 13:55:14.402188 3.001732 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:55:21.409419 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:55:29.410803 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:55:45.413735 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:56:17.420080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:12:28.429446 3.001041 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:12:35.436314 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:12:43.437919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:12:59.440647 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:13:31.446648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:14:01.920524 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 14:14:01.920685 0.016622 udp 10.0.2.104 58093 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 14:14:01.937668 0.000000 udp 10.0.2.104 58094 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 14:19:35.452726 3.001310 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:19:42.460208 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:19:50.461458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:20:06.464708 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:20:38.471870 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:25:01.919619 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 14:25:01.919770 0.011481 udp 10.0.2.104 58095 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 14:25:01.931626 0.000000 udp 10.0.2.104 58096 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 14:26:42.476946 3.001170 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:26:49.483821 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:26:57.485424 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:27:13.488657 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:27:45.497004 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:33:49.501305 3.003504 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:33:56.507861 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:34:04.509933 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:34:20.512642 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:34:52.518934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:40:01.923378 0.000226 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 14:40:01.923686 0.010116 udp 10.0.2.104 58097 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 14:40:01.934104 0.000000 udp 10.0.2.104 58098 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 14:40:56.523712 3.002377 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:41:03.532049 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:41:11.533506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:41:27.536354 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:41:59.542434 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:48:03.549329 3.000808 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:48:10.555718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:48:18.557356 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:48:34.560509 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:49:06.566423 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:55:01.927429 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 14:55:01.927607 0.010707 udp 10.0.2.104 58099 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 14:55:01.938637 0.000000 udp 10.0.2.104 58100 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 14:55:10.572979 3.001425 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:55:17.579902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:55:25.581268 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:55:41.584579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:56:14.077941 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:12:27.613742 3.011415 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:12:34.631037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:12:42.632580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:12:58.635355 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:13:30.641622 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:14:01.929512 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 15:14:01.929668 0.023785 udp 10.0.2.104 58101 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 15:14:01.953835 0.000000 udp 10.0.2.104 58102 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 15:19:34.651554 2.997746 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:19:41.655251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:19:49.656491 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:20:05.659366 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:20:37.665587 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:25:01.925563 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 15:25:01.925733 0.015210 udp 10.0.2.104 58103 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 15:25:01.941288 0.000000 udp 10.0.2.104 58104 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 15:26:41.671463 3.032526 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:26:48.688976 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:26:56.690307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:27:12.693539 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:27:44.699484 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:33:48.705648 3.001363 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:33:55.712829 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:34:03.714574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:34:19.717505 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:34:51.723401 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:40:01.918886 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 15:40:01.918990 0.010785 udp 10.0.2.104 58105 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 15:40:01.930052 0.000000 udp 10.0.2.104 58106 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 15:40:55.729146 3.001692 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:41:02.736840 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:41:10.738251 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:41:26.741253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:41:58.747287 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:48:02.753540 3.001272 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:48:09.760763 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:48:17.762537 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:48:33.823446 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:49:05.783828 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:55:01.923590 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 15:55:01.923694 0.010106 udp 10.0.2.104 58107 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 15:55:01.934120 0.000000 udp 10.0.2.104 58108 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 15:55:09.787446 3.001550 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:55:16.794855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:55:24.796294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:55:40.799516 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:56:12.805039 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:12:28.830721 3.001924 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:12:35.838438 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:12:43.840258 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:12:59.843017 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:13:31.849211 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:14:01.922740 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 16:14:01.922868 0.011730 udp 10.0.2.104 58109 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 16:14:01.949334 0.000000 udp 10.0.2.104 58110 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 16:19:35.854365 3.025901 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:19:42.885273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:19:50.884122 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:20:06.887351 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:20:38.892568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:25:01.921441 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 16:25:01.921584 0.012608 udp 10.0.2.104 58111 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 16:25:01.934520 0.000000 udp 10.0.2.104 58112 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 16:26:42.899072 3.004786 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:26:49.906788 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:26:57.908186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:27:13.912507 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:27:45.917024 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:33:49.922948 3.002421 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:33:56.930863 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:34:04.932020 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:34:20.935551 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:34:52.941334 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:40:01.925347 0.000051 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 16:40:01.925436 0.010369 udp 10.0.2.104 58113 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 16:40:01.936158 0.000000 udp 10.0.2.104 58114 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 16:40:56.947043 3.001681 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:41:03.954312 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:41:11.956037 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:41:27.961908 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:41:59.965065 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:48:03.970271 3.002577 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:48:10.978392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:48:18.979429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:48:34.983019 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:49:06.989218 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:55:01.919398 0.000050 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 16:55:01.919501 0.010802 udp 10.0.2.104 58115 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 16:55:01.930649 0.000000 udp 10.0.2.104 58116 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 16:55:10.995281 3.001550 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:55:18.001987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:55:26.003898 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:55:42.007021 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:56:14.012967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:12:30.019152 3.000972 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:12:37.026440 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:12:45.027938 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:13:01.030919 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:13:33.036942 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:14:01.918392 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 17:14:01.918557 0.011422 udp 10.0.2.104 58117 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 17:14:01.930336 0.000000 udp 10.0.2.104 58118 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 17:19:37.043062 3.001579 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:19:44.050514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:19:52.052276 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:20:08.054822 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:20:40.061007 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:25:01.918436 0.000093 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 17:25:01.918616 0.024863 udp 10.0.2.104 58119 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 17:25:01.962385 0.000000 udp 10.0.2.104 58120 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 17:26:44.066045 3.002664 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:26:51.074458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:26:59.075790 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:27:15.078667 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:27:47.085296 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:33:51.100491 3.020773 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:33:58.112236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:34:06.109818 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:34:22.112841 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:34:54.118615 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:40:01.921491 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 17:40:01.921637 0.011398 udp 10.0.2.104 58121 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 17:40:01.933335 0.000000 udp 10.0.2.104 58122 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 17:40:58.124816 3.001643 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:41:05.134080 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:41:13.134289 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:41:29.136883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:42:01.143062 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:48:05.148715 3.080046 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:48:12.197862 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:48:20.167779 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:48:36.172074 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:49:08.176967 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:55:01.925609 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 17:55:01.925724 0.010516 udp 10.0.2.104 58123 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 17:55:01.936559 0.000000 udp 10.0.2.104 58124 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 17:55:12.184133 3.000371 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:55:19.190506 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:55:27.193181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:55:43.194416 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:56:15.200629 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:12:31.217214 3.000949 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:12:38.224010 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:12:46.225950 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:13:02.228590 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:13:34.236977 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:14:01.924596 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 18:14:01.924773 0.015075 udp 10.0.2.104 58125 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 18:14:01.940198 0.000000 udp 10.0.2.104 58126 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 18:19:38.241243 3.000739 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:19:45.248442 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:19:53.249454 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:20:09.252761 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:20:41.258686 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:25:01.923650 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 18:25:01.923817 0.022619 udp 10.0.2.104 58127 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 18:25:01.946761 0.000000 udp 10.0.2.104 58128 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 18:26:45.265066 3.001095 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:26:52.272136 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:27:00.273524 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:27:16.276568 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:27:48.282600 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:33:52.288710 3.025481 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:33:59.306278 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:34:07.307802 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:34:23.312543 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:34:55.316637 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:40:01.917717 0.000147 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 18:40:01.917971 0.010738 udp 10.0.2.104 58129 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 18:40:01.929069 0.000000 udp 10.0.2.104 58130 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 18:40:59.322473 3.001575 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:41:06.330350 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:41:14.334038 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:41:30.334496 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:42:02.342851 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:48:06.349174 2.998997 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:48:13.354085 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:48:21.355480 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:48:37.358402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:49:09.364541 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:55:01.922059 0.000125 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 18:55:01.922269 0.010840 udp 10.0.2.104 58131 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 18:55:01.933473 0.000000 udp 10.0.2.104 58132 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 18:55:13.371782 3.000531 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:55:20.377538 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:55:28.379458 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:55:44.382429 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:56:16.388673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:12:32.396985 2.999217 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:12:39.407986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:12:47.403780 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:13:03.406493 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:13:35.416135 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:14:01.920726 0.000077 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 19:14:01.920888 0.028950 udp 10.0.2.104 58133 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 19:14:01.950194 0.000000 udp 10.0.2.104 58134 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 19:19:39.418328 3.001771 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:19:46.426055 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:19:54.427105 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:20:10.430673 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:20:42.436381 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:25:01.919528 0.000071 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 19:25:01.919674 0.021967 udp 10.0.2.104 58135 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 19:25:01.942033 0.000000 udp 10.0.2.104 58136 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 19:26:46.442891 3.001257 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:26:53.449773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:27:01.451487 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:27:17.454388 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:27:49.460402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:33:53.466438 3.001935 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:34:00.480131 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:34:08.475607 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:34:24.478697 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:34:56.484485 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:40:01.923218 0.000101 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 19:40:01.923596 0.010217 udp 10.0.2.104 58137 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 19:40:01.934165 0.000000 udp 10.0.2.104 58138 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 19:41:00.491001 3.003019 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:41:07.497369 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:41:15.499196 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:41:31.502044 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:42:03.508300 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:48:07.514503 3.001564 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:48:14.521784 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:48:22.523034 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:48:38.526186 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:49:10.532443 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:55:01.917384 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 19:55:01.917576 0.010179 udp 10.0.2.104 58139 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 19:55:01.928056 0.000000 udp 10.0.2.104 58140 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 19:55:14.538085 3.001581 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:55:21.545455 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:55:29.547011 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:55:45.549989 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:56:17.556227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:12:33.562261 3.002780 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:12:40.576203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:12:48.571029 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:13:04.574397 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:13:36.580191 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:14:01.916197 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 20:14:01.916299 0.011463 udp 10.0.2.104 58141 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 20:14:01.928092 0.000000 udp 10.0.2.104 58142 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 20:19:40.587337 3.000616 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:19:47.596367 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:19:55.598233 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:20:11.597996 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:20:43.604333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:25:01.925739 0.000088 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 20:25:01.925908 0.014829 udp 10.0.2.104 58143 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 20:25:01.941086 0.000000 udp 10.0.2.104 58144 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 20:26:47.610490 3.001576 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:26:54.617478 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:27:02.618969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:27:18.621992 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:27:50.628081 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:33:54.634040 3.002522 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:34:01.654052 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:34:09.653206 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:34:25.655869 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:34:57.662200 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:40:01.919515 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 20:40:01.919618 0.010703 udp 10.0.2.104 58145 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 20:40:01.930649 0.000000 udp 10.0.2.104 58146 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 20:41:01.667549 3.002319 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:41:08.675848 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:41:16.677294 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:41:32.682210 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:42:04.686361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:48:08.692239 3.001336 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:48:15.699279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:48:23.700663 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:48:39.704078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:49:11.709934 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:55:01.923846 0.000042 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 20:55:01.923932 0.015064 udp 10.0.2.104 58147 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 20:55:01.939354 0.000000 udp 10.0.2.104 58148 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 20:55:15.715631 3.001764 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:55:22.723227 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:55:30.726284 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:55:46.727982 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:56:18.734121 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:12:29.742337 3.002093 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:12:36.750248 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:12:44.757578 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:13:00.756272 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:13:32.760734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:14:01.921927 0.000067 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 21:14:01.922065 0.011721 udp 10.0.2.104 58149 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 21:14:01.934096 0.000000 udp 10.0.2.104 58150 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 21:19:36.766701 3.001447 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:19:43.774162 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:19:51.775402 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:20:07.778596 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:20:39.788291 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:25:01.921640 0.000066 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 21:25:01.921751 0.011560 udp 10.0.2.104 58151 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 21:25:01.933633 0.000000 udp 10.0.2.104 58152 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 21:26:43.790658 3.001855 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:26:50.797734 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:26:58.799130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:27:14.802327 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:27:46.808659 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:33:50.814545 3.001802 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:33:57.821791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:34:05.823435 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:34:21.826490 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:34:53.832236 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:40:01.915497 0.000063 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 21:40:01.915615 0.010233 udp 10.0.2.104 58153 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 21:40:01.926199 0.000000 udp 10.0.2.104 58154 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 21:40:57.838310 3.001845 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:41:04.845689 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:41:12.866920 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:41:28.850130 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:42:00.856181 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:48:04.862570 3.001424 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:48:11.870482 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:48:19.870949 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:48:35.874179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:49:07.880063 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:55:01.919649 0.000064 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 21:55:01.919823 0.010255 udp 10.0.2.104 58155 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 21:55:01.930391 0.000000 udp 10.0.2.104 58156 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 21:55:11.886459 3.003716 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:55:18.893765 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:55:26.895153 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:55:42.900383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:56:14.904372 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:12:29.918864 3.013246 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:12:36.936894 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:12:44.947889 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:13:00.953361 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:13:32.959031 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:14:01.918484 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 22:14:01.918648 0.022282 udp 10.0.2.104 58157 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 22:14:01.941300 0.000000 udp 10.0.2.104 58158 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 22:19:36.962519 3.001447 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:19:43.970492 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:19:51.971969 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:20:07.974674 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:20:39.980339 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:25:01.917685 0.000094 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 22:25:01.917868 0.016045 udp 10.0.2.104 58159 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 22:25:01.934278 0.000000 udp 10.0.2.104 58160 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 22:26:43.986387 3.002072 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:26:50.994238 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:26:58.995685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:27:14.998791 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:27:47.004654 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:33:51.010616 3.306535 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:33:58.286450 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:34:06.211195 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:34:22.062513 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:34:54.038830 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:40:01.921529 0.000073 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 22:40:01.921685 0.010276 udp 10.0.2.104 58161 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 22:40:01.932287 0.000000 udp 10.0.2.104 58162 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 22:40:58.044730 3.001739 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:41:05.052376 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:41:13.053855 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:41:29.056675 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:42:01.063163 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:48:05.069986 3.000066 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:48:12.076132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:48:20.082517 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:48:36.079986 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:49:08.086781 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:55:01.915414 0.000103 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 22:55:01.915642 0.010396 udp 10.0.2.104 58163 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 22:55:01.926340 0.000000 udp 10.0.2.104 58164 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 22:55:12.092576 3.001172 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:55:19.100082 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:55:27.101770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:55:43.104609 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:56:15.110470 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:12:30.125359 3.002780 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:12:37.138205 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:12:45.141747 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:13:01.137753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:13:33.143282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:14:01.914584 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 23:14:01.914695 0.011623 udp 10.0.2.104 58165 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 23:14:01.926652 0.000000 udp 10.0.2.104 58166 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 23:19:37.209458 3.001309 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:19:44.216611 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:19:52.218192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:20:08.220987 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:20:40.227198 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:25:01.983758 0.000053 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 23:25:01.983864 0.012495 udp 10.0.2.104 58167 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 23:25:01.996696 0.000000 udp 10.0.2.104 58168 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 23:26:44.233753 3.001490 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:26:51.240602 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:26:59.242223 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:27:15.245114 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:27:47.251026 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:33:51.257534 3.001125 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:33:58.264704 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:34:06.266157 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:34:22.269087 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:34:54.275144 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:40:01.977401 0.000069 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 23:40:01.977599 0.010319 udp 10.0.2.104 58169 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 23:40:01.988244 0.000000 udp 10.0.2.104 58170 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 23:40:58.280965 3.001635 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:41:05.288385 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:41:13.290091 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:41:29.292852 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:42:01.298958 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:48:05.305078 3.001778 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:48:12.312655 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:48:20.313307 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:48:36.317126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:49:08.322991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:55:01.981389 0.000127 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 23:55:01.981605 0.011480 udp 10.0.2.104 58171 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/19 23:55:01.993385 0.000000 udp 10.0.2.104 58172 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/19 23:55:12.329937 3.000552 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:55:19.336331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:55:27.337892 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:55:43.340935 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:56:15.346951 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:12:31.353452 3.001098 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:12:38.360462 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:12:46.362088 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:13:02.365134 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:13:34.370999 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:14:01.985036 0.000059 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 00:14:01.985160 0.011195 udp 10.0.2.104 58173 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 00:14:01.996700 0.000000 udp 10.0.2.104 58174 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 00:19:38.376985 3.001443 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:19:45.384403 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:19:53.385815 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:20:09.388770 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:20:41.394612 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:25:01.979516 0.000047 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 00:25:01.979613 0.010245 udp 10.0.2.104 58175 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 00:25:01.990172 0.000000 udp 10.0.2.104 58176 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 00:26:45.401868 3.000374 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:26:52.408203 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:27:00.409876 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:27:16.412764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:27:48.418883 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:33:52.424401 3.001992 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:33:59.432113 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:34:07.435451 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:34:23.436924 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:34:55.910584 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:40:01.973451 0.000072 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 00:40:01.973605 0.010934 udp 10.0.2.104 58177 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 00:40:01.984867 0.000000 udp 10.0.2.104 58178 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 00:40:59.458781 3.001493 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:41:06.466280 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:41:14.467533 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:41:30.480649 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:42:02.486931 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:48:06.493666 3.000761 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:48:13.500140 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:48:21.502132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:48:37.504547 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:49:09.510606 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:55:01.977437 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 00:55:01.977580 0.011565 udp 10.0.2.104 58179 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 00:55:01.989484 0.000000 udp 10.0.2.104 58180 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 00:55:13.520703 2.997616 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:55:21.509975 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:55:29.418527 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:55:45.235133 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:56:16.850362 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:12:32.631786 3.000663 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:12:39.638283 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:12:47.639728 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:13:03.642728 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:13:35.648947 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:14:02.046843 0.000054 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 01:14:02.046948 0.013974 udp 10.0.2.104 58181 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 01:14:02.061226 0.000000 udp 10.0.2.104 58182 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 01:19:39.655009 3.001382 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:19:46.661991 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:19:54.664303 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:20:10.666666 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:20:42.672653 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:25:02.046057 0.000084 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 01:25:02.046224 0.018864 udp 10.0.2.104 58183 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 01:25:02.065516 0.000000 udp 10.0.2.104 58184 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 01:26:46.688402 3.001839 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:26:53.696075 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:27:01.697316 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:27:17.700764 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:27:49.706753 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:33:53.712815 3.003569 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:34:00.720581 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:34:08.721790 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:34:24.724579 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:34:56.730801 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:40:02.049778 0.000075 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 01:40:02.049894 0.010465 udp 10.0.2.104 58185 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 01:40:02.060730 0.000000 udp 10.0.2.104 58186 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 01:41:05.743941 3.001483 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:41:12.752045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:41:20.752702 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:41:36.755731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:42:08.761772 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:48:12.768649 3.000598 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:48:19.777846 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:48:27.777018 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:48:43.779858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:49:15.785656 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:55:02.043728 0.000061 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 01:55:02.043861 0.011427 udp 10.0.2.104 58187 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 01:55:02.055786 0.000000 udp 10.0.2.104 58188 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 01:55:19.793035 3.000344 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:55:26.799078 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:55:34.800445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:55:50.803566 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:56:22.809738 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:12:35.821035 3.140978 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:12:42.934534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:12:50.868396 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:13:06.845295 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:13:38.849685 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:14:02.044986 3.533281 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 02:14:05.578398 0.011249 udp 10.0.2.104 58189 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 02:14:05.590036 0.000000 udp 10.0.2.104 58190 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 02:19:42.855693 3.001327 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:19:49.862711 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:19:57.863983 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:20:13.868035 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:20:45.873445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:25:02.051742 0.000081 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 02:25:02.051901 0.011523 udp 10.0.2.104 58191 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 02:25:02.063714 0.000000 udp 10.0.2.104 58192 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 02:26:49.881785 2.999212 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:26:56.886514 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:27:04.888225 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:27:20.890916 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:27:52.897392 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:33:56.902885 3.002105 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:34:06.214804 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:34:14.117648 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:34:29.924384 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:35:01.545556 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:40:02.045563 4.863764 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 02:40:06.909435 0.012405 udp 10.0.2.104 58193 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 02:40:06.922225 0.000000 udp 10.0.2.104 58194 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 02:41:12.860682 2.964033 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:41:19.775877 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:41:27.666045 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:41:43.462247 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:42:15.040902 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:48:15.969406 3.001530 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:48:22.975814 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:48:30.977279 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:48:46.979729 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:49:18.986192 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:55:02.049460 0.000108 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 02:55:02.049663 0.022453 udp 10.0.2.104 58195 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 02:55:02.072489 0.000000 udp 10.0.2.104 58196 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 02:55:22.992753 3.001222 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:55:30.000569 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:55:38.001179 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:55:54.004067 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:56:26.010398 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:12:34.025054 3.001266 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:12:41.032253 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:12:49.033555 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:13:05.036608 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:13:37.052603 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:14:02.048692 0.000152 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 03:14:02.048952 0.018474 udp 10.0.2.104 58197 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 03:14:02.067928 0.000000 udp 10.0.2.104 58198 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 03:19:41.058744 3.001744 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:19:48.066137 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:19:56.067687 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:20:12.070756 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:20:44.076534 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:25:02.047625 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 03:25:02.047750 0.011260 udp 10.0.2.104 58199 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 03:25:02.059310 0.000000 udp 10.0.2.104 58200 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 03:26:48.082817 3.001457 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:26:55.090126 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:27:03.091872 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:27:19.094230 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:27:51.100634 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:33:55.112958 2.996789 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:34:02.113422 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:34:10.115952 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:34:26.118364 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:34:58.124009 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:40:02.051485 0.000055 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 03:40:02.051594 0.011770 udp 10.0.2.104 58201 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 03:40:02.063646 0.000000 udp 10.0.2.104 58202 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 03:41:06.137370 3.000732 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:41:13.143483 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:41:21.145243 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:41:37.148430 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:42:09.154240 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:48:13.160015 3.352025 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:48:20.478282 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:48:29.938178 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:48:45.747731 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:49:20.148217 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:55:02.045461 0.000056 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 03:55:02.045666 0.012579 udp 10.0.2.104 58203 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 03:55:02.058591 0.000000 udp 10.0.2.104 58204 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 03:55:20.213813 3.001902 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:55:27.221858 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:55:35.222790 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:55:51.226169 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:56:23.232262 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:12:33.239236 3.001896 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:12:40.246836 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:12:48.248477 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:13:04.251671 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:13:36.257320 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:14:02.044244 0.000065 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 04:14:02.044426 0.012018 udp 10.0.2.104 58205 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 04:14:02.057234 0.000000 udp 10.0.2.104 58206 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 04:19:40.263129 3.002043 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:19:47.271001 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:19:55.272445 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:20:11.275766 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:20:43.281119 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:25:02.043699 0.000086 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 04:25:02.043867 0.020804 udp 10.0.2.104 58207 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 04:25:02.065052 0.000000 udp 10.0.2.104 58208 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 04:26:47.287342 3.001646 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:26:54.294817 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:27:02.296273 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:27:18.299298 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:27:50.305857 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:33:54.311400 3.001748 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:34:01.319104 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:34:09.320333 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:34:25.323706 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:34:57.329896 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:40:02.047525 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 04:40:02.047729 0.010369 udp 10.0.2.104 58209 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 04:40:02.058469 0.000000 udp 10.0.2.104 58210 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 04:41:06.342903 3.005443 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:41:13.350331 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:41:21.351383 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:41:37.354718 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:42:09.360448 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:48:13.367393 3.000902 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:48:20.507061 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:48:28.444713 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:48:44.388552 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:49:16.394773 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:55:02.041568 0.000074 arp 10.0.2.104 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 04:55:02.041717 0.012505 udp 10.0.2.104 58211 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V2-DNS 1970/01/20 04:55:02.054631 0.000000 udp 10.0.2.104 58212 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V2-UDP-Attempt 1970/01/20 04:55:20.400967 3.002190 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:55:27.408132 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:55:35.409580 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:55:51.412749 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:56:23.418574 0.000000 udp fe80::c06e:84b6:bcb8:a750 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background